last executing test programs: 12.925766365s ago: executing program 1 (id=3189): r0 = socket(0x10, 0x3, 0x0) unshare(0xa020480) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r4) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x3, 0x2, [@TCA_HTB_INIT={0x18}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x50}}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000480)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000007000000070012279dfe7ea46b5bc62f104e775a0682d3627f91930c8ec2353495932b96e8e2c5c52c51"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, &(0x7f0000000ec0)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) 10.001410753s ago: executing program 1 (id=3198): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000340000000e0001006e65", @ANYRES32=r1, @ANYRES16=r0], 0x34}}, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000b08000240000000f60c00048004000100090000000c00038005000100d30000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) syz_usb_disconnect(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$uhid(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 8.956488003s ago: executing program 3 (id=3206): socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3) (async) r4 = fanotify_init(0x200, 0x0) r5 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x0, 0x0, 0x148, 0x0, 0x148, 0x178, 0x240, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) (async) r7 = dup(r5) fanotify_mark(r4, 0x0, 0x8001038, r7, 0x0) r8 = memfd_create(&(0x7f0000000c40)='\xa3\x9fn\xb4dR\x04i\x82S\x9a\x9d\x1495\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\x12a\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9R\xc99N\x12\xe8,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xc1%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9aW\x18\nB\xc0\xc8\x87\x8f\vzY\xb7\xb8\xd3KG\x89\x06*\xffF\xc2\xd6\xa5\xc4\x90|a;R\xaa\xae\xb7c\xf4\xc2lH\xbe\xc0\'E\xd7\xc2\xdc\x05EY\xcf\xc3\x8b\x1dM\x1c\v,79\x84\x15\x92c\x1c\x7f\xec`\xbf\xd7\x06\xc9_\xe8\x02\xa0\xd68\xb4\x1c\x8b\xd2\x0fo\x140\xe9\\\xc3\x18b2\xf1\x8b\xfb\xed\xd2\xb1\xff\xb7F\x8di\x82\xf9\xa0\xe7~\xdb\xe5\xee]\x94\xa4\x9b_!e\xba\x13*f\xd2)\xe2\x8b \xaa\xf4\x99\x92) \"_\xfb\x1cI\xb7\f%\xdf2\xe0\xc2j\xe0\x1f\xed\xb6\x936\x9e\xe6\x18\n\xa0\xaf\x15s1j\xc0 \xf9R)\x1a\xc6\xc4d\xa9\x9fp\x1b1fuQ\xff\xdf\xf6th|K\xce]+\xfc\xa0\n\xaf\x80\xc1\xca\x83\xd3\xd5\r\xe2\b\x00r\xfb\xacDl\xad\xbf\x17\xedX\xc7j\x11\xba*E\xda\xaaa\x18xK\xf1\xc0\xec\v\xe5\x04\xb4\xcb\xe0^\x95\xa5dg\xe5\xf5\xcf\x00\xaaX\b\xb30xffffffffffffffff}) listen(r9, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) 7.554989097s ago: executing program 1 (id=3210): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d000009"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) io_setup(0x4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0xfffffffffffffffc, 0x28a802) syz_usb_connect(0x3, 0xfffffc2e, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x800000010001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000180)=0xfffffffc, 0x4) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) mmap(&(0x7f0000337000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0xeadd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x9) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x300000b, 0x10010, r6, 0x0) 6.649259535s ago: executing program 2 (id=3219): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000052000100ffffffff000000000a000000140006"], 0x28}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'veth1_macvtap\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'ip_vti0\x00'}, 0x18) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) set_robust_list(&(0x7f0000000600)={0x0, 0x8000000000000000, &(0x7f00000005c0)={&(0x7f0000000580)}}, 0x18) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c000000190a01020000000000000000000000000900010073797a30000000000900020073797a3200000000"], 0x2c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000400)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) ioctl$VT_OPENQRY(r4, 0x4bfa, &(0x7f00000006c0)) unshare(0x2c020400) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xcd) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000008c0)={0x0, 0x0, 0x0, 'queue0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$sndseq(r7, &(0x7f0000000980)=[{0x4, 0x5, 0x5, 0x0, @time={0x9, 0x6}, {0x6, 0x2}, {0x0, 0x7}, @time=@tick=0x3}, {0x1, 0xf, 0xe, 0xfc, @tick=0xfffffffa, {0x18, 0x1}, {0xc, 0x1}, @ext={0x24, &(0x7f0000000300)="fca8a9c33931c1295f46bc6051f8575d7a524b5941b828452b1e5767ac69a0d89826e382"}}, {0x1, 0x8, 0x40, 0x3, @tick=0x5, {0x5, 0x8}, {0x9, 0x7}, @note={0x9, 0x80, 0x6, 0xd6}}, {0x9, 0x80, 0x4, 0x6, @tick=0x8, {0x8, 0xff}, {0x0, 0x1}, @raw32={[0x8, 0x80, 0xfffffe01]}}, {0x76, 0x7, 0x2, 0x0, @time={0x8, 0x5}, {0x7f, 0x2}, {0x3, 0x6}, @control={0xff, 0x3, 0x960}}, {0x4, 0x8, 0x0, 0x0, @tick=0x7, {0x34, 0x9}, {0x6, 0x1}, @queue={0x1, {0xfffff818, 0x6}}}, {0x7f, 0x2, 0x2, 0xc, @time={0x100, 0x2dff}, {0x8, 0x5}, {0x60, 0x6}, @ext={0x3a, &(0x7f0000000640)="e208c0aa4a305592ba6fc0ea6bdf4cbd16cc2b2e819d27c89d1de592174f402d815e775a5c35c182d2b44a2f05f6baf92b5af0d6b9d44c163754"}}, {0x10, 0x80, 0x61, 0x6, @tick=0x7, {0x9, 0xe0}, {0x6, 0x4}, @quote={{0x6, 0xa}, 0x2, &(0x7f0000000700)={0xe, 0x88, 0x8, 0x5, @tick=0x3, {0xf9, 0xff}, {0x86, 0x7}, @quote={{0x13, 0xcb}, 0xffff, &(0x7f0000000680)={0xf, 0x9, 0x80, 0xf, @time={0xfffffffd, 0x10000}, {0x3, 0x1}, {0x3, 0xe9}, @raw8={"e4b711e2e2f5a402ed9412fb"}}}}}}, {0x5, 0x4, 0x9, 0x4, @time={0x2b, 0x401}, {0x8, 0x6}, {0x0, 0x9}, @note={0x5, 0x81, 0xbf, 0x6a, 0x1}}], 0xfc) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 5.960460805s ago: executing program 2 (id=3221): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = io_uring_setup(0x497c, &(0x7f00000001c0)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x2, 0x0) (async, rerun: 32) syz_io_uring_setup(0x4329, 0x0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000400)=0x9) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) r3 = socket(0x9, 0x6, 0x120002) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001ac0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_TARGET={0x8, 0x1, 0x8}]}}]}, 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000000c0)}, {&(0x7f0000000940)="8f85736d0e8fd98003dd36848c03374dfc5f64447cf411176169d65976ca2c3eb612cd949c9b0a33aa3d36237de8a64c7936a103292d6e529b9251ada8e40b9cecb627374ab20db060ad906d574e2591fa72535dfa17730d699bfe3c1a61c3832722f44a3e3b6f686df3cd31910e070b47e73605e62e0a3836104652a4dc980120e57cc541d1449cc92a8a0c1fc84339125ca7ca371093d56009e3676f40aa1210853d3062cc1fc00fb029f0974daff46de3e7706f12ea6c117e0460da6cb5a083b141140935a9fd0c2d7679afd91ad551", 0xd1}, {&(0x7f0000000100)="aa5d6da7b41751cdc468a6cc4ee823c8eac754af2c8de1f37cb92f23840c0178609d10cb687d7d221fe2e96ddfd007ee22e99c0eca2262eff17c4fb7640995dba9e3bf48dcd745ca53575489e7bfbee3f49c8da97f65b359b5346985134eb152dcbb0c5938550965c1909c306accd705b10109e3a8917da1e042e07f275acb533ddc1664e06882015b828f7117d674b49ad6417dbae701a0e50d16ceff343eeae911ba418686d14d6040f71d5377b3e5bbc346507a533cdf56c47fa63b3c89", 0xbf}, {&(0x7f0000000a40)="62bc00abd68c7aa8d31aeedabf036a66e8aa17a7ff5f2018298a0402687046177b477481da5eda3da8d8158c76fa03b791e5f6e9a79b91b3fc995ea92fa1c8fc7f63e8ec66ac707cf4799377c8f5bff944e55d2a3e7186142010282ffd58a1e5b0052e84cdf34498a98a86be6af0ff57ad6f52957ec123bc2ba0b155e8b1961aee6e8a6dfd865e0872ea", 0x8a}, {&(0x7f00000003c0)}, {&(0x7f0000000b00)="e2f59857732e6daceec7bf05fc99f29898c66d2ce47f3d1bd98e40aac88a72ed702e9bb14c500ef30b20d243193248a75de04239dff1bd191370049bc7d9e2165c1a4116ed0e0592cf8bd07b1bf0a9abeea2e69040776b114bcde0ccc8db86f445647ebcaa4f35078d7054f57adc122916e2e2cc01e4c361616b5d6274d4cc783ac26990182edba03ace8d4137ba1bde73524616e41ac0e49c50acf94ca7abb580e83a41b26c6de249f0c04b915d280df0c7f53d3b4b7729b41c7fda6f70730c98498e72f88575b3b506d53b41000652cfa4ee40", 0xd4}], 0x6}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c80)="65605f25c0a6bfb657756541f48d166d6d2eda02eac4bfee56f5592dd95dae51f269f1e73f18fa9b00e6ad5f78dec4b4a4abe191187c970ce925389613783dafe2cee7604747c4534e2061396d3e5e9a4122292882b8d9ac19d36b33f761ebf0da323b1be4b62803a428d16d0cd17779997771bca25e38f186e140665a1cb74b8f5f0f8d36556d0899eaf6acd5975e1b911fa496934d", 0x96}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000000440)}, {&(0x7f0000000d40)="ca3c231cee4ced6f32d4d858ef747bd83c9fef85c927e6e5e4c9e348f80e26f83a435a57d14fcc6f1c96aa5cedb4e29053b1a70c009e3d23ff91cd1214bb5c090ce02b9dac90d89d745363fd915e7310b2e2e2d5c9b2f25b2849011ebdefc2e2fc23050a8372a6d3969f24efa3a5f572bddaae324eae197999b4b1560a2c2d7ff2f633463e4516dfb079bd4e4eaa150d75dd40b04b066c1d3d5a00acb8a5d7e9ad64ace0314f68722a660466ec8500e22a0ae1f1c12ab0de87b19a30a6091591ca49eade94b120f4db11c0e157", 0xcd}, {&(0x7f0000000e40)="2ad25eac204c189141b38abeafa463d320ea0d821fb3fe225110da14aae3b2a6fdcdd9f9a80be99d0c2def0c3665a5132ffa10f3e590ff9a96892ace3981e785e0f1fd1b5d6e9f4277ea38cf0c27a3e6ddc82a2eca1cbf1ccfef4a626ee696fbaa765a1c643fda63d5507e6559ec7945cf2a5e6b284453", 0x77}, {&(0x7f0000000ec0)}], 0x6, &(0x7f0000000f80)=[{0x48, 0x112, 0x6, "028d57871116dfbad02cd8cccf55d32bde1abe2e1268d518fe2b2214dd2539d9e88a24003f4e7f3430db6c15eef3097a86848b1d"}], 0x48}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001000)="841936527a7180efd053b343f41ffac387c9b5d647db354e1cb56f7895a960854a5352f9f035675f35228c035e5e51a141c43dc6ee313b851c244aeee84ffdb4543194f81bfd5279e37153241933584606d1", 0x52}, {&(0x7f0000001080)="9aa311640352492c80798bb6b12689a92f87da33cae90034d6630cb70e707a62bf3c8dbf3a3f63fb8ae97aa761d5b1d6ffa17c3e33665be44292b908a6b5b31090256887988eba9105559122cb7f08e59d3355fbd0c65e335dca0eefdaba3095c8e91b29b1779475dcbf02ee12e8d06a5f9ae19a2bbaa226879d207e2a917fe03cd4f21220aff7fbc383b475d0dbf54e0e6e38718f7ddfd7f1afa88710c8c0b58c8b8f96249f7d727fc6feed80d04bfc155ab12137ae072b845c884f1577a9622c5363c59a05a59f1c69fce244b877b944ff3a599f28154b2c488474eef8476cae10169283d0a57cf71203f74bf16a45e1276f", 0xf3}, {&(0x7f0000001180)="61cd99c8bb02a2dcaa0691da93292f77bf41578d58f2bf76deaba0ff50f29653babc56e77df1a336276cd43a69ccf4f499debb87fd3c5d18860b2d08276b54ec6058d69baa5bff7c772900d2ff285e7f7fed26f61d78b74b1886307a32eba64b8cdde2162fa6cdaf31ae", 0x6a}, {&(0x7f0000001200)="4fa4dcaffc408aba1a254060", 0xc}], 0x4, &(0x7f00000014c0)=[{0xe0, 0x117, 0x5, "2893cf554a5198fdf89959e59d71d5f08b513566be05fe20dd3c6f13cbb3cd16e3b772f0f985c854d5cf5842ac412d0ee1fc420584b7eafabf69f256c9d084f9301d65a9ba93971fd7ee03d073aa96a6531d77de64baaaebd6b0e55f6f4941c9b19a8ca3975ebe696c08fd2e4a576b985213322054383516d2d250daadd37e18e63ffae4cb66b38cf9e97a69f3eb4dd438f4561b8680abe7dd736bdf3c1a1522a795bebae0ee1c05610fe9631cdc31d0439d275dd3336f8b58f852f7305cc9c27a2307b747b2254cb642d5b0558befdb"}, {0x98, 0x108, 0x3, "99b2466cfdee7f793eb32a42df363ef0780d566ecde1cd56586036be9ed739a410865f4c42c88a9fa31f805183344f723d0018860d4ba6da6acff6c78fcb64547e9c7757797ca53e62c58b278c96ae98cd75685dd69895ec9c0f234e81991a3402b50dbb3108c912920befa0e09b7153dece16cbbf96e20087c4439c2ec2d979148a6d"}], 0x178}}, {{&(0x7f0000001280)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000001340)="dfefddf3df7b6112c8beabe3cf59b54f44cfa0abc0ffe9313b103f7d88ea3a0115ffc57c3b634ce256836eea4546ed8312884838fc5ada1f4f02b91b48bb2d775b15aca15120c98b09d56d", 0x4b}, {&(0x7f00000000c0)="65223625044869b70fe25324f50afbf35923fb6ce74c4b841983acb496912ec02e1fd27f80dffe50d7faa671c8f4551f44279f9cc3ab6d711d8e23ce13", 0x3d}, {&(0x7f0000005280)="1f55047ae4d5999b17dc76ba68ae3d11be385c28ee5aa13ec9e6ed5405c21152c7f61bbb2bffb6848d72e5f198f7491d28db252359705be442424256833ef50723b1f99e93ba3817779f438130b10aa2df7c4426044737af903d811eebcb4ddc6b76acc136fc85d6530b50e36d1900121c81b28916420a8b4ece9c3190e3a8edc7da39b4b56260ed467c842ceb64556e434635650f0576c97a0d59807bb8ab8e4faebbb6c89fe0916d6f", 0xaa}], 0x3}}, {{&(0x7f0000001400)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001640)="7e80b717106e79108e91b89afd29500fa3e5e93cc5f0409f5ebc655d24deb37a34768af9adcff4d45f7017f4c22d9b9f8a93cbd383cc0e5d89a0e010abd028a8bdd821b0ca149cc3e20cc81e036ba1f6f0ee4ae342a49294cf31c7bec49240be1332e13b75b08c9703a347c79b807a309e2575ca304340c7d55648295556cee9b0efdee883ea34009be82ab255d216db99275c335fb2fb4385b4136e39bdb8b177aa080ae1775cb03aa2c81797e221da24a51d3f8e8c", 0xb6}, {&(0x7f0000001700)="c178", 0x2}, {&(0x7f0000001740)="7595dd8ec3a8a60da024a5f11c4edaf5a4d79c5fd93dd189aa5c228f81c4c1bb3e19d51cf7d2e382d28a01aef467c2e7617884b4c32ba5a56d183aa333fbab5d0da20097c5acd8221d884c3a54", 0x4d}, {&(0x7f00000017c0)="4f9242786a3280045ac6e4c7860eb584a9fbf68158551c010a55c10652231705cccf809685735dc9ab26a5a30d3f5296600b2be3", 0x34}, {&(0x7f0000001800)="b328d72004c3e8c8f2824df4731bf6601fa08b9fd20460937fe557676c72e39688108f834eaa0572eed520f451235a49cc1e5978d1faa028d23e1907d7c98651908f829060f6eb49d5a8521e00611ce99b71414c42c294814c99a5a7fe7bdacfd60975bf2af27534c4e444472643d67f49d43349d08f6527ba31a2743fda20f59b476213cbd30aae07ee56314fe2a276bcd85fbb87f1a4131e92d39976d9edc73f1dd31e5b63807774120be570eaa27cc6a6919ba654de02d4b730c66bffa31a82994c949cb5fcba5740dc", 0xcb}], 0x5, &(0x7f0000002b40)=[{0xe8, 0x115, 0xd5a, "7d7d7980314680962931a9dc92246fef42e3046bdd653907af9c25a226d120158aae0de0880a6bfc466f2f1614bf7f26fe87e20068d5e77decd5e92cd1a7a900ceab8b2b64d9302e1d576d0289e48f893c51a937d4d7276f4be9accfe325690a977e4ad0293ea17ec990c6bccec372c8acd3ab4c525fee19227171a2bb717d662a3fb02c31855e534d1561c5ff22428a94f1e2bd7e616bd8a787e9b7077582f7772961b9860ce1d8d691972be5a2ebd0c8ea090a6335631db85bf429617df09e450f38658daabd7447e53a467629f92cfaf5a938a0c382"}, {0xc8, 0x107, 0x2, "ed7acb1ad876e03364bdebc124aedcd6e4ab8e304b8d9b0e0c40cc4a30ed1e6bc05e8d171c9d72cfa483458564e14e3756ba4a09dba3a225abf56b98d13e440c39b6e7edafef3ab5a403e8898749a4c94ed9b386f522a59f7a6ada74226280bec333ba23865e33b74084b461203aeb7938de0c2fbfa015f5a466238633df860a95a6c538df2ce8769e0cc3d4b0f4e9a01df1a79ad5644721d7d018532fce9dac37f176007b370f1de65939953ebf72da4536114cd111"}, {0xe8, 0x1, 0x3ff, "78458ff1ef27528d5ba6dd9677499b83ab86a4655aa9d032bffd23bbf3a892705a9bf3b8f37eaf473dfe0acf0e9ea72c2100feec0ab7097abb9210cfa12a75d0780fa93942cd7ba6fd6122756daff9c3f915ee0cbfb0c3cae4a6f2c6231bb004a02a78ada166e117eed438861e6e4d62d54af07b59fac148976317377bc41044828927afc1fd882b6de0aadc23b4f6dc32ad94408be00a8306bc41b81010c9f2f3351f42b64155772532b5ff5f37a6cdaf33f165e66922d044be13f8b869f2b80f52b055ca469f80f848f523226a0e00832a71e6dc"}, {0x90, 0x10a, 0x10, "b105d1abb650eee4d7d256cd248e385a4ce8f824e407132ae13e3f8e1e65719bea7cff2e55935400d9d46eb6fba03da9506dff3dd8d321708010e72df5936bade927222feb6f8d00836fec67c653dec2ba8a0ddb64f05103af7c70fa4e4fd35da65f523a1f18cf7aded59a63930c324eda7a82e1cab732ae72e4"}], 0x328}}, {{&(0x7f00000019c0)=@nfc={0x27, 0x0, 0x1, 0x1}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001a40)="bfc05d4331716d48", 0x8}, {&(0x7f0000001a80)="c937f3c725689e053493112e", 0xc}, {&(0x7f0000002e80)="247474ef9ef5442a6b1e8e", 0xb}], 0x3, &(0x7f0000002f00)=[{0xe8, 0x10f, 0x6, "6a1f9533e5ccd164358aed6856a89f612f0f233cc2ebf6527b753c0a19ca863a2f5b20f6ee331aac9c818884cab9de998fce71618470d4aa7125202b63073a53149058495ce0aa1caf6568bb754b1c2ab8c7fc71a15a8a91f5d2bbb7da33b95a784ba16576887c5575dbe597f62175f9884ae73b05824d6e4407bb87e02f520d989fb7c9df3df1992bc2bd2ae6426fef4a408460202eb75d788c950e145f587f916a688478decb6aaa335712d98b095b63881abc39ee6b526fb48307ecd342856b207d7f575b8e811415449909833cd375725ac8"}, {0xe0, 0x114, 0x7, "8ffe6da641e5588e804f97b299c5868a1372e38cd428d8e517e32538ba839c37f18e393ff85b819bec642232da70f6f9dc3d42b8816a7dd5472b5ef6d384cc6edf1b254054a6c6e99ab85004a0aaebc3a6aaef263853a48274a58da6048e410b71efa958c06597a4b38aecc69c465d1807998aba5e087c4d469185d235ac798843d493ab7f0cc451b054d89453b4ffd056dbc4874c2590e86f59da121b182cebe7f491364861ed0b54f92495f5a05fb3861f3127d81216c735157d32d5e80b2481fd0dafb1204a9c2ee6b30ce096e7"}, {0x108, 0x88, 0x1a5, "c7a560119a3ddf41838b5cc0a94bbeff3f39e1686ae60467474886f33722c546b76e1340a631359c33cf706af2917ad990bfd21161194ee548376aa40009f43f1e2ecfabfb346d276a0a2dfa809b5efa60320f3153617d3d53ddbad0a86ce96b70ea853a0b6a93fe924429b1108c938939edd3b3d1ab18290848f0f73abb1de82e5fc8f7e9952b9c48b9ac2900e365b0e3a45b5f044e6ee85e9c7dec71b920ee43d44eb17b1b733b8c5519e972e3b7e841f7bba42bc9159f6c7e850b8637e57d3a59aa940cda6396e5d10b8477c20298cdd2c2b6c61e45c058a899079ab08a7034f3c0e3e57ae6ee4b33274e3ac40921537ad5"}, {0x58, 0x29, 0x6, "591c971e9b513b53e427154bea08e3fb813833f949f3cf55a2f96622b3dd6959480388df7d2b7b942ca32e4d8ab8753e77a72566e62671b932c743b19327f0fc5dfaff516e8b"}, {0xc8, 0x118, 0x2, "780d9a211bafb875133d4cb365a119de52bcc0914668a61647d7198e461bc7b11e5e569756d723849962d4281fb7cd79e1c86d224a8445ddb0935c63dbc79046c11377ac1d214faf3880aa3b633fdcc0327f91bf813629dede5778bb2e2a3a8a6c191b790f71eff707fa34340fb3375dae2b9173f5306ac08a302530faac6f3921bdcd4f22b2dff2d8f143fb2ed083673071854ca28cbb8c1e71af3392550e92ed81395169b8b09367d376fce2e54415e5"}, {0xb8, 0x10a, 0xe7bd, "4227060bab1665ff3f4236d2fd7432c99a20059eecf4eb979ac6d639fc9b8021159ea7b340f9c6028c3a720bb582ee28c77003140d24c5125d2a9a61356b2e050dd3374c937f39e939f4a8477717ff7ceb57d91e355ffaf03c006ffdf6fe24a1591833252a774bd0ee5fcecb51b00b617e1f329efcc98b74575309cdc7ba9a905d38b3d9ce3c99698d151b385d6dd007af7590bf72e08b48b9b9667a2ad7c13a3df342b0e4"}], 0x4a8}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000033c0)="2820271795ab75f25326e3a370813c31ac45c0a23c704a81de631f0d5972087b275fec18959e98eab5b6e44e4f28ab851b44de9380670b8bd1899b107519289b5d21ecb24452663c32b56ddcf33ce881bde9df99cd860da04956f41d577aa04997a7b4ee4be09bd29b178679fce5114dba49bf76cb966ce3bb640b3aabf0425fddd4ac25f155085e8b98bbdfb44dbf62c1467a8c0f7c424632", 0x99}], 0x1, &(0x7f00000034c0)=[{0x38, 0x10d, 0xe, "73a077a74e3523fd8b43f84f3276354aa874d7596113efddd9563f02ac80d643afb9571b7a"}, {0x78, 0x101, 0x2, "46a3572e90cf26eb7af9c924b499e2ccc4f09563adfa276156e140e591817fbd0fb2da2199005bf70519e0cbf19f8cfab3d3f74cc716bc54d5276e3beec9b409cb89aafe072709e41059cbfd8e1b1d38b7a429e764ea0a0665df03267d5e56b20f96d2d834"}, {0xc8, 0x1, 0x6, "e69c4a53c0c4ef5471a0568c4b273db06c82b542275cd4fb361db5cc9c17f77cb19f143f865edde2aac579925423286d9e6922bdca656bd4d75548e81943defb08f1305df1c7c6ca61f2936f2abbb7ded642b0f5516c731c20355ea32cbfa2f5216d703af0d4b54c594848e87535caed2ab3d1890677e6906bf5fbff76c2ea537bd3379d5f6ef327e929da74d760184a288a84a88059a7b59084cdc6f7f11fa1cc7954c81d41eef9c04cb064f829c16d1a1858"}, {0x50, 0x112, 0x3, "627cd859db4412d512d501cbf4fb18046c4ab8c01fde4a421cb5758a1f27d87a9d6de8e6a8c85336735f7a13b1d813668eeb54d11286e1c250f200253ec24dd3"}, {0x100, 0x10f, 0xfd, "23809840bef846f597806b533541aaed9ac17ea4e0d2b2a3bfa999e597de112ce263766fd88741fe9002334ce0d1e65ed22566aae9c2c0575420070b198d1759f29a277b9aaae987da7bcb6d66e1ee66bf1380226f0d1d1a08f71dd244a85c9dde1f3e3dfa45b0956ac46457484e5595f1effcd7c11666c0c5cb5703025df8de263fbb7641595636363742d70b5f3587c7fe8699c8b520a9b323408834a6661752ca4853076d61e7ffb21b5ba60f15c5a0f43fedbe4c6a928db9d0171d820bed5becc64873d9b12302501b6b3625c5dfa44b3a1ab0ed21fb6fd93565bd3a2d8dcd28ef30ab66d22f8afff7e405"}, {0xc8, 0x107, 0x1, "18c2a7e98fbd785456067fa8de55adeae3994ca3105e7ce4bc07034b89e04bf3fac88ecd3369f195801508fd6d6d94dc7e2c6aa8a00da0c32286ae60048af6c0f9a3b9e99837ebd74b3dd54be3094074d0ed27f83b08a1366c1a711ee3cf4e9186d22d3b8f5cba528fbd4c5fa75f2079a0d04a1e7aa640df7953aabb553476f74faaa94ac3352af91b0f83431fff2eb4cfe28395bd6fd7344e270e59fe543d62486794280a9dd6c1271a37294151a78b635aa874acfb51"}, {0x100, 0x116, 0xb5c4d0f, "10f3695d0d886974b7ab761e6417bf47feaeed00e85a628932c755845a9faf8a5e5e0fefb918229a32fb15ab8018598f0c72cbb15b9420e04f4c324c83521d38d2ff5a96a57273258a6c8bd07032763676ac48fd24ffbf0b5a2d06c627ac21b5e55f47d9b81f07b8d4980c12d913d1eae8df7bb5a7ee839bda567b84467fa11bff88b474fa9914eef0dfc7d37f847c3a8b3710160e8aa97910dd28e55264841829bf8f59edb3b2dddc164328063d8070d107a8ec503cf0407a11c339496930b559b76cc2ddca1994dd76758851ddf62b941b89cb40752e2de1c08609f0e98eaf4b863027e84f8af3a93ec43cc33202"}, {0x60, 0x84, 0x8, "6fc2935a787ab95557eea5bbb433f14da592f993bc91eb3e66895a4d09602a8b1d6c3ceabc1ac1a5f68d1340a3d1a4e288fe8bbc9d77bae994e5d7ed3fb2eb5053a5c8cec0a08e36728a1d7ca4e728"}, {0x110, 0x10e, 0xff, "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"}], 0x600}}, {{&(0x7f0000003ac0)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000004c00)=[{&(0x7f0000003b40)="beb7b146d183f55a16dde913632f49894741a68282fe4d7479fa3990aca9c6cc75b6eb9af804478d6cb3bba11494459e8401f0c7c8ddff786e7a34f90957a17636a510e02333631ced7fea7868bbf0a08ae5fbddb21655c1c32c2dc1e76e53ab5b43dce733b564f1112b35e1eb1f89be59c9dd1b30ac79e983b550dbd56f450e0ac50b90d48c862dbf835270ef9d", 0x8e}, {&(0x7f0000003c00)="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", 0x1000}], 0x2, &(0x7f0000004c40)=[{0x60, 0x10e, 0xf8c, "7431784d39633346953fa589c5772da494f276d0d922fc45c9dd0493036b3844ec82b0960cdf76c968903378724ad5c5d9b922f9389cfe0bf950cb61842576835570e6fb1344d748409bc8a8"}, {0x110, 0x6, 0x8000, "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"}, {0xd8, 0x115, 0x5, "e9d02f5b13585b2960ea7f2fcdf306663ec7ab4e8f22ac8f0c5d7a0167749a994e356893085220ed6263038e8c82301e5ff4374817e2e0272cf5b82976fcabeed1f5e504cb7e98820553ebf8c1766388a6e28745861b91ac65a3bddbf2187f8dd096cef87873ba2a79898493e32228ae49f642b064600080ebca9752315e0727550acf9d52634092b39dff2656dfba1d61dc658cfd4f457028e03605697c141d7ff96af7cf28c44ff68fa4b4ce67263a3f464ef73854bfed79274525e79dbed5c7f5bc461331"}, {0x88, 0x10e, 0x5, "da31a2eb0b0ffd77ffb3ac5702699ab29bd6c2342a6678a0638232ef24b235b720bb0b837f5720c4e71ae064465c9bcfbb7bd359ec878e417776d0680afeafa6f48d6421d1e4327d25a6b35d3361f7719f83b32efe262f8b06d6c50b34e0e7e46f130f22b5018abdec6e5d5459ed075695e249a82f13"}, {0x10, 0x10c, 0x5}, {0x10, 0x84, 0x7}, {0x88, 0x1, 0x2, "755cf4816332d0a559713d56d5b48f96d89518ff937851c18b63f5794588dfcfc16ebf2e4ee23185c38ade83c53479354171a89c9c80dadd7b539ebfc24d26637cb0671918e373cb52659deed3d8c9ef0a222f03ae0b987fd6db3dcf7b9e50570edcda75c3f6171cd294cc255909308bdb86ceedc7cdef"}, {0xc8, 0x118, 0x8, "95846244c1fca0b863bef78a787a7af05db050f3a92c8cb6d56d34c762c59ff9bdac720fab5f52143067125d291545dfb2ef2190526fadd6c8fba7af281a009f8fd4d8aea0082ce06e64cf1cd036f0daffecfca79aa6b356f1b6b37d2eb68e23350309d2a3774dc536b5bd5683fd0c57256028d9aa3d21e6ab5094907cbbc956dd788e30f476d1a6b2b1e106509aee0682ba6f83cba76b3ea7a7a6e9de06b0833bf91c8d1ffb82dfea572dc25c6bc0f6ee6477"}], 0x440}}], 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, r3) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000005a80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="94030000", @ANYRES16=r6, @ANYBLOB="000426bd7000ffdbdf257a0000001e00fa00967ca8b6a7f4376f6426f92d3bedc5ccd327da5f0759227a4e1000007a00fa00a9a6124b6fcd7aa60a5774ac770810ca4391237779613390211173ec6809f6b48d67ee2a04e01fc8810f89cc22e284797a90f4dba02b457c826009e78561c1e33a9ac897b1f4734b7a7a9367cf18bafbbadf4683fbe93b5787cc05379311e8fff963d4eda086067bb7924923bb12de697a93d43a385f00000500f900070000006300fa002b6a17099f68779d91215ad35d7db874824c0f8f7c4c077c49a8ed1ba6156866cf352c8bab4db608ef9c9e9596bbd3df9184bcf524e50ada3e4102575b0959b3bfcb19be67d81d65ebbe15e6531b78f0b715bc7b7b4466278f02bf9fc3719000ea00fc00924d6cf6fde9a43980938679912df14921f1c2581be14f4d9747c526ffaa98573a5fd97d89833711226374011f7c33d927b4033bfafd9ef18c0204075bfbd6d3b4aabe5c2edd367cbf9d7cb4e20251287e0273b875edaaaded450b30541e46fded4bbddfe746e1e5c4efbab25a3aa9289c3f3b654d6515d48d58196e4a035da309337e927910673cd4306e5cd36793cfca505299c35f7eaf1f9898670349835bbe9e59d5979e85481e704e05abcc2f9e12b4891e52a063aed8dc7556f6eb4f3399fb738a6d152b059263563008d470ee2a404c85db01613ddc2909ac7d65a1a8f2b50b7c0c1c00009400fc00414e5bb6ff2a345c387a21502a45a93d4a0cb46698d7a7e891e5b628943c06a5d2dd56d5d99200f09d4ffe89edbadba32c5a6fd5c653bdc9e1ec9040f6ed285cbd303cfbd834effc86a181a8dbc6ddbbc5353c76220a38014156e518b454f9b9a46c1a9174f5fb28b9704514af903add8275f5cc4136727280a341d872f8d4f5ecb6f4951a718b874700fa000d99cf8afdcd516516db88a45ea7128ca1de05861fe6bb603b6142a3788949d16673fbf45783bbcd644ec85fc7ef2f9ac750c66716e0ee4c2a8b514e20c947a1098e5b007800fc00784c6f72d25084946f3814d7190740b03f5dd5106ecf89ea686113320e73e788da762808ea22d04420afc958d83fdf5bdb1d45a08a85aac50372ec51ebf3d48242316f5d994465b314ab609666c3cca852edef380b1209660c010ff57b6f0ec1b4252edbafccc092ff13000000000000000000000600fb00030000001000fa000e425d7366738650d702a4b704002a0019002a00720603030303030372060303030303032603090901000000"], 0x394}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r3) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="0500df250100000008000101000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) accept4$alg(r0, 0x0, 0x0, 0x0) 5.673526787s ago: executing program 2 (id=3222): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local={0xd}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 5.402688565s ago: executing program 3 (id=3223): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)={{0x108, 0x6, 0xbd, 0x1fa, 0x4d, 0x5, 0x82, 0x800}, "2363c5e6dbb4aaef6be3cc7a2021a52dbece0e238aded8947a9c7e7ef613dded44dc90ff5b165792469fed0649f69042a9575c4cc44ed108316d8d1132ace3750287a7cfd440a5edad", ['\x00', '\x00']}, 0x269) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300010000000000000000000700", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x0) 5.021970901s ago: executing program 3 (id=3224): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7}, {0x9, 0x9}], r1}, 0x18, 0x2) (async) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7}, {0x9, 0x9}], r1}, 0x18, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xe, 0xc3}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xe, 0xc3}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x6, 0x0, 0x0, r4}) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x6, 0x0, 0x0, r4}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7, 0x1, 0x6, 0x60d, r2, 0x75, '\x00', 0x0, r3, 0x5, 0x7fff, 0x3, 0xc}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7, 0x1, 0x6, 0x60d, r2, 0x75, '\x00', 0x0, r3, 0x5, 0x7fff, 0x3, 0xc}, 0x48) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000380)=0x3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) flistxattr(r3, &(0x7f0000000400)=""/1, 0x1) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000440)=0x5) (async) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000440)=0x5) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000480)) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f00000004c0)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0x640200, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000540)) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000540)) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000580)=@assoc_value, &(0x7f00000005c0)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000580)=@assoc_value={0x0}, &(0x7f00000005c0)=0x8) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000600)=0x1) r7 = fcntl$dupfd(r5, 0x406, r3) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r3}, 0x8) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000000680)=0x1) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000006c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000700)={0x48, 0x6, r9, 0x0, r4}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000780)={r6, 0x163}, &(0x7f00000007c0)=0x8) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000800)={0x28, 0x1, r9, 0x0, 0x9, 0x2, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000880)={0x3, 0x1}) (async) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000880)={0x3, 0x1}) 4.665779258s ago: executing program 3 (id=3226): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f03f, 0x400}) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffbffaf, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000100000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000000000000000003a0c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0) 4.301458783s ago: executing program 3 (id=3228): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x7b, 0xff, 0x56555958, 0x0, 0x0, [{0x5, 0x2}, {}, {}, {}, {}, {0x1}, {}, {0x2f1eb543}]}}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'pim6reg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x3f, 0xe3, 0x0, @local, @mcast2, 0x10, 0x787, 0x1, 0xff}}) sendmsg$inet(r1, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="e6afd91b20f9bc021f717428cf99067070d4f3e1a59168096b73121141ae7452aca8fd782b1e1cb5193fab845378cce918cd64e3b22dc87fe60a5469281f8d5bc756f8c634", 0x45}, {&(0x7f00000001c0)="3c4e2e619a92f949eb30c886eed1cebf1fcabfc10b8e96ec7d6abacf2647e1f0d8369486d6ae4ad6f5c9e5ee140b78f0d832b03f1bba47629be09894f5bdcbed14140b67cb09fe49513df32e6c3f28cdc938347a6cd78d239c3e4cd684eb4753ed1ca9905293ecdc1f3b74c345c3a60547a53f5e821ddadc90d55d1bc0146119b88bda206faf", 0x86}, {&(0x7f0000000440)="5626247af2375e2967a4658b5abb5bcc8a246d3358c0ce5ef5a8e5b083aae9d0e5bb1789daefed353223123dd9c3364c16033cd43b680c23bd450f522246c90f9712757b3f4f64000ba7c85ff0699b972727ae09aef9c7e4fec42230f4a4d3bebabb9a72c48ad42fc28842f4ec01ef551eb09019cde1865187fa10fb778a82dd582c13c20bc60f1a07596257d47c7abafedfaf5ded1ea0f00f334bab81db1f23f32b945c6b493f5cae637a068b4dde88a28e7487b7c6849698688ccfb65f8d3fa915c3898bc751f4", 0xc8}, {&(0x7f0000000280)="23d046b847c65773c4", 0x9}], 0x4, &(0x7f0000000680)=[@ip_retopts={{0x24, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xd9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback]}, @end, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010100, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @multicast2}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x7, 0xd, "1fdb1647ea9db6636dabdf"}, @end]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@rr={0x7, 0x7, 0xf3, [@remote]}, @end, @timestamp_addr={0x44, 0x1c, 0xd6, 0x1, 0x8, [{@private=0xa010100, 0x2}, {@multicast2, 0x66dc7f1a}, {@local, 0x4e}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x14, 0x64, 0x3, 0xb, [{@multicast1, 0xfffffff8}, {@private=0xa010101}]}, @timestamp_prespec={0x44, 0x2c, 0xc6, 0x3, 0x9, [{@rand_addr=0x64010100, 0x8}, {@rand_addr=0x64010102, 0xffffffff}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x3}, {@private=0x427}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x12, "f73870f5bd92944201ea8fab337fc69c"}, @timestamp_prespec={0x44, 0x1c, 0x9d, 0x3, 0x6, [{@private=0xa010100, 0x5}, {@empty, 0xbad}, {@loopback, 0x8}]}]}}}], 0x168}, 0x4000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000a240), 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r5, 0x540c, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x8}}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) mlockall(0x2) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x2) mlockall(0x4) mlockall(0x6) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000003, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f00000002c0)={0x0, 0x0, {0xfffffffd, 0x2, 0x3003, 0x2, 0x6, 0x4, 0x1, 0x4}}) add_key$keyring(0x0, 0x0, 0x0, 0xffff0f00, 0xfffffffffffffffe) 4.157523727s ago: executing program 1 (id=3230): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f00000002c0)}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9cb5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xa00, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000ecffff0502ffffecffffff850000001a0000009500000000000a6682f08a000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2, &(0x7f000000cf3d)=""/195}, 0x23) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x7, 0x1, 0x0, {0x2b, 0x6, 0x6, 0x3}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x2, {0x1, @raw_data="4bbf622b20d2538e6e1f445b7795aa93c004bbb74ebdde873aa40cfdb8d06aefde8880cf4a22212c23b7c448cd514212f3419dcccde3ae9debb21b3ee10fdf63d3e7583e6702b0e9a49174a54c8fc2394f74d8c60dd96a7d41cebaaa10e0fe4fb36d1d8c9ff5984eea66eb54ff774e7af403c61eb7963e0bd5b1370d56b3a9efdaabcb8c2d20c39e64de366fce7e9c408b86db8a782f306a3e186d49e5f92e8a46d4ef2b353b7082844034eb36e4df5d2bf8b6635dd0f7a4d05bc0e9c33dffa2e74c75962dc70ea1"}}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x101, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x400, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xb}}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) 4.050373212s ago: executing program 4 (id=3231): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000052000100ffffffff000000000a000000140006"], 0x28}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'veth1_macvtap\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'ip_vti0\x00'}, 0x18) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) set_robust_list(&(0x7f0000000600)={0x0, 0x8000000000000000, &(0x7f00000005c0)={&(0x7f0000000580)}}, 0x18) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c000000190a01020000000000000000000000000900010073797a30000000000900020073797a3200000000"], 0x2c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000400)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) ioctl$VT_OPENQRY(r4, 0x4bfa, &(0x7f00000006c0)) unshare(0x2c020400) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xcd) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000008c0)={0x0, 0x0, 0x0, 'queue0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$sndseq(r7, &(0x7f0000000980)=[{0x4, 0x5, 0x5, 0x0, @time={0x9, 0x6}, {0x6, 0x2}, {0x0, 0x7}, @time=@tick=0x3}, {0x1, 0xf, 0xe, 0xfc, @tick=0xfffffffa, {0x18, 0x1}, {0xc, 0x1}, @ext={0x24, &(0x7f0000000300)="fca8a9c33931c1295f46bc6051f8575d7a524b5941b828452b1e5767ac69a0d89826e382"}}, {0x1, 0x8, 0x40, 0x3, @tick=0x5, {0x5, 0x8}, {0x9, 0x7}, @note={0x9, 0x80, 0x6, 0xd6}}, {0x9, 0x80, 0x4, 0x6, @tick=0x8, {0x8, 0xff}, {0x0, 0x1}, @raw32={[0x8, 0x80, 0xfffffe01]}}, {0x76, 0x7, 0x2, 0x0, @time={0x8, 0x5}, {0x7f, 0x2}, {0x3, 0x6}, @control={0xff, 0x3, 0x960}}, {0x4, 0x8, 0x0, 0x0, @tick=0x7, {0x34, 0x9}, {0x6, 0x1}, @queue={0x1, {0xfffff818, 0x6}}}, {0x7f, 0x2, 0x2, 0xc, @time={0x100, 0x2dff}, {0x8, 0x5}, {0x60, 0x6}, @ext={0x3a, &(0x7f0000000640)="e208c0aa4a305592ba6fc0ea6bdf4cbd16cc2b2e819d27c89d1de592174f402d815e775a5c35c182d2b44a2f05f6baf92b5af0d6b9d44c163754"}}, {0x10, 0x80, 0x61, 0x6, @tick=0x7, {0x9, 0xe0}, {0x6, 0x4}, @quote={{0x6, 0xa}, 0x2, &(0x7f0000000700)={0xe, 0x88, 0x8, 0x5, @tick=0x3, {0xf9, 0xff}, {0x86, 0x7}, @quote={{0x13, 0xcb}, 0xffff, &(0x7f0000000680)={0xf, 0x9, 0x80, 0xf, @time={0xfffffffd, 0x10000}, {0x3, 0x1}, {0x3, 0xe9}, @raw8={"e4b711e2e2f5a402ed9412fb"}}}}}}, {0x5, 0x4, 0x9, 0x4, @time={0x2b, 0x401}, {0x8, 0x6}, {0x0, 0x9}, @note={0x5, 0x81, 0xbf, 0x6a, 0x1}}], 0xfc) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 3.882842141s ago: executing program 0 (id=3232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r1, 0x8b2d, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 3.724045652s ago: executing program 2 (id=3233): fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40904, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f0000002b80)=[{{&(0x7f0000000300)=@l2, 0x80, &(0x7f0000000940)=[{&(0x7f0000000480)=""/210, 0xd2}, {&(0x7f0000000580)=""/153, 0x99}, {&(0x7f0000000780)=""/193, 0xc1}, {&(0x7f0000000680)=""/92, 0x5c}, {&(0x7f0000000880)=""/188, 0xbc}], 0x5, &(0x7f00000009c0)=""/111, 0x6f}, 0x4}, {{&(0x7f0000000a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000ac0)=""/220, 0xdc}, {&(0x7f0000000bc0)=""/137, 0x89}, {&(0x7f0000000c80)=""/79, 0x4f}, {&(0x7f0000000d00)=""/224, 0xe0}, {&(0x7f0000000100)}, {&(0x7f0000000e00)=""/103, 0x67}], 0x6}, 0x7ff}, {{&(0x7f0000000f00)=@l2tp6, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/62, 0x3e}, {&(0x7f0000000f80)=""/118, 0x76}, {&(0x7f0000001000)=""/205, 0xcd}, {&(0x7f0000000400)=""/21, 0x15}], 0x4, &(0x7f0000001100)=""/40, 0x28}, 0xd67}, {{&(0x7f0000001140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001380)=[{&(0x7f00000011c0)=""/103, 0x67}, {&(0x7f0000001240)=""/58, 0x3a}, {&(0x7f0000002d00)=""/215, 0xd7}], 0x3, &(0x7f00000013c0)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000023c0)=""/171, 0xab}, {&(0x7f0000002480)=""/227, 0xe3}, {&(0x7f0000002580)=""/202, 0xca}, {&(0x7f0000002680)=""/6, 0x6}], 0x4, &(0x7f0000002700)=""/90, 0x5a}, 0xbce}, {{&(0x7f0000002780)=@generic, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002800)=""/240, 0xf0}, {&(0x7f0000002900)=""/84, 0x54}, {&(0x7f0000002980)=""/91, 0x5b}, {&(0x7f0000002a00)=""/6, 0x6}], 0x4, &(0x7f0000002a80)=""/231, 0xe7}, 0x3d}], 0x6, 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffff53b2}]}}}]}, 0x3c}}, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000640)={0xffffffffffffffff}, 0x2}}, 0x20) (async) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da832c000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) (async) syz_usb_control_io$hid(r10, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="002222000000962313060100a3000000000e00000002002000de2106d80bcc5d8c3dda3e7406"], 0x0}, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0xffffffff}, {0xa, 0x0, 0x6, @remote}, r9}}, 0x48) 3.51345832s ago: executing program 0 (id=3234): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)={{0x108, 0x6, 0xbd, 0x1fa, 0x4d, 0x5, 0x82, 0x800}, "2363c5e6dbb4aaef6be3cc7a2021a52dbece0e238aded8947a9c7e7ef613dded44dc90ff5b165792469fed0649f69042a9575c4cc44ed108316d8d1132ace3750287a7cfd440a5edad", ['\x00', '\x00']}, 0x269) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300010000000000000000000700", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x0) 3.427331678s ago: executing program 1 (id=3235): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$media(&(0x7f00000001c0), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0}) (fail_nth: 12) 3.214177344s ago: executing program 2 (id=3236): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) io_submit(0x0, 0x11, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000500000098000040"]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendto$packet(r4, &(0x7f0000000180)="0b031000e0ff030002004788aa96a13bb1000000000081000500", 0x1a, 0x40000000, &(0x7f0000000140)={0x11, 0x16, 0x0, 0x1, 0xff}, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r6, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000008640), 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40b80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) ioctl$TIOCSTI(r7, 0x5423, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_setup(0x2be2, &(0x7f00000001c0)={0x0, 0xffffffff, 0x200, 0x8000000, 0x2ea}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) open(0x0, 0x20403, 0x0) fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='s\a\x00rce', &(0x7f0000000280)='\xa6\t\xad\xbbl~$\xdbh0:\x00', 0x0) 3.207487563s ago: executing program 0 (id=3237): openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = io_uring_setup(0x68e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) socket(0x1e, 0x4, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.853471403s ago: executing program 4 (id=3238): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@deltaction={0x1b4, 0x31, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x339d0314}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe6}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5e9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x407a}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x157}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x37, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x1b4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x7c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.831431795s ago: executing program 1 (id=3239): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0xe0a51bacfd48a41c, 0x0, &(0x7f0000000300)) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)}, 0x400c0) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x801, 0x0) preadv(r2, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r2, @ANYRESHEX=r3], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x5, &(0x7f0000001a40)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf}, 0x90) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) close_range(r5, 0xffffffffffffffff, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r4, 0x400) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000480)={0x23, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x0, @rand_addr=0x64010103}}}, 0xffffffffffffffea) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) 2.679731389s ago: executing program 4 (id=3240): writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="896437188b379adda89b11f119eff7ae762e011cf99cf8378efc4c3e0aed75c3c5ce8207a69519a322c95825a0baa4943f3cc20a4d7a430aad2d0090202eac530045cc7f9448aee4940f717c8144b32ba42ee73a4abb7c7113", 0x59}], 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0xfffffffffffffeb4) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x2, "dac7a15f305b57a3"}) 2.439514309s ago: executing program 2 (id=3241): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000431d1c40c9309300c6180102030309021200010000000009040000000e0101805e32dbdd09401b64858540117b665ebaf36deb94b3748232708b2ce37318972731"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000080)='veth1_to_bridge\x00'}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4}, 0x18) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x4, {0x0, 0x0, 0x3}, 0xfe}, 0x18) 1.617594797s ago: executing program 4 (id=3242): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x7c00) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000e50601"], 0x14}}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = shmget$private(0x0, 0x800000, 0x2, &(0x7f0000800000/0x800000)=nil) shmctl$IPC_INFO(r3, 0x3, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (fail_nth: 4) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) 1.168677946s ago: executing program 4 (id=3243): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local={0xd}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.047895896s ago: executing program 0 (id=3244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x0, 0x9, 0x0, 0x0, 0xbd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2], 0xf000, 0x80200}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004600)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x206000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4c}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) 449.436356ms ago: executing program 0 (id=3246): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x710, 0x1, 0x5, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x2}, 0x8, 0x4, 0xffff, 0x9, 0xb, 'syz1\x00', "c7b86c72a133d94022500686a8ebdd14b9fb2fe11525f9e99f2ec03127844a6c", "f48f88aac52f92d4177206f4d36b4566529067a10af87958f41f8b0ed58049c1", [{0x8001, 0xf001, {0x1, 0x9}}, {0xb, 0xf, {0x1, 0x8}}, {0x6, 0x4, {0x3, 0x8000}}, {0x400, 0x6, {0x0, 0x5}}, {0x0, 0x0, {0x2, 0x9}}, {0x3, 0x1800, {0x3, 0x1}}, {0x3, 0x8, {0x1, 0x4}}, {0x0, 0x5, {0x0, 0x4}}, {0x7, 0x200, {0x2, 0x5e}}, {0x1, 0x9c, {0x2}}, {0x1, 0x5, {0x3, 0x2}}, {0xfffc, 0x1, {0x0, 0x800}}, {0x3, 0x0, {0x1, 0x18}}, {0xd665, 0x2, {0x0, 0xdae}}, {0x80, 0xff0, {0x1, 0x5}}, {0x328c, 0x4704, {0x2, 0x87a5}}, {0x5, 0xceab, {0x3, 0x2}}, {0x3, 0x2, {0x0, 0xf60af58}}, {0x7fff, 0x0, {0x1, 0x2}}, {0x8, 0xe9cf, {0x1, 0xe012}}, {0x3, 0x1ff, {0x1, 0x2}}, {0x8, 0x7, {0x3, 0x6}}, {0x8cc9, 0x7, {0x1, 0x24c}}, {0x4, 0x6, {0x0, 0x2}}, {0x7, 0xe, {0x0, 0x8}}, {0xfff7, 0x5, {0x1, 0x2}}, {0x0, 0x0, {0x1, 0x7}}, {0xb, 0x1, {0x2, 0x2}}, {0xb, 0x9, {0x1, 0x186}}, {0x8000, 0xfffc, {0x3, 0x240000}}, {0xc620, 0x8, {0x3, 0x113}}, {0x8, 0xb, {0x2, 0x1}}, {0x9, 0xb, {0x2, 0x7e2aaad4}}, {0xd7, 0x8001, {0x1, 0x2}}, {0x1, 0x2, {0x3, 0xfffffff9}}, {0xd, 0x7, {0x3, 0x5}}, {0x2, 0x7c3, {0x0, 0x40}}, {0xfffa, 0x9, {0x0, 0x5}}, {0xb, 0x3}, {0x400, 0x40, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0xfffffffe}, 0x7, 0x40, 0x4, 0xe, 0x8, 'syz1\x00', "de3a1d2ef9ea8781d534e0b296e98ce24b732c81ed9cfab9ea386a88d1635bb7", "b9b48f710b8c2586ee2f7e2ae135516dfa245c8b58fb8cffa175fa0329bf4e0e", [{0x8001, 0x1, {0x2, 0x9}}, {0x8aa, 0x1, {0x1, 0x7b3e}}, {0x2, 0x1ff, {0x0, 0x10000}}, {0x10, 0x48, {0x2, 0x2d75dbb3}}, {0x7ff, 0x7fff, {0x3, 0x100c72ce}}, {0x40, 0x7, {0x0, 0x9}}, {0x80, 0x80, {0x3, 0xffff}}, {0x7, 0x6, {0x3, 0x2}}, {0x3, 0x8, {0x2, 0x8d1}}, {0x1000, 0x8000, {0x2}}, {0x7, 0x4, {0x2, 0x1}}, {0x9, 0x4, {0x0, 0x4}}, {0x5, 0x1, {0x2, 0xc5}}, {0x800, 0x10, {0x2, 0x6}}, {0x6b89, 0x7ff, {0x2, 0x2}}, {0x8001, 0x800, {0x3, 0x7}}, {0xfffe, 0x6, {0x3, 0x5}}, {0xfa, 0x5, {0x0, 0x8}}, {0x3, 0x2, {0x0, 0x1}}, {0x8, 0x9, {0x0, 0x75f}}, {0x8, 0x4, {0x0, 0x80000000}}, {0x7, 0x4, {0x1, 0x1000}}, {0x36f, 0x4, {0x1, 0x6}}, {0x3, 0x2, {0x3, 0x80000000}}, {0x5, 0x81, {0x3, 0x10}}, {0xcf, 0x8, {0x2, 0x7fffffff}}, {0xf4d7, 0x491, {0x2}}, {0xfffa, 0x700, {0x3, 0xfffffffc}}, {0x1, 0x2, {0x0, 0x2}}, {0x5, 0x3}, {0x5, 0x0, {0x2, 0x9}}, {0x5, 0x2, {0x3, 0x10}}, {0x1000, 0x400, {0x3, 0x2}}, {0x9, 0x8, {0x2, 0xb}}, {0x2, 0x6, {0x2, 0x3}}, {0x3, 0x6, {0x2, 0x80}}, {0x9, 0xef, {0x0, 0x3}}, {0x1, 0x3, {0x2}}, {0x3ff, 0xf6, {0x2, 0x400}}, {0x1, 0x4, {0x2, 0x3e}}]}}}, {{0x254, 0x1, {{0x1}, 0x4, 0x0, 0x2, 0x40, 0xfffd, 'syz1\x00', "30af8cf59c1fda4b0785757cecf9a43a8adf228309de8ef077ed9cf63c059c63", "ab18cec988818ef37b0570a6966b6ed2c697d551ac9bc94a9e2f10f4e8e53ed3", [{0x6, 0xff, {0x3, 0x1}}, {0x3, 0x8000}, {0x5, 0x5, {0x3, 0xffffffff}}, {0x0, 0x2, {0x1, 0x1}}, {0x7, 0x5, {0x3}}, {0x8, 0x2, {0x1, 0x100}}, {0xc, 0x9, {0x3, 0x1}}, {0x0, 0x9, {0x3, 0x82}}, {0x8, 0x5, {0x2, 0x100}}, {0x8, 0x3, {0x1}}, {0x6, 0x4, {0x1, 0x1}}, {0x4, 0x1, {0x1, 0x4}}, {0x9, 0x0, {0x3, 0x85}}, {0x5, 0x2}, {0x92, 0x200, {0x1, 0x101}}, {0x3, 0x3, {0x1, 0x240}}, {0xfff9, 0x2, {0x3, 0x9}}, {0x0, 0x0, {0x2, 0x9}}, {0x97, 0xfff9, {0x3, 0xbb}}, {0x0, 0xbce, {0x1, 0xf4}}, {0x4, 0x5, {0x1, 0x6}}, {0x20c, 0x8, {0x1}}, {0x5, 0x809, {0x1, 0x4}}, {0x1, 0xffff, {0x0, 0x5}}, {0xab, 0x4, {0x2}}, {0x2, 0x6, {0x2, 0x7}}, {0x400, 0x8001, {0x2, 0x9e}}, {0x1, 0x4, {0x3, 0xf}}, {0x94e5, 0x2, {0x3}}, {0xffff, 0x6, {0x2, 0x6}}, {0x4, 0xd0f, {0x1, 0x81}}, {0x5, 0x9, {0x2, 0xc93c}}, {0x7, 0x8, {0x3, 0xfff}}, {0x9, 0x2, {0x0, 0x6231ec73}}, {0x9, 0x0, {0x0, 0x4}}, {0x9, 0x7, {0x1, 0xf7}}, {0x6, 0x6324, {0x1, 0x6}}, {0x0, 0xca3, {0x0, 0x6}}, {0x7, 0xa, {0x3, 0x8}}, {0x35b, 0x400, {0x2, 0x10001}}]}}}]}, 0x710}}, 0x4000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab97fc979fd1e00d96072000001ea89de2b7fb0900000080b8785d9600010000000000eeffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177c54e98dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000000000000e0100", [0x0, 0x1000000]}}) 78.88731ms ago: executing program 0 (id=3247): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0xf, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @queue}], 0x1c) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = memfd_create(0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x51) (async) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x51) openat$dir(0xffffffffffffff9c, &(0x7f00000022c0)='./file0\x00', 0x400, 0x40) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000022c0)='./file0\x00', 0x400, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000002300)=""/102398, 0x18ffe}], 0x1, 0x20000000, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000f911140b05000000000000000008000b0028000000"], 0x18}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) recvmmsg(r7, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=""/17, 0x11}}], 0x1, 0x0, 0x0) (async) recvmmsg(r7, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=""/17, 0x11}}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f}, 0x90) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000000000c00078008001240"], 0x58}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 0s ago: executing program 4 (id=3248): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter6\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000700000000000000000a20000000000a03000000000000000000010000000900010073797a30000000005c000000030a01010000000000000000010000000900030073797a300000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xa4}}, 0x0) pipe2(&(0x7f0000000040), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0xe583497bb4506192, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0xe9, 0x0, 0xbb, 0x289f86a4}]}) prctl$PR_SET_NO_NEW_PRIVS(0x38, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$kcm(0xa, 0x7, 0x88) sendmsg$kcm(r2, 0x0, 0x20000000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/arp\x00') read$FUSE(r3, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$userns(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000140), 0xff, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r7, 0x541b, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0xc2003) creat(&(0x7f0000000600)='./file0\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x181480, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) signalfd(r6, &(0x7f0000000100)={[0x100000001]}, 0x8) kernel console output (not intermixed with test programs): 1066.623515][ T5286] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1066.643215][ T5286] usb 4-1: USB disconnect, device number 55 [ 1066.700252][T16958] usb 5-1: Cannot read MAC address [ 1066.705687][T16958] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1066.726096][T16958] usb 5-1: USB disconnect, device number 23 [ 1066.736107][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1066.748717][ T9] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.768719][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1066.783377][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1066.792611][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.818197][ T9] usbtmc 1-1:16.0: bulk endpoints not found [ 1066.916997][T18933] Bluetooth: hci3: command tx timeout [ 1066.960884][ T6571] team0 (unregistering): Port device team_slave_1 removed [ 1067.040681][ T6571] team0 (unregistering): Port device team_slave_0 removed [ 1068.028823][T20822] chnl_net:caif_netlink_parms(): no params data found [ 1068.078001][ T5286] usb 1-1: USB disconnect, device number 37 [ 1068.488359][T20822] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.516606][T20822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.542733][T20822] bridge_slave_0: entered allmulticast mode [ 1068.566123][T20822] bridge_slave_0: entered promiscuous mode [ 1068.609559][T20822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.637727][T20822] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.645093][T20822] bridge_slave_1: entered allmulticast mode [ 1068.702247][T20822] bridge_slave_1: entered promiscuous mode [ 1068.794575][T20822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.837540][T20822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.958484][T20822] team0: Port device team_slave_0 added [ 1068.974113][T20822] team0: Port device team_slave_1 added [ 1068.986213][T18933] Bluetooth: hci3: command tx timeout [ 1068.996750][ T48] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1069.062926][T20822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.071600][T20822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1069.102807][T20822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.129830][T20822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.148532][T20822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1069.200169][T20822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.215908][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 1069.225312][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.270781][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.302852][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1069.341153][ T48] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 1069.370642][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.370859][T20822] hsr_slave_0: entered promiscuous mode [ 1069.394602][T20822] hsr_slave_1: entered promiscuous mode [ 1069.406692][T20822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1069.416954][ T48] usb 5-1: config 0 descriptor?? [ 1069.430262][T17671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1069.432660][T20822] Cannot create hsr debugfs directory [ 1069.447524][T17671] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1069.459487][T17671] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1069.474084][T17671] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1069.482448][T17671] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1069.491957][T17671] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1069.878718][ T48] shield 0003:0955:7214.002C: unknown main item tag 0x4 [ 1069.889972][ T48] shield 0003:0955:7214.002C: unknown main item tag 0x0 [ 1069.897118][ T48] shield 0003:0955:7214.002C: unknown main item tag 0x0 [ 1069.905827][ T48] shield 0003:0955:7214.002C: unknown main item tag 0x0 [ 1069.915963][ T48] shield 0003:0955:7214.002C: unknown main item tag 0x0 [ 1069.939846][ T48] input: HID 0955:7214 Haptics as /devices/virtual/input/input84 [ 1070.030039][ T48] shield 0003:0955:7214.002C: Registered Thunderstrike controller [ 1070.044449][ T48] shield 0003:0955:7214.002C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 1070.129760][T16937] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1070.151698][T16937] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1070.163837][T16937] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1070.189129][ T48] usb 5-1: USB disconnect, device number 24 [ 1070.196240][T16937] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1070.801819][T20928] chnl_net:caif_netlink_parms(): no params data found [ 1070.827660][T20956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2895'. [ 1070.866254][T20956] team_slave_0: entered promiscuous mode [ 1070.872034][T20956] team_slave_1: entered promiscuous mode [ 1070.897662][T20956] macvtap1: entered promiscuous mode [ 1070.903020][T20956] team0: entered promiscuous mode [ 1070.935034][T20956] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1070.976050][T20960] netlink: 'syz.4.2895': attribute type 10 has an invalid length. [ 1071.007638][T20960] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1071.020725][T20960] team0: Port device netdevsim0 added [ 1071.066114][T18933] Bluetooth: hci3: command tx timeout [ 1071.361443][T20822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1071.407883][T20928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.442449][T20928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.456343][T20928] bridge_slave_0: entered allmulticast mode [ 1071.476021][T20928] bridge_slave_0: entered promiscuous mode [ 1071.494929][T20928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.504726][T20928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.535372][T20928] bridge_slave_1: entered allmulticast mode [ 1071.546861][T20928] bridge_slave_1: entered promiscuous mode [ 1071.562658][T18933] Bluetooth: hci1: command tx timeout [ 1071.614204][T20822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1071.630202][T20822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1071.711872][T20822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1071.735220][T20928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.776754][T20928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.974912][T20928] team0: Port device team_slave_0 added [ 1072.011504][T20928] team0: Port device team_slave_1 added [ 1072.104675][T20928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.115153][T20928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.183636][T20928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.205640][T20928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.225229][T20928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.251280][ C0] vkms_vblank_simulate: vblank timer overrun [ 1072.295821][T20928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.549063][T20928] hsr_slave_0: entered promiscuous mode [ 1072.567966][T20928] hsr_slave_1: entered promiscuous mode [ 1072.584359][T20928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1072.592950][T20928] Cannot create hsr debugfs directory [ 1072.836386][T12899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.844348][T12899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.870578][T20990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1072.925571][T20822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.039106][T20822] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.156388][ T6571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.163599][ T6571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.271726][T21007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2906'. [ 1073.379402][T20928] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.435242][ T6571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.442462][ T6571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.631778][T18933] Bluetooth: hci1: command tx timeout [ 1073.658852][T20928] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.886398][T20928] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.130651][T20928] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.275274][T20822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.494397][T20822] veth0_vlan: entered promiscuous mode [ 1074.558166][T20822] veth1_vlan: entered promiscuous mode [ 1074.664667][T20928] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1074.725270][T20928] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1074.765473][T20928] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1074.799840][T20928] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1074.838038][T20822] veth0_macvtap: entered promiscuous mode [ 1074.886227][T20822] veth1_macvtap: entered promiscuous mode [ 1074.942746][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.972988][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.991007][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1075.021727][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.065106][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1075.096080][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.116354][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1075.139943][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.163103][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1075.185478][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.207356][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1075.228103][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.254795][T20822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1075.293530][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.327910][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.352952][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.377772][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.396450][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.436472][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.462288][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.495694][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.526097][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.546068][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.585270][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.617047][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.649537][T20822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1075.711595][T18933] Bluetooth: hci1: command tx timeout [ 1075.733009][T20822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.741910][T20822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.754010][T20822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.763500][T20822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.978620][T20928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.113169][T20928] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.174268][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.181567][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.303235][ T2473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.310498][ T2473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.362286][ T2473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.391816][ T2473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.515487][T12899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.566067][T12899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.712189][T20928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1076.952300][T20928] veth0_vlan: entered promiscuous mode [ 1077.061141][T20928] veth1_vlan: entered promiscuous mode [ 1077.089022][T21093] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2919'. [ 1077.109336][T21093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2919'. [ 1077.159164][T21093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.167199][T21093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.207381][T21093] bridge0: entered promiscuous mode [ 1077.212733][T21093] bridge0: entered allmulticast mode [ 1077.394522][T20928] veth0_macvtap: entered promiscuous mode [ 1077.446744][T20928] veth1_macvtap: entered promiscuous mode [ 1077.568448][T20928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.608059][T20928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.627258][T21107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2925'. [ 1077.640973][T20928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.685896][T20928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.725971][T20928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.745873][T20928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.778131][T20928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.796669][T18933] Bluetooth: hci1: command tx timeout [ 1077.814514][T20928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.861730][T20928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.897794][T20928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.913326][T20928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.934845][T20928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.945146][T20928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.956445][T20928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.972807][T20928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.983411][T21110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2925'. [ 1078.018671][T21115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2927'. [ 1078.042565][T21119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2928'. [ 1078.171181][T20928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.229626][T20928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.248956][T20928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.270090][T20928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.288640][T20928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.307479][T20928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.326147][T20928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.352770][T20928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.376094][T20928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.398809][T20928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.423083][T20928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.444472][T20928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.454882][T20928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.466189][T20928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.482200][T20928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.505279][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2927'. [ 1078.569915][T20928] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.570486][T16953] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1078.592561][T20928] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.616643][T20928] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.637085][T20928] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.077444][ T2546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.105030][ T2546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.185406][ T2546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.217749][ T2546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.527728][T21161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'. [ 1079.538999][T21161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2939'. [ 1079.680417][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2941'. [ 1079.955907][ T48] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1080.179504][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.224109][ T48] usb 3-1: config 0 has no interfaces? [ 1080.240918][ T48] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1080.272506][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.319326][ T48] usb 3-1: config 0 descriptor?? [ 1080.937791][T16953] usb 3-1: USB disconnect, device number 58 [ 1081.040211][T21173] binder: 21167:21173 ioctl c00c620f 20000340 returned -22 [ 1081.068226][ T5286] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1081.285912][ T5286] usb 2-1: Using ep0 maxpacket: 32 [ 1081.310346][ T5286] usb 2-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 1081.340310][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.364961][ T5286] usb 2-1: Product: syz [ 1081.375377][ T5286] usb 2-1: Manufacturer: syz [ 1081.383407][ T5286] usb 2-1: SerialNumber: syz [ 1081.395049][ T5286] usb 2-1: config 0 descriptor?? [ 1081.929362][ T5286] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 1081.989928][ T5286] usb 2-1: USB disconnect, device number 24 [ 1082.386218][T16953] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1082.575917][T16953] usb 1-1: Using ep0 maxpacket: 32 [ 1082.604297][T16953] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1082.641102][T16953] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1082.671549][T16953] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1082.707980][T16953] usb 1-1: Product: syz [ 1082.725965][T16953] usb 1-1: Manufacturer: syz [ 1082.749443][T16953] usb 1-1: SerialNumber: syz [ 1082.796645][T16953] usb 1-1: config 0 descriptor?? [ 1082.804362][T21219] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1083.026163][ T5282] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1083.080635][T21219] __nla_validate_parse: 2 callbacks suppressed [ 1083.080659][T21219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2958'. [ 1083.180434][ T48] usb 1-1: USB disconnect, device number 38 [ 1083.248522][ T5282] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.283294][ T5282] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1083.298938][ T5282] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1083.307528][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2965'. [ 1083.318200][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1083.355952][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2965'. [ 1083.356075][ T5282] usb 5-1: SerialNumber: syz [ 1083.674849][T21246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2966'. [ 1083.688913][T16953] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1083.717545][T21246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2966'. [ 1083.873308][T16953] usb 2-1: device descriptor read/64, error -71 [ 1083.921788][ T48] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1084.030253][T21254] [U] [ 1084.033017][T21254] [U] [ 1084.035728][T21254] [U] [ 1084.038449][T21254] [U] [ 1084.042381][T21254] [U] [ 1084.045122][T21254] [U] [ 1084.047841][T21254] [U] [ 1084.050550][T21254] [U] [ 1084.056645][T21254] [U] [ 1084.059370][T21254] [U] [ 1084.062067][T21254] [U] [ 1084.115878][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 1084.127523][ T48] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1084.157998][T16953] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1084.160068][ T48] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1084.181734][ T48] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1084.202245][ T48] usb 1-1: Product: syz [ 1084.215153][ T48] usb 1-1: config 0 descriptor?? [ 1084.230896][T21219] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1084.358794][T16953] usb 2-1: device descriptor read/64, error -71 [ 1084.466663][ T5282] usb 5-1: 0:2 : does not exist [ 1084.512753][ T5282] usb 5-1: USB disconnect, device number 25 [ 1084.518630][T16953] usb usb2-port1: attempt power cycle [ 1084.618346][T13968] udevd[13968]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1084.754336][T21260] loop2: detected capacity change from 0 to 7 [ 1084.765631][T21260] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 1084.779387][T21260] loop2: partition table partially beyond EOD, truncated [ 1084.795415][T21260] loop2: p1 size 6333 extends beyond EOD, truncated [ 1084.812410][T21252] [U] [ 1084.857599][T13968] udevd[13968]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1084.978980][T16953] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1085.036786][T16953] usb 2-1: device descriptor read/8, error -71 [ 1085.316053][T16953] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1085.366698][T16953] usb 2-1: device descriptor read/8, error -71 [ 1085.465631][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1085.465655][ T29] audit: type=1400 audit(1724465338.071:659): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=21275 comm="syz.3.2976" [ 1085.483498][T16951] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1085.514173][T16953] usb usb2-port1: unable to enumerate USB device [ 1085.604801][ T5282] usb 1-1: USB disconnect, device number 39 [ 1085.689918][T16951] usb 5-1: Using ep0 maxpacket: 8 [ 1085.713142][T16951] usb 5-1: config 0 has an invalid descriptor of length 229, skipping remainder of the config [ 1085.736232][T16951] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1085.767151][T16951] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1085.791345][T16951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.827385][T16951] usb 5-1: config 0 descriptor?? [ 1085.846161][T16937] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1086.066179][ T5282] usb 5-1: USB disconnect, device number 26 [ 1086.101661][T16937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 1086.121188][T16937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 1086.164519][T16937] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1086.226876][T16937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.276839][T16937] usb 4-1: config 0 descriptor?? [ 1086.316628][T21277] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1086.329226][T16937] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1086.664532][T21277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.690833][T21299] xt_hashlimit: overflow, try lower: 3/0 [ 1086.735944][T21277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.778334][T21308] loop8: detected capacity change from 0 to 7 [ 1086.821114][T21308] Dev loop8: unable to read RDB block 7 [ 1086.840491][T21308] loop8: unable to read partition table [ 1086.864681][T21308] loop8: partition table beyond EOD, truncated [ 1086.897119][T16937] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 1086.906412][T21308] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1086.906412][T21308] ) failed (rc=-5) [ 1086.944282][T16937] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1086.983304][T16937] usb 4-1: MIDIStreaming interface descriptor not found [ 1087.147995][ T5301] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1087.295915][T16931] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1087.304924][T21323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2988'. [ 1087.366137][ T5301] usb 3-1: Using ep0 maxpacket: 8 [ 1087.378705][ T5301] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1087.442344][ T5301] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1087.483579][ T5301] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1087.508070][T16931] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 1087.532654][T16931] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.536048][ T5301] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1087.570498][T16931] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1087.592459][ T5301] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1087.602291][T16931] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1087.625442][T16931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.650395][T16931] usb 2-1: Product: syz [ 1087.657698][T16931] usb 2-1: Manufacturer: syz [ 1087.662686][T16931] usb 2-1: SerialNumber: syz [ 1087.662694][ T5301] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1087.705842][ T48] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1087.724739][ T5301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.914168][ T48] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1087.947197][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.968794][ T48] usb 5-1: Product: syz [ 1087.973267][ T48] usb 5-1: Manufacturer: syz [ 1087.978635][T21312] binder: 21309:21312 ioctl c0405602 20000240 returned -22 [ 1087.993283][ T48] usb 5-1: SerialNumber: syz [ 1088.009324][T21319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.025596][ T5301] usb 3-1: usb_control_msg returned -32 [ 1088.040630][ T48] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1088.101516][T16931] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1088.118116][ T5301] usbtmc 3-1:16.0: can't read capabilities [ 1088.129933][T21319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.440192][ T5301] usb 4-1: USB disconnect, device number 56 [ 1088.638886][T21331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.676499][T21331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.690015][T21328] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.2989'. [ 1088.708233][T21328] openvswitch: netlink: Actions may not be safe on all matching packets [ 1088.736878][ T29] audit: type=1326 audit(1724465341.361:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21324 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1088.747524][T21339] loop2: detected capacity change from 0 to 7 [ 1088.791932][T21340] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 1088.805593][ T29] audit: type=1326 audit(1724465341.391:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21324 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1088.828278][ C1] vkms_vblank_simulate: vblank timer overrun [ 1088.849411][ T29] audit: type=1326 audit(1724465341.391:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21324 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1088.850049][T21339] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 1088.883855][ T29] audit: type=1326 audit(1724465341.391:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21324 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1088.920324][ T29] audit: type=1326 audit(1724465341.401:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21324 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1088.952574][T21339] loop2: partition table partially beyond EOD, truncated [ 1088.976345][T21339] loop2: p1 size 6333 extends beyond EOD, truncated [ 1088.995118][ T29] audit: type=1326 audit(1724465341.401:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21324 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1089.037149][T16958] usb 3-1: USB disconnect, device number 59 [ 1089.115241][T13968] udevd[13968]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1089.149525][ T29] audit: type=1326 audit(1724465341.401:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21324 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1089.229816][T16931] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1089.251995][T16931] ath9k_htc: Failed to initialize the device [ 1089.295176][ T29] audit: type=1326 audit(1724465341.401:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21324 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1089.320676][ T29] audit: type=1326 audit(1724465341.411:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21324 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1089.446729][T16931] usb 5-1: ath9k_htc: USB layer deinitialized [ 1089.521118][ T5282] usb 5-1: USB disconnect, device number 27 [ 1089.626023][ T48] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1089.820478][ T48] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1089.820514][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.833786][ T48] usb 4-1: config 0 descriptor?? [ 1089.846844][ T48] cp210x 4-1:0.0: cp210x converter detected [ 1090.045990][T21343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.105617][T21343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.178126][ T5301] usb 2-1: USB disconnect, device number 29 [ 1090.312949][T21358] netlink: 'syz.1.3000': attribute type 1 has an invalid length. [ 1090.321001][T21358] netlink: 'syz.1.3000': attribute type 2 has an invalid length. [ 1090.329094][T21358] netlink: 16074 bytes leftover after parsing attributes in process `syz.1.3000'. [ 1090.367068][T21358] netlink: 'syz.1.3000': attribute type 1 has an invalid length. [ 1090.376585][ T5286] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1090.387357][ T48] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1090.409032][ T48] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 1090.443319][T21358] netlink: 'syz.1.3000': attribute type 2 has an invalid length. [ 1090.452660][ T48] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 1090.462339][T21358] netlink: 16074 bytes leftover after parsing attributes in process `syz.1.3000'. [ 1090.574998][ T48] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1090.611244][ T5286] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1090.628816][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.680709][ T5286] usb 1-1: config 0 descriptor?? [ 1090.856106][ T5301] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1090.926000][ T48] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1090.962987][T21371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.983957][T21371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.988681][T21372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.012987][T21372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.065884][ T5301] usb 3-1: Using ep0 maxpacket: 8 [ 1091.081293][ T5301] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1091.091701][ T5301] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1091.102509][ T5301] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1091.129216][ T5301] usb 3-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1091.138631][ T5301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.155101][ T5301] usb 3-1: Product: syz [ 1091.163137][ T48] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1091.163623][ T5301] usb 3-1: Manufacturer: syz [ 1091.182967][ T5301] usb 3-1: SerialNumber: syz [ 1091.202415][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.225501][ T48] usb 5-1: Product: syz [ 1091.233295][ T5282] usb 4-1: USB disconnect, device number 57 [ 1091.257581][ T5301] ti_usb_3410_5052 3-1:1.0: TI USB 3410 1 port adapter converter detected [ 1091.261351][ T5282] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1091.275180][ T48] usb 5-1: Manufacturer: syz [ 1091.315866][ T48] usb 5-1: SerialNumber: syz [ 1091.366514][ T5282] cp210x 4-1:0.0: device disconnected [ 1091.375431][ T48] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1091.414539][T16931] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1091.469024][T21376] loop2: detected capacity change from 0 to 7 [ 1091.500596][T21376] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 1091.520112][T21376] loop2: partition table partially beyond EOD, truncated [ 1091.541827][T21376] loop2: p1 size 6333 extends beyond EOD, truncated [ 1091.676116][T16953] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1091.683331][T13968] udevd[13968]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1091.722411][ T5286] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 1091.744256][ T5286] usb 1-1: USB disconnect, device number 40 [ 1091.891183][T21367] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3001'. [ 1091.903615][T21367] openvswitch: netlink: Actions may not be safe on all matching packets [ 1091.904447][T16953] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 1091.934246][T21378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3004'. [ 1091.959412][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1091.959730][ T29] audit: type=1326 audit(1724465344.581:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1092.009063][T16953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.018894][ T29] audit: type=1326 audit(1724465344.581:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1092.018953][T21378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3004'. [ 1092.050715][ T29] audit: type=1326 audit(1724465344.611:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1092.077812][ T29] audit: type=1326 audit(1724465344.611:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1092.092163][T16953] usb 2-1: Product: syz [ 1092.135260][ T29] audit: type=1326 audit(1724465344.621:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1092.171023][T16953] usb 2-1: Manufacturer: syz [ 1092.180324][T16953] usb 2-1: SerialNumber: syz [ 1092.204540][T16953] usb 2-1: config 0 descriptor?? [ 1092.242779][T16953] gm12u320 2-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 1092.246783][ T29] audit: type=1326 audit(1724465344.621:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1092.287512][T16953] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5 [ 1092.331574][ T29] audit: type=1326 audit(1724465344.621:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1092.360218][T16953] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1092.402981][T16953] usb-storage 2-1:0.0: device ignored [ 1092.454107][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1092.460935][ T29] audit: type=1326 audit(1724465344.621:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1092.515644][T16931] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1092.526604][T16931] ath9k_htc: Failed to initialize the device [ 1092.632803][T16931] usb 5-1: ath9k_htc: USB layer deinitialized [ 1092.705298][ T29] audit: type=1326 audit(1724465344.621:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1092.810347][T16953] usb 5-1: USB disconnect, device number 28 [ 1092.831533][ T29] audit: type=1326 audit(1724465344.621:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1093.211174][T16953] usb 2-1: USB disconnect, device number 30 [ 1093.362612][ T5301] usb 3-1: USB disconnect, device number 60 [ 1093.416216][ T48] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1093.683952][ T48] usb 4-1: string descriptor 0 read error: -22 [ 1093.716801][ T48] usb 4-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 1093.778836][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.810165][T21408] loop8: detected capacity change from 0 to 7 [ 1093.834500][ T48] usb 4-1: config 0 descriptor?? [ 1093.889111][ T48] usb 4-1: Found UVC 0.00 device (30c9:0093) [ 1093.913978][T21408] Dev loop8: unable to read RDB block 7 [ 1093.920576][ T48] usb 4-1: No valid video chain found. [ 1093.961891][T21408] loop8: unable to read partition table [ 1093.998578][T21408] loop8: partition table beyond EOD, truncated [ 1094.004797][T21408] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1094.004797][T21408] ) failed (rc=-5) [ 1094.290132][T21411] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3015'. [ 1094.328352][T21411] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1095.059437][T21432] loop2: detected capacity change from 0 to 7 [ 1095.077640][T21432] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 1095.084344][T21432] loop2: partition table partially beyond EOD, truncated [ 1095.100455][T21432] loop2: p1 size 6333 extends beyond EOD, truncated [ 1095.251524][T13968] udevd[13968]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1095.495636][T21444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3027'. [ 1095.596959][T21444] team_slave_0: entered promiscuous mode [ 1095.602754][T21444] team_slave_1: entered promiscuous mode [ 1095.624734][T21444] macvtap1: entered promiscuous mode [ 1095.665033][T21444] team0: entered promiscuous mode [ 1095.693475][T21444] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1095.920667][T21451] tipc: Started in network mode [ 1095.941931][T21451] tipc: Node identity , cluster identity 4711 [ 1095.959677][T21451] tipc: Failed to set node id, please configure manually [ 1095.975620][T21451] tipc: Enabling of bearer rejected, failed to enable media [ 1095.986962][T21451] tipc: Started in network mode [ 1095.993144][T21451] tipc: Node identity , cluster identity 4711 [ 1095.999954][T21451] tipc: Failed to set node id, please configure manually [ 1096.024984][T21451] tipc: Enabling of bearer rejected, failed to enable media [ 1096.078745][T21451] tipc: Started in network mode [ 1096.104390][T21451] tipc: Node identity , cluster identity 4711 [ 1096.112847][T21451] tipc: Failed to set node id, please configure manually [ 1096.121241][T21451] tipc: Enabling of bearer rejected, failed to enable media [ 1096.136859][T21451] tipc: Started in network mode [ 1096.146486][T16953] usb 4-1: USB disconnect, device number 58 [ 1096.156466][T21451] tipc: Node identity , cluster identity 4711 [ 1096.181984][T21451] tipc: Failed to set node id, please configure manually [ 1096.212041][T21451] tipc: Enabling of bearer rejected, failed to enable media [ 1096.253119][T21451] tipc: Started in network mode [ 1096.281770][T21451] tipc: Node identity , cluster identity 4711 [ 1096.298654][T21451] tipc: Failed to set node id, please configure manually [ 1096.319563][T21459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3033'. [ 1096.340493][T21451] tipc: Enabling of bearer rejected, failed to enable media [ 1096.376173][T21451] tipc: Started in network mode [ 1096.386467][T21451] tipc: Node identity , cluster identity 4711 [ 1096.403688][T21451] tipc: Failed to set node id, please configure manually [ 1096.431576][T21451] tipc: Enabling of bearer rejected, failed to enable media [ 1096.471387][T21451] tipc: Started in network mode [ 1096.495573][T21451] tipc: Node identity , cluster identity 4711 [ 1096.522444][T21451] tipc: Failed to set node id, please configure manually [ 1096.538954][T21451] tipc: Enabling of bearer rejected, failed to enable media [ 1096.566001][T21451] tipc: Started in network mode [ 1096.575377][T21451] tipc: Node identity , cluster identity 4711 [ 1096.589661][T21451] tipc: Failed to set node id, please configure manually [ 1096.611730][T21451] tipc: Enabling of bearer rejected, failed to enable media [ 1096.637900][T21451] tipc: Started in network mode [ 1096.708467][T21451] tipc: Node identity , cluster identity 4711 [ 1096.727084][T21451] tipc: Failed to set node id, please configure manually [ 1096.750728][T21451] tipc: Enabling of bearer rejected, failed to enable media [ 1096.949248][T21475] loop2: detected capacity change from 0 to 7 [ 1096.976211][T21475] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 1096.993302][T21475] loop2: partition table partially beyond EOD, truncated [ 1097.034112][T21475] loop2: p1 size 6333 extends beyond EOD, truncated [ 1097.155639][T21478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3040'. [ 1097.188838][T13968] udevd[13968]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1097.284145][T21478] macvtap2: entered promiscuous mode [ 1097.333597][T21478] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1097.890737][T21492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1098.224067][T16953] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1098.423794][T21492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.426525][T21510] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1098.501030][T21492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.503115][T21514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3053'. [ 1098.521902][ T5286] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1098.560919][T16953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1098.589308][T21514] macvtap2: entered promiscuous mode [ 1098.596003][T16953] usb 5-1: too many configurations: 82, using maximum allowed: 8 [ 1098.606579][T21514] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1098.618505][T16953] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1098.642473][T16953] usb 5-1: can't read configurations, error -71 [ 1098.726118][ T5286] usb 2-1: Using ep0 maxpacket: 16 [ 1098.758341][ T5286] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.788053][ T5286] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1098.826886][ T5286] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1098.844333][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1098.865505][ T5286] usb 2-1: SerialNumber: syz [ 1098.876227][T21519] ebt_among: src integrity fail: 300 [ 1098.897594][T21503] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1098.932911][ T5286] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1099.597624][ T5286] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1099.627509][ T5286] usb 2-1: USB disconnect, device number 31 [ 1100.076002][T21554] netlink: 'syz.4.3066': attribute type 10 has an invalid length. [ 1100.555153][T21572] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (61) [ 1100.701775][T21578] loop2: detected capacity change from 0 to 7 [ 1100.720396][T21578] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 1100.735186][T21578] loop2: partition table partially beyond EOD, truncated [ 1100.744946][T21578] loop2: p1 size 6333 extends beyond EOD, truncated [ 1100.859175][T13968] udevd[13968]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1101.186896][T21587] program syz.4.3080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1101.335930][T21590] netlink: 'syz.2.3081': attribute type 10 has an invalid length. [ 1101.424081][T21590] team0: Port device netdevsim0 added [ 1101.748044][T16937] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1101.956540][T16937] usb 4-1: Using ep0 maxpacket: 16 [ 1101.962510][T21607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3088'. [ 1101.978636][T16937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.999589][T21608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1102.023620][T16937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.066664][T16937] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1102.127942][T16937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.155501][ T5286] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1102.166310][T16937] usb 4-1: config 0 descriptor?? [ 1102.206132][T21611] loop2: detected capacity change from 0 to 7 [ 1102.237724][T21611] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 1102.255801][T21611] loop2: partition table partially beyond EOD, truncated [ 1102.284563][T21611] loop2: p1 size 6333 extends beyond EOD, truncated [ 1102.378424][T21613] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1102.393803][T13968] udevd[13968]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1102.412492][ T5286] usb 3-1: Using ep0 maxpacket: 8 [ 1102.416579][T21615] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3091'. [ 1102.441352][ T5286] usb 3-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 1102.485911][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1102.507291][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1102.526814][ T5286] usb 3-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=bb.13 [ 1102.549296][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.566318][ T5286] usb 3-1: Product: syz [ 1102.574280][ T5286] usb 3-1: Manufacturer: syz [ 1102.595820][ T5286] usb 3-1: SerialNumber: syz [ 1102.607274][T16937] hid-led 0003:1294:1320.002D: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.3-1/input0 [ 1102.636258][ T5286] usb 3-1: config 0 descriptor?? [ 1102.671710][T16937] hid-led 0003:1294:1320.002D: Riso Kagaku Webmail Notifier initialized [ 1102.880448][T16953] usb 3-1: USB disconnect, device number 61 [ 1103.015928][T16931] usb 4-1: USB disconnect, device number 59 [ 1103.021918][T16937] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 1103.037754][ T48] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 1103.078499][ T48] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 1103.102619][ T48] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 1103.257337][T21627] netlink: 'syz.0.3094': attribute type 10 has an invalid length. [ 1103.277057][T16937] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1103.285388][T16937] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1103.302579][T21627] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1103.320469][T16937] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1103.330640][T21627] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1103.332506][T16937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1103.357653][T21627] team0: Port device netdevsim0 added [ 1103.364341][T16937] usb 2-1: string descriptor 0 read error: -22 [ 1103.372007][T16937] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1103.382103][T16937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.395281][T16937] usb 2-1: config 0 descriptor?? [ 1103.401573][T21623] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1103.423913][T16937] hub 2-1:0.0: bad descriptor, ignoring hub [ 1103.445809][T16937] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1103.460717][T16937] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input89 [ 1103.736102][T16931] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1103.787844][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805a8aac00: rx timeout, send abort [ 1103.799946][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805a8aac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1103.926051][T16931] usb 4-1: Using ep0 maxpacket: 8 [ 1103.955644][T21642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.964791][T16931] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1103.983463][T16931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.996863][T21642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.014762][T16931] usb 4-1: Product: syz [ 1104.022349][T16931] usb 4-1: Manufacturer: syz [ 1104.038483][T16931] usb 4-1: SerialNumber: syz [ 1104.057199][T16931] usb 4-1: config 0 descriptor?? [ 1104.086031][T16953] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1104.086746][T16931] gspca_main: se401-2.14.0 probing 047d:5003 [ 1104.235934][ T5282] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1104.289155][T16953] usb 1-1: Using ep0 maxpacket: 32 [ 1104.310431][T16953] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1104.319753][T16953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1104.339078][T16953] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1104.348669][T16953] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1104.358246][T16953] usb 1-1: Product: syz [ 1104.362833][T16953] usb 1-1: Manufacturer: syz [ 1104.372269][T16953] usb 1-1: SerialNumber: syz [ 1104.388147][T16953] usb 1-1: config 0 descriptor?? [ 1104.400436][T16953] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1104.419911][T16953] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1104.448700][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.481661][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.498549][ T5282] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1104.522020][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.538808][ T5282] usb 5-1: config 0 descriptor?? [ 1104.641345][T16953] usb 1-1: USB disconnect, device number 41 [ 1104.641395][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 1104.680315][T16953] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1104.855347][T21639] ldusb: No device or device unplugged -19 [ 1104.867342][T21650] ldusb: No device or device unplugged -19 [ 1104.948569][T21646] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1104.963575][ T5282] pyra 0003:1E7D:2CF6.002E: item fetching failed at offset 5/7 [ 1104.994229][ T5282] pyra 0003:1E7D:2CF6.002E: parse failed [ 1105.012356][T16931] usb 4-1: reset high-speed USB device number 60 using dummy_hcd [ 1105.021122][ T5282] pyra 0003:1E7D:2CF6.002E: probe with driver pyra failed with error -22 [ 1105.168439][T16953] usb 5-1: USB disconnect, device number 31 [ 1105.206093][T16931] usb 4-1: device descriptor read/64, error -71 [ 1105.496140][T16931] usb 4-1: reset high-speed USB device number 60 using dummy_hcd [ 1105.568921][T16937] usb 2-1: USB disconnect, device number 32 [ 1105.666647][T16931] usb 4-1: device descriptor read/64, error -71 [ 1105.962197][T16931] usb 4-1: reset high-speed USB device number 60 using dummy_hcd [ 1106.036858][T16931] usb 4-1: device descriptor read/8, error -71 [ 1106.146132][T16937] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1106.196498][ T5282] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1106.336095][T16931] usb 4-1: reset high-speed USB device number 60 using dummy_hcd [ 1106.386017][T16937] usb 2-1: Using ep0 maxpacket: 16 [ 1106.410164][T16937] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1106.421280][ T5282] usb 1-1: Using ep0 maxpacket: 8 [ 1106.442749][T16937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.462098][T16937] usb 2-1: Product: syz [ 1106.466609][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1106.480418][T16937] usb 2-1: Manufacturer: syz [ 1106.485070][T16937] usb 2-1: SerialNumber: syz [ 1106.496186][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1106.512482][T16937] usb 2-1: config 0 descriptor?? [ 1106.518080][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1106.531252][T16937] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1106.546842][ T5282] usb 1-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 1106.564951][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.578756][ T5282] usb 1-1: Product: syz [ 1106.585567][ T5282] usb 1-1: Manufacturer: syz [ 1106.597640][ T5282] usb 1-1: SerialNumber: syz [ 1106.606386][T16931] usb 4-1: device not accepting address 60, error -71 [ 1106.621432][ T5282] usb 1-1: config 0 descriptor?? [ 1106.647752][T16931] gspca_se401: read req failed req 0x06 error -19 [ 1106.656312][ T5282] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 1106.675891][T16953] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1106.691065][T16931] usb 4-1: USB disconnect, device number 60 [ 1106.869502][T16953] usb 3-1: Using ep0 maxpacket: 16 [ 1106.882139][T16953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.904656][T16953] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1106.931574][T21687] input: syz0 as /devices/virtual/input/input92 [ 1106.934489][T16953] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1106.954163][T16953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.013521][T16953] usb 3-1: config 0 descriptor?? [ 1107.455872][T16953] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1107.638023][T16953] usb 4-1: device descriptor read/64, error -71 [ 1107.652427][T21701] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3116'. [ 1107.688935][T21701] openvswitch: netlink: Actions may not be safe on all matching packets [ 1107.709372][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1107.709392][ T29] audit: type=1326 audit(1724465360.331:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.4.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1107.753701][ T29] audit: type=1326 audit(1724465360.361:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.4.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1107.779897][ T29] audit: type=1326 audit(1724465360.361:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.4.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1107.822694][ T29] audit: type=1326 audit(1724465360.361:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.4.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1107.845146][ C1] vkms_vblank_simulate: vblank timer overrun [ 1107.925905][T16953] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1107.959343][ T29] audit: type=1326 audit(1724465360.361:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.4.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1107.981763][ C1] vkms_vblank_simulate: vblank timer overrun [ 1107.989046][ T29] audit: type=1326 audit(1724465360.361:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.4.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1108.011445][ C1] vkms_vblank_simulate: vblank timer overrun [ 1108.035857][ T29] audit: type=1326 audit(1724465360.361:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.4.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1108.083063][ T29] audit: type=1326 audit(1724465360.361:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.4.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1108.115898][T16953] usb 4-1: device descriptor read/64, error -71 [ 1108.134835][ T29] audit: type=1326 audit(1724465360.371:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.4.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1108.246165][T16953] usb usb4-port1: attempt power cycle [ 1108.596592][T16937] gp8psk: usb in 128 operation failed. [ 1108.620632][T16937] gp8psk: usb in 137 operation failed. [ 1108.636704][T16937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1108.656008][T16953] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1108.698160][T16953] usb 4-1: device descriptor read/8, error -71 [ 1108.707483][T16937] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1108.728645][T16937] usb 2-1: media controller created [ 1108.840256][T16937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1108.900673][T16937] gp8psk_fe: Frontend revision 1 attached [ 1108.926922][ T5301] usb 1-1: USB disconnect, device number 42 [ 1108.931540][T16937] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1108.941312][ T5282] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1108.969814][T16937] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1109.006912][T16953] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1109.046735][T16953] usb 4-1: device descriptor read/8, error -71 [ 1109.119513][T16937] gp8psk: usb in 138 operation failed. [ 1109.125048][T16937] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1109.176577][T16937] gp8psk: found Genpix USB device pID = 201 (hex) [ 1109.180614][T16953] usb usb4-port1: unable to enumerate USB device [ 1109.191194][ T5282] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1109.206136][T16937] usb 2-1: USB disconnect, device number 33 [ 1109.213745][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.257814][ T5282] usb 5-1: Product: syz [ 1109.272225][ T5282] usb 5-1: Manufacturer: syz [ 1109.275354][ T5301] usb 3-1: USB disconnect, device number 62 [ 1109.296661][ T5282] usb 5-1: SerialNumber: syz [ 1109.329931][ T5282] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1109.356649][T16938] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1109.477100][T16937] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1109.807439][T21705] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3117'. [ 1109.826759][T21705] openvswitch: netlink: Actions may not be safe on all matching packets [ 1109.943757][ T29] audit: type=1326 audit(1724465362.541:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21703 comm="syz.4.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e12979e79 code=0x7ffc0000 [ 1109.966678][ T2546] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.377477][ T2546] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.490327][T16938] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1110.513034][T16938] ath9k_htc: Failed to initialize the device [ 1110.560828][ T5282] usb 5-1: USB disconnect, device number 32 [ 1110.578894][ T5282] usb 5-1: ath9k_htc: USB layer deinitialized [ 1110.672927][ T2546] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.957568][ T2546] team0: Port device netdevsim0 removed [ 1110.973550][ T2546] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.227737][T17671] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1111.242623][T17671] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1111.254840][T17671] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1111.269311][T17671] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1111.278818][T17671] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1111.286912][T17671] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1111.368589][ T2546] bridge_slave_1: left allmulticast mode [ 1111.384609][ T2546] bridge_slave_1: left promiscuous mode [ 1111.398298][ T2546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.416071][T16953] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1111.450665][ T2546] bridge_slave_0: left allmulticast mode [ 1111.461424][ T2546] bridge_slave_0: left promiscuous mode [ 1111.476263][ T2546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.609208][T16953] usb 4-1: config 0 has an invalid interface number: 27 but max is 0 [ 1111.619931][T21756] FAULT_INJECTION: forcing a failure. [ 1111.619931][T21756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1111.639405][T16953] usb 4-1: config 0 has no interface number 0 [ 1111.645613][T16953] usb 4-1: config 0 interface 27 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.658873][T21756] CPU: 0 UID: 0 PID: 21756 Comm: syz.1.3139 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 1111.669704][T21756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1111.679798][T21756] Call Trace: [ 1111.683205][T21756] [ 1111.686171][T21756] dump_stack_lvl+0x241/0x360 [ 1111.690918][T21756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1111.696169][T21756] ? __pfx__printk+0x10/0x10 [ 1111.700817][T21756] ? tomoyo_path_number_perm+0x71a/0x880 [ 1111.706490][T21756] ? __pfx_lock_release+0x10/0x10 [ 1111.711545][T21756] should_fail_ex+0x3b0/0x4e0 [ 1111.716245][T21756] _copy_from_user+0x2f/0xe0 [ 1111.720866][T21756] copy_arg_from_user+0x59/0x90 [ 1111.725738][T21756] media_device_ioctl+0x1c7/0x3c0 [ 1111.730787][T21756] ? __pfx_media_device_ioctl+0x10/0x10 [ 1111.736374][T21756] ? __pfx_media_device_ioctl+0x10/0x10 [ 1111.741933][T21756] ? media_ioctl+0x100/0x120 [ 1111.746538][T21756] ? __pfx_media_ioctl+0x10/0x10 [ 1111.751492][T21756] __se_sys_ioctl+0xfc/0x170 [ 1111.756098][T21756] do_syscall_64+0xf3/0x230 [ 1111.760616][T21756] ? clear_bhb_loop+0x35/0x90 [ 1111.765302][T21756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.771204][T21756] RIP: 0033:0x7fa13f779e79 [ 1111.775626][T21756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1111.795242][T21756] RSP: 002b:00007fa140644038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.803667][T21756] RAX: ffffffffffffffda RBX: 00007fa13f915f80 RCX: 00007fa13f779e79 [ 1111.811646][T21756] RDX: 0000000020000280 RSI: 00000000c0487c04 RDI: 0000000000000003 [ 1111.819625][T21756] RBP: 00007fa140644090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.827606][T21756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1111.835584][T21756] R13: 0000000000000000 R14: 00007fa13f915f80 R15: 00007fa13fa3fa38 [ 1111.843578][T21756] [ 1111.854952][T16953] usb 4-1: config 0 interface 27 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.864961][T16953] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1111.874370][T16953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.886222][T16953] usb 4-1: config 0 descriptor?? [ 1112.016723][ T5282] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1112.184893][ T5282] usb 1-1: device descriptor read/64, error -71 [ 1112.226024][T16938] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1112.306012][T16953] uclogic 0003:256C:006D.002F: interface is invalid, ignoring [ 1112.425908][T16938] usb 2-1: Using ep0 maxpacket: 32 [ 1112.434449][T16938] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1112.448603][T16938] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1112.457936][T16938] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1112.466361][T16938] usb 2-1: Product: syz [ 1112.470724][T16938] usb 2-1: Manufacturer: syz [ 1112.475436][T16938] usb 2-1: SerialNumber: syz [ 1112.480272][ T5282] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1112.490713][T16938] usb 2-1: config 0 descriptor?? [ 1112.497983][T21760] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1112.498686][ T2546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.550675][ T2546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.573329][ T2546] bond0 (unregistering): Released all slaves [ 1112.655963][ T5282] usb 1-1: device descriptor read/64, error -71 [ 1112.726156][T21760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3141'. [ 1112.764782][ T5301] usb 4-1: USB disconnect, device number 65 [ 1112.796152][ T5286] usb 2-1: USB disconnect, device number 34 [ 1112.796467][ T5282] usb usb1-port1: attempt power cycle [ 1112.912645][T21765] netlink: 'syz.4.3142': attribute type 10 has an invalid length. [ 1113.163668][ T2546] hsr_slave_0: left promiscuous mode [ 1113.178947][ T2546] hsr_slave_1: left promiscuous mode [ 1113.191145][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1113.201018][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.211960][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1113.219566][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.251736][ T2546] veth1_macvtap: left promiscuous mode [ 1113.255905][ T5282] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1113.257880][ T2546] veth0_macvtap: left promiscuous mode [ 1113.279820][ T2546] veth1_vlan: left promiscuous mode [ 1113.285444][ T2546] veth0_vlan: left promiscuous mode [ 1113.298416][ T5282] usb 1-1: device descriptor read/8, error -71 [ 1113.376291][T16938] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1113.386173][T18933] Bluetooth: hci3: command tx timeout [ 1113.585931][ T5282] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1113.617193][T16938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.630803][ T5282] usb 1-1: device descriptor read/8, error -71 [ 1113.643613][T16938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.662810][T16938] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1113.674869][T16938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.701670][T16938] usb 5-1: config 0 descriptor?? [ 1113.757858][ T5282] usb usb1-port1: unable to enumerate USB device [ 1114.142851][T16938] cm6533_jd 0003:0D8C:0022.0030: unknown main item tag 0x0 [ 1114.159194][T16938] cm6533_jd 0003:0D8C:0022.0030: unknown main item tag 0x0 [ 1114.167598][T16938] cm6533_jd 0003:0D8C:0022.0030: unknown main item tag 0x0 [ 1114.174983][T16938] cm6533_jd 0003:0D8C:0022.0030: unknown main item tag 0x0 [ 1114.182909][T16938] cm6533_jd 0003:0D8C:0022.0030: unknown main item tag 0x0 [ 1114.191582][T16938] cm6533_jd 0003:0D8C:0022.0030: No inputs registered, leaving [ 1114.207697][T16938] cm6533_jd 0003:0D8C:0022.0030: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 1114.290999][ T2546] team0 (unregistering): Port device team_slave_1 removed [ 1114.388426][ T2546] team0 (unregistering): Port device team_slave_0 removed [ 1114.621234][T16938] usb 5-1: USB disconnect, device number 33 [ 1115.465996][T18933] Bluetooth: hci3: command tx timeout [ 1115.602244][T21750] chnl_net:caif_netlink_parms(): no params data found [ 1116.190957][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.197538][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.225951][T21750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.233350][T21750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.242436][T21750] bridge_slave_0: entered allmulticast mode [ 1116.305107][T21750] bridge_slave_0: entered promiscuous mode [ 1116.333129][T21750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.366192][T21750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.387594][T21750] bridge_slave_1: entered allmulticast mode [ 1116.409070][T21750] bridge_slave_1: entered promiscuous mode [ 1116.439610][T21821] netlink: 'syz.3.3152': attribute type 10 has an invalid length. [ 1116.519746][T21821] team0: Port device netdevsim0 added [ 1116.732379][T21750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.746430][ T5301] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1116.804398][T21750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.879818][ T5286] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1116.946379][ T5301] usb 1-1: Using ep0 maxpacket: 32 [ 1116.958724][ T5301] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1116.993210][ T5301] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1117.015853][ T5301] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1117.035685][ T5301] usb 1-1: Product: syz [ 1117.066963][ T5301] usb 1-1: Manufacturer: syz [ 1117.076587][ T5301] usb 1-1: SerialNumber: syz [ 1117.097471][ T5286] usb 2-1: Using ep0 maxpacket: 32 [ 1117.127637][ T5286] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1117.147968][ T5301] usb 1-1: config 0 descriptor?? [ 1117.154283][ T5286] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1117.181902][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1117.193183][T21826] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1117.213733][T21838] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3156'. [ 1117.226067][ T5286] usb 2-1: Product: syz [ 1117.240760][T21838] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1117.256771][ T5286] usb 2-1: Manufacturer: syz [ 1117.278434][ T5286] usb 2-1: SerialNumber: syz [ 1117.301361][ T5286] usb 2-1: config 0 descriptor?? [ 1117.327822][T21832] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1117.358964][ T5286] chaoskey 2-1:0.0: Unable to register with hwrng [ 1117.367482][T21750] team0: Port device team_slave_0 added [ 1117.451562][T21826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3154'. [ 1117.474707][T21750] team0: Port device team_slave_1 added [ 1117.495651][ T5286] usb 1-1: USB disconnect, device number 47 [ 1117.545889][T18933] Bluetooth: hci3: command tx timeout [ 1117.604839][T21832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3155'. [ 1117.637393][T16953] usb 2-1: USB disconnect, device number 35 [ 1117.718487][T21750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.746545][T21750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1117.783386][T21750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1117.849148][T21750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1117.872741][T21750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1117.921674][T21750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.063966][T21750] hsr_slave_0: entered promiscuous mode [ 1118.077589][T21750] hsr_slave_1: entered promiscuous mode [ 1118.095009][T21750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1118.114134][T21750] Cannot create hsr debugfs directory [ 1118.812241][T21871] netlink: 'syz.1.3163': attribute type 10 has an invalid length. [ 1118.836662][T21871] netem: change failed [ 1118.969804][T16931] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1119.217623][T16931] usb 1-1: Using ep0 maxpacket: 16 [ 1119.238076][T16931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.266034][T16931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.285964][T16931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1119.305088][T16931] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 1119.314727][T16931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.344846][T16931] usb 1-1: config 0 descriptor?? [ 1119.426113][T16938] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1119.506070][T16953] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1119.620319][T16938] usb 2-1: Using ep0 maxpacket: 8 [ 1119.626370][T18933] Bluetooth: hci3: command tx timeout [ 1119.628564][T16938] usb 2-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 1119.664845][T21892] loop2: detected capacity change from 0 to 7 [ 1119.671688][T16938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1119.689211][T16953] usb 5-1: Using ep0 maxpacket: 32 [ 1119.693204][T21892] Dev loop2: unable to read RDB block 7 [ 1119.705946][T16938] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1119.725963][T21892] loop2: unable to read partition table [ 1119.733511][T16953] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1119.744973][T21892] loop2: partition table beyond EOD, truncated [ 1119.754951][T16953] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1119.774298][T16953] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1119.781919][T16931] shield 0003:0955:7214.0031: unexpected long global item [ 1119.791231][T21892] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1119.796275][T16953] usb 5-1: Product: syz [ 1119.811247][T16938] usb 2-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=bb.13 [ 1119.814924][T16953] usb 5-1: Manufacturer: syz [ 1119.833935][T16931] shield 0003:0955:7214.0031: Parse failed [ 1119.835512][T16953] usb 5-1: SerialNumber: syz [ 1119.840596][T16938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.873555][T16931] shield 0003:0955:7214.0031: probe with driver shield failed with error -22 [ 1119.876887][T16953] usb 5-1: config 0 descriptor?? [ 1119.885825][T16938] usb 2-1: Product: syz [ 1119.914558][T16938] usb 2-1: Manufacturer: syz [ 1119.929757][T16938] usb 2-1: SerialNumber: syz [ 1119.931189][T21884] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1119.957120][T16938] usb 2-1: config 0 descriptor?? [ 1119.980154][T16931] usb 1-1: USB disconnect, device number 48 [ 1120.051412][T21750] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1120.080038][T21750] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1120.112109][T21750] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1120.130589][T21750] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1120.234125][T16953] usb 2-1: USB disconnect, device number 36 [ 1120.254424][T21884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1120.301874][ T5301] usb 5-1: USB disconnect, device number 34 [ 1120.422048][T21750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.457100][T21750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.484621][ T2546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.491885][ T2546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.530306][ T2546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.537536][ T2546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.604447][T21750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1120.616722][T21750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1120.717376][T21750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.810500][T21750] veth0_vlan: entered promiscuous mode [ 1120.829395][T21750] veth1_vlan: entered promiscuous mode [ 1120.836172][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1120.836191][ T29] audit: type=1326 audit(1724465373.451:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21910 comm="syz.0.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee6779e79 code=0x7ffc0000 [ 1120.890976][ T29] audit: type=1326 audit(1724465373.451:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21910 comm="syz.0.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee6779e79 code=0x7ffc0000 [ 1120.936788][T21750] veth0_macvtap: entered promiscuous mode [ 1121.004316][T21750] veth1_macvtap: entered promiscuous mode [ 1121.019291][ T29] audit: type=1326 audit(1724465373.491:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21910 comm="syz.0.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efee6779e79 code=0x7ffc0000 [ 1121.053323][ T29] audit: type=1326 audit(1724465373.491:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21910 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee6779e79 code=0x7ffc0000 [ 1121.105383][T21750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.145960][T21750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.205486][ T29] audit: type=1326 audit(1724465373.491:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21910 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee6779e79 code=0x7ffc0000 [ 1121.205806][T21750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.310142][T21750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.316595][ T29] audit: type=1326 audit(1724465373.491:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21910 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efee6779e79 code=0x7ffc0000 [ 1121.376308][T21750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.413759][T21750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.443117][T21750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.463418][ T29] audit: type=1326 audit(1724465373.491:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21910 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee6779e79 code=0x7ffc0000 [ 1121.514945][T21750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.551955][T21750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.603902][T21750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.629735][ T29] audit: type=1326 audit(1724465373.501:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21910 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7efee6779e79 code=0x7ffc0000 [ 1121.657832][T21750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.683926][T21934] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3177'. [ 1121.709589][T21750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.713039][ T29] audit: type=1326 audit(1724465373.501:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21910 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee6779e79 code=0x7ffc0000 [ 1121.729052][T21750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.780241][T21750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.828279][ T29] audit: type=1326 audit(1724465373.501:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21910 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee6779e79 code=0x7ffc0000 [ 1121.870174][T21750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1121.976724][T21939] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 1122.000843][T21750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.024880][T21750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.040118][T21750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.080121][T21750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.115156][T21750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.146329][T21942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3178'. [ 1122.163670][T21750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.184082][T21750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.222014][T21750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.245264][T21750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.275775][T21750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.301226][T21750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.313239][T21750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.332190][T21750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.342958][T21750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.369296][T21750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.396669][T21942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3178'. [ 1122.451915][T21949] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3178'. [ 1122.513470][T21750] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.573064][T21750] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.604572][T21750] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.638640][T21750] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.154842][T14129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.191952][T14129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.356227][T16931] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1123.373003][T12899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.393407][T12899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.566072][T16931] usb 1-1: Using ep0 maxpacket: 32 [ 1123.585553][T16931] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1123.625690][T16931] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1123.655827][T16931] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1123.697857][T16931] usb 1-1: Product: syz [ 1123.715242][T16931] usb 1-1: Manufacturer: syz [ 1123.736026][T16931] usb 1-1: SerialNumber: syz [ 1123.776662][T16931] usb 1-1: config 0 descriptor?? [ 1123.800867][T21971] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1124.067830][T21971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3186'. [ 1124.126055][T16953] usb 1-1: USB disconnect, device number 49 [ 1124.234525][T21981] FAULT_INJECTION: forcing a failure. [ 1124.234525][T21981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.256468][T21981] CPU: 1 UID: 0 PID: 21981 Comm: syz.2.3129 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 1124.267295][T21981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1124.277385][T21981] Call Trace: [ 1124.280697][T21981] [ 1124.283669][T21981] dump_stack_lvl+0x241/0x360 [ 1124.288371][T21981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1124.293603][T21981] ? __pfx__printk+0x10/0x10 [ 1124.298246][T21981] ? snprintf+0xda/0x120 [ 1124.302526][T21981] should_fail_ex+0x3b0/0x4e0 [ 1124.307238][T21981] _copy_to_user+0x2f/0xb0 [ 1124.311682][T21981] simple_read_from_buffer+0xca/0x150 [ 1124.317077][T21981] proc_fail_nth_read+0x1ec/0x260 [ 1124.322145][T21981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1124.327755][T21981] ? rw_verify_area+0x520/0x6b0 [ 1124.332665][T21981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1124.338256][T21981] vfs_read+0x204/0xbc0 [ 1124.342450][T21981] ? __pfx_lock_release+0x10/0x10 [ 1124.347519][T21981] ? do_sock_setsockopt+0x3e2/0x720 [ 1124.352762][T21981] ? __pfx_vfs_read+0x10/0x10 [ 1124.357479][T21981] ? ipv6_setsockopt+0xe5/0x1a0 [ 1124.362362][T21981] ? __fget_files+0x29/0x470 [ 1124.366995][T21981] ? __fget_files+0x3f6/0x470 [ 1124.371729][T21981] ksys_read+0x1a0/0x2c0 [ 1124.376033][T21981] ? __pfx_ksys_read+0x10/0x10 [ 1124.380835][T21981] ? do_syscall_64+0x100/0x230 [ 1124.385634][T21981] ? do_syscall_64+0xb6/0x230 [ 1124.390347][T21981] do_syscall_64+0xf3/0x230 [ 1124.394890][T21981] ? clear_bhb_loop+0x35/0x90 [ 1124.399609][T21981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.405539][T21981] RIP: 0033:0x7f21955788bc [ 1124.409989][T21981] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1124.429638][T21981] RSP: 002b:00007f2196314030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1124.438097][T21981] RAX: ffffffffffffffda RBX: 00007f2195716058 RCX: 00007f21955788bc [ 1124.446107][T21981] RDX: 000000000000000f RSI: 00007f21963140a0 RDI: 0000000000000004 [ 1124.454129][T21981] RBP: 00007f2196314090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.462136][T21981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.470140][T21981] R13: 0000000000000001 R14: 00007f2195716058 R15: 00007f219583fa38 [ 1124.478170][T21981] [ 1124.896144][ T5282] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1125.097710][ T5282] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.128127][ T5282] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.176991][ T5282] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1125.211637][ T5282] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1125.240361][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.268007][ T5282] usb 4-1: Product: syz [ 1125.295105][ T5282] usb 4-1: Manufacturer: syz [ 1125.313552][ T5282] usb 4-1: SerialNumber: syz [ 1125.376856][ T5282] usb 4-1: selecting invalid altsetting 1 [ 1125.400665][ T5282] usb 4-1: selecting invalid altsetting 0 [ 1125.419979][ T5282] usb 4-1: selecting invalid altsetting 0 [ 1125.441592][ T5282] cdc_ncm 4-1:1.0: bind() failure [ 1125.469550][ T5282] usb 4-1: selecting invalid altsetting 0 [ 1125.487781][ T5282] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -22 [ 1125.513687][ T5282] usb 4-1: selecting invalid altsetting 0 [ 1125.556079][ T5282] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -22 [ 1125.613237][ T5282] usb 4-1: selecting invalid altsetting 0 [ 1125.652128][ T5282] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 1125.827382][T16953] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1125.846924][T22007] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3189'. [ 1126.026037][T16953] usb 1-1: Using ep0 maxpacket: 32 [ 1126.040381][T16953] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1126.069361][T16953] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1126.098595][T16953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.130474][T16953] usb 1-1: Product: syz [ 1126.147051][T16953] usb 1-1: Manufacturer: syz [ 1126.156285][T16931] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1126.160010][T16953] usb 1-1: SerialNumber: syz [ 1126.220453][T16953] usb 1-1: config 0 descriptor?? [ 1126.226722][T22002] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1126.255618][T16953] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1126.386028][T16931] usb 2-1: Using ep0 maxpacket: 32 [ 1126.422925][T16931] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1126.528737][T16931] usb 2-1: config 0 has no interface number 0 [ 1126.534955][T16931] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.610734][T16931] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.679376][T16931] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1126.726180][T16931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.766606][T22002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.799626][T16931] usb 2-1: config 0 descriptor?? [ 1126.837479][T22002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.981573][T22026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3188'. [ 1127.435612][T16931] uclogic 0003:28BD:0094.0032: pen parameters not found [ 1127.471061][T16931] uclogic 0003:28BD:0094.0032: interface is invalid, ignoring [ 1127.608812][ T5286] usb 4-1: USB disconnect, device number 66 [ 1127.745900][T16953] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1127.848058][T22043] FAULT_INJECTION: forcing a failure. [ 1127.848058][T22043] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.895861][T22043] CPU: 0 UID: 0 PID: 22043 Comm: syz.2.3195 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 1127.906702][T22043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1127.916767][T22043] Call Trace: [ 1127.920056][T22043] [ 1127.922991][T22043] dump_stack_lvl+0x241/0x360 [ 1127.927683][T22043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1127.932926][T22043] ? __pfx__printk+0x10/0x10 [ 1127.937573][T22043] ? __kmalloc_noprof+0xb0/0x400 [ 1127.942555][T22043] ? __pfx___might_resched+0x10/0x10 [ 1127.947878][T22043] ? inetdev_by_index+0x21/0x240 [ 1127.952864][T22043] should_fail_ex+0x3b0/0x4e0 [ 1127.957592][T22043] ? sock_kmalloc+0xd7/0x160 [ 1127.962246][T22043] should_failslab+0xac/0x100 [ 1127.966953][T22043] ? sock_kmalloc+0xd7/0x160 [ 1127.971552][T22043] __kmalloc_noprof+0xd8/0x400 [ 1127.976330][T22043] sock_kmalloc+0xd7/0x160 [ 1127.980756][T22043] __ip_mc_join_group+0x364/0x500 [ 1127.985807][T22043] do_mcast_group_source+0x584/0x8e0 [ 1127.991119][T22043] ? __pfx_do_mcast_group_source+0x10/0x10 [ 1127.997025][T22043] ? __pfx_register_lock_class+0x10/0x10 [ 1128.002757][T22043] ? mark_lock+0x9a/0x350 [ 1128.007110][T22043] ? __lock_acquire+0x137a/0x2040 [ 1128.012192][T22043] ? __local_bh_enable_ip+0x168/0x200 [ 1128.017579][T22043] ? do_ip_setsockopt+0x1a2d/0x3cd0 [ 1128.022817][T22043] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1128.028599][T22043] do_ip_setsockopt+0x1f36/0x3cd0 [ 1128.033672][T22043] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1128.039072][T22043] ? aa_sk_perm+0x96d/0xab0 [ 1128.043600][T22043] ? __pfx_aa_sk_perm+0x10/0x10 [ 1128.048469][T22043] ? __pfx_lock_acquire+0x10/0x10 [ 1128.053510][T22043] ? aa_sock_opt_perm+0x79/0x120 [ 1128.058465][T22043] ip_setsockopt+0x63/0x100 [ 1128.062980][T22043] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1128.068882][T22043] do_sock_setsockopt+0x3af/0x720 [ 1128.073923][T22043] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1128.079480][T22043] ? __fget_files+0x29/0x470 [ 1128.084100][T22043] ? __fget_files+0x3f6/0x470 [ 1128.088805][T22043] __sys_setsockopt+0x1ae/0x250 [ 1128.093675][T22043] __x64_sys_setsockopt+0xb5/0xd0 [ 1128.098718][T22043] do_syscall_64+0xf3/0x230 [ 1128.103230][T22043] ? clear_bhb_loop+0x35/0x90 [ 1128.107927][T22043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.113830][T22043] RIP: 0033:0x7f2195579e79 [ 1128.118278][T22043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1128.137933][T22043] RSP: 002b:00007f2196335038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1128.146370][T22043] RAX: ffffffffffffffda RBX: 00007f2195715f80 RCX: 00007f2195579e79 [ 1128.154349][T22043] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000005 [ 1128.162335][T22043] RBP: 00007f2196335090 R08: 0000000000000108 R09: 0000000000000000 [ 1128.170313][T22043] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 1128.178287][T22043] R13: 0000000000000000 R14: 00007f2195715f80 R15: 00007f219583fa38 [ 1128.186277][T22043] [ 1128.487255][T16953] usb 5-1: config 0 has no interfaces? [ 1128.503829][T16953] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 1128.525380][ T48] usb 2-1: USB disconnect, device number 37 [ 1128.550492][T16953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.596952][ T5301] usb 1-1: USB disconnect, device number 50 [ 1128.611491][T16953] usb 5-1: Product: syz [ 1128.632027][T22051] loop2: detected capacity change from 0 to 7 [ 1128.648292][T16953] usb 5-1: Manufacturer: syz [ 1128.652970][T16953] usb 5-1: SerialNumber: syz [ 1128.678046][T22051] Dev loop2: unable to read RDB block 7 [ 1128.705583][T16953] usb 5-1: config 0 descriptor?? [ 1128.707533][T22051] loop2: unable to read partition table [ 1128.765597][T22051] loop2: partition table beyond EOD, truncated [ 1128.767178][T22057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3199'. [ 1128.810458][T22051] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1128.871693][T22057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3199'. [ 1128.947759][T22059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3199'. [ 1129.117668][ T48] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1129.125541][T22066] ======================================================= [ 1129.125541][T22066] WARNING: The mand mount option has been deprecated and [ 1129.125541][T22066] and is ignored by this kernel. Remove the mand [ 1129.125541][T22066] option from the mount to silence this warning. [ 1129.125541][T22066] ======================================================= [ 1129.200745][T22066] fuse: Bad value for 'fd' [ 1129.306726][ T5286] usb 5-1: USB disconnect, device number 35 [ 1129.366090][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 1129.374134][ T48] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1129.419131][ T48] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1129.456929][ T48] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1129.475799][ T48] usb 2-1: Product: syz [ 1129.490519][ T48] usb 2-1: Manufacturer: syz [ 1129.505169][ T48] usb 2-1: SerialNumber: syz [ 1129.544496][ T48] usb 2-1: config 0 descriptor?? [ 1129.563031][T22056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1129.633734][T22088] FAULT_INJECTION: forcing a failure. [ 1129.633734][T22088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.685676][T22088] CPU: 1 UID: 0 PID: 22088 Comm: syz.0.3205 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 1129.696539][T22088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1129.706670][T22088] Call Trace: [ 1129.709981][T22088] [ 1129.712959][T22088] dump_stack_lvl+0x241/0x360 [ 1129.717686][T22088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1129.722924][T22088] ? __pfx__printk+0x10/0x10 [ 1129.727573][T22088] ? __pfx_lock_release+0x10/0x10 [ 1129.732657][T22088] should_fail_ex+0x3b0/0x4e0 [ 1129.737384][T22088] _copy_to_user+0x2f/0xb0 [ 1129.741848][T22088] media_device_get_topology+0x3e1/0x1b10 [ 1129.747623][T22088] ? __pfx___might_resched+0x10/0x10 [ 1129.752982][T22088] ? __pfx_media_device_get_topology+0x10/0x10 [ 1129.759206][T22088] ? trace_contention_end+0x3c/0x120 [ 1129.764659][T22088] ? __pfx_lock_release+0x10/0x10 [ 1129.769717][T22088] ? media_device_ioctl+0x27f/0x3c0 [ 1129.774956][T22088] ? __pfx___mutex_lock+0x10/0x10 [ 1129.779997][T22088] ? __might_fault+0xc6/0x120 [ 1129.784694][T22088] ? _copy_from_user+0xa6/0xe0 [ 1129.789482][T22088] media_device_ioctl+0x2bc/0x3c0 [ 1129.794541][T22088] ? __pfx_media_device_ioctl+0x10/0x10 [ 1129.800140][T22088] ? __pfx_media_device_ioctl+0x10/0x10 [ 1129.805705][T22088] ? media_ioctl+0x100/0x120 [ 1129.810320][T22088] ? __pfx_media_ioctl+0x10/0x10 [ 1129.815302][T22088] __se_sys_ioctl+0xfc/0x170 [ 1129.819929][T22088] do_syscall_64+0xf3/0x230 [ 1129.824452][T22088] ? clear_bhb_loop+0x35/0x90 [ 1129.829161][T22088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.835064][T22088] RIP: 0033:0x7efee6779e79 [ 1129.839494][T22088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.859124][T22088] RSP: 002b:00007efee74d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1129.867555][T22088] RAX: ffffffffffffffda RBX: 00007efee6915f80 RCX: 00007efee6779e79 [ 1129.875550][T22088] RDX: 0000000020000280 RSI: 00000000c0487c04 RDI: 0000000000000003 [ 1129.883541][T22088] RBP: 00007efee74d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.891518][T22088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1129.899494][T22088] R13: 0000000000000000 R14: 00007efee6915f80 R15: 00007efee6a3fa38 [ 1129.907500][T22088] [ 1129.910686][ C1] vkms_vblank_simulate: vblank timer overrun [ 1129.914592][T16953] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1129.992066][T22056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3198'. [ 1130.016430][T16931] usb 2-1: USB disconnect, device number 38 [ 1130.145986][T16953] usb 3-1: Using ep0 maxpacket: 32 [ 1130.154106][T16953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.175844][T16953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.195891][T16953] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1130.205404][T16953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.246768][T16953] usb 3-1: config 0 descriptor?? [ 1130.278850][ T48] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1130.378352][T22106] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 1130.389851][T22102] IPVS: stopping backup sync thread 22106 ... [ 1130.468005][ T48] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1130.477642][ T48] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1130.499221][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1130.509608][ T48] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1130.533837][ T48] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1130.565852][ T48] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1130.584907][ T48] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1130.594576][ T48] usb 4-1: Product: syz [ 1130.603855][ T48] usb 4-1: Manufacturer: syz [ 1130.620709][ T48] cdc_wdm 4-1:1.0: skipping garbage [ 1130.627620][ T48] cdc_wdm 4-1:1.0: skipping garbage [ 1130.634923][ T48] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1130.641992][ T48] cdc_wdm 4-1:1.0: Unknown control protocol [ 1130.730544][T22083] netlink: 'syz.2.3203': attribute type 32 has an invalid length. [ 1130.735454][T22112] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 1130.739446][T22111] IPVS: stopping backup sync thread 22112 ... [ 1130.759715][T22083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.771972][T22083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.818751][T16953] waltop 0003:172F:0501.0033: unknown main item tag 0x0 [ 1130.827354][T16953] waltop 0003:172F:0501.0033: item fetching failed at offset 5/8 [ 1130.836876][T22093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1130.850744][T16953] waltop 0003:172F:0501.0033: probe with driver waltop failed with error -22 [ 1130.861525][T22113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3206'. [ 1131.028460][ T5286] usb 3-1: USB disconnect, device number 63 [ 1131.200936][T22121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3212'. [ 1131.218288][T22121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3212'. [ 1131.415898][ T5286] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1131.605350][T22128] loop2: detected capacity change from 0 to 7 [ 1131.613479][T22128] Dev loop2: unable to read RDB block 7 [ 1131.621625][T22128] loop2: unable to read partition table [ 1131.631409][ T5286] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.631802][T22128] loop2: partition table beyond EOD, truncated [ 1131.648510][T22128] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1131.668006][ T5286] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.697718][ T5286] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1131.777758][ T5301] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1131.796209][ T5286] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1131.820130][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.850182][ T5286] usb 2-1: Product: syz [ 1131.854994][T22133] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1131.864644][ T5286] usb 2-1: Manufacturer: syz [ 1131.874761][ T5286] usb 2-1: SerialNumber: syz [ 1131.890898][T22133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3217'. [ 1131.911497][ T5286] usb 2-1: selecting invalid altsetting 1 [ 1131.997170][ T5301] usb 1-1: Using ep0 maxpacket: 32 [ 1132.007249][ T5301] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1132.019292][ T5301] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1132.032977][ T5301] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 151, changing to 11 [ 1132.065666][ T5301] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 17729, setting to 1024 [ 1132.082206][ T5301] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1132.099250][ T5301] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1132.117190][T22117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3210'. [ 1132.138718][T22117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3210'. [ 1132.164751][ T5301] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1132.184909][T22139] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 1132.200397][T22138] IPVS: stopping backup sync thread 22139 ... [ 1132.206006][ T5301] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1132.215169][ T5301] usb 1-1: Product: syz [ 1132.221755][ T5301] usb 1-1: Manufacturer: syz [ 1132.227427][ T5301] usb 1-1: SerialNumber: syz [ 1132.245549][ T5301] usb 1-1: config 0 descriptor?? [ 1132.254251][T22126] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1132.271818][ T5301] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1132.287971][ T5301] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 1132.626063][ T48] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1132.845883][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 1132.873521][ T48] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1132.892298][ T48] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1132.949429][ T48] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1132.957863][ T48] usb 5-1: Product: syz [ 1132.962560][ T48] usb 5-1: Manufacturer: syz [ 1132.977407][ T48] usb 5-1: SerialNumber: syz [ 1132.999823][ T48] usb 5-1: config 0 descriptor?? [ 1133.005288][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1133.011253][T16953] usb 4-1: USB disconnect, device number 67 [ 1133.011899][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1133.011921][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1133.038673][T16931] usb 1-1: USB disconnect, device number 51 [ 1133.059278][T22142] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1133.078982][T16931] ldusb 1-1:0.0: LD USB Device #1 now disconnected [ 1133.321197][T22142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3220'. [ 1133.342371][T22156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3223'. [ 1133.371463][ T5301] usb 5-1: USB disconnect, device number 36 [ 1133.484751][T22156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3223'. [ 1134.099646][T22168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3226'. [ 1134.358991][ T5286] cdc_ncm 2-1:1.0: bind() failure [ 1134.385274][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 1134.385294][ T29] audit: type=1326 audit(1724465386.991:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22174 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebcf79e79 code=0x7ffc0000 [ 1134.391198][T22173] loop2: detected capacity change from 0 to 7 [ 1134.400555][ T5286] cdc_ncm 2-1:1.1: skipping garbage [ 1134.450109][ T29] audit: type=1326 audit(1724465387.041:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22174 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebcf79e79 code=0x7ffc0000 [ 1134.476441][ T5286] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1134.484600][T22173] Dev loop2: unable to read RDB block 7 [ 1134.516497][T22173] loop2: unable to read partition table [ 1134.525921][ T5286] cdc_ncm 2-1:1.1: bind() failure [ 1134.549537][T22173] loop2: partition table beyond EOD, truncated [ 1134.566963][T22173] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1134.570236][ T29] audit: type=1326 audit(1724465387.091:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22174 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ebcf78810 code=0x7ffc0000 [ 1134.626133][ T5286] usb 2-1: USB disconnect, device number 39 [ 1134.715638][ T29] audit: type=1326 audit(1724465387.091:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22174 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebcf79e79 code=0x7ffc0000 [ 1134.738396][ C1] vkms_vblank_simulate: vblank timer overrun [ 1134.829296][ T29] audit: type=1326 audit(1724465387.091:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22174 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebcf79e79 code=0x7ffc0000 [ 1134.851695][ C1] vkms_vblank_simulate: vblank timer overrun [ 1134.980447][T22180] IPVS: stopping backup sync thread 21939 ... [ 1135.002520][ T29] audit: type=1326 audit(1724465387.101:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22174 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ebcf79e79 code=0x7ffc0000 [ 1135.071297][ T29] audit: type=1326 audit(1724465387.101:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22174 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebcf79e79 code=0x7ffc0000 [ 1135.194445][ T29] audit: type=1326 audit(1724465387.101:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22174 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ebcf79e79 code=0x7ffc0000 [ 1135.216758][ C1] vkms_vblank_simulate: vblank timer overrun [ 1135.266549][ T29] audit: type=1326 audit(1724465387.101:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22174 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebcf79e79 code=0x7ffc0000 [ 1135.347228][T22194] FAULT_INJECTION: forcing a failure. [ 1135.347228][T22194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1135.408621][ T29] audit: type=1326 audit(1724465387.101:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22174 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebcf79e79 code=0x7ffc0000 [ 1135.426204][T22194] CPU: 0 UID: 0 PID: 22194 Comm: syz.1.3235 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 1135.441775][T22194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1135.451876][T22194] Call Trace: [ 1135.455191][T22194] [ 1135.458151][T22194] dump_stack_lvl+0x241/0x360 [ 1135.462871][T22194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1135.468107][T22194] ? __pfx__printk+0x10/0x10 [ 1135.472753][T22194] ? __pfx_lock_release+0x10/0x10 [ 1135.477842][T22194] should_fail_ex+0x3b0/0x4e0 [ 1135.482560][T22194] _copy_to_user+0x2f/0xb0 [ 1135.487023][T22194] media_device_get_topology+0x3e1/0x1b10 [ 1135.492801][T22194] ? __pfx___might_resched+0x10/0x10 [ 1135.498137][T22194] ? __pfx_media_device_get_topology+0x10/0x10 [ 1135.504355][T22194] ? trace_contention_end+0x3c/0x120 [ 1135.509694][T22194] ? __pfx_lock_release+0x10/0x10 [ 1135.514753][T22194] ? media_device_ioctl+0x27f/0x3c0 [ 1135.520005][T22194] ? __pfx___mutex_lock+0x10/0x10 [ 1135.525075][T22194] ? __might_fault+0xc6/0x120 [ 1135.529809][T22194] ? _copy_from_user+0xa6/0xe0 [ 1135.534618][T22194] media_device_ioctl+0x2bc/0x3c0 [ 1135.539691][T22194] ? __pfx_media_device_ioctl+0x10/0x10 [ 1135.545316][T22194] ? __pfx_media_device_ioctl+0x10/0x10 [ 1135.550910][T22194] ? media_ioctl+0x100/0x120 [ 1135.555547][T22194] ? __pfx_media_ioctl+0x10/0x10 [ 1135.560533][T22194] __se_sys_ioctl+0xfc/0x170 [ 1135.565175][T22194] do_syscall_64+0xf3/0x230 [ 1135.569714][T22194] ? clear_bhb_loop+0x35/0x90 [ 1135.574431][T22194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.580360][T22194] RIP: 0033:0x7fa13f779e79 [ 1135.584814][T22194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1135.604465][T22194] RSP: 002b:00007fa140644038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1135.613019][T22194] RAX: ffffffffffffffda RBX: 00007fa13f915f80 RCX: 00007fa13f779e79 [ 1135.621050][T22194] RDX: 0000000020000280 RSI: 00000000c0487c04 RDI: 0000000000000003 [ 1135.629066][T22194] RBP: 00007fa140644090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.637078][T22194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1135.645101][T22194] R13: 0000000000000000 R14: 00007fa13f915f80 R15: 00007fa13fa3fa38 [ 1135.653126][T22194] [ 1135.967054][T16953] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1136.125856][ T5301] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1136.185981][T16953] usb 1-1: Using ep0 maxpacket: 32 [ 1136.193480][T16953] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1136.205388][T16953] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1136.241908][T16953] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 151, changing to 11 [ 1136.260664][T16953] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 17729, setting to 1024 [ 1136.273612][T16953] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1136.290492][ T5301] usb 2-1: device descriptor read/64, error -71 [ 1136.297866][T16953] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1136.308320][T16953] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1136.319180][T16953] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1136.338124][T16953] usb 1-1: Product: syz [ 1136.362456][T16953] usb 1-1: Manufacturer: syz [ 1136.385544][T16953] usb 1-1: SerialNumber: syz [ 1136.414060][T16953] usb 1-1: config 0 descriptor?? [ 1136.429798][T22200] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1136.454989][T16953] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1136.489585][T16953] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1136.565864][ T5301] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1136.677274][ T48] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1136.715962][ T5301] usb 2-1: device descriptor read/64, error -71 [ 1136.778139][T16952] usb 1-1: USB disconnect, device number 52 [ 1136.822061][T16952] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1136.839439][ T5301] usb usb2-port1: attempt power cycle [ 1136.946578][ T48] usb 3-1: string descriptor 0 read error: -22 [ 1136.965406][ T48] usb 3-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 1137.002430][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.011731][T22216] FAULT_INJECTION: forcing a failure. [ 1137.011731][T22216] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.025379][T22216] CPU: 0 UID: 0 PID: 22216 Comm: syz.4.3242 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 1137.036183][T22216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1137.046375][T22216] Call Trace: [ 1137.049693][T22216] [ 1137.052663][T22216] dump_stack_lvl+0x241/0x360 [ 1137.057390][T22216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1137.062637][T22216] ? __pfx__printk+0x10/0x10 [ 1137.067298][T22216] should_fail_ex+0x3b0/0x4e0 [ 1137.072024][T22216] should_failslab+0xac/0x100 [ 1137.076753][T22216] ? ip_mc_add_src+0x826/0xf00 [ 1137.077957][ T48] usb 3-1: config 0 descriptor?? [ 1137.081573][T22216] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1137.091819][T22216] ip_mc_add_src+0x826/0xf00 [ 1137.096439][T22216] ? sock_kmalloc+0xe4/0x160 [ 1137.101043][T22216] ip_mc_source+0xc0d/0x10c0 [ 1137.105649][T22216] ? __pfx_ip_mc_source+0x10/0x10 [ 1137.110702][T22216] do_mcast_group_source+0x647/0x8e0 [ 1137.116005][T22216] ? __pfx_do_mcast_group_source+0x10/0x10 [ 1137.121823][T22216] ? __pfx_register_lock_class+0x10/0x10 [ 1137.127474][T22216] ? mark_lock+0x9a/0x350 [ 1137.131827][T22216] ? __lock_acquire+0x137a/0x2040 [ 1137.136906][T22216] ? __local_bh_enable_ip+0x168/0x200 [ 1137.142294][T22216] ? do_ip_setsockopt+0x1a2d/0x3cd0 [ 1137.147529][T22216] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1137.153287][T22216] do_ip_setsockopt+0x1f36/0x3cd0 [ 1137.158334][T22216] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1137.163718][T22216] ? aa_sk_perm+0x96d/0xab0 [ 1137.168241][T22216] ? __pfx_aa_sk_perm+0x10/0x10 [ 1137.173137][T22216] ? __pfx_lock_acquire+0x10/0x10 [ 1137.178177][T22216] ? aa_sock_opt_perm+0x79/0x120 [ 1137.183132][T22216] ip_setsockopt+0x63/0x100 [ 1137.187647][T22216] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1137.193552][T22216] do_sock_setsockopt+0x3af/0x720 [ 1137.198594][T22216] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1137.204150][T22216] ? __fget_files+0x29/0x470 [ 1137.208792][T22216] ? __fget_files+0x3f6/0x470 [ 1137.213497][T22216] __sys_setsockopt+0x1ae/0x250 [ 1137.218367][T22216] __x64_sys_setsockopt+0xb5/0xd0 [ 1137.223407][T22216] do_syscall_64+0xf3/0x230 [ 1137.228013][T22216] ? clear_bhb_loop+0x35/0x90 [ 1137.232709][T22216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.238720][T22216] RIP: 0033:0x7f6e12979e79 [ 1137.243145][T22216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1137.262771][T22216] RSP: 002b:00007f6e136ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1137.271200][T22216] RAX: ffffffffffffffda RBX: 00007f6e12b15f80 RCX: 00007f6e12979e79 [ 1137.279182][T22216] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000005 [ 1137.287162][T22216] RBP: 00007f6e136ca090 R08: 0000000000000108 R09: 0000000000000000 [ 1137.295140][T22216] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 1137.303136][T22216] R13: 0000000000000000 R14: 00007f6e12b15f80 R15: 00007f6e12c3fa38 [ 1137.311131][T22216] [ 1137.328862][ T48] usb 3-1: Found UVC 0.00 device (30c9:0093) [ 1137.336193][ T48] usb 3-1: No valid video chain found. [ 1137.435866][ T5301] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1137.506825][ T5301] usb 2-1: device descriptor read/8, error -71 [ 1137.815892][ T5301] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1137.886980][ T5301] usb 2-1: device descriptor read/8, error -71 [ 1138.018289][ T5301] usb usb2-port1: unable to enumerate USB device [ 1138.250090][T22227] loop2: detected capacity change from 0 to 7 [ 1138.280835][T22227] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 1138.298811][T22227] loop2: partition table partially beyond EOD, truncated [ 1138.322705][T22227] loop2: p1 size 6333 extends beyond EOD, truncated [ 1138.463675][T13968] udevd[13968]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1138.588926][ T30] INFO: task syz.1.2639:19540 blocked for more than 143 seconds. [ 1138.616447][ T30] Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 1138.661068][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1138.694821][ T30] task:syz.1.2639 state:D stack:24880 pid:19540 tgid:19540 ppid:19108 flags:0x00004006 [ 1138.724828][ T30] Call Trace: [ 1138.733320][ T30] [ 1138.739780][ T30] __schedule+0x1800/0x4a60 [ 1138.750466][ T30] ? __pfx___schedule+0x10/0x10 [ 1138.763542][ T30] ? __pfx_lock_release+0x10/0x10 [ 1138.776926][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1138.798220][ T30] ? schedule+0x90/0x320 [ 1138.814070][ T30] schedule+0x14b/0x320 [ 1138.853384][ T30] schedule_preempt_disabled+0x13/0x30 [ 1138.869465][ T30] __mutex_lock+0x6a4/0xd70 [ 1138.880007][ T30] ? __mutex_lock+0x527/0xd70 [ 1138.894474][ T30] ? hugetlb_wp+0x104d/0x3a90 [ 1138.906460][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1138.918630][ T30] ? __pfx_up_write+0x10/0x10 [ 1138.933046][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1138.950190][ T30] ? vma_interval_tree_iter_next+0x193/0x340 [ 1138.975532][ T30] hugetlb_wp+0x104d/0x3a90 [ 1138.992607][ T30] ? mark_lock+0x9a/0x350 [ 1139.004392][ T30] ? __pfx_hugetlb_wp+0x10/0x10 [ 1139.025631][ T30] ? __pfx___might_resched+0x10/0x10 [ 1139.073153][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1139.095331][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1139.109765][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1139.132880][ T30] ? __filemap_get_folio+0x769/0xc10 [ 1139.147763][ T30] hugetlb_fault+0x27b2/0x3770 [ 1139.161306][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1139.180710][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 1139.205065][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 1139.219242][ T30] handle_mm_fault+0x173f/0x1980 [ 1139.224527][ T30] ? __pfx_lock_release+0x10/0x10 [ 1139.232576][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1139.238320][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 1139.244083][ T30] ? lock_vma_under_rcu+0x18a/0x6e0 [ 1139.249771][ T30] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1139.256045][ T30] ? exc_page_fault+0x113/0x8c0 [ 1139.262050][ T30] exc_page_fault+0x459/0x8c0 [ 1139.268075][ T30] asm_exc_page_fault+0x26/0x30 [ 1139.273416][ T30] RIP: 0033:0x7f4a7c241043 [ 1139.278843][ T30] RSP: 002b:00007f4a7c63fb60 EFLAGS: 00010246 [ 1139.285395][ T30] RAX: 0000000020000140 RBX: 0000000000000008 RCX: 0000000000000000 [ 1139.295878][ T30] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000055557b4503c8 [ 1139.305040][ T30] RBP: 00007f4a7c63fc68 R08: 0000000000000000 R09: 0000000000000000 [ 1139.314276][ T30] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000032 [ 1139.323397][ T30] R13: 00007f4a7c63fc90 R14: 00007f4a7c63fcb0 R15: fffffffffffffffe [ 1139.332676][ T30] [ 1139.360083][ T30] INFO: task syz.1.2639:19541 blocked for more than 144 seconds. [ 1139.401544][ T30] Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 1139.419196][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1139.435020][ T30] task:syz.1.2639 state:D stack:23152 pid:19541 tgid:19540 ppid:19108 flags:0x00004006 [ 1139.445785][ T30] Call Trace: [ 1139.449191][ T30] [ 1139.452221][ T30] __schedule+0x1800/0x4a60 [ 1139.457318][ T30] ? __pfx___schedule+0x10/0x10 [ 1139.462278][ T30] ? __pfx_lock_release+0x10/0x10 [ 1139.477064][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1139.483210][ T30] ? schedule+0x90/0x320 [ 1139.488690][ T30] schedule+0x14b/0x320 [ 1139.493237][ T30] io_schedule+0x8d/0x110 [ 1139.497767][ T30] folio_wait_bit_common+0x882/0x12b0 [ 1139.504328][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1139.510323][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1139.516407][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1139.521403][ T30] ? __vma_reservation_common+0x498/0x7d0 [ 1139.527607][ T30] __filemap_get_folio+0xb7/0xc10 [ 1139.532826][ T30] hugetlb_fault+0x1b72/0x3770 [ 1139.537833][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1139.543418][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1139.549311][ T30] ? mt_find+0x226/0x850 [ 1139.553706][ T30] ? __pfx_lock_release+0x10/0x10 [ 1139.559423][ T30] handle_mm_fault+0x173f/0x1980 [ 1139.564518][ T30] ? mt_find+0x62d/0x850 [ 1139.568940][ T30] ? mt_find+0x226/0x850 [ 1139.573652][ T30] ? __pfx_mt_find+0x10/0x10 [ 1139.578454][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1139.584085][ T30] ? find_vma+0xf9/0x170 [ 1139.588532][ T30] ? __pfx_find_vma+0x10/0x10 [ 1139.593547][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1139.600750][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1139.608284][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1139.613739][ T30] exc_page_fault+0x2b9/0x8c0 [ 1139.618604][ T30] asm_exc_page_fault+0x26/0x30 [ 1139.623735][ T30] RIP: 0010:__put_user_8+0x11/0x20 [ 1139.629587][ T30] Code: 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 1139.650208][ T30] RSP: 0018:ffffc90003e9f778 EFLAGS: 00050202 [ 1139.656492][ T30] RAX: 0000000000800000 RBX: 0000000000000000 RCX: 0000000020000020 [ 1139.664756][ T30] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c606d40 [ 1139.672946][ T30] RBP: ffffc90003e9fec8 R08: ffffffff9017f32f R09: 1ffffffff202fe65 [ 1139.681247][ T30] R10: dffffc0000000000 R11: fffffbfff202fe66 R12: 1ffff920007d3f7d [ 1139.689519][ T30] R13: 1ffff920007d3f08 R14: 0000000020800000 R15: 0000000000800000 [ 1139.698399][ T30] userfaultfd_ioctl+0x28e7/0x70a0 [ 1139.703621][ T30] ? stack_trace_save+0x118/0x1d0 [ 1139.711069][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1139.716840][ T30] ? stack_depot_save_flags+0x29/0x830 [ 1139.722657][ T30] ? kasan_save_track+0x51/0x80 [ 1139.727696][ T30] ? kasan_save_track+0x3f/0x80 [ 1139.732877][ T30] ? kasan_save_free_info+0x40/0x50 [ 1139.738295][ T30] ? poison_slab_object+0xe0/0x150 [ 1139.743696][ T30] ? __kasan_slab_free+0x37/0x60 [ 1139.748787][ T30] ? kfree+0x149/0x360 [ 1139.753612][ T30] ? tomoyo_path_number_perm+0x68d/0x880 [ 1139.759434][ T30] ? security_file_ioctl+0x75/0xb0 [ 1139.764778][ T30] ? __se_sys_ioctl+0x47/0x170 [ 1139.769723][ T30] ? do_syscall_64+0xf3/0x230 [ 1139.774525][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.780933][ T30] ? do_vfs_ioctl+0xf0e/0x2e50 [ 1139.786578][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1139.791789][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1139.798376][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 1139.804388][ T30] ? __pfx_lock_release+0x10/0x10 [ 1139.810428][ T30] ? kfree+0x149/0x360 [ 1139.814778][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 1139.821616][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1139.827859][ T30] ? __fget_files+0x29/0x470 [ 1139.832692][ T30] ? __fget_files+0x3f6/0x470 [ 1139.837520][ T30] ? __fget_files+0x29/0x470 [ 1139.842279][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1139.847732][ T30] ? security_file_ioctl+0x87/0xb0 [ 1139.853026][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1139.858693][ T30] __se_sys_ioctl+0xfc/0x170 [ 1139.863586][ T30] do_syscall_64+0xf3/0x230 [ 1139.868575][ T30] ? clear_bhb_loop+0x35/0x90 [ 1139.873407][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.879849][ T30] RIP: 0033:0x7f4a7c379e79 [ 1139.884393][ T30] RSP: 002b:00007f4a7d1ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1139.893312][ T30] RAX: ffffffffffffffda RBX: 00007f4a7c515f80 RCX: 00007f4a7c379e79 [ 1139.901522][ T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 000000000000000a [ 1139.910413][ T30] RBP: 00007f4a7c3e793e R08: 0000000000000000 R09: 0000000000000000 [ 1139.918641][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1139.928043][ T30] R13: 0000000000000000 R14: 00007f4a7c515f80 R15: 00007f4a7c63fa38 [ 1139.936283][ T30] [ 1139.944512][ T30] [ 1139.944512][ T30] Showing all locks held in the system: [ 1139.984303][ T30] 1 lock held by khungtaskd/30: [ 1139.995026][T16952] usb 3-1: USB disconnect, device number 64 [ 1140.009923][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1140.037640][ T30] 3 locks held by kworker/u8:11/2546: [ 1140.048800][ T30] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1140.071206][ T30] #1: ffffc9000957fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1140.084368][ T30] #2: ffffffff8e93d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 1140.094680][ T30] 2 locks held by getty/4986: [ 1140.099489][ T30] #0: ffff88802af740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1140.109621][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 1140.120521][ T30] 2 locks held by kworker/u8:12/6571: [ 1140.127202][ T30] 3 locks held by kworker/0:9/16952: [ 1140.132519][ T30] #0: ffff8880159bd148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1140.144866][ T30] #1: ffffc900045ffd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1140.156927][ T30] #2: ffff8880240e8190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1140.166279][ T30] 2 locks held by syz.1.2639/19540: [ 1140.171548][ T30] #0: ffff88807bc25df0 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 1140.182245][ T30] #1: ffff88801beac338 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90 [ 1140.195413][ T30] 3 locks held by syz.1.2639/19541: [ 1140.200932][ T30] #0: ffff88805ed71e18 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 1140.210996][ T30] #1: ffff88801beac338 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 1140.223129][ T30] #2: ffff88806246e8e8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_fault+0x675/0x3770 [ 1140.233173][ T30] 2 locks held by syz.0.3247/22231: [ 1140.239726][ T30] #0: ffff88807f7f0e08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1140.251299][ T30] #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1140.262641][ T30] [ 1140.277466][ T30] ============================================= [ 1140.277466][ T30] [ 1140.295550][ T30] NMI backtrace for cpu 0 [ 1140.299936][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 1140.310473][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1140.320577][ T30] Call Trace: [ 1140.323889][ T30] [ 1140.326853][ T30] dump_stack_lvl+0x241/0x360 [ 1140.331571][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1140.336806][ T30] ? __pfx__printk+0x10/0x10 [ 1140.341416][ T30] ? vprintk_emit+0x667/0x7c0 [ 1140.346111][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1140.351163][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1140.356122][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1140.361590][ T30] ? _printk+0xd5/0x120 [ 1140.365758][ T30] ? __pfx__printk+0x10/0x10 [ 1140.370367][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1140.375231][ T30] ? __pfx__printk+0x10/0x10 [ 1140.379840][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1140.384877][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1140.390872][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1140.396872][ T30] watchdog+0xff4/0x1040 [ 1140.401135][ T30] ? watchdog+0x1ea/0x1040 [ 1140.405574][ T30] ? __pfx_watchdog+0x10/0x10 [ 1140.410268][ T30] kthread+0x2f0/0x390 [ 1140.414357][ T30] ? __pfx_watchdog+0x10/0x10 [ 1140.419049][ T30] ? __pfx_kthread+0x10/0x10 [ 1140.423663][ T30] ret_from_fork+0x4b/0x80 [ 1140.428104][ T30] ? __pfx_kthread+0x10/0x10 [ 1140.432710][ T30] ret_from_fork_asm+0x1a/0x30 [ 1140.437501][ T30] [ 1140.441337][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1140.447071][ C1] NMI backtrace for cpu 1 [ 1140.447086][ C1] CPU: 1 UID: 0 PID: 12899 Comm: kworker/u8:0 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 1140.447108][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1140.447120][ C1] Workqueue: bat_events batadv_nc_worker [ 1140.447150][ C1] RIP: 0010:lockdep_hardirqs_on+0x6b/0x150 [ 1140.447180][ C1] Code: 8b 05 29 bf 4b 74 85 c0 75 74 65 8b 05 d6 bb 4b 74 85 c0 75 69 83 3d 53 fe 3b 09 00 75 2e 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 75 67 83 3d 35 fe 3b 09 00 75 10 48 8b 83 b8 [ 1140.447196][ C1] RSP: 0018:ffffc90002e779d8 EFLAGS: 00000046 [ 1140.447211][ C1] RAX: 0000000000000000 RBX: ffff8880299d5a00 RCX: ffffffff8170417a [ 1140.447225][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff81575da8 [ 1140.447239][ C1] RBP: ffffc90002e77ab0 R08: ffffffff9373491f R09: 1ffffffff26e6923 [ 1140.447253][ C1] R10: dffffc0000000000 R11: fffffbfff26e6924 R12: dffffc0000000000 [ 1140.447266][ C1] R13: 1ffff920005cef48 R14: ffffffff81575da8 R15: 0000000000000201 [ 1140.447280][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1140.447295][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1140.447308][ C1] CR2: 00007f6e12ae8178 CR3: 000000000e734000 CR4: 00000000003526f0 [ 1140.447324][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1140.447336][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1140.447349][ C1] Call Trace: [ 1140.447356][ C1] [ 1140.447364][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1140.447386][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1140.447414][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1140.447436][ C1] ? nmi_handle+0x2a/0x5a0 [ 1140.447463][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1140.447486][ C1] ? nmi_handle+0x14f/0x5a0 [ 1140.447503][ C1] ? nmi_handle+0x2a/0x5a0 [ 1140.447521][ C1] ? lockdep_hardirqs_on+0x6b/0x150 [ 1140.447560][ C1] ? default_do_nmi+0x63/0x160 [ 1140.447588][ C1] ? exc_nmi+0x123/0x1f0 [ 1140.447609][ C1] ? end_repeat_nmi+0xf/0x53 [ 1140.447630][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 1140.447656][ C1] ? mark_lock+0x9a/0x350 [ 1140.447681][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 1140.447702][ C1] ? lockdep_hardirqs_on+0x6b/0x150 [ 1140.447729][ C1] ? lockdep_hardirqs_on+0x6b/0x150 [ 1140.447756][ C1] ? lockdep_hardirqs_on+0x6b/0x150 [ 1140.447782][ C1] [ 1140.447788][ C1] [ 1140.447796][ C1] __local_bh_enable_ip+0x168/0x200 [ 1140.447819][ C1] ? batadv_nc_purge_paths+0x312/0x3b0 [ 1140.447845][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1140.447870][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 1140.447896][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 1140.447924][ C1] batadv_nc_purge_paths+0x312/0x3b0 [ 1140.447956][ C1] batadv_nc_worker+0x328/0x610 [ 1140.447983][ C1] ? batadv_nc_worker+0xcb/0x610 [ 1140.448008][ C1] ? process_scheduled_works+0x945/0x1830 [ 1140.448030][ C1] process_scheduled_works+0xa2c/0x1830 [ 1140.448068][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1140.448095][ C1] ? assign_work+0x364/0x3d0 [ 1140.448119][ C1] worker_thread+0x86d/0xd40 [ 1140.448166][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1140.448195][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1140.448221][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1140.448245][ C1] kthread+0x2f0/0x390 [ 1140.448272][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1140.448296][ C1] ? __pfx_kthread+0x10/0x10 [ 1140.448323][ C1] ret_from_fork+0x4b/0x80 [ 1140.448349][ C1] ? __pfx_kthread+0x10/0x10 [ 1140.448376][ C1] ret_from_fork_asm+0x1a/0x30 [ 1140.448411][ C1] [ 1140.456374][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1140.456393][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 1140.456423][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1140.456438][ T30] Call Trace: [ 1140.456449][ T30] [ 1140.456459][ T30] dump_stack_lvl+0x241/0x360 [ 1140.456493][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1140.456519][ T30] ? __pfx__printk+0x10/0x10 [ 1140.456553][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1140.456597][ T30] ? vscnprintf+0x5d/0x90 [ 1140.456628][ T30] panic+0x349/0x860 [ 1140.456666][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1140.456698][ T30] ? __pfx_panic+0x10/0x10 [ 1140.456730][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1140.456770][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1140.456804][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1140.456829][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1140.456857][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1140.456890][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1140.456922][ T30] watchdog+0x1033/0x1040 [ 1140.456957][ T30] ? watchdog+0x1ea/0x1040 [ 1140.456996][ T30] ? __pfx_watchdog+0x10/0x10 [ 1140.457028][ T30] kthread+0x2f0/0x390 [ 1140.457063][ T30] ? __pfx_watchdog+0x10/0x10 [ 1140.457094][ T30] ? __pfx_kthread+0x10/0x10 [ 1140.457130][ T30] ret_from_fork+0x4b/0x80 [ 1140.457161][ T30] ? __pfx_kthread+0x10/0x10 [ 1140.457197][ T30] ret_from_fork_asm+0x1a/0x30 [ 1140.457247][ T30] [ 1140.460570][ T30] Kernel Offset: disabled [ 1140.965643][ T30] Rebooting in 86400 seconds..