last executing test programs: 1.738273734s ago: executing program 0 (id=2198): syz_usb_connect$cdc_ecm(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x1, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x7, {{0xa, 0x24, 0x6, 0x0, 0x0, "35acabac95"}, {0x5, 0x24, 0x0, 0x573}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x2, 0x9}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x80, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x80, 0x5}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x9, 0x2, 0x3, 0xff, 0x9}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x100, &(0x7f0000000140)=@string={0x100, 0x3, "5ccbbb298d1e32e3fbc409748c53e33c1737daf18cd3451ebdd804dc98fc5f0a66403e131d97c9c6a9af76465b20e73d6559f37e6147983985d94a4e4fb753ef6c1a39510f82e3498e72f5a26451f9f30d15b148bf8b71df102b86d64d29a83949b02046f7ef467a94d61f2a67803a23f88ec404348e915339681a3f424fdbe383dd2aad0e65012f8c6b25fe1dcae44d43cf0cd85fd152ffdd4193373251540d07d4b0445bfa14f232409b9b9d796a5a8225317cdf78c565f94e047964162624d8783a0f85c9aa923329005792d6d3e0e20bc0ab1da2aa2d171e6ba260ab811f2777152fec5cdd094709968c39198c666a532343fbd0fe40abf741997cc6"}}, {0x66, &(0x7f0000000240)=@string={0x66, 0x3, "f1906196047eb38d9655e5e6ae05eae99d9c1a24f96cb1ffcbb13453233cc58932edfef76f4cd7f1296ad3b42fe3edd11d82f17bf2d63f20ff1bfaeca18213d8cdcfdb05b0af069dac462cd41ca0fe235fa511aa9153639b17ee796d460b4c0d8fa9d92a"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x444}}]}) (async) syz_usb_connect$cdc_ecm(0x3, 0x158, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x146, 0x1, 0x1, 0x0, 0xf0, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0xb6, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xfffd, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x9, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x45, 0xfd, 0xf}, @mdlm_detail={0xea, 0x24, 0x13, 0x6, "1cbd4879b202bf8b9544883f9d26b141e551290964c85250870a2f1508a16bb63df36b8b9f162f5f225acc05a0e679b2fd0c7448d0397aac6a2fef155e09e3e7348f557b7f271ea8b540cc007bf74546b2b6c2ee39b35ef67b039b2cd4643bc331e85b28b17dd8f4a5555cd7276bd1b5847de63e9963eef7e7eb00ede9700845e70677adf2ef9db9ca2e428e7b8a973da867d814f441dc01bf0b2f1a4d0c218f1fe4fc4dc4113130e87ce47352d853f1956fc9117dc558181c7c38d6bff90b28fdb824c2d6583be21854b8b2b37853fe641b8eb1741c54b910d9e7dd0a97018a98a06f3c4780"}, @network_terminal={0x7, 0x24, 0xa, 0xa7, 0x3, 0x9, 0x84}, @country_functional={0xc, 0x24, 0x7, 0xa, 0xc, [0x81, 0x5, 0x3]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0xd, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xe1, 0x4, 0x7}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x10, 0x7, 0x3, 0xfb, 0x8}, 0x27, &(0x7f0000000540)={0x5, 0xf, 0x27, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x4, 0xff0f, 0x2, [0xc000, 0x3f0f, 0xf]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xa, 0x3, 0x400}]}, 0x6, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x408}}, {0x76, &(0x7f0000000640)=@string={0x76, 0x3, "ec2c8b6947a49f49265bb40b3c5fd5ea74d0f7ca5ef50d92e8f79dda10df68f2083aba817c88be0239f223ac90284ac9101aa897a650199fe07d77d8ec356f5d4f4d7c501f9a531918363cf5aa8623bf7fde95bf36faa01064001e64d18c6503b1089b01659b36dcbba3dded1f8c2e83d66f83de"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1009}}]}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000007c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xda, 0x10, 0xa, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0x1, 0xfe, {0x9, 0x21, 0xbe, 0x9, 0x1, {0x22, 0x2e2}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x6, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x37, 0xfc, 0x6}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x201, 0x0, 0x6, 0xb, 0x10, 0x8}, 0xfc, &(0x7f0000000840)={0x5, 0xf, 0xfc, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "8932665724c86bf699dc771312d901b7"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xb, 0x0, 0xe}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "95644564fe25f318e5f25707d510f3f6"}, @generic={0xc2, 0x10, 0xb, "7083792bed78473a08d2914b51b3d151a205f09bc241789be930240bc6056929383952af24b4c886f7e27a18c6a8e2ace2cf50c2880d2a0d16fe02362814a3a63af1217d74378b87052ff9840b857c9c2bb86d09ac9b252874141efc4cae18079397343e747342bf6936b16d7465d8c3114f393398652530b11f0861f3720f5eeedb39a9599d2b0d6987b9a5d4efcb7ee20eb689a5e5643733aad850573efd69cc94713f09c5b03c5e80bb71516830eb9e0bb1d2b14144934952d2506132ef"}]}, 0x6, [{0x7c, &(0x7f0000000940)=@string={0x7c, 0x3, "6273f622f607886e0d018b7d6c7e81b461ccb3afaa63a3dd57a6965784bce098b1cb68bf3235328a72d74cf6c3cd28c45a49100fca7472e918929d4d844d7c08dc9de91e45cca10e8644d033e85b65605cd697878523b1e6a4cdea88defa9a22e601f8797ff05b056615ce29569e243b89b87a8e93e3dfb4fd84"}}, {0x30, &(0x7f00000009c0)=@string={0x30, 0x3, "4eb790017d99dc79b3f9ff7614df36ba5061a714653ad76b94ffb040c758156318afaae12adba6f64ef3f2dd94c6"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x407}}, {0x3c, &(0x7f0000000a80)=@string={0x3c, 0x3, "046d88214f1f33ca81bb3639d2ee3acdb6e9f7da3f34f5cd737ea0b92d97c332f5f1d8672f4f17cbef0d008dd5c0e0b0285c9106121537c43cde"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x44c}}]}) (async) syz_usb_connect$cdc_ecm(0x6, 0x7d, &(0x7f0000000b80)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x1, 0x7f, 0x80, 0xf7, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x45, {{0x9, 0x24, 0x6, 0x0, 0x0, "6b0bc590"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x0, 0x1000, 0x3f}, [@country_functional={0x10, 0x24, 0x7, 0x3, 0x7, [0x401, 0x56a, 0x83, 0x0, 0x7fff]}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0xec, 0x5, 0x10}, @mbim={0xc, 0x24, 0x1b, 0x200, 0x607, 0x1, 0xb, 0x3, 0xff}, @obex={0x5, 0x24, 0x15, 0x17dd}, @acm={0x4, 0x24, 0x2, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0xf8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x210, 0x7, 0x19, 0x8}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x200, 0x3, 0x4, 0x80, 0xff, 0xb4}, 0x1f, &(0x7f0000000c40)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "3350263e3f1aa7008e3a79c49bf68a09"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x813}}]}) (async) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000d00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x50, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x78, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0xd, {0x9, 0x21, 0x100, 0x3, 0x1, {0x22, 0xb01}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfa, 0x1, 0xcd}}}}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x200, 0x80, 0x0, 0x4, 0x8, 0x2d}, 0x5, &(0x7f0000000d80)={0x5, 0xf, 0x5}, 0x7, [{0x22, &(0x7f0000000dc0)=@string={0x22, 0x3, "0b91039be7d86690d5b43bd758cfd0cffc94b0da6b1e12311b27f5fa1792e521"}}, {0xdc, &(0x7f0000000e00)=@string={0xdc, 0x3, "ade2773885ccbdfa32d58f4dc992401205d6862de534d9e20ad7039e178505bc52d388a953da5646f88c04c4298f7c8f88dbfa6dce9ee60e547d42ca0fff1a8b7da79fae03f6d23fcfc3cac2248d2de2fd9f9157725fea35e83e387841c226e32fdf22b237fa134a5c6f6a5929fb3f0212e81bf7ab668947ca4d04a2e5a866cdf0915edadce1ac839daee1dc2a44fc51aacff2925fffc007f4e6b7c16d89ec054817ce2c93e2ec1227584c56394d4688be4687f478a6214b969e51cda21beafb33d496a756cfcf8b2874bbc19c06cf805d1efea0404671dba06f"}}, {0x61, &(0x7f0000000f00)=@string={0x61, 0x3, "bc31d20c75d8d00b7b9d58611928bc1b835d688cca0dc3b9d95a1d81dc6c6979bd9b0224c8b25f431c82867b816995bf9052efcfedb8653bec740bcf8a89ae7845dee4679c2ec17847f6227629a638f2fadb776e27fac3231deb322eba0c26"}}, {0x5d, &(0x7f0000000f80)=@string={0x5d, 0x3, "9f48b2674b74a9666b5b6edf4619be522b37085a344f7cd32f6c73600e77521c96e13d9ed22c86c8e7bc1d63d10f482ce9f2462e64719baf8500298a7a7cd6841181b459917062ebffc98c3e000b23f87704b0d74eb53567aadf02"}}, {0xd1, &(0x7f0000001000)=@string={0xd1, 0x3, "bc6deea0b48e91196cae66aa4411f79f16ab29528693c51fc50c944dd4f3be304d48e739034374f35483488677b4dbff77b83143d2a58d451f357f5f2474c89e07d0647c7c840c3ca4c5042fc20f4890b2fe9de30e278a2c739f6e3ed18e0e82697ed3661bba0f67b7872bfeff101b9dc561c6306eb9a07311565be8ba5b5a9365779d80828583e47ac68deb73acc372a3955a7963ac572d072d421fca616c4d2362d21cf3edba2ec26ae791739e8536099542cafa3196358767db088c2890f7d8f8f5038d09dec99dc2ad8566e4fd"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x1c09}}]}) (async) syz_usb_connect(0x2, 0x886, &(0x7f0000001200)={{0x12, 0x1, 0x200, 0xd5, 0x38, 0xd, 0x40, 0x16c0, 0x9b1, 0x544d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x874, 0x3, 0x5, 0xfc, 0xc0, 0xe, [{{0x9, 0x4, 0x8f, 0xd, 0xd, 0xe4, 0x29, 0x1c, 0xff, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "da2333aad710"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x354, 0x6, 0x7f, 0x4}, {0x6, 0x24, 0x1a, 0x3, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x439, 0xb, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x7}, @dmm={0x7, 0x24, 0x14, 0x8, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x101, 0x0, 0x4, 0x8, 0x3ff, 0xc}]}], [{{0x9, 0x5, 0x6, 0x1, 0x8, 0x0, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x96, 0x2}, @generic={0x88, 0x5, "5b7cf77db03e33e17799d969534b3af3644a4b9aaec3430115cb2159cc175ebdb52d13beec42e76577591f306cff69080c2d38158d0517b33857741f8969dd29307afad60a03c80a3f23e5b064ff981b5ce3bf6ae95ab92a500fbcaec77892a55922501c9c1d3f23e54ba4841f714cc71336422137910d62a0663c47df653be92199008aba8c"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x4, 0x9, 0x5}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0xa, 0xc, 0x2}}, {{0x9, 0x5, 0x0, 0x16, 0x20, 0xff, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x8}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x1, 0xfe}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0xef, 0x9, 0xf}}, {{0x9, 0x5, 0xa, 0x0, 0x3d7, 0xf, 0xc, 0x2, [@generic={0xaf, 0xa, "9a9d2a5e1d897b95d1a054bb7153933746c37cf791cc6bfbf7907cd6c5ea0e7469575687d7e7c1ba3e1f112f39c00dd7d7505bb2194e1a5005dfc1966643efcefb38916e78fa7124181c124ef5ab88865d4a69d0f2eec3ae76dfdaba837d5198f7c85f803eb76875685ca398c939fad911701e20e438daf9002298611670814d44f6bcff316a8db167564e4bf1726282fb91ee5cb75d0a061edf01f22a8d4e03d595d64cba21b0e408dec6dea7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x9, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x5}, @generic={0x8f, 0x23, "05e9494bf4128578a58f2df6da00b37a4608755daf0012c74b21c1338a177d03a6378c569f089be9548c13e6721ca123ecad718ba275ffc09bbbf9aa9a73730273b36b9651aa14f84a623ff56fd45069f6b5d4696ab76d4502a6e10bc70f4047ffa4a5ba1ba8b5257fb3b431f267ec98338a6af3787d3aa69244d06cae9b09eefd7339ddda306210a19d9b45e2"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ef, 0x2, 0x40, 0xe4}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x81, 0x40, 0x8}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x5, 0x2, 0x2}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x6, 0x40, 0x4}}, {{0x9, 0x5, 0xc8835a83572dbcc1, 0x10, 0x400, 0x4, 0x2, 0x40}}]}}, {{0x9, 0x4, 0xbe, 0x5, 0x5, 0x3, 0x6d, 0xce, 0x80, [], [{{0x9, 0x5, 0x6, 0xc, 0x40, 0x75, 0x10, 0x7}}, {{0x9, 0x5, 0x4, 0x4, 0x0, 0x2, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x8}, @generic={0xb4, 0x2, "69382a698fc556d5ee700eb67d572fdee017f36076d45afb97184f7440da5ea81db9c7459c8088aaad32da087ef920216ba6a6d9c129a12b9ee6f5a6ffef5c45262f0d3e256eb92d37f26406b166772aeb19aef1cc1fdec3a7ebd8bfc80efd06af9a21c09466bd93c3c6b9891c984c779683e6cfee1a93cbc5ca6552b66644bde5e479d9941a0d116c0f6eff34f5d5588925ebfb6d4aba34dcae1336ad5fed6bfb0f2e4c594dff700e9ef6f9168111dc750c"}]}}, {{0x9, 0x5, 0x0, 0x5, 0x20, 0x60, 0x2, 0xf}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x8, 0x5, 0x5}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x9, 0xe3, 0xfb, [@generic={0xb, 0x31, "717601ca5153196613"}]}}]}}, {{0x9, 0x4, 0x5, 0x1, 0xb, 0x7, 0x97, 0xe3, 0x8, [@hid_hid={0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0x153}}], [{{0x9, 0x5, 0xa, 0x0, 0x1d7, 0xf7, 0x2, 0x6, [@generic={0x6b, 0x7, "a99462a3597b5f0374051781ba39f5a4fea38896980750f80d48f63e1b72cb23c87c3db0f8de57fab935761c9d83b0d21216c408ff5977d50cca50cc88fc1a0ddb15d392ca1c82fda2ef4b05595c0815d398a8373b83985090141b99f01e37ec656e2ee1763d2b9efd"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x87, 0x8}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x81, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf}]}}, {{0x9, 0x5, 0x58eba41b221d79f3, 0x0, 0x10, 0x79, 0x3, 0xe, [@generic={0xcd, 0x2, "6460fc8a88d87c5806206550a2b928154d7a5fb23eb9557e7fc00194d1437e3c54ba0c719945df210881ce711e68112d468670a19c8bb798c018d4324998007a4e60b92b468ef85f635d2bdb7afa9fb8b67037340fec0d3eeb018c242989b7a666f7c0e4113d5d181790a5d98ac1887510218461d4b358eb34a0a7db9df81cd3e9425fd42f7f33f12222e405b7a53ab78e26e89e4085ec8b82a6994addf5aceb8a8b686eef47955b60306260971cf8b59f59f824434f68ccab7959dee332d50440e8aa25845776e17a5614"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x4, 0xf, 0x0, [@generic={0xa5, 0x30, "f4d17867a55e7ebbfe9df7437050e66c913d3b9195af31b9c7387ab12082bbf5e23bda6195e4ef92595719b13ed4639a8c4f45b10657206961ea6ca741e2de55bb248788dfbd04da92f274308d9544c08d4c6ea14d8a3235ffa4d6a986550d5a2e6faf663e0fd0c1efc48fd64d13f0ea3a8896fe2917987245e7ba802e25031309bad73e7d96c5573ddb7b34e3380eefc445176940ab4acf94c9034b3519572047ee59"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x9, 0x5, 0x7, [@generic={0xed, 0x22, "0c73f8676e77f46a5ff093cdc26aaac5ad3f6975a8c14deca800b5d3a63033af7ee05f8cb412fe4c9ed07e5c6e77bdcf50d5522665d00c14625a09b577c1d7c6cc2ea4931fb79147933d502f76a30897ecd308879116cf1ced2e046df9489deda1aaf5d125eb4492b4775692e877f54d49b4d045173f068472331bbde5ea7f1c885273f98a14ac9f9b7c4e980fae85e063f092027cec16b22ec0b9387079dbb87f641ff6e287d981c7e54471bb2afa373eba67d6e15415329075283e659a3bd4b77f961832477b8bc4ac6158ce162c71835db8cdd90c4d999cf565547534e6b4f5f7430be869fc4ce33593"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x5, 0x0, 0xf7}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x4, 0x14, 0x5}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x81, 0x81, 0x1, [@generic={0x8, 0x31, "0f469440e030"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xb}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xa, 0xd0, 0x0, [@generic={0x91, 0x31, "a94ad183d6426a87162a3ee1ab90a073308603142c4b75ac0b7167b01ee62f5c38fa0382db26ad968b901c2e4dc12efb065306f40fb58eaa4b412cd8e9f8029fefbc6ea2011d7d569e0c2e88384bc04d3cdb2fe1b6f2a1e4d6333f272d42b0be1283a2f090c1162f6759af3f49b89cc4f2ee386527b13539fb3544ab393723cb615231d70d6b6e76a322aa88c0c9eb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0xb, 0x1, 0x9}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0xf0, 0xff, 0x0, [@generic={0xc3, 0x5, "ca47754ed89eb30496d9748a53eb02a3a441822685ec61f61cc42ff1ee2781bbaa1a022f5f8d7e6b3f242a8d593ad9517e9f9122f33d8721b34de5721e02fe46683da76f8f1db4078226931399ad1c5d8243d173eeed715915c49ea2e3d544ed746500347f798721b1f59f0dc7d3939fd2730cae3e8a39bc3b11cc033601fcc18ab438d6006a9be919266c7c9c56985e1e0fca893fd968e6624beb1167a61417162b0db2f6826461a38c4b700db3b4dbc36b7e9f5725ff932fdb819be826806355"}]}}]}}]}}]}}, &(0x7f0000001e00)={0xa, &(0x7f0000001ac0)={0xa, 0x6, 0x310, 0xf9, 0x1, 0x3d, 0x20, 0x1}, 0x5, &(0x7f0000001b00)={0x5, 0xf, 0x5}, 0x5, [{0xe9, &(0x7f0000001b40)=@string={0xe9, 0x3, "c615c10bcc3619607f9b46fc26b2ac7cb6efe197123abd6386a3ace079ee829dd42553da9adc77c5ea029e1b44ef4363e28f771a1e19689dc40080045b54669c63564221a94b57c87a113cbbadbd05579efa6a299c22dfdfe74bd9ca0035ddc5a8cdaa7d1f0466adc71249e3754f4c58f91f97af2b57e103358b67880db974be1278631fb6f8100e10fea598e32e75e3a8522a27685d037fc8348fd277ed0307b6454e6b0383435c430d10e277a184d461d844261405fc767416323797b1398b9dd3c60b6d5bc5c801b1ad3120a716aeb8ae15e712133cc6df0f30313503facd31b07e7c3be609"}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x2409}}, {0x34, &(0x7f0000001c80)=@string={0x34, 0x3, "1882cfd8b8ed199dcbe94623103dceda0528f84aeff4667278cbf31c02b0668f00355401ed5437aa844dac32dd6f527556fb"}}, {0x4, &(0x7f0000001cc0)=@lang_id={0x4, 0x3, 0x2810}}, {0xf2, &(0x7f0000001d00)=@string={0xf2, 0x3, "5160d137e63d9913a0e9af986327637cbdbf52af55c369978f6c665ad2fa0e21654e21306b70ef23485622e570b8023bd5e476c1c0631dec37816ae950d0020c665cca8b423ad29cd007031422c70eb9d64d4359b6f4e14892c63cb2098612f38032c15de417b7e52cbc4ce6f99ab785120a02eec7a26b24096189f917c15af0f59d7108abb3c64ce57149c6d879a68d8d1e2869b53ffe6a45d85d11e0744af8958103127db06822a3d7396ce6ece87caf26df067badcd8c9b59ec407b07bb154fefd2e4450afd2a16d6ac8f5dca79513c1990a6e93bf7f9d8ec013a58a47f1e49822342f413b3199d65050065394238"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000002000)={0x24, &(0x7f0000001e80)={0x0, 0x10, 0x64, {0x64, 0x22, "423df58183d4092ba942cb0d2f5be581d4c4c9a7ff4f1b913d558227669f302881e5e9682c91239ca0fe45047d82f3c09e5c8722a23a52a08a0ba7bdc3eaad7ad1505f68a7872915ffb3977a2e40e077569a4ec35e114847e5f51d7ed3b2d269bcfb"}}, &(0x7f0000001f00)={0x0, 0x3, 0x75, @string={0x75, 0x3, "bc3dcab6b61096bc9665f956dbb8c8d749eab22e337637c6c09ebcafbbeb200212a5de91e07604d18891c2aa8ff1c3f973285851c130966d5a06a57fa9ab61dede054c2a64944e49ecfc785a6ed8f39ad193529e3aac7e8bff7293fde2c6bdab81ff78aef1b672d076c8b030c3dd80ed318576"}}, &(0x7f0000001f80)={0x0, 0x22, 0x12, {[@main=@item_012={0x1, 0x0, 0xa, "15"}, @global=@item_4={0x3, 0x1, 0x7, "7ffe0a18"}, @local=@item_012={0x0, 0x2, 0x7}, @main=@item_4={0x3, 0x0, 0xa, "43dbe9b5"}, @main=@item_4={0x3, 0x0, 0x9, "dbc06bc9"}]}}, &(0x7f0000001fc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xc, 0x1, {0x22, 0xf47}}}}, &(0x7f0000002200)={0x2c, &(0x7f0000002040)={0x0, 0x14, 0x95, "c4000cf2749bffaf6631bbe7feb83d6a470ec5b1a1156ab13bfedaa38845a6409acaffaf4cfba292bd9e36a94aa387c8a8d8b44b50f078e1d437b8dd2baf6e09b51e125fb0266f12d1917adbbb163fd6b50fcb549c7e0379432d1d6848f1f5bdbcd21aa8f3b3a885bea7d6d41c6083d30c8b3a650a5a48438aed8dc70363c162460b9a513224ff4bd35bf6fe6622114417a4321c4b"}, &(0x7f0000002100)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000002140)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000002180)={0x20, 0x1, 0x2b, "5cff5d95f11ae602dceb3309e387a03b90bf95c6ea5db281dc375ea102c2fa07d0f3fca5de1094c283ccf3"}, &(0x7f00000021c0)={0x20, 0x3, 0x1, 0x9}}) (async) syz_usb_connect(0x0, 0x434, &(0x7f0000002240)={{0x12, 0x1, 0x310, 0xdc, 0x7d, 0x41, 0x20, 0x112a, 0x1, 0x83ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x422, 0x2, 0x1, 0xc, 0x40, 0x7, [{{0x9, 0x4, 0x5b, 0xfb, 0x9, 0xd3, 0xf6, 0xf, 0x41, [], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0x8, 0xc, 0xc7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0xa1, 0x3, 0xff, [@generic={0x2f, 0x4, "71cc1bf18157e3dd0d1aad46e8d1c51cf5961f83d5510842bbbbe239554dda1feae98e0157604fc2ecc3c70d3e"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x5, 0x7, 0x7f, [@generic={0x10, 0xc, "ba3dabcb67564950bcf074ff4de9"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x5}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x3d, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xcf, 0x7f, 0xa, [@generic={0x10, 0x23, "9cf2a4fd5b89cb9a42c23c5fc19c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0xfa, 0x0, 0x88, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xffde}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x0, 0xb, 0x4, [@generic={0x4f, 0x7, "3c2ff0e476863d9544866ab9586338d13a4ae3ba653da004dfb6878a7995b5edfcc196788d3daa546b596b558fddf066a21dacb3eedb225f2d9e02877c91af425a64d1e4451f026bbb3d1fb5b5"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x5, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0x7ff}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x8, 0xa, 0xf0, [@generic={0xbc, 0x4, "65fdeee94e46d2b85b00defb4aa349c53c639c27eea94da2510a03a386d2f4143922eb9ede11dc279b57f69e284e044cc8438a330ed5bbc29d00d206b188d805ca376e08696cc1c4ca01d18946b421d928fd3a60116eb5ab6cde14cd6753480430446d614776b6b41742f06b7b852d5a365f25dffdb811d1faa708e25d73c208a9087f49525aa0eb8bdd41a69720ab2285560100c8fb0c48bba059e8cc549c0522710f30e5a5cb035aed8f3adf5e82fa1504d22cce43bfb60c45"}]}}]}}, {{0x9, 0x4, 0x6e, 0x0, 0x6, 0xdd, 0x50, 0x30, 0x9a, [@uac_as={[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x0, 0x3, "213d6b82486fe1e0"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xee, 0x1, 0x14, 0x6}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x2, 0x1, 0xff, "d597c8", "900809"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x6, 0x9, 0x2, "f201a8510f2475"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x0, 0x4, "a9", "b6"}]}, @hid_hid={0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa94}}], [{{0x9, 0x5, 0x7, 0x2, 0x10, 0x9, 0x8, 0xb1, [@uac_iso={0x7, 0x25, 0x1, 0x142, 0xf, 0x3}, @generic={0xeb, 0x21, "1345f272b198cddecf6a10cdd322753d96bf3eaebf8361acec4e84b3010eaab7dd46f74ca61af867ca9457e67dfefa995482e4c5dcb918eb05838a84b32b1e0094917377b220eea924975abff1765594250ef9ffdcf1d6936631c17a78067f1567f6e96eb014d4875428bc039abbc7f994f96de5ccb36b28bd307c83eae4181b05302511676516960c45d6e2bc637fd2c2ae83bf4dc4ddef5a7357ea0db95a83c81db64236f25f07bc3b9561eb1df8c834779305c66fce9509dd44d068ed8858504c56a349f89f0f9f9ddb85ffe642229589d7101d8e01220c9d2c8762e0992c49d0966302bffcdbc9"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x1, 0x2, 0x8, [@generic={0x40, 0x7, "6268300c252e01945e7fc1789f0bce2c04ae68c8dfa41c1c46781cb171c72d692c35a1de53ec9988f883dd18f7c9a04e69cb5d53f3c6ba9bf33c4f3861e1"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x2c}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x4, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x4, 0x81, 0x9, [@generic={0x5d, 0x11, "636f61b682b7dceb9bd982d8969c2a5b796e9507038bd0de750d7a23e119615a10dbcdd988650aa4cd4b6ceed7b235b5c4f2031f3652313013fd997c64d3b62f8f185d0c8c4e23e431fa9d53a1c696d3c4b10d7155558ccf5ec7b8"}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x4, 0x1}]}}, {{0x9, 0x5, 0x7, 0x11, 0x200, 0x4, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x9}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x8, 0x10, 0x4}}]}}]}}]}}, &(0x7f0000002880)={0xa, &(0x7f0000002680)={0xa, 0x6, 0x200, 0x9, 0x6, 0x1, 0x10, 0x9}, 0xd2, &(0x7f00000026c0)={0x5, 0xf, 0xd2, 0x2, [@generic={0xc2, 0x10, 0x4, "789770c9f76e35131483363ed7df98ee36954ad12a95984045220130c0bb4c625ff1933fe749866b7840e37095aae08689aeecc19961b97511b7e10e91c6891b20b7f3002df16d71c60bbd14488ab9461c18951bd63e2ad98a21db075e33d09fc6b441bf2b54b0ca823aa60d785dea5b8bd5f41162761931b490b3a09ad6753db7665f3864b69884a595e1f1eb552bc08a72a7ecfe9d503ce1d42d66e1c534fd48cfa32a5eb3f0e21493893e394aa39dca111c36821813fae02d38f390b3c6"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x9, 0x2, 0x101, 0x38}]}, 0x3, [{0x4, &(0x7f00000027c0)=@lang_id={0x4, 0x3, 0x422}}, {0x22, &(0x7f0000002800)=@string={0x22, 0x3, "9c8f5b24f629f9856a6e86135cb3f51489f7062e5077f7ed410a423e063ede3d"}}, {0x4, &(0x7f0000002840)=@lang_id={0x4, 0x3, 0x430}}]}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000028c0)=@ccm_128={{0x303}, "aac5003338c72bb3", "6e9bf8d7dd432b4b26718cbd984dbdf3", "e720d826", "0cd4486b4cd255dc"}, 0x28) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000002900)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x1, 0x1, 0xe}}}}}]}}]}}, &(0x7f0000002d00)={0xa, &(0x7f0000002940)={0xa, 0x6, 0x250, 0x7f, 0x0, 0x9, 0x40, 0x6}, 0x5, &(0x7f0000002980)={0x5, 0xf, 0x5}, 0x7, [{0xed, &(0x7f00000029c0)=@string={0xed, 0x3, "ac5fbb713d46094b1b09f9c4124b354d1353886fff8b85ae9915586246349046cd37dda049b9f1adf392911686ff1e0e31fe2944b05eb5786ab70736e1de651893c1116fcc13329574e9f9a25283faf07cf88c92f09f60e4b054b891221fcb81159e52a5bf9defeab0a632fb694e4299ea8dfdd0d7e3c65f4f4bf7090d7d6c46cf73e19e3940c29377e885a8beb44c7b808350f001003c3fb17c9d3fda82e5696009bb645588225c2713c6d9c8de72fdba6fc3e521249f08cead297da4a7f1ddcc7ccc59b6f8a2b4e3b43b4709008d4cc416e258cc5ae6092bc934f8245c050cbb9fc66bbacd17a33ef2f9"}}, {0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x140a}}, {0x15, &(0x7f0000002b00)=@string={0x15, 0x3, "50ebb0f770d6ff35506d6d901fe3a6386c6268"}}, {0x4, &(0x7f0000002b40)=@lang_id={0x4, 0x3, 0x2034}}, {0xec, &(0x7f0000002b80)=@string={0xec, 0x3, "74c52a4b0f20410156ff9770721bfa9dbf667db6397c96bcefc976e132a1ba3d638f53fb808a86ee894ff4d94645cbb5a2229268307351fa2434c9b13957af62581877dbd6afbc512c807c5dd227322e8f672c4be274f69af01509b713eb4ccbcae16d33db42ecdb522e04a666cc3ae267b296f4b8a800e08cd60f2c4469c18d922e073f1a7cd72396fb7e1a41e90fbafd547bad70c3452ce4adf1434d29b11a88e5555d673382354eeb1342e9b5a9bff7a5dc692e717c02f93a89a59e33e5ef09819274f2dd733580ca7938d98a4915b79fe060e098ed253f1c64451a7e478b32c65ea06ad54752915c"}}, {0x1d, &(0x7f0000002c80)=@string={0x1d, 0x3, "9c37ffd16d34dd15ec145aba9f0a386d66d120302659f67dad30f2"}}, {0x17, &(0x7f0000002cc0)=@string={0x17, 0x3, "255a444c50a9ed34af84286099bac6457d8f6f8a79"}}]}) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002d80), 0x40080, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002dc0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000002e00)=@bloom_filter={0x1e, 0x2, 0x1, 0x7, 0x520, r2, 0x934, '\x00', 0x0, r3, 0x2, 0x4, 0x0, 0x8}, 0x50) (async) poll(&(0x7f0000002e80)=[{r1, 0x40}], 0x1, 0x6) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000003000)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x4c, r4, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4) syz_usb_connect$cdc_ncm(0x4, 0x72, &(0x7f0000003040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x6, 0xe0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "c439f5ff"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0x7f, 0x6}, {0x6, 0x24, 0x1a, 0x4, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0xf7, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x29, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0x8, 0x1}}}}}}}]}}, &(0x7f0000003200)={0xa, &(0x7f00000030c0)={0xa, 0x6, 0x110, 0x7, 0x22, 0x8, 0x8, 0xff}, 0x2a, &(0x7f0000003100)={0x5, 0xf, 0x2a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x58, 0xd6, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x3, 0xc, 0xc}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x9, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x55, 0x2, 0x8}]}, 0x3, [{0xb, &(0x7f0000003140)=@string={0xb, 0x3, "6442ce69f820674e0d"}}, {0x4, &(0x7f0000003180)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f00000031c0)=@lang_id={0x4, 0x3, 0xf8ff}}]}) (async) ioctl$TCGETS(r2, 0x5401, &(0x7f0000003240)) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000003280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x80, 0x36, [{{0x9, 0x4, 0x0, 0xbb, 0x2, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0xe4, 0x2}}}}}]}}]}}, &(0x7f0000003700)={0xa, &(0x7f00000032c0)={0xa, 0x6, 0xe0fa859804ccb828, 0x9, 0x8, 0x0, 0x20, 0x8}, 0x145, &(0x7f0000003300)={0x5, 0xf, 0x145, 0x6, [@ptm_cap={0x3}, @generic={0x1b, 0x10, 0x3, "fd1131e743ae43cc2375780e2f18acfbf961424b36ae25a9"}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0xa, 0xf000, 0x8, [0x17fc0, 0xf0, 0x3f30, 0x3f00, 0x3f00, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x10, 0x9, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0x6, 0x8, 0xa462}, @generic={0xe9, 0x10, 0xa, "6269e10860a498f6d746b0fa0f4337d88bc78adad48d7aadf1b8b75dde73f07a9ae9f3c655d521f977dbe7c5fca525f7cbe3fb0752e111b83903fddf522cb88da4a9af271dd9421a60c994529099e6b8a1e1e1fd370b04776662fb51e8d257f4eb740c463ddc2b45437906e143bac4c8fe887b8bac337d81de32a8e835a7d78417499888d7c188687b1e840b89c3d7ff21df97a0ebada7cecce0f6687f758c8f7d0d738cc19c337b3f9ccbbf117598b5766c590b2197258b693a52de9eae896a5123ca8705822532ea818356113d41c4a9419d371c3ceeb1abae6590168515a0ba47aa2bf591"}]}, 0x4, [{0xfb, &(0x7f0000003480)=@string={0xfb, 0x3, "220aba9e3add705b51a6e4b13dd64724b25faa4b1d18b1e4e666e9ef40e8080605ccb2f00c357e6c1384be933b1561f2b75bf2853c38ad8ed0c206596a877b72e20808be491df15701821cb4ddb0216b2cd46d9a8619b4036469bf5804864cf2ee09a31ef73362625bb31000d2c24a5bcf21b2ef1d2f76707e55cf9c16e14aea4593927679ca1bcb643e0a2fdd0be39958ac69b5f65c3c19997e7f4f7eef638f2be3eba3a88cc2a6b8ef6d8361dd61cf4138e980e9e7f21674347939d14fddb529f4a67a607a3a2c70413eb3695c86da438eae4ed7a1b18179e2ec1aabd4aed479614fe537d68f377adb0b196b84545bd2692671710137aeee"}}, {0x4, &(0x7f0000003580)=@lang_id={0x4, 0x3, 0x1c08}}, {0x4, &(0x7f00000035c0)=@lang_id={0x4, 0x3, 0x42c}}, {0xd2, &(0x7f0000003600)=@string={0xd2, 0x3, "44846d3325471edae7ad334568a00e85269de841cb807bfcd655e1fef618e2d4dc3e3659e27cabe16f3e78fda6f276fe07e659aaaf03ea701291f1634dc6d8daf43f2f5e966ef89809a8a471ab5d9627527c6d47a83ec995d8df2883c62b2946cf545e0687d83cc207f4aae84682bd5a9e06f93eb6a70a4afef803c054ce3e285e350e2d606c9171a08637810ac5d0df3f7ea33598f2638ffbab36b9537bceb6bbe470904d58b4df80fa0ace4df62ff16827f18a62cbe52a2278ace09ccca0c68881e891ee6dc078099c87822c6f3ec9"}}]}) (async) syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000003780)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x4, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x8, 0x24, 0x6, 0x0, 0x0, "ebb57e"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x81, 0xff}, [@ncm={0x6, 0x24, 0x1a, 0x3, 0x10}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x62, 0x9, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x7, 0xfb}}}}}]}}]}}, &(0x7f00000038c0)={0xa, &(0x7f0000003800)={0xa, 0x6, 0x201, 0xfd, 0xc, 0xe, 0x10, 0x40}, 0xc, &(0x7f0000003840)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0xe}]}, 0x1, [{0x4, &(0x7f0000003880)=@lang_id={0x4, 0x3, 0x922a97c44306f8b1}}]}) (async) syz_usb_connect$cdc_ecm(0x5, 0x68, &(0x7f0000003900)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x1c, 0x60, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x6, 0x24, 0x6, 0x0, 0x0, "f5"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x8, 0x1, 0x1}, [@acm={0x4, 0x24, 0x2, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x5, 0x2, 0x89}, @ncm={0x6, 0x24, 0x1a, 0xc, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x0, 0xa}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf3, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x0, 0xf}}}}}]}}]}}, &(0x7f0000003a80)={0xa, &(0x7f0000003980)={0xa, 0x6, 0x200, 0xc, 0xfd, 0xde, 0x10, 0x9}, 0x42, &(0x7f00000039c0)={0x5, 0xf, 0x42, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xe, 0xdf, 0xfff8}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x8001, 0xf00, 0x7, [0x0, 0x30, 0xffc0, 0x3f18, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0xff, 0xb, 0x69d}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000003a40)=@lang_id={0x4, 0x3, 0x1009}}]}) (async) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x3) (async) syz_usb_connect$uac1(0x6, 0xb4, &(0x7f0000003ac0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x17, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x4}, [@feature_unit={0xf, 0x24, 0x6, 0x6, 0x2, 0x4, [0xa, 0x6, 0x9, 0x5], 0x3}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x0, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xfffc, 0x9, 0x90}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfe, 0x4, 0x9, {0x7, 0x25, 0x1, 0x0, 0xe1, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x56, 0x66}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x1, 0x1, "e80b", "1a"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x5, 0x8001, 0x4b, "1bb0249d9a4c5e0882"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x72, 0x9, 0x2, {0x7, 0x25, 0x1, 0x80, 0xae, 0x200}}}}}}}]}}, &(0x7f0000003dc0)={0xa, &(0x7f0000003b80)={0xa, 0x6, 0x200, 0x6, 0x0, 0x81, 0x40, 0xe2}, 0xdb, &(0x7f0000003bc0)={0x5, 0xf, 0xdb, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0x6, 0x0, 0xe0}, @generic={0xb7, 0x10, 0x2, "0bf83ea704439a7d6f887939df794bbafceb8f511eb6bccc7c3407360b2ca74f241be30682a1419a86d7935ebb07c6cd749055ddd4c4e9f0ad9a8804dcbd6041b49521095644645be2bc6664bca2014f9e165cdc96ab9eddcc128894d472e70d567860a994019a133bb7924bf27cca63d61afa628c3f1023ae50b939eb9cd5a6c76c8cb9e5146a816985877c9a1465dde00a75ccacd091a439c593df294f13735e2167ccf2bd4867d5569222db336ff884cdb87d"}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x8, 0xf00f, 0x1, [0xc0c0, 0xff3fc0]}]}, 0x3, [{0x2d, &(0x7f0000003cc0)=@string={0x2d, 0x3, "4ac680f4c7ffb5a9a1d3fdd0fff5e3f361ffcb8e47785866917cfb3bf4d3746d10240a36804c5e5dbaf557"}}, {0x17, &(0x7f0000003d00)=@string={0x17, 0x3, "e961e576de80c36b397f8a3672ebc16c412c1665bc"}}, {0x62, &(0x7f0000003d40)=@string={0x62, 0x3, "68a0305d16703e0b3861679452480adb4d2d1bc8adcc05ec670d20ec49c7793872d9035e27ee700fb9b1b6d38363e2462799a126a4c22ebccd3802e3d87e926530759e57bb8393c8e485555b61ea01e093b1b3b8b5b627740b3eec05a8522d48"}}]}) (async) syz_usb_connect$cdc_ncm(0x4, 0x13a, &(0x7f0000003e00)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x128, 0x2, 0x1, 0xf9, 0x60, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x2, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0xfff, 0x16}, [@mdlm_detail={0x43, 0x24, 0x13, 0x4, "e4c92a83e0f6e12ee310aef8f76048a782d962a6932cdce48e597858f8481b7c76ce1586fc4b56d0bbe23bc3206354bd8d67ec1e4a65d053b304e89ba057eb"}, @mdlm={0x15}, @mdlm_detail={0x53, 0x24, 0x13, 0x0, "2d23e58e530319f5315e632a3c8d65a1ec9a3803c364c8c4f7b91bf36aa416f0bce37bd388fe2a2e1c43683e4805502bf30aa9a6f322ba0e496241ab302d51e86113bca29e97019d08f71c1098e4da"}, @mdlm={0x15, 0x24, 0x12, 0x7}, @mbim={0xc, 0x24, 0x1b, 0xfff, 0x5, 0x9, 0xff, 0x0, 0xd}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x4, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7f, 0x10, 0xa}}}}}}}]}}, &(0x7f0000004000)={0xa, &(0x7f0000003f40)={0xa, 0x6, 0x330, 0x4, 0xa5, 0x6, 0xff, 0x7}, 0x3f, &(0x7f0000003f80)={0x5, 0xf, 0x3f, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x0, 0x9, 0x5, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x10, 0x7, 0xf0b}, @ssp_cap={0xc, 0x10, 0xa, 0x40, 0x0, 0x2, 0xff0f, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x60, 0xe, 0xa, 0x0, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x38, 0x4, 0x59, 0x40, 0xf9}]}, 0x1, [{0x4, &(0x7f0000003fc0)=@lang_id={0x4, 0x3, 0x42b}}]}) (async) syz_usb_connect$cdc_ecm(0x2, 0x10d, &(0x7f0000004040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfb, 0x1, 0x1, 0x4, 0xf0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x9, 0x24, 0x6, 0x0, 0x0, "ebbb3020"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x6, 0x81}, [@ncm={0x6, 0x24, 0x1a, 0x9, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x5, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x1, 0x24, 0x9, 0x7fff, 0x19}, @mdlm_detail={0xa2, 0x24, 0x13, 0xfb, "4ae909f1495f5a65894dfbef3425bddc6242afc996e1f57bc9e000b062a1de9494481ae4f8271361224d18c5be5d5f2d7769e1dc4bc2b90b29120cecce5ff51e1f0e0fd7ecf504fd9a37d12b1c6444b952d4329029a6e4b6f5713401506bb66d4beefdc4edf4c38a9692fb6c777a38cdeffa5c5dddc7127093345a078387a236687ebd77a449fbeae17dc9c40f8cf4589ed0193ac99d4c2f79bc5fbaf04e"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xec, 0xe, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x5, 0x2}}}}}]}}]}}, &(0x7f00000042c0)={0xa, &(0x7f0000004180)={0xa, 0x6, 0x110, 0x6, 0x2, 0x9, 0x40, 0x4}, 0x5, &(0x7f00000041c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000004200)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000004240)=@lang_id={0x4, 0x3, 0x2c09}}, {0x2d, &(0x7f0000004280)=@string={0x2d, 0x3, "749abb4daa67d00c2a5acbab02d5740df765f26284cc4459d4d30739efecf9594366da4cff09a4a99c473c"}}]}) syz_genetlink_get_family_id$smc(&(0x7f0000004300), r2) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000004380), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000004440)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004400)={&(0x7f00000043c0)={0x1c, r5, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x8c) (async) gettid() 1.566202592s ago: executing program 0 (id=2199): ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x1000040, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d64656661606d40caee5c33a7746976653a2c00"]) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x22}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x1, &(0x7f0000000b00)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff5}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, 0x0, 0x0, 0x10000, &(0x7f0000001000)={0x77359400}) getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRES8=r0, @ANYRES64=r3, @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) 1.501715523s ago: executing program 0 (id=2202): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.501212909s ago: executing program 0 (id=2204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xf, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 1.384137927s ago: executing program 0 (id=2209): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f0420011304"], 0x7) 1.384021263s ago: executing program 1 (id=2210): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x24) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e24, 0x4, @private0, 0x10}}, 0x10000, 0x4, 0x81, 0x9, 0x1, 0xa369, 0x7}, 0x9c) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x4, 0x1000) fanotify_mark(r6, 0x1, 0x8000021, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.336133575s ago: executing program 0 (id=2211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1.22565344s ago: executing program 3 (id=2212): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0x9, 0x7, 0x4c5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.135840141s ago: executing program 3 (id=2213): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24044010) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="240000004000070126bd700000000000047c00000c0008000900", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x24}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) (async) recvmmsg(r0, 0x0, 0x0, 0x14022, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x800038, 0x7, 0x3, 0x180, 0x6, 0x10, 0xf1, 0x100000001, 0x1, 0xca0, 0x0, 0x2000000002d, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x2c}) (async) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) (async) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4e00, 0x0) ioctl$CDROM_DISC_STATUS(r4, 0x5327) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000010001000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2000000003000000000000000000000000000000000000000000000072e89c684f232da15805176e8f022bfea44da51cf4d59d00c9869546539220e050c35a6a2bdc50dd64a72e17166d58b62779f1fb2e3b6bb34773c07e0b784b39f757325bc6b00eb38cf991e55bbc261e32fbb2648cd599808a35e128eee8de91"], 0x50) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000380)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x7fda8000) read(r3, &(0x7f00000000c0)=""/175, 0x20) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) (async) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="ee"], 0x2c}}, 0x20008000) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) (async, rerun: 32) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 794.662246ms ago: executing program 3 (id=2215): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x5, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, 0x0, 0x4000044) 743.452048ms ago: executing program 3 (id=2217): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f00000025c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000027c0)={0x2020}, 0x2020) 743.241782ms ago: executing program 2 (id=2218): socket(0x2b, 0x80801, 0x1) socket(0x2b, 0x80801, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (fail_nth: 2) 694.063481ms ago: executing program 3 (id=2219): r0 = userfaultfd(0x80001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8515e3a1e8951ab68876b3042c8de68fa4bdcede80ded31ef46f546958ae5804423398a79116a4fd7e76d34c9c073869ddb1df972f2f9f897301e7e743efa0d208535c57a474008b7073b4a64e9b98", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf25010000000000000002410000001000137564703a73797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2004851}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0xf, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x39}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) lseek(r4, 0x0, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)="8c") semget$private(0x0, 0x1, 0x4d) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x200000, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 633.616799ms ago: executing program 2 (id=2220): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x5, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r5, @ANYBLOB="200001", @ANYRES32=r7, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x4000044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 541.72158ms ago: executing program 3 (id=2221): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0x9, 0x7, 0x4c5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x10, 0x4}, 0x94) 540.94712ms ago: executing program 1 (id=2222): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0x800000000000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000040), 0x0, 0x80800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 272.089918ms ago: executing program 2 (id=2223): socket(0x2b, 0x80801, 0x1) socket(0x2b, 0x80801, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0xf8, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}, [@INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "4fec1631b98b47fdedf1109cef5ba0781e65877d0d75d6d0e03f3eca0b64021d22eac9b4a181c9ae4e9b49badef492be69a6c3233bf80abb8fa7294aa7d44d8f59b70630d5ac30fca16db59cc2cdbe2959c0d1fbb0b2fdf79acf038ad8b16fa3f8cbd8ee1c6bbd0eef40440e2e166ea2c0ef80230e054e6beab292272e9cb4f65199bacc9dc3a23598ed660f701822f75d05728cf1126ea640e22a888c6022afcf9781417f91f8d891da1c2cce76074cb2faa828a2bca9910bb36bd3d0d897ad36e1453b10c39c635bcd2dec5b241c9161cd01a80396cddfebb869cc71355e"}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x8810) 271.917166ms ago: executing program 2 (id=2224): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) (fail_nth: 2) 170.520533ms ago: executing program 1 (id=2225): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x2c, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r5, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8000, 0x30}}}}, ["", "", "", "", "", "", "", ""]}, 0x57}}, 0x2400c0c0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b30, &(0x7f0000000200)={'wlan1\x00'}) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 483.809µs ago: executing program 1 (id=2227): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x5, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, 0x0, 0x4000044) 213.93µs ago: executing program 1 (id=2228): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f00000025c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000027c0)={0x2020}, 0x2020) 0s ago: executing program 1 (id=2229): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x11) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") kernel console output (not intermixed with test programs): uest (10) to port 0 [ 211.071403][ T7638] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 211.262617][T10132] fuse: Bad value for 'fd' [ 211.552129][T10123] vhci_hcd: connection reset by peer [ 211.554778][ T1145] vhci_hcd vhci_hcd.3: stop threads [ 211.556481][ T1145] vhci_hcd vhci_hcd.3: release socket [ 211.560057][ T1145] vhci_hcd vhci_hcd.3: disconnect device [ 211.744208][T10154] tipc: Cannot configure node identity twice [ 211.810926][T10161] tipc: Enabled bearer , priority 0 [ 211.816354][T10161] tipc: Resetting bearer [ 211.822561][T10160] tipc: Disabling bearer [ 211.915866][T10170] syz_tun: entered allmulticast mode [ 211.923926][T10169] syz_tun: left allmulticast mode [ 212.034869][T10175] netlink: 'syz.2.1389': attribute type 30 has an invalid length. [ 212.810061][ T6261] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 212.981266][ T6261] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.991912][ T6261] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.008224][ T6261] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 213.017450][ T6261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.072682][ T6261] usb 6-1: config 0 descriptor?? [ 213.113555][ T6261] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 213.372668][T10186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.377597][T10186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.381132][ T59] usb 6-1: USB disconnect, device number 36 [ 213.469785][ T40] kauditd_printk_skb: 127 callbacks suppressed [ 213.469796][ T40] audit: type=1326 audit(1766841436.836:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10193 comm="syz.3.1397" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 213.497231][T10194] tipc: Enabled bearer , priority 0 [ 213.500719][ T40] audit: type=1326 audit(1766841436.846:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10193 comm="syz.3.1397" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 213.509975][T10194] tipc: Resetting bearer [ 213.512283][ T40] audit: type=1326 audit(1766841436.846:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10193 comm="syz.3.1397" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 213.520561][ T40] audit: type=1326 audit(1766841436.846:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10193 comm="syz.3.1397" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 213.528449][ T40] audit: type=1326 audit(1766841436.846:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10193 comm="syz.3.1397" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 213.537083][ T40] audit: type=1326 audit(1766841436.846:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10193 comm="syz.3.1397" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 213.538289][T10192] tipc: Disabling bearer [ 213.544769][ T40] audit: type=1326 audit(1766841436.846:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10193 comm="syz.3.1397" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 213.555246][ T40] audit: type=1326 audit(1766841436.846:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10193 comm="syz.3.1397" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 213.564492][ T40] audit: type=1326 audit(1766841436.846:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10193 comm="syz.3.1397" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 213.575151][ T40] audit: type=1326 audit(1766841436.846:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10193 comm="syz.3.1397" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 213.821472][T10215] netlink: 'syz.2.1404': attribute type 30 has an invalid length. [ 213.876302][T10216] netlink: 'syz.2.1404': attribute type 30 has an invalid length. [ 214.759926][T10233] tipc: Enabled bearer , priority 0 [ 214.770816][T10233] tipc: Resetting bearer [ 214.774184][T10232] tipc: Disabling bearer [ 215.339451][T10250] syz_tun: entered allmulticast mode [ 215.342801][T10249] syz_tun: left allmulticast mode [ 215.652393][T10270] syz_tun: entered allmulticast mode [ 215.657018][T10269] syz_tun: left allmulticast mode [ 216.065638][T10285] loop6: detected capacity change from 0 to 2560 [ 216.070701][T10285] buffer_io_error: 32 callbacks suppressed [ 216.070717][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.077589][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.081631][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.085355][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.091363][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.095190][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.098820][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.103016][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.106888][T10285] ldm_validate_partition_table(): Disk read failed. [ 216.110198][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.113213][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.123341][T10285] Dev loop6: unable to read RDB block 0 [ 216.126863][T10285] loop6: unable to read partition table [ 216.129535][T10285] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 216.169273][ T7638] usb 44-1: device descriptor read/8, error -110 [ 216.559266][ T59] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 216.559725][ T7638] usb usb44-port1: attempt power cycle [ 216.668546][T10297] fuse: Bad value for 'fd' [ 216.712611][ T59] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 216.716472][ T59] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 216.719703][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.723733][ T59] usb 7-1: config 0 descriptor?? [ 216.729983][ T59] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 216.795045][ T5345] ldm_validate_partition_table(): Disk read failed. [ 216.798216][ T5345] Dev loop6: unable to read RDB block 0 [ 216.801319][ T5345] loop6: unable to read partition table [ 216.934008][T10295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.941445][T10295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.947365][ T34] usb 7-1: USB disconnect, device number 33 [ 217.141679][ T7638] usb usb44-port1: unable to enumerate USB device [ 217.899279][ T848] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 218.061309][ T848] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.066597][ T848] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 218.070988][ T848] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 218.075403][ T848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.083774][ T848] usb 7-1: config 0 descriptor?? [ 218.097407][T10334] tipc: Enabled bearer , priority 0 [ 218.101267][T10334] tipc: Resetting bearer [ 218.105344][T10333] tipc: Disabling bearer [ 218.140439][T10335] loop6: detected capacity change from 0 to 2560 [ 218.145802][ T6058] ldm_validate_partition_table(): Disk read failed. [ 218.148798][ T6058] Dev loop6: unable to read RDB block 0 [ 218.153873][ T6058] loop6: unable to read partition table [ 218.201967][T10335] ldm_validate_partition_table(): Disk read failed. [ 218.205256][T10335] Dev loop6: unable to read RDB block 0 [ 218.209731][T10335] loop6: unable to read partition table [ 218.212417][T10335] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 218.306578][ T848] usb 7-1: USB disconnect, device number 34 [ 218.326687][T10341] netlink: 'syz.0.1452': attribute type 30 has an invalid length. [ 218.384981][T10343] netlink: 'syz.0.1452': attribute type 30 has an invalid length. [ 218.779446][ T848] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 218.939240][ T848] usb 7-1: Using ep0 maxpacket: 32 [ 218.973592][ T848] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.987424][ T848] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 219.004080][ T848] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 219.016216][ T848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.079582][ T848] usb 7-1: config 0 descriptor?? [ 219.135431][ T59] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 219.138741][ T59] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 219.142432][ T59] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 219.164423][ T59] hid-generic 0003:0004:0000.0003: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 219.193760][T10362] fido_id[10362]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 219.282052][T10356] tipc: Cannot configure node identity twice [ 219.287025][ T848] usb 7-1: USB disconnect, device number 35 [ 219.411737][T10372] tipc: Enabling of bearer rejected, already enabled [ 219.557267][T10377] loop6: detected capacity change from 0 to 2560 [ 219.560646][ T6058] ldm_validate_partition_table(): Disk read failed. [ 219.562974][ T6058] Dev loop6: unable to read RDB block 0 [ 219.565467][ T6058] loop6: unable to read partition table [ 219.570897][T10377] ldm_validate_partition_table(): Disk read failed. [ 219.573857][T10377] Dev loop6: unable to read RDB block 0 [ 219.576449][T10377] loop6: unable to read partition table [ 219.579179][T10377] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 219.841483][T10384] fuse: Bad value for 'fd' [ 219.859216][ T5943] Bluetooth: hci1: command 0x0c1a tx timeout [ 220.053681][ T59] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 220.243337][ T59] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 220.247499][ T59] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 220.250707][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.262963][ T59] usb 5-1: config 0 descriptor?? [ 220.338324][ T59] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 220.474170][T10382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.482247][T10382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.485682][ T59] usb 5-1: USB disconnect, device number 30 [ 221.740450][T10445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1492'. [ 221.941719][T10454] tipc: Enabled bearer , priority 0 [ 221.945565][T10454] tipc: Resetting bearer [ 221.949387][T10453] tipc: Disabling bearer [ 222.058324][ T40] kauditd_printk_skb: 237 callbacks suppressed [ 222.058339][ T40] audit: type=1326 audit(1766841445.416:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.1.1498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 222.068410][ T40] audit: type=1326 audit(1766841445.416:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.1.1498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 222.076201][ T40] audit: type=1326 audit(1766841445.426:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.1.1498" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 222.084567][ T40] audit: type=1326 audit(1766841445.426:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.1.1498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 222.092180][ T40] audit: type=1326 audit(1766841445.426:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.1.1498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 222.099836][ T40] audit: type=1326 audit(1766841445.436:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.1.1498" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 222.108416][ T40] audit: type=1326 audit(1766841445.436:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.1.1498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 222.116377][ T40] audit: type=1326 audit(1766841445.436:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.1.1498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 222.124583][ T40] audit: type=1326 audit(1766841445.446:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.1.1498" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 222.132692][ T40] audit: type=1326 audit(1766841445.446:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.1.1498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 222.707895][T10483] loop6: detected capacity change from 0 to 2560 [ 222.710463][T10483] buffer_io_error: 101 callbacks suppressed [ 222.710495][T10483] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.715726][T10483] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.718561][T10483] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.721800][T10483] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.725096][T10483] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.727942][T10483] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.731044][T10483] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.733844][T10483] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.736585][T10483] ldm_validate_partition_table(): Disk read failed. [ 222.738878][T10483] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.741996][T10483] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.744848][T10483] Dev loop6: unable to read RDB block 0 [ 222.746838][T10483] loop6: unable to read partition table [ 222.748829][T10483] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 223.139417][T10485] comedi comedi0: Minor 47 could not be opened [ 223.758371][ T5345] ldm_validate_partition_table(): Disk read failed. [ 223.766302][ T5345] Dev loop6: unable to read RDB block 0 [ 223.768881][ T5345] loop6: unable to read partition table [ 223.832493][T10509] tipc: Enabled bearer , priority 0 [ 223.836751][T10509] tipc: Resetting bearer [ 223.843569][T10508] tipc: Disabling bearer [ 223.939157][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.059733][T10531] loop6: detected capacity change from 0 to 2560 [ 224.074555][ T6058] ldm_validate_partition_table(): Disk read failed. [ 224.079307][ T6058] Dev loop6: unable to read RDB block 0 [ 224.081452][ T6058] loop6: unable to read partition table [ 224.089756][T10531] ldm_validate_partition_table(): Disk read failed. [ 224.092248][T10531] Dev loop6: unable to read RDB block 0 [ 224.094323][T10531] loop6: unable to read partition table [ 224.096325][T10531] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 224.168454][T10539] tipc: Enabled bearer , priority 0 [ 224.183056][T10539] tipc: Resetting bearer [ 224.191145][T10538] tipc: Disabling bearer [ 224.340974][T10553] binder: 10550:10553 ioctl c0306201 200000000640 returned -22 [ 224.507014][T10562] loop6: detected capacity change from 0 to 2560 [ 224.510783][T10562] ldm_validate_partition_table(): Disk read failed. [ 224.513663][T10562] Dev loop6: unable to read RDB block 0 [ 224.515660][T10562] loop6: unable to read partition table [ 224.517610][T10562] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 225.429175][ T6065] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 225.585455][ T6065] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.589073][ T6065] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.592298][ T6065] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 225.595380][ T6065] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.599379][ T6065] usb 6-1: config 0 descriptor?? [ 225.813601][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.821055][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.828131][ T6065] usbhid 6-1:0.0: can't add hid device: -71 [ 225.837671][ T6065] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 225.845030][ T6065] usb 6-1: USB disconnect, device number 37 [ 225.907647][ T5944] Bluetooth: hci1: Malformed LE Event: 0x1b [ 226.413092][T10598] binder: 10595:10598 ioctl c0306201 200000000640 returned -22 [ 227.301123][T10618] loop6: detected capacity change from 0 to 2560 [ 227.305177][T10618] ldm_validate_partition_table(): Disk read failed. [ 227.308048][T10618] Dev loop6: unable to read RDB block 0 [ 227.310193][T10618] loop6: unable to read partition table [ 227.312246][T10618] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 227.398743][T10624] fuse: Bad value for 'group_id' [ 227.400813][T10624] fuse: Bad value for 'group_id' [ 227.579300][ T59] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 227.684579][T10638] loop6: detected capacity change from 0 to 2560 [ 227.688289][ T6058] ldm_validate_partition_table(): Disk read failed. [ 227.691378][ T6058] Dev loop6: unable to read RDB block 0 [ 227.693791][ T6058] loop6: unable to read partition table [ 227.711828][T10638] ldm_validate_partition_table(): Disk read failed. [ 227.715114][T10638] Dev loop6: unable to read RDB block 0 [ 227.719107][T10638] buffer_io_error: 137 callbacks suppressed [ 227.719118][T10638] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.723681][T10638] loop6: unable to read partition table [ 227.736914][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.739882][T10638] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 227.744150][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.748676][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.757282][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.767456][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.841171][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.845106][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.848255][ T59] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 227.853103][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.858283][ T59] usb 7-1: config 0 descriptor?? [ 227.915204][ T40] kauditd_printk_skb: 227 callbacks suppressed [ 227.915217][ T40] audit: type=1326 audit(1766841451.276:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.3.1571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 227.939325][ T40] audit: type=1326 audit(1766841451.276:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.3.1571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 227.954205][ T40] audit: type=1326 audit(1766841451.296:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.3.1571" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 227.963856][ T40] audit: type=1326 audit(1766841451.296:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.3.1571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 227.973965][ T40] audit: type=1326 audit(1766841451.296:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.3.1571" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 227.984521][ T40] audit: type=1326 audit(1766841451.296:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.3.1571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 227.999107][ T40] audit: type=1326 audit(1766841451.296:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.3.1571" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 228.009469][ T40] audit: type=1326 audit(1766841451.296:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.3.1571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 228.022723][ T40] audit: type=1326 audit(1766841451.296:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.3.1571" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 228.030965][ T40] audit: type=1326 audit(1766841451.296:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.3.1571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00978f7c9 code=0x7ffc0000 [ 228.066136][T10620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.071965][T10620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.080181][ T59] usbhid 7-1:0.0: can't add hid device: -71 [ 228.082514][ T59] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 228.109229][ T59] usb 7-1: USB disconnect, device number 36 [ 228.467656][T10666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1577'. [ 228.475974][T10666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1577'. [ 228.620248][T10668] loop6: detected capacity change from 0 to 2560 [ 228.622736][T10668] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.649603][T10668] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.652875][T10668] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.659211][T10668] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.661788][T10668] ldm_validate_partition_table(): Disk read failed. [ 228.664070][T10668] Dev loop6: unable to read RDB block 0 [ 228.666033][T10668] loop6: unable to read partition table [ 228.667983][T10668] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 228.722274][ T5345] ldm_validate_partition_table(): Disk read failed. [ 228.725394][ T5345] Dev loop6: unable to read RDB block 0 [ 228.727961][ T5345] loop6: unable to read partition table [ 229.457665][T10702] binder: 10700:10702 ioctl 4018620d 0 returned -22 [ 229.511936][T10703] binder: 10700:10703 ioctl c0306201 200000000640 returned -22 [ 230.302315][T10714] fuse: Bad value for 'group_id' [ 230.304349][T10714] fuse: Bad value for 'group_id' [ 230.390806][T10719] netlink: 'syz.1.1596': attribute type 30 has an invalid length. [ 230.468818][T10720] netlink: 'syz.1.1596': attribute type 30 has an invalid length. [ 231.017925][ T6065] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 231.020613][ T6065] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 231.023094][ T6065] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 231.025672][ T6065] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 231.028470][ T6065] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 231.031266][ T6065] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 231.033792][ T6065] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 231.036381][ T6065] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 231.038843][ T6065] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 231.041802][ T6065] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 231.047062][ T6065] hid-generic 0003:0004:0000.0004: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 231.105310][T10733] fido_id[10733]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 231.237759][T10739] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10739 comm=syz.2.1604 [ 231.244661][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1604'. [ 231.256709][T10739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.283656][T10739] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 232.390069][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1617'. [ 232.472488][ T5943] block nbd1: Receive control failed (result -1) [ 232.934061][T10786] netlink: 'syz.1.1621': attribute type 30 has an invalid length. [ 233.178073][T10793] netlink: 'syz.1.1621': attribute type 30 has an invalid length. [ 233.421794][ T5943] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 233.490086][T10805] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 233.694637][T10815] netlink: 'syz.1.1631': attribute type 30 has an invalid length. [ 233.706032][T10815] netlink: 'syz.1.1631': attribute type 30 has an invalid length. [ 233.708052][ T1146] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.712907][ T1146] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.723150][ T1146] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.727289][ T1146] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.056675][ T40] kauditd_printk_skb: 171 callbacks suppressed [ 234.056687][ T40] audit: type=1400 audit(1766841457.416:2683): avc: denied { read } for pid=10817 comm="syz.1.1632" lport=60129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 234.579454][ T40] audit: type=1400 audit(1766841457.946:2684): avc: denied { read } for pid=10825 comm="syz.0.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 235.500707][T10843] fuse: Bad value for 'group_id' [ 235.502530][T10843] fuse: Bad value for 'group_id' [ 235.878584][T10871] fuse: Bad value for 'group_id' [ 235.882518][T10871] fuse: Bad value for 'group_id' [ 236.074197][ T40] audit: type=1326 audit(1766841459.436:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10877 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 236.086232][ T40] audit: type=1326 audit(1766841459.436:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10877 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 236.098842][ T40] audit: type=1326 audit(1766841459.436:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10877 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 236.112152][ T40] audit: type=1326 audit(1766841459.436:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10877 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 236.121928][ T40] audit: type=1326 audit(1766841459.436:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10877 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 236.131379][ T40] audit: type=1326 audit(1766841459.436:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10877 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 236.143189][ T40] audit: type=1326 audit(1766841459.436:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10877 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 236.155964][ T40] audit: type=1326 audit(1766841459.436:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10877 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 236.530904][T10898] fuse: Unknown parameter 'grou00000000000000000000' [ 236.826102][T10913] ªªªªªª: renamed from wg2 (while UP) [ 236.879140][ T6003] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 236.918300][T10911] tipc: Cannot configure node identity twice [ 237.029141][ T6003] usb 7-1: Using ep0 maxpacket: 8 [ 237.030807][ T6003] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 237.034471][ T6003] usb 7-1: config 0 has no interface number 0 [ 237.034497][ T6003] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.034509][ T6003] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 237.034522][ T6003] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.034534][ T6003] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.052260][ T6003] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 237.055300][ T6003] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.059599][ T6003] usb 7-1: config 0 descriptor?? [ 237.065763][ T6003] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 237.265440][ T6065] usb 7-1: USB disconnect, device number 37 [ 237.265497][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 237.273404][ T6065] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 237.704359][ T5944] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 238.059949][T10948] nbd2: detected capacity change from 0 to 127 [ 238.062976][T10951] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1681'. [ 238.067278][T10951] block nbd0: reconnected socket [ 238.072129][ T5944] block nbd2: Receive control failed (result -104) [ 238.077854][ T5943] block nbd0: Receive control failed (result -32) [ 238.681138][T10962] fuse: Unknown parameter 'grou00000000000000000000' [ 238.894876][T10973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 238.933800][ T5943] block nbd3: Receive control failed (result -1) [ 239.224562][T10988] loop6: detected capacity change from 0 to 2560 [ 239.227014][T10988] buffer_io_error: 33 callbacks suppressed [ 239.227023][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.233039][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.235638][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.238161][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.241899][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.244884][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.247527][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.250211][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.252788][T10988] ldm_validate_partition_table(): Disk read failed. [ 239.255284][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.257857][T10988] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.260540][T10988] Dev loop6: unable to read RDB block 0 [ 239.262449][T10988] loop6: unable to read partition table [ 239.269120][T10988] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 239.951275][ T40] kauditd_printk_skb: 152 callbacks suppressed [ 239.951286][ T40] audit: type=1326 audit(1766841463.316:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.2.1698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 239.977284][ T40] audit: type=1326 audit(1766841463.326:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.2.1698" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 239.997053][ T40] audit: type=1326 audit(1766841463.326:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.2.1698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 240.006017][ T40] audit: type=1326 audit(1766841463.326:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.2.1698" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 240.013694][ T40] audit: type=1326 audit(1766841463.326:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.2.1698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 240.024011][ T40] audit: type=1326 audit(1766841463.326:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.2.1698" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 240.033991][ T40] audit: type=1326 audit(1766841463.326:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.2.1698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 240.043778][ T40] audit: type=1326 audit(1766841463.326:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.2.1698" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 240.056961][ T40] audit: type=1326 audit(1766841463.326:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.2.1698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 240.067070][ T40] audit: type=1326 audit(1766841463.326:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.2.1698" exe="/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 240.115249][T11007] Bluetooth: MGMT ver 1.23 [ 240.435009][T11018] netlink: 'syz.2.1707': attribute type 30 has an invalid length. [ 240.488897][T11020] netlink: 'syz.2.1707': attribute type 30 has an invalid length. [ 241.490592][ T5943] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 241.526477][T11042] fuse: Unknown parameter 'group_i00000000000000000000' [ 242.365311][T11074] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 242.368166][T11074] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 242.373741][T11074] vhci_hcd vhci_hcd.0: Device attached [ 242.386532][T11074] random: crng reseeded on system resumption [ 242.689179][ T59] usb 40-1: SetAddress Request (10) to port 0 [ 242.691561][ T59] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 242.825393][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 242.831478][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 242.836132][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 242.841471][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 243.379635][T11074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.384841][T11075] vhci_hcd: connection reset by peer [ 243.392922][ T1146] vhci_hcd vhci_hcd.1: stop threads [ 243.429179][ T1146] vhci_hcd vhci_hcd.1: release socket [ 243.431137][ T1146] vhci_hcd vhci_hcd.1: disconnect device [ 243.718209][T11106] fuse: Bad value for 'fd' [ 243.797761][ T5944] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 244.045837][T11117] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1738'. [ 244.299512][ T5944] Bluetooth: hci0: connection err: -111 [ 244.889416][T11125] Driver unsupported XDP return value 0 on prog (id 60) dev N/A, expect packet loss! [ 245.003372][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 245.003384][ T40] audit: type=1326 audit(1766841468.366:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.1.1747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 245.029128][ T40] audit: type=1326 audit(1766841468.366:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.1.1747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 245.037035][ T40] audit: type=1326 audit(1766841468.366:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.1.1747" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 245.059113][ T40] audit: type=1326 audit(1766841468.366:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.1.1747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 245.066721][ T40] audit: type=1326 audit(1766841468.366:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.1.1747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 245.089092][ T40] audit: type=1326 audit(1766841468.366:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.1.1747" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 245.093216][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1749'. [ 245.096482][ T40] audit: type=1326 audit(1766841468.366:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.1.1747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 245.096508][ T40] audit: type=1326 audit(1766841468.366:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.1.1747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 245.117915][T11135] C: renamed from team_slave_0 (while UP) [ 245.139129][ T40] audit: type=1326 audit(1766841468.366:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.1.1747" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 245.146733][ T40] audit: type=1326 audit(1766841468.366:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.1.1747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 245.194826][ T5944] block nbd4: Receive control failed (result -107) [ 245.202403][T11135] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1745'. [ 245.205574][T11135] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 245.217584][T11139] loop6: detected capacity change from 0 to 2560 [ 245.229522][T11139] buffer_io_error: 11 callbacks suppressed [ 245.229536][T11139] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.234696][T11139] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.238048][T11139] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.249162][T11139] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.252216][T11139] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.255312][T11139] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.258402][T11139] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.266808][T11139] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.272238][T11139] ldm_validate_partition_table(): Disk read failed. [ 245.276940][T11139] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.289280][T11139] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.292385][T11139] Dev loop6: unable to read RDB block 0 [ 245.294435][T11139] loop6: unable to read partition table [ 245.301569][T11139] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 245.407024][ T5944] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 246.290812][T11166] binder: 11162:11166 ioctl c0306201 200000000640 returned -22 [ 246.786237][T11175] netlink: 'syz.0.1762': attribute type 30 has an invalid length. [ 246.839417][T11177] netlink: 'syz.0.1762': attribute type 30 has an invalid length. [ 247.445709][ T5944] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 247.779176][ T59] usb 40-1: device descriptor read/8, error -110 [ 248.070565][T11209] fuse: Bad value for 'fd' [ 248.170140][ T59] usb usb40-port1: attempt power cycle [ 248.184322][T11213] loop6: detected capacity change from 0 to 2560 [ 248.187776][T11213] ldm_validate_partition_table(): Disk read failed. [ 248.194228][T11213] Dev loop6: unable to read RDB block 0 [ 248.196979][T11213] loop6: unable to read partition table [ 248.199332][T11213] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 248.213431][T11214] netlink: 'syz.3.1773': attribute type 30 has an invalid length. [ 248.267716][T11216] netlink: 'syz.3.1773': attribute type 30 has an invalid length. [ 248.374644][T11222] binder: 11217:11222 ioctl c0306201 200000000640 returned -22 [ 248.749489][T11230] netlink: 'syz.0.1779': attribute type 4 has an invalid length. [ 248.749862][ T59] usb usb40-port1: unable to enumerate USB device [ 248.976890][T11234] syz1: rxe_newlink: already configured on syz_tun [ 249.287047][T11247] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1786'. [ 249.400566][T11245] tipc: Cannot configure node identity twice [ 249.589200][ T848] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 249.638760][T11260] fuse: Bad value for 'fd' [ 249.743554][ T848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.748579][ T848] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 249.752793][ T848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.758783][ T848] usb 6-1: config 0 descriptor?? [ 249.978659][T11251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.983357][T11251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.983690][T11266] fuse: Bad value for 'fd' [ 250.199477][ T848] usbhid 6-1:0.0: can't add hid device: -71 [ 250.208062][ T848] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 250.215692][ T848] usb 6-1: USB disconnect, device number 38 [ 250.393145][T11277] fuse: Unknown parameter 'group_i00000000000000000000' [ 250.777435][T11291] netlink: 'syz.2.1801': attribute type 30 has an invalid length. [ 250.853073][T11293] fuse: Bad value for 'fd' [ 250.875449][T11294] netlink: 'syz.2.1801': attribute type 30 has an invalid length. [ 251.935314][T11310] tipc: Enabling of bearer rejected, failed to enable media [ 252.016793][ T40] kauditd_printk_skb: 125 callbacks suppressed [ 252.016806][ T40] audit: type=1326 audit(1767365763.316:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11315 comm="syz.1.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 252.025949][ T40] audit: type=1326 audit(1767365763.316:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11315 comm="syz.1.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 252.034489][ T40] audit: type=1326 audit(1767365763.316:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11315 comm="syz.1.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 252.041843][ T40] audit: type=1326 audit(1767365763.316:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11315 comm="syz.1.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 252.049631][ T40] audit: type=1326 audit(1767365763.316:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11315 comm="syz.1.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 252.059785][ T40] audit: type=1326 audit(1767365763.316:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11315 comm="syz.1.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 252.064672][T11318] tipc: Enabling of bearer rejected, failed to enable media [ 252.069033][ T40] audit: type=1326 audit(1767365763.316:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11315 comm="syz.1.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 252.080551][ T40] audit: type=1326 audit(1767365763.316:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11315 comm="syz.1.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 252.087532][ T40] audit: type=1326 audit(1767365763.316:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11315 comm="syz.1.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 252.094545][ T40] audit: type=1326 audit(1767365763.316:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11315 comm="syz.1.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 252.308188][ T59] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 252.484878][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.488676][ T59] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 252.491706][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.497297][ T59] usb 6-1: config 0 descriptor?? [ 252.709171][T11322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.712181][T11322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.923050][ T59] usbhid 6-1:0.0: can't add hid device: -71 [ 252.926257][ T59] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 252.930089][ T59] usb 6-1: USB disconnect, device number 39 [ 253.103367][T11334] tipc: Enabling of bearer rejected, failed to enable media [ 253.662312][T11361] rdma_rxe: rxe_newlink: failed to add syz_tun [ 254.317259][T11364] tipc: Enabling of bearer rejected, failed to enable media [ 254.403462][T11376] netlink: 'syz.3.1829': attribute type 30 has an invalid length. [ 254.408165][T11378] netlink: 'syz.0.1831': attribute type 30 has an invalid length. [ 254.457908][T11379] netlink: 'syz.3.1829': attribute type 30 has an invalid length. [ 254.461111][T11380] netlink: 'syz.0.1831': attribute type 30 has an invalid length. [ 254.517360][T11381] 9pnet_virtio: no channels available for device syz [ 254.559078][ T6064] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 254.729893][ T6064] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.734059][ T6064] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 254.737476][ T6064] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.757980][ T6064] usb 6-1: config 0 descriptor?? [ 254.924515][T11389] FAULT_INJECTION: forcing a failure. [ 254.924515][T11389] name failslab, interval 1, probability 0, space 0, times 1 [ 254.929598][T11389] CPU: 2 UID: 0 PID: 11389 Comm: syz.2.1837 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.929623][T11389] Tainted: [L]=SOFTLOCKUP [ 254.929628][T11389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.929637][T11389] Call Trace: [ 254.929643][T11389] [ 254.929649][T11389] dump_stack_lvl+0x16c/0x1f0 [ 254.929695][T11389] should_fail_ex+0x512/0x640 [ 254.929720][T11389] ? __kmalloc_noprof+0xca/0x910 [ 254.929744][T11389] should_failslab+0xc2/0x120 [ 254.929764][T11389] __kmalloc_noprof+0xeb/0x910 [ 254.929786][T11389] ? kernfs_fop_write_iter+0x237/0x570 [ 254.929811][T11389] ? kernfs_fop_write_iter+0x237/0x570 [ 254.929831][T11389] kernfs_fop_write_iter+0x237/0x570 [ 254.929855][T11389] vfs_write+0x7d3/0x11d0 [ 254.929874][T11389] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 254.929897][T11389] ? __pfx_vfs_write+0x10/0x10 [ 254.929929][T11389] ksys_write+0x12a/0x250 [ 254.929946][T11389] ? __pfx_ksys_write+0x10/0x10 [ 254.929970][T11389] do_syscall_64+0xcd/0xf80 [ 254.929990][T11389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.930006][T11389] RIP: 0033:0x7fb12118f7c9 [ 254.930018][T11389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.930032][T11389] RSP: 002b:00007fb121fc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.930046][T11389] RAX: ffffffffffffffda RBX: 00007fb1213e5fa0 RCX: 00007fb12118f7c9 [ 254.930056][T11389] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003 [ 254.930065][T11389] RBP: 00007fb121fc2090 R08: 0000000000000000 R09: 0000000000000000 [ 254.930074][T11389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.930083][T11389] R13: 00007fb1213e6038 R14: 00007fb1213e5fa0 R15: 00007ffef5561108 [ 254.930104][T11389] [ 254.990527][T11371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.029420][T11371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.240241][ T6064] usbhid 6-1:0.0: can't add hid device: -71 [ 255.242486][ T6064] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 255.247207][ T6064] usb 6-1: USB disconnect, device number 40 [ 255.615448][T11396] tipc: Enabling of bearer rejected, failed to enable media [ 255.800638][T11417] tipc: Enabling of bearer rejected, failed to enable media [ 255.907697][T11426] fuse: Bad value for 'rootmode' [ 255.928101][T11428] netlink: 'syz.0.1853': attribute type 30 has an invalid length. [ 255.980927][T11429] netlink: 'syz.0.1853': attribute type 30 has an invalid length. [ 256.746425][T11443] tipc: Enabling of bearer rejected, failed to enable media [ 256.818029][T11450] fuse: Bad value for 'rootmode' [ 256.854093][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1864'. [ 256.917157][ T5944] block nbd5: Receive control failed (result -1) [ 257.101552][T11463] tipc: Enabling of bearer rejected, failed to enable media [ 257.835041][T11469] Set syz1 is full, maxelem 1023 reached [ 257.837883][T11469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1870'. [ 257.921411][ T40] kauditd_printk_skb: 378 callbacks suppressed [ 257.921425][ T40] audit: type=1326 audit(1767365769.079:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1872" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 257.935153][ T40] audit: type=1326 audit(1767365769.088:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1872" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 257.945217][ T40] audit: type=1326 audit(1767365769.088:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1872" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 257.955822][ T40] audit: type=1326 audit(1767365769.088:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1872" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 257.963860][T11475] fuse: Unknown parameter 'use00000000000000000000' [ 257.964971][ T40] audit: type=1326 audit(1767365769.088:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1872" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 257.982132][ T40] audit: type=1326 audit(1767365769.098:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1872" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 257.991717][ T40] audit: type=1326 audit(1767365769.098:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1872" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 258.001643][ T40] audit: type=1326 audit(1767365769.098:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1872" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 258.010338][ T40] audit: type=1326 audit(1767365769.108:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1872" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 258.018739][ T40] audit: type=1326 audit(1767365769.108:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1872" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 258.061642][T11482] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1876'. [ 258.113740][ T6064] IPVS: starting estimator thread 0... [ 258.114517][T11488] QAT: failed to copy from user. [ 258.124850][T11488] syz.3.1879 uses obsolete (PF_INET,SOCK_PACKET) [ 258.212949][T11489] IPVS: using max 30 ests per chain, 72000 per kthread [ 258.429466][T11509] fuse: Unknown parameter 'use00000000000000000000' [ 258.859614][T11534] FAULT_INJECTION: forcing a failure. [ 258.859614][T11534] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 258.865439][T11534] CPU: 2 UID: 0 PID: 11534 Comm: syz.2.1896 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.865466][T11534] Tainted: [L]=SOFTLOCKUP [ 258.865472][T11534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 258.865481][T11534] Call Trace: [ 258.865487][T11534] [ 258.865493][T11534] dump_stack_lvl+0x16c/0x1f0 [ 258.865520][T11534] should_fail_ex+0x512/0x640 [ 258.865546][T11534] _copy_from_user+0x2e/0xd0 [ 258.865571][T11534] copy_msghdr_from_user+0x98/0x160 [ 258.865589][T11534] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 258.865617][T11534] ___sys_sendmsg+0xfe/0x1d0 [ 258.865635][T11534] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.865681][T11534] __sys_sendmsg+0x16d/0x220 [ 258.865698][T11534] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.865730][T11534] do_syscall_64+0xcd/0xf80 [ 258.865753][T11534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.865771][T11534] RIP: 0033:0x7fb12118f7c9 [ 258.865785][T11534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.865801][T11534] RSP: 002b:00007fb121fc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.865819][T11534] RAX: ffffffffffffffda RBX: 00007fb1213e5fa0 RCX: 00007fb12118f7c9 [ 258.865830][T11534] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 258.865840][T11534] RBP: 00007fb121fc2090 R08: 0000000000000000 R09: 0000000000000000 [ 258.865850][T11534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.865860][T11534] R13: 00007fb1213e6038 R14: 00007fb1213e5fa0 R15: 00007ffef5561108 [ 258.865884][T11534] [ 259.110583][T11551] fuse: Unknown parameter 'use00000000000000000000' [ 259.280873][T11559] netlink: 'syz.0.1905': attribute type 30 has an invalid length. [ 259.323025][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 259.333457][T11560] netlink: 'syz.0.1905': attribute type 30 has an invalid length. [ 259.463975][T11562] overlayfs: failed to clone upperpath [ 259.477076][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.480829][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 259.484200][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.488779][ T10] usb 6-1: config 0 descriptor?? [ 259.703413][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 259.707376][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 259.712812][ T10] usb 6-1: USB disconnect, device number 41 [ 259.742249][T11579] netlink: 'syz.0.1914': attribute type 30 has an invalid length. [ 259.794365][T11580] netlink: 'syz.0.1914': attribute type 30 has an invalid length. [ 259.999706][T11585] fuse: Bad value for 'fd' [ 260.500588][ T5944] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 260.592244][T11607] FAULT_INJECTION: forcing a failure. [ 260.592244][T11607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.597011][T11607] CPU: 2 UID: 0 PID: 11607 Comm: syz.2.1926 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.597029][T11607] Tainted: [L]=SOFTLOCKUP [ 260.597033][T11607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 260.597039][T11607] Call Trace: [ 260.597043][T11607] [ 260.597048][T11607] dump_stack_lvl+0x16c/0x1f0 [ 260.597065][T11607] should_fail_ex+0x512/0x640 [ 260.597083][T11607] _copy_from_user+0x2e/0xd0 [ 260.597099][T11607] copy_msghdr_from_user+0x98/0x160 [ 260.597116][T11607] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 260.597133][T11607] ___sys_sendmsg+0xfe/0x1d0 [ 260.597144][T11607] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.597170][T11607] __sys_sendmsg+0x16d/0x220 [ 260.597180][T11607] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.597199][T11607] do_syscall_64+0xcd/0xf80 [ 260.597213][T11607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.597224][T11607] RIP: 0033:0x7fb12118f7c9 [ 260.597233][T11607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.597244][T11607] RSP: 002b:00007fb121fc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.597254][T11607] RAX: ffffffffffffffda RBX: 00007fb1213e5fa0 RCX: 00007fb12118f7c9 [ 260.597261][T11607] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 260.597267][T11607] RBP: 00007fb121fc2090 R08: 0000000000000000 R09: 0000000000000000 [ 260.597273][T11607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.597279][T11607] R13: 00007fb1213e6038 R14: 00007fb1213e5fa0 R15: 00007ffef5561108 [ 260.597300][T11607] [ 260.772448][T11616] overlayfs: failed to get inode (-116) [ 260.775450][T11616] overlayfs: failed to get inode (-116) [ 260.779052][T11616] FAULT_INJECTION: forcing a failure. [ 260.779052][T11616] name failslab, interval 1, probability 0, space 0, times 0 [ 260.787719][T11616] CPU: 0 UID: 0 PID: 11616 Comm: syz.2.1930 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.787773][T11616] Tainted: [L]=SOFTLOCKUP [ 260.787798][T11616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 260.787810][T11616] Call Trace: [ 260.787816][T11616] [ 260.787823][T11616] dump_stack_lvl+0x16c/0x1f0 [ 260.787849][T11616] should_fail_ex+0x512/0x640 [ 260.787874][T11616] ? kmem_cache_alloc_noprof+0x62/0x770 [ 260.787894][T11616] should_failslab+0xc2/0x120 [ 260.787917][T11616] kmem_cache_alloc_noprof+0x83/0x770 [ 260.787934][T11616] ? getname_flags.part.0+0x4c/0x550 [ 260.787957][T11616] ? getname_flags.part.0+0x4c/0x550 [ 260.787974][T11616] getname_flags.part.0+0x4c/0x550 [ 260.787995][T11616] getname_flags+0x93/0xf0 [ 260.788016][T11616] do_sys_openat2+0xb9/0x290 [ 260.788032][T11616] ? __pfx_do_sys_openat2+0x10/0x10 [ 260.788050][T11616] ? __fget_files+0x20e/0x3c0 [ 260.788080][T11616] __x64_sys_creat+0xcc/0x120 [ 260.788097][T11616] ? __pfx___x64_sys_creat+0x10/0x10 [ 260.788112][T11616] ? __pfx_ksys_write+0x10/0x10 [ 260.788136][T11616] ? rcu_is_watching+0x12/0xc0 [ 260.788152][T11616] ? do_syscall_64+0x91/0xf80 [ 260.788174][T11616] do_syscall_64+0xcd/0xf80 [ 260.788203][T11616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.788221][T11616] RIP: 0033:0x7fb12118f7c9 [ 260.788235][T11616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.788251][T11616] RSP: 002b:00007fb121fc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 260.788268][T11616] RAX: ffffffffffffffda RBX: 00007fb1213e5fa0 RCX: 00007fb12118f7c9 [ 260.788279][T11616] RDX: 0000000000000000 RSI: 000000000000012e RDI: 0000200000000200 [ 260.788289][T11616] RBP: 00007fb121fc2090 R08: 0000000000000000 R09: 0000000000000000 [ 260.788300][T11616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.788310][T11616] R13: 00007fb1213e6038 R14: 00007fb1213e5fa0 R15: 00007ffef5561108 [ 260.788334][T11616] [ 260.919597][T11619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1931'. [ 260.928328][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.931177][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.994815][ T5944] block nbd6: Receive control failed (result -1) [ 261.251459][T11623] fuse: Unknown parameter 'user_i00000000000000000000' [ 261.529515][T11638] No such timeout policy "syz1" [ 261.534608][T11638] netlink: 75 bytes leftover after parsing attributes in process `syz.2.1938'. [ 261.548515][T11638] IPv6: Can't replace route, no match found [ 261.594709][T11643] netlink: 'syz.0.1940': attribute type 30 has an invalid length. [ 261.646862][T11649] netlink: 'syz.0.1940': attribute type 30 has an invalid length. [ 261.970968][T11677] fuse: Invalid rootmode [ 262.158307][T11689] FAULT_INJECTION: forcing a failure. [ 262.158307][T11689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.166536][T11689] CPU: 2 UID: 0 PID: 11689 Comm: syz.1.1959 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.166556][T11689] Tainted: [L]=SOFTLOCKUP [ 262.166560][T11689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 262.166566][T11689] Call Trace: [ 262.166571][T11689] [ 262.166575][T11689] dump_stack_lvl+0x16c/0x1f0 [ 262.166594][T11689] should_fail_ex+0x512/0x640 [ 262.166613][T11689] _copy_from_user+0x2e/0xd0 [ 262.166630][T11689] do_fcntl+0x410/0x1660 [ 262.166641][T11689] ? __pfx_do_fcntl+0x10/0x10 [ 262.166673][T11689] ? selinux_file_fcntl+0x93/0x170 [ 262.166724][T11689] __x64_sys_fcntl+0x163/0x200 [ 262.166739][T11689] do_syscall_64+0xcd/0xf80 [ 262.166755][T11689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.166767][T11689] RIP: 0033:0x7f3a4078f7c9 [ 262.166776][T11689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.166786][T11689] RSP: 002b:00007f3a416b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 262.166797][T11689] RAX: ffffffffffffffda RBX: 00007f3a409e6090 RCX: 00007f3a4078f7c9 [ 262.166803][T11689] RDX: 0000200000000080 RSI: 0000000000000026 RDI: 0000000000000007 [ 262.166809][T11689] RBP: 00007f3a416b3090 R08: 0000000000000000 R09: 0000000000000000 [ 262.166815][T11689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.166821][T11689] R13: 00007f3a409e6128 R14: 00007f3a409e6090 R15: 00007ffcb490eb88 [ 262.166834][T11689] [ 262.540085][T11704] tipc: Cannot configure node identity twice [ 263.203031][T11720] fuse: Unknown parameter 'user_id00000000000000000000' [ 263.268671][ T40] kauditd_printk_skb: 260 callbacks suppressed [ 263.268681][ T40] audit: type=1400 audit(1767365774.342:3768): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 263.301415][ T40] audit: type=1326 audit(1767365774.371:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 263.314932][ T40] audit: type=1326 audit(1767365774.371:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 263.325507][ T40] audit: type=1326 audit(1767365774.371:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 263.337665][ T40] audit: type=1326 audit(1767365774.371:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 263.355626][ T40] audit: type=1326 audit(1767365774.371:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 263.375728][ T40] audit: type=1326 audit(1767365774.371:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 263.386258][ T40] audit: type=1326 audit(1767365774.371:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 263.402746][ T40] audit: type=1326 audit(1767365774.371:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 263.417180][ T40] audit: type=1326 audit(1767365774.371:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.1.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a4078f7c9 code=0x7ffc0000 [ 263.582398][T11753] netlink: 'syz.0.1984': attribute type 30 has an invalid length. [ 263.637764][T11750] netlink: 'syz.0.1984': attribute type 30 has an invalid length. [ 264.144383][ T5943] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 264.291319][T11794] fuse: Bad value for 'fd' [ 264.842665][T11821] fuse: Bad value for 'fd' [ 265.111920][T11833] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2017'. [ 265.183044][T11840] FAULT_INJECTION: forcing a failure. [ 265.183044][T11840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.187463][T11840] CPU: 0 UID: 0 PID: 11840 Comm: syz.3.2020 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.187479][T11840] Tainted: [L]=SOFTLOCKUP [ 265.187483][T11840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.187489][T11840] Call Trace: [ 265.187493][T11840] [ 265.187497][T11840] dump_stack_lvl+0x16c/0x1f0 [ 265.187514][T11840] should_fail_ex+0x512/0x640 [ 265.187532][T11840] _copy_from_user+0x2e/0xd0 [ 265.187548][T11840] copy_msghdr_from_user+0x98/0x160 [ 265.187559][T11840] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 265.187571][T11840] ? __pfx__kstrtoull+0x10/0x10 [ 265.187585][T11840] ___sys_sendmsg+0xfe/0x1d0 [ 265.187595][T11840] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.187611][T11840] ? find_held_lock+0x2b/0x80 [ 265.187635][T11840] __sys_sendmmsg+0x200/0x420 [ 265.187647][T11840] ? __pfx___sys_sendmmsg+0x10/0x10 [ 265.187661][T11840] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 265.187681][T11840] ? fput+0x70/0xf0 [ 265.187690][T11840] ? ksys_write+0x1ac/0x250 [ 265.187703][T11840] ? __pfx_ksys_write+0x10/0x10 [ 265.187718][T11840] __x64_sys_sendmmsg+0x9c/0x100 [ 265.187728][T11840] ? lockdep_hardirqs_on+0x7c/0x110 [ 265.187741][T11840] do_syscall_64+0xcd/0xf80 [ 265.187755][T11840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.187765][T11840] RIP: 0033:0x7ff00978f7c9 [ 265.187774][T11840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.187784][T11840] RSP: 002b:00007ff00a65b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 265.187794][T11840] RAX: ffffffffffffffda RBX: 00007ff0099e5fa0 RCX: 00007ff00978f7c9 [ 265.187801][T11840] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 265.187807][T11840] RBP: 00007ff00a65b090 R08: 0000000000000000 R09: 0000000000000000 [ 265.187812][T11840] R10: 00000000240c089d R11: 0000000000000246 R12: 0000000000000001 [ 265.187818][T11840] R13: 00007ff0099e6038 R14: 00007ff0099e5fa0 R15: 00007ffe5de3b8f8 [ 265.187831][T11840] [ 265.315507][ T5943] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 265.451979][ T5944] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 265.451989][ T5943] Bluetooth: hci2: command 0x0c1a tx timeout [ 265.488450][T11861] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.491869][T11861] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.568627][T11861] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.572278][T11861] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.659720][T11861] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.663254][T11861] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.738506][T11861] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.741991][T11861] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.795147][T11868] binder: 11867:11868 ioctl c0306201 200000000640 returned -22 [ 265.832438][T11870] FAULT_INJECTION: forcing a failure. [ 265.832438][T11870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.837338][T11870] CPU: 1 UID: 0 PID: 11870 Comm: syz.2.2032 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.837355][T11870] Tainted: [L]=SOFTLOCKUP [ 265.837359][T11870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.837365][T11870] Call Trace: [ 265.837369][T11870] [ 265.837373][T11870] dump_stack_lvl+0x16c/0x1f0 [ 265.837390][T11870] should_fail_ex+0x512/0x640 [ 265.837407][T11870] _copy_from_user+0x2e/0xd0 [ 265.837423][T11870] copy_msghdr_from_user+0x98/0x160 [ 265.837435][T11870] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 265.837451][T11870] ___sys_sendmsg+0xfe/0x1d0 [ 265.837462][T11870] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.837487][T11870] __sys_sendmsg+0x16d/0x220 [ 265.837497][T11870] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.837515][T11870] do_syscall_64+0xcd/0xf80 [ 265.837529][T11870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.837541][T11870] RIP: 0033:0x7fb12118f7c9 [ 265.837549][T11870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.837559][T11870] RSP: 002b:00007fb121fc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.837569][T11870] RAX: ffffffffffffffda RBX: 00007fb1213e5fa0 RCX: 00007fb12118f7c9 [ 265.837576][T11870] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 265.837582][T11870] RBP: 00007fb121fc2090 R08: 0000000000000000 R09: 0000000000000000 [ 265.837587][T11870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.837593][T11870] R13: 00007fb1213e6038 R14: 00007fb1213e5fa0 R15: 00007ffef5561108 [ 265.837606][T11870] [ 265.900312][ T1146] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.902871][ T1146] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.905461][ T1146] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.908154][ T1146] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.911252][ T1146] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.914100][ T1146] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.916680][ T1146] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.919392][ T1146] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.312036][ T7638] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 266.371289][ T5944] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 266.484040][ T7638] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.488711][ T7638] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 266.492511][ T7638] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.497893][ T7638] usb 7-1: config 0 descriptor?? [ 266.705422][T11888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.708456][T11888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.742295][T11914] tipc: Enabling of bearer rejected, failed to enable media [ 266.915533][ T7638] usbhid 7-1:0.0: can't add hid device: -71 [ 266.920991][ T7638] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 266.926309][ T7638] usb 7-1: USB disconnect, device number 38 [ 267.108604][T11931] FAULT_INJECTION: forcing a failure. [ 267.108604][T11931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.114169][T11931] CPU: 2 UID: 0 PID: 11931 Comm: syz.1.2057 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.114187][T11931] Tainted: [L]=SOFTLOCKUP [ 267.114190][T11931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 267.114197][T11931] Call Trace: [ 267.114200][T11931] [ 267.114205][T11931] dump_stack_lvl+0x16c/0x1f0 [ 267.114222][T11931] should_fail_ex+0x512/0x640 [ 267.114240][T11931] _copy_from_user+0x2e/0xd0 [ 267.114261][T11931] ip_mroute_setsockopt+0xf41/0x1420 [ 267.114285][T11931] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 267.114316][T11931] ? avc_has_perm_noaudit+0x149/0x3b0 [ 267.114344][T11931] do_ip_setsockopt+0x2de/0x38a0 [ 267.114378][T11931] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 267.114400][T11931] ? get_pid_task+0x106/0x250 [ 267.114419][T11931] ? proc_fail_nth_write+0x9f/0x220 [ 267.114437][T11931] ? sock_has_perm+0x258/0x2f0 [ 267.114453][T11931] ? __pfx_sock_has_perm+0x10/0x10 [ 267.114469][T11931] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 267.114495][T11931] ip_setsockopt+0x59/0xf0 [ 267.114522][T11931] raw_setsockopt+0xb7/0x2a0 [ 267.114541][T11931] ? __pfx_raw_setsockopt+0x10/0x10 [ 267.114557][T11931] ? selinux_socket_setsockopt+0x6a/0x80 [ 267.114572][T11931] ? sock_common_setsockopt+0x2e/0xf0 [ 267.114588][T11931] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 267.114601][T11931] do_sock_setsockopt+0xf3/0x1d0 [ 267.114624][T11931] __sys_setsockopt+0x1a0/0x230 [ 267.114636][T11931] __x64_sys_setsockopt+0xbd/0x160 [ 267.114645][T11931] ? do_syscall_64+0x91/0xf80 [ 267.114658][T11931] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.114671][T11931] do_syscall_64+0xcd/0xf80 [ 267.114684][T11931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.114696][T11931] RIP: 0033:0x7f3a4078f7c9 [ 267.114705][T11931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.114716][T11931] RSP: 002b:00007f3a416d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 267.114726][T11931] RAX: ffffffffffffffda RBX: 00007f3a409e5fa0 RCX: 00007f3a4078f7c9 [ 267.114733][T11931] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 267.114739][T11931] RBP: 00007f3a416d4090 R08: 000000000000003c R09: 0000000000000000 [ 267.114745][T11931] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 267.114751][T11931] R13: 00007f3a409e6038 R14: 00007f3a409e5fa0 R15: 00007ffcb490eb88 [ 267.114764][T11931] [ 267.238550][T11936] tipc: Enabling of bearer rejected, already enabled [ 267.384119][T11934] netlink: 'syz.3.2058': attribute type 30 has an invalid length. [ 267.437634][T11941] netlink: 'syz.3.2058': attribute type 30 has an invalid length. [ 267.624036][T11949] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 267.631011][T11949] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 267.635208][T11949] block nbd1: shutting down sockets [ 267.898513][T11963] tipc: Enabled bearer , priority 0 [ 267.903439][T11962] tipc: Disabling bearer [ 268.049374][T11968] netlink: 'syz.3.2071': attribute type 30 has an invalid length. [ 268.102333][T11967] netlink: 'syz.3.2071': attribute type 30 has an invalid length. [ 268.202083][ T5987] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 268.242208][T11974] netlink: 'syz.0.2073': attribute type 21 has an invalid length. [ 268.245061][T11974] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2073'. [ 268.249064][T11974] netlink: 'syz.0.2073': attribute type 21 has an invalid length. [ 268.251657][T11974] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2073'. [ 268.283287][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2073'. [ 268.286399][T11974] bridge_slave_1: left allmulticast mode [ 268.288339][T11974] bridge_slave_1: left promiscuous mode [ 268.290296][T11974] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.297059][T11974] bridge_slave_0: left allmulticast mode [ 268.298952][T11974] bridge_slave_0: left promiscuous mode [ 268.300977][T11974] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.365655][ T5987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.369675][ T5987] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 268.370989][ T40] kauditd_printk_skb: 367 callbacks suppressed [ 268.370998][ T40] audit: type=1326 audit(1767365779.382:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.2.2075" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 268.373044][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.376087][ T40] audit: type=1326 audit(1767365779.392:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.2.2075" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 268.391168][ T5987] usb 6-1: config 0 descriptor?? [ 268.393616][ T40] audit: type=1326 audit(1767365779.402:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.2.2075" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 268.402923][ T40] audit: type=1326 audit(1767365779.402:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.2.2075" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 268.415182][ T40] audit: type=1326 audit(1767365779.402:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.2.2075" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 268.423632][ T40] audit: type=1326 audit(1767365779.422:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.2.2075" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 268.433008][ T40] audit: type=1326 audit(1767365779.422:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.2.2075" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 268.442373][ T40] audit: type=1326 audit(1767365779.422:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.2.2075" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 268.452017][ T40] audit: type=1326 audit(1767365779.422:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.2.2075" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 268.460105][ T40] audit: type=1326 audit(1767365779.422:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.2.2075" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12118f7c9 code=0x7ffc0000 [ 268.582694][T11991] fuse: Unknown parameter '0x0000000000000003' [ 268.605614][T11965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.615208][T11965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.689354][ T25] block nbd2: Possible stuck request ffff888028718000: control (read@0,1024B). Runtime 30 seconds [ 268.696860][ T25] block nbd2: Possible stuck request ffff888028718200: control (read@1024,1024B). Runtime 30 seconds [ 268.701516][ T25] block nbd2: Possible stuck request ffff888028718400: control (read@2048,1024B). Runtime 30 seconds [ 268.706153][ T25] block nbd2: Possible stuck request ffff888028718600: control (read@3072,1024B). Runtime 30 seconds [ 268.814885][ T5943] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 268.822158][ T5987] usbhid 6-1:0.0: can't add hid device: -71 [ 268.824208][ T5987] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 268.832144][ T5987] usb 6-1: USB disconnect, device number 42 [ 269.425981][ T5943] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 269.430722][ T5943] Bluetooth: hci3: Injecting HCI hardware error event [ 269.435898][ T5944] Bluetooth: hci3: hardware error 0x00 [ 269.477500][T12010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.573347][T12018] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2088'. [ 269.632687][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2090'. [ 269.878605][T12038] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2095'. [ 269.882412][T12038] nbd: couldn't find a device at index 83886080 [ 270.029241][ T6261] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 270.162332][T12046] fuse: Unknown parameter '0x0000000000000003' [ 270.182904][ T6261] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.187877][ T6261] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 270.191915][ T6261] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.197662][ T6261] usb 7-1: config 0 descriptor?? [ 270.410826][T12033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.414630][T12033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.629618][ T6261] usbhid 7-1:0.0: can't add hid device: -71 [ 270.634576][ T6261] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 270.648857][ T6261] usb 7-1: USB disconnect, device number 39 [ 270.990140][T12105] netlink: 'syz.3.2113': attribute type 5 has an invalid length. [ 270.993970][T12105] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2113'. [ 271.080200][T12114] binder: 12113:12114 ioctl 4018620d 0 returned -22 [ 271.084405][T12114] binder: 12113:12114 ioctl c0306201 200000000640 returned -22 [ 271.235647][T12124] fuse: Bad value for 'fd' [ 271.296294][T12128] loop6: detected capacity change from 0 to 2560 [ 271.299289][ T6867] buffer_io_error: 32 callbacks suppressed [ 271.299299][ T6867] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.304532][ T6867] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.307356][ T6867] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.309973][ T6867] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.322754][ T6867] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.325339][ T6867] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.327881][ T6867] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.363566][ T6867] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.366324][ T6867] ldm_validate_partition_table(): Disk read failed. [ 271.370570][ T6867] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.373042][ T6867] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.375542][ T6867] Dev loop6: unable to read RDB block 0 [ 271.377411][ T6867] loop6: unable to read partition table [ 271.392049][T12128] ldm_validate_partition_table(): Disk read failed. [ 271.394338][T12128] Dev loop6: unable to read RDB block 0 [ 271.402210][T12132] fuse: Unknown parameter 'fd0x0000000000000003' [ 271.405001][T12128] loop6: unable to read partition table [ 271.407156][T12128] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 271.416062][ T5345] ldm_validate_partition_table(): Disk read failed. [ 271.418269][ T5345] Dev loop6: unable to read RDB block 0 [ 271.420126][ T5345] loop6: unable to read partition table [ 271.513684][ T5944] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 271.523677][T12141] binder: 12140:12141 ioctl 4018620d 0 returned -22 [ 271.527707][T12141] binder: 12140:12141 ioctl c0306201 200000000640 returned -22 [ 271.765566][T12149] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2127'. [ 271.845363][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2129'. [ 272.306188][T12178] netlink: 4556 bytes leftover after parsing attributes in process `syz.0.2138'. [ 272.824288][T12196] binder: 12195:12196 ioctl c0306201 2000000003c0 returned -14 [ 272.859903][T12205] FAULT_INJECTION: forcing a failure. [ 272.859903][T12205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.864650][T12205] CPU: 1 UID: 0 PID: 12205 Comm: syz.2.2148 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.864667][T12205] Tainted: [L]=SOFTLOCKUP [ 272.864671][T12205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 272.864677][T12205] Call Trace: [ 272.864681][T12205] [ 272.864685][T12205] dump_stack_lvl+0x16c/0x1f0 [ 272.864702][T12205] should_fail_ex+0x512/0x640 [ 272.864720][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 272.864720][T12205] strncpy_from_user+0x3b/0x2e0 [ 272.864736][T12205] getname_flags.part.0+0x8f/0x550 [ 272.864750][T12205] getname_flags+0x93/0xf0 [ 272.864762][T12205] do_sys_openat2+0xb9/0x290 [ 272.864772][T12205] ? __pfx_do_sys_openat2+0x10/0x10 [ 272.864782][T12205] ? __fget_files+0x20e/0x3c0 [ 272.864800][T12205] __x64_sys_creat+0xcc/0x120 [ 272.864810][T12205] ? __pfx___x64_sys_creat+0x10/0x10 [ 272.864820][T12205] ? __pfx_ksys_write+0x10/0x10 [ 272.864833][T12205] ? fput+0x70/0xf0 [ 272.864841][T12205] ? rcu_is_watching+0x12/0xc0 [ 272.864851][T12205] ? do_syscall_64+0x91/0xf80 [ 272.864864][T12205] do_syscall_64+0xcd/0xf80 [ 272.864878][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.864889][T12205] RIP: 0033:0x7fb12118f7c9 [ 272.864898][T12205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.864908][T12205] RSP: 002b:00007fb121fc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 272.864919][T12205] RAX: ffffffffffffffda RBX: 00007fb1213e5fa0 RCX: 00007fb12118f7c9 [ 272.864925][T12205] RDX: 0000000000000000 RSI: 00000000000001bd RDI: 0000200000000100 [ 272.864931][T12205] RBP: 00007fb121fc2090 R08: 0000000000000000 R09: 0000000000000000 [ 272.864937][T12205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.864943][T12205] R13: 00007fb1213e6038 R14: 00007fb1213e5fa0 R15: 00007ffef5561108 [ 272.864956][T12205] [ 273.134229][ T848] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 273.305467][ T848] usb 7-1: Using ep0 maxpacket: 8 [ 273.309796][ T848] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 273.313620][ T848] usb 7-1: config 179 has no interface number 0 [ 273.316687][ T848] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 273.321455][ T848] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 273.326111][ T848] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 273.329747][ T848] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 273.333419][ T848] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 273.338100][ T848] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 273.341079][ T848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.345798][T12207] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 273.510680][ T40] kauditd_printk_skb: 110 callbacks suppressed [ 273.510692][ T40] audit: type=1400 audit(1767365784.479:4265): avc: denied { execute } for pid=12214 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 273.520990][ T40] audit: type=1400 audit(1767365784.479:4266): avc: denied { execute_no_trans } for pid=12214 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 273.567375][ T848] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input22 [ 273.575124][ T5943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.581901][ T5943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.585497][ T5943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.595270][ T5943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.599797][ T5943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.755125][T12207] netlink: 'syz.2.2149': attribute type 1 has an invalid length. [ 273.763981][ T848] usb 7-1: USB disconnect, device number 40 [ 273.766622][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 273.766659][ C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 273.903879][T12215] chnl_net:caif_netlink_parms(): no params data found [ 273.976408][T12215] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.979255][T12215] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.982661][T12215] bridge_slave_0: entered allmulticast mode [ 273.986457][T12215] bridge_slave_0: entered promiscuous mode [ 273.993772][T12215] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.996870][T12215] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.999751][T12215] bridge_slave_1: entered allmulticast mode [ 274.003821][T12215] bridge_slave_1: entered promiscuous mode [ 274.024734][T12215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.030375][T12215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.053117][T12215] team0: Port device team_slave_0 added [ 274.057450][T12215] team0: Port device team_slave_1 added [ 274.074750][T12215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.078036][T12215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.087927][T12215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.093588][T12215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.096524][T12215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.106082][T12215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.138212][T12215] hsr_slave_0: entered promiscuous mode [ 274.144122][T12215] hsr_slave_1: entered promiscuous mode [ 274.146915][T12215] debugfs: 'hsr0' already exists in 'hsr' [ 274.149251][T12215] Cannot create hsr debugfs directory [ 274.254935][T12215] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.259215][T12215] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.361981][T12215] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.367406][T12215] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.469215][T12215] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.473770][T12215] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.528183][T12215] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.532608][T12215] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.554114][ T6064] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 274.671422][T12215] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 274.680858][T12215] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 274.688170][T12215] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 274.696371][T12215] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 274.707725][ T6064] usb 7-1: config 4 has an invalid interface number: 28 but max is 0 [ 274.710903][ T6064] usb 7-1: config 4 has no interface number 0 [ 274.715078][ T6064] usb 7-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 274.718251][ T6064] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.719705][T12215] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.721382][ T6064] usb 7-1: Product: syz [ 274.725112][T12215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.726784][ T6064] usb 7-1: Manufacturer: syz [ 274.730737][T12215] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.732053][ T6064] usb 7-1: SerialNumber: syz [ 274.737389][T12215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.737715][ T6064] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:4.28/input/input23 [ 274.800445][T12215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.802799][ T40] audit: type=1326 audit(1767365785.760:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.0.2158" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8838f7c9 code=0x7ffc0000 [ 274.815190][ T40] audit: type=1326 audit(1767365785.760:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.0.2158" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fca8838f7c9 code=0x7ffc0000 [ 274.826087][T12110] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.830460][T12110] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.831540][ T40] audit: type=1326 audit(1767365785.760:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.0.2158" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8838f7c9 code=0x7ffc0000 [ 274.842353][ T40] audit: type=1326 audit(1767365785.760:4270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.0.2158" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca8838f7c9 code=0x7ffc0000 [ 274.850375][ T40] audit: type=1326 audit(1767365785.760:4271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.0.2158" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8838f7c9 code=0x7ffc0000 [ 274.858110][ T40] audit: type=1326 audit(1767365785.760:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.0.2158" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca8838f7c9 code=0x7ffc0000 [ 274.867922][ T40] audit: type=1326 audit(1767365785.760:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.0.2158" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8838f7c9 code=0x7ffc0000 [ 274.876905][ T40] audit: type=1326 audit(1767365785.760:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.0.2158" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca8838f7c9 code=0x7ffc0000 [ 274.888946][T12215] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.898918][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.901374][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.912437][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.914850][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.937897][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2160'. [ 274.990559][ T5330] bcm5974 7-1:4.28: could not read from device [ 274.997534][ T6064] usb 7-1: USB disconnect, device number 41 [ 275.196034][T12215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.230073][T12215] veth0_vlan: entered promiscuous mode [ 275.236489][T12266] fuse: Unknown parameter '0x0000000000000003' [ 275.241639][T12215] veth1_vlan: entered promiscuous mode [ 275.264341][T12215] veth0_macvtap: entered promiscuous mode [ 275.270963][T12215] veth1_macvtap: entered promiscuous mode [ 275.287368][T12215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.300709][T12215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.309378][T12110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.317003][T12110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.323286][T12110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.327201][T12110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.394431][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.403276][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.426205][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.428701][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.599487][ T5943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.605062][ T5943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.608706][ T5943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.614915][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.617864][ T5943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.702157][ T5944] Bluetooth: hci4: command tx timeout [ 275.918478][T12282] chnl_net:caif_netlink_parms(): no params data found [ 275.963761][T12298] fuse: Unknown parameter 'fd0x0000000000000003' [ 275.973074][ T6064] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 276.004272][T12282] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.006683][T12282] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.009031][T12282] bridge_slave_0: entered allmulticast mode [ 276.011675][T12282] bridge_slave_0: entered promiscuous mode [ 276.016180][T12282] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.018488][T12282] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.020750][T12282] bridge_slave_1: entered allmulticast mode [ 276.023852][T12282] bridge_slave_1: entered promiscuous mode [ 276.039500][T12282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.044319][T12282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.071781][T12282] team0: Port device team_slave_0 added [ 276.085729][T12282] team0: Port device team_slave_1 added [ 276.124474][T12282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.127437][T12282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.127930][ T6064] usb 7-1: config 4 has an invalid interface number: 28 but max is 0 [ 276.139462][T12282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.140862][ T6064] usb 7-1: config 4 has no interface number 0 [ 276.146135][T12282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.150380][T12282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.151209][ T6064] usb 7-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 276.162397][T12282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.165105][ T6064] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.171221][T12303] FAULT_INJECTION: forcing a failure. [ 276.171221][T12303] name failslab, interval 1, probability 0, space 0, times 0 [ 276.172036][ T6064] usb 7-1: Product: syz [ 276.179299][ T6064] usb 7-1: Manufacturer: syz [ 276.181122][ T6064] usb 7-1: SerialNumber: syz [ 276.195277][ T6064] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:4.28/input/input24 [ 276.196684][T12282] hsr_slave_0: entered promiscuous mode [ 276.200937][T12303] CPU: 3 UID: 0 PID: 12303 Comm: syz.3.2175 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.200959][T12303] Tainted: [L]=SOFTLOCKUP [ 276.200964][T12303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 276.200973][T12303] Call Trace: [ 276.200979][T12303] [ 276.200985][T12303] dump_stack_lvl+0x16c/0x1f0 [ 276.201010][T12303] should_fail_ex+0x512/0x640 [ 276.201037][T12303] ? kmem_cache_alloc_noprof+0x62/0x770 [ 276.201056][T12303] should_failslab+0xc2/0x120 [ 276.201076][T12303] kmem_cache_alloc_noprof+0x83/0x770 [ 276.201091][T12303] ? fcntl_setlk+0xaa/0xdf0 [ 276.201117][T12303] ? fcntl_setlk+0xaa/0xdf0 [ 276.201137][T12303] fcntl_setlk+0xaa/0xdf0 [ 276.201148][T12282] hsr_slave_1: entered promiscuous mode [ 276.201161][T12303] ? __pfx_fcntl_setlk+0x10/0x10 [ 276.201184][T12303] ? find_held_lock+0x2b/0x80 [ 276.201204][T12303] ? __might_fault+0xe3/0x190 [ 276.201218][T12303] ? __might_fault+0xe3/0x190 [ 276.201230][T12303] ? __might_fault+0x13b/0x190 [ 276.201254][T12303] do_fcntl+0x43d/0x1660 [ 276.201269][T12303] ? __pfx_do_fcntl+0x10/0x10 [ 276.201290][T12303] ? selinux_file_fcntl+0x93/0x170 [ 276.201311][T12303] __x64_sys_fcntl+0x163/0x200 [ 276.201329][T12303] do_syscall_64+0xcd/0xf80 [ 276.201349][T12303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.201364][T12303] RIP: 0033:0x7ff00978f7c9 [ 276.201377][T12303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.201390][T12303] RSP: 002b:00007ff00a63a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 276.201405][T12303] RAX: ffffffffffffffda RBX: 00007ff0099e6090 RCX: 00007ff00978f7c9 [ 276.201414][T12303] RDX: 0000200000000080 RSI: 0000000000000026 RDI: 0000000000000007 [ 276.201423][T12303] RBP: 00007ff00a63a090 R08: 0000000000000000 R09: 0000000000000000 [ 276.201431][T12303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.201440][T12303] R13: 00007ff0099e6128 R14: 00007ff0099e6090 R15: 00007ffe5de3b8f8 [ 276.201461][T12303] [ 276.274876][T12282] debugfs: 'hsr0' already exists in 'hsr' [ 276.276778][T12282] Cannot create hsr debugfs directory [ 276.365893][T12282] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.398815][T12287] xt_socket: unknown flags 0x20 [ 276.431957][T12282] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.454999][ T5330] bcm5974 7-1:4.28: could not read from device [ 276.461157][ T6064] usb 7-1: USB disconnect, device number 42 [ 276.511385][T12282] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.594542][T12311] binder: 12310:12311 ioctl c0306201 200000000640 returned -22 [ 276.610184][T12282] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.695193][T12318] FAULT_INJECTION: forcing a failure. [ 276.695193][T12318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.699820][T12318] CPU: 2 UID: 0 PID: 12318 Comm: syz.1.2179 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.699844][T12318] Tainted: [L]=SOFTLOCKUP [ 276.699849][T12318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 276.699857][T12318] Call Trace: [ 276.699864][T12318] [ 276.699870][T12318] dump_stack_lvl+0x16c/0x1f0 [ 276.699896][T12318] should_fail_ex+0x512/0x640 [ 276.699922][T12318] _copy_from_user+0x2e/0xd0 [ 276.699947][T12318] ucma_write+0x128/0x330 [ 276.699969][T12318] ? __pfx_ucma_write+0x10/0x10 [ 276.699985][T12318] ? bpf_lsm_file_permission+0x9/0x10 [ 276.699996][T12318] ? security_file_permission+0x71/0x210 [ 276.700012][T12318] ? rw_verify_area+0xcf/0x6c0 [ 276.700024][T12318] ? __pfx_ucma_write+0x10/0x10 [ 276.700039][T12318] vfs_write+0x2a0/0x11d0 [ 276.700054][T12318] ? __pfx_vfs_write+0x10/0x10 [ 276.700066][T12318] ? find_held_lock+0x2b/0x80 [ 276.700082][T12318] ? __fget_files+0x204/0x3c0 [ 276.700098][T12318] ? __fget_files+0x20e/0x3c0 [ 276.700115][T12318] ksys_write+0x1f8/0x250 [ 276.700127][T12318] ? __pfx_ksys_write+0x10/0x10 [ 276.700143][T12318] do_syscall_64+0xcd/0xf80 [ 276.700157][T12318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.700168][T12318] RIP: 0033:0x7fe5c918f7c9 [ 276.700177][T12318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.700187][T12318] RSP: 002b:00007fe5ca04e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.700198][T12318] RAX: ffffffffffffffda RBX: 00007fe5c93e5fa0 RCX: 00007fe5c918f7c9 [ 276.700205][T12318] RDX: 00000000000000a0 RSI: 0000200000000900 RDI: 0000000000000003 [ 276.700211][T12318] RBP: 00007fe5ca04e090 R08: 0000000000000000 R09: 0000000000000000 [ 276.700217][T12318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.700224][T12318] R13: 00007fe5c93e6038 R14: 00007fe5c93e5fa0 R15: 00007ffc5be64458 [ 276.700244][T12318] [ 276.730658][T12282] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 276.852433][T12282] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.868810][T12282] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.875933][T12282] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 276.903031][T12282] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.905382][T12282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.908620][T12282] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.911647][T12282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.948756][T12282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.958421][T12112] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.966041][T12112] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.985383][T12282] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.992094][T12112] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.995556][T12112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.007875][T12112] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.011313][T12112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.157889][T12282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.215311][T12282] veth0_vlan: entered promiscuous mode [ 277.239374][T12282] veth1_vlan: entered promiscuous mode [ 277.267184][T12344] binder: 12343:12344 ioctl c0306201 200000000640 returned -22 [ 277.269775][T12282] veth0_macvtap: entered promiscuous mode [ 277.277282][T12282] veth1_macvtap: entered promiscuous mode [ 277.292532][T12282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.300469][T12346] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 277.301781][T12282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.319771][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.327532][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.338737][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.343609][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.453858][T12111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.458107][T12111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.485089][T12111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.487780][T12111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.589536][T12359] fuse: Unknown parameter 'fd0x0000000000000003' [ 277.713156][ T5944] Bluetooth: hci3: command tx timeout [ 277.793606][ T5944] Bluetooth: hci4: command tx timeout [ 277.798438][ T5944] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 277.857587][T12376] netlink: 'syz.1.2195': attribute type 30 has an invalid length. [ 277.908585][T12381] netlink: 'syz.1.2195': attribute type 30 has an invalid length. [ 278.157835][T12385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.161084][T12385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.182886][T12382] FAULT_INJECTION: forcing a failure. [ 278.182886][T12382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.206020][T12382] CPU: 1 UID: 0 PID: 12382 Comm: syz.3.2197 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.206046][T12382] Tainted: [L]=SOFTLOCKUP [ 278.206051][T12382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 278.206061][T12382] Call Trace: [ 278.206067][T12382] [ 278.206073][T12382] dump_stack_lvl+0x16c/0x1f0 [ 278.206097][T12382] should_fail_ex+0x512/0x640 [ 278.206139][T12382] _copy_from_user+0x2e/0xd0 [ 278.206161][T12382] sctp_getsockopt_sctp_status+0xc3/0x7b0 [ 278.206187][T12382] ? __pfx_sctp_getsockopt_sctp_status+0x10/0x10 [ 278.206229][T12382] ? __local_bh_enable_ip+0xa4/0x120 [ 278.206257][T12382] sctp_getsockopt+0x2d09/0x70d0 [ 278.206283][T12382] ? find_held_lock+0x2b/0x80 [ 278.206305][T12382] ? avc_has_perm_noaudit+0x117/0x3b0 [ 278.206332][T12382] ? __pfx_sctp_getsockopt+0x10/0x10 [ 278.206356][T12382] ? avc_has_perm_noaudit+0x149/0x3b0 [ 278.206381][T12382] ? avc_has_perm+0x144/0x1f0 [ 278.206405][T12382] ? __pfx_avc_has_perm+0x10/0x10 [ 278.206433][T12382] ? __lock_acquire+0x436/0x2890 [ 278.206453][T12382] ? sock_has_perm+0x258/0x2f0 [ 278.206477][T12382] ? find_held_lock+0x2b/0x80 [ 278.206499][T12382] ? __might_fault+0xe3/0x190 [ 278.206513][T12382] ? __might_fault+0xe3/0x190 [ 278.206524][T12382] ? __might_fault+0x13b/0x190 [ 278.206547][T12382] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 278.206569][T12382] do_sock_getsockopt+0x324/0x410 [ 278.206588][T12382] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 278.206604][T12382] ? __fget_files+0x204/0x3c0 [ 278.206636][T12382] __sys_getsockopt+0x12f/0x260 [ 278.206658][T12382] __x64_sys_getsockopt+0xbd/0x160 [ 278.206671][T12382] ? do_syscall_64+0x91/0xf80 [ 278.206689][T12382] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.206710][T12382] do_syscall_64+0xcd/0xf80 [ 278.206729][T12382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.206743][T12382] RIP: 0033:0x7ff00978f7c9 [ 278.206756][T12382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.206771][T12382] RSP: 002b:00007ff00a63a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 278.206789][T12382] RAX: ffffffffffffffda RBX: 00007ff0099e6090 RCX: 00007ff00978f7c9 [ 278.206798][T12382] RDX: 000000000000000e RSI: 0000000000000084 RDI: 0000000000000003 [ 278.206807][T12382] RBP: 00007ff00a63a090 R08: 0000200000000080 R09: 0000000000000000 [ 278.206816][T12382] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 278.206825][T12382] R13: 00007ff0099e6128 R14: 00007ff0099e6090 R15: 00007ffe5de3b8f8 [ 278.206849][T12382] [ 278.461738][T12407] binder: 12406:12407 ioctl c0306201 200000000640 returned -22 [ 278.592810][T12416] netlink: 'syz.1.2210': attribute type 30 has an invalid length. [ 278.601140][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2211'. [ 278.653215][T12417] bridge_slave_1: left allmulticast mode [ 278.654684][T12421] netlink: 'syz.1.2210': attribute type 30 has an invalid length. [ 278.655808][T12417] bridge_slave_1: left promiscuous mode [ 278.661554][T12417] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.671270][T12417] bridge_slave_0: left allmulticast mode [ 278.673785][T12417] bridge_slave_0: left promiscuous mode [ 278.675887][T12417] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.727798][T12423] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 278.793676][T12427] i2c i2c-1: Invalid block write size 34 [ 279.013363][ T40] kauditd_printk_skb: 127 callbacks suppressed [ 279.013375][ T40] audit: type=1400 audit(1767365789.946:4402): avc: denied { ioctl } for pid=12426 comm="syz.2.2214" path="cgroup:[4026532883]" dev="nsfs" ino=4026532883 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 279.119300][T12438] binder: 12437:12438 ioctl c0306201 200000000640 returned -22 [ 279.124512][T12440] FAULT_INJECTION: forcing a failure. [ 279.124512][T12440] name failslab, interval 1, probability 0, space 0, times 0 [ 279.143293][T12440] CPU: 2 UID: 0 PID: 12440 Comm: syz.2.2218 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.143323][T12440] Tainted: [L]=SOFTLOCKUP [ 279.143329][T12440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 279.143340][T12440] Call Trace: [ 279.143345][T12440] [ 279.143352][T12440] dump_stack_lvl+0x16c/0x1f0 [ 279.143378][T12440] should_fail_ex+0x512/0x640 [ 279.143402][T12440] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 279.143423][T12440] should_failslab+0xc2/0x120 [ 279.143445][T12440] kmem_cache_alloc_node_noprof+0x86/0x800 [ 279.143463][T12440] ? __alloc_skb+0x156/0x410 [ 279.143492][T12440] ? __alloc_skb+0x156/0x410 [ 279.143515][T12440] __alloc_skb+0x156/0x410 [ 279.143536][T12440] ? __alloc_skb+0x35d/0x410 [ 279.143564][T12440] ? __pfx___alloc_skb+0x10/0x10 [ 279.143588][T12440] ? netlink_autobind.isra.0+0x158/0x370 [ 279.143616][T12440] netlink_alloc_large_skb+0x69/0x140 [ 279.143638][T12440] netlink_sendmsg+0x698/0xdd0 [ 279.143663][T12440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.143691][T12440] ____sys_sendmsg+0xa5d/0xc30 [ 279.143715][T12440] ? copy_msghdr_from_user+0x10a/0x160 [ 279.143732][T12440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.143765][T12440] ___sys_sendmsg+0x134/0x1d0 [ 279.143783][T12440] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.143826][T12440] __sys_sendmsg+0x16d/0x220 [ 279.143844][T12440] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.143877][T12440] do_syscall_64+0xcd/0xf80 [ 279.143901][T12440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.143918][T12440] RIP: 0033:0x7fb12118f7c9 [ 279.143930][T12440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.143946][T12440] RSP: 002b:00007fb121fc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.143970][T12440] RAX: ffffffffffffffda RBX: 00007fb1213e5fa0 RCX: 00007fb12118f7c9 [ 279.143980][T12440] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 279.143990][T12440] RBP: 00007fb121fc2090 R08: 0000000000000000 R09: 0000000000000000 [ 279.144001][T12440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.144009][T12440] R13: 00007fb1213e6038 R14: 00007fb1213e5fa0 R15: 00007ffef5561108 [ 279.144032][T12440] [ 279.195221][T12442] /dev/sg0: Can't lookup blockdev [ 279.428244][T12401] syz_tun (unregistering): left allmulticast mode [ 279.432672][ T12] smc: removing ib device syz1 [ 279.445089][ T10] syz1: Port: 1 Link DOWN [ 279.519336][ T5943] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 279.524055][ T5943] CPU: 1 UID: 0 PID: 5943 Comm: kworker/u33:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.524085][ T5943] Tainted: [L]=SOFTLOCKUP [ 279.524091][ T5943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 279.524104][ T5943] Workqueue: hci4 hci_rx_work [ 279.524129][ T5943] Call Trace: [ 279.524135][ T5943] [ 279.524143][ T5943] dump_stack_lvl+0x16c/0x1f0 [ 279.524169][ T5943] sysfs_warn_dup+0x7f/0xa0 [ 279.524191][ T5943] sysfs_create_dir_ns+0x24b/0x2b0 [ 279.524213][ T5943] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 279.524233][ T5943] ? find_held_lock+0x2b/0x80 [ 279.524273][ T5943] ? do_raw_spin_unlock+0x172/0x230 [ 279.524299][ T5943] kobject_add_internal+0x2c4/0x9d0 [ 279.524330][ T5943] kobject_add+0x16e/0x240 [ 279.524356][ T5943] ? __pfx_kobject_add+0x10/0x10 [ 279.524385][ T5943] ? kobject_put+0xaf/0x6f0 [ 279.524408][ T5943] ? _raw_spin_unlock+0x28/0x50 [ 279.524437][ T5943] device_add+0x288/0x1980 [ 279.524458][ T5943] ? __pfx_dev_set_name+0x10/0x10 [ 279.524479][ T5943] ? __pfx_device_add+0x10/0x10 [ 279.524499][ T5943] ? mgmt_send_event_skb+0x2fb/0x460 [ 279.524525][ T5943] hci_conn_add_sysfs+0x1a8/0x260 [ 279.524548][ T5943] le_conn_complete_evt+0x11ed/0x1fa0 [ 279.524575][ T5943] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 279.524601][ T5943] hci_le_conn_complete_evt+0x23c/0x3a0 [ 279.524627][ T5943] hci_le_meta_evt+0x357/0x610 [ 279.524647][ T5943] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 279.524670][ T5943] hci_event_packet+0x685/0x1210 [ 279.524689][ T5943] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 279.524711][ T5943] ? __pfx_hci_event_packet+0x10/0x10 [ 279.524733][ T5943] ? kcov_remote_start+0x399/0x680 [ 279.524752][ T5943] ? lockdep_hardirqs_on+0x7c/0x110 [ 279.524781][ T5943] hci_rx_work+0x2c9/0x1020 [ 279.524804][ T5943] process_one_work+0x9ba/0x1b20 [ 279.524836][ T5943] ? __pfx_process_one_work+0x10/0x10 [ 279.524867][ T5943] ? assign_work+0x1a0/0x250 [ 279.524891][ T5943] worker_thread+0x6c8/0xf10 [ 279.524925][ T5943] ? __pfx_worker_thread+0x10/0x10 [ 279.524948][ T5943] kthread+0x3c5/0x780 [ 279.524970][ T5943] ? __pfx_kthread+0x10/0x10 [ 279.524992][ T5943] ? rcu_is_watching+0x12/0xc0 [ 279.525009][ T5943] ? __pfx_kthread+0x10/0x10 [ 279.525029][ T5943] ret_from_fork+0x983/0xb10 [ 279.525049][ T5943] ? __pfx_ret_from_fork+0x10/0x10 [ 279.525070][ T5943] ? __switch_to+0x7af/0x10d0 [ 279.525093][ T5943] ? __pfx_kthread+0x10/0x10 [ 279.525116][ T5943] ret_from_fork_asm+0x1a/0x30 [ 279.525155][ T5943] [ 279.525179][ T5943] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 279.634855][ T5943] Bluetooth: hci4: failed to register connection device [ 279.635159][T12454] FAULT_INJECTION: forcing a failure. [ 279.635159][T12454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.642236][T12454] CPU: 3 UID: 0 PID: 12454 Comm: syz.2.2224 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.642255][T12454] Tainted: [L]=SOFTLOCKUP [ 279.642259][T12454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 279.642265][T12454] Call Trace: [ 279.642269][T12454] [ 279.642273][T12454] dump_stack_lvl+0x16c/0x1f0 [ 279.642290][T12454] should_fail_ex+0x512/0x640 [ 279.642308][T12454] _copy_from_user+0x2e/0xd0 [ 279.642324][T12454] sctp_setsockopt+0x206e/0xb8c0 [ 279.642341][T12454] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 279.642358][T12454] ? __pfx_sctp_setsockopt+0x10/0x10 [ 279.642374][T12454] ? find_held_lock+0x2b/0x80 [ 279.642392][T12454] ? selinux_socket_setsockopt+0x6a/0x80 [ 279.642403][T12454] ? sock_common_setsockopt+0x2e/0xf0 [ 279.642417][T12454] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 279.642430][T12454] do_sock_setsockopt+0xf3/0x1d0 [ 279.642445][T12454] __sys_setsockopt+0x1a0/0x230 [ 279.642456][T12454] __x64_sys_setsockopt+0xbd/0x160 [ 279.642465][T12454] ? do_syscall_64+0x91/0xf80 [ 279.642478][T12454] ? lockdep_hardirqs_on+0x7c/0x110 [ 279.642491][T12454] do_syscall_64+0xcd/0xf80 [ 279.642504][T12454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.642516][T12454] RIP: 0033:0x7fb12118f7c9 [ 279.642524][T12454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.642534][T12454] RSP: 002b:00007fb121fc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 279.642544][T12454] RAX: ffffffffffffffda RBX: 00007fb1213e5fa0 RCX: 00007fb12118f7c9 [ 279.642551][T12454] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 279.642557][T12454] RBP: 00007fb121fc2090 R08: 000000000000009c R09: 0000000000000000 [ 279.642563][T12454] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 279.642569][T12454] R13: 00007fb1213e6038 R14: 00007fb1213e5fa0 R15: 00007ffef5561108 [ 279.642582][T12454] [ 279.852919][ T40] audit: type=1400 audit(1767365790.782:4403): avc: denied { watch_sb } for pid=12461 comm="syz.2.2226" path="/541" dev="tmpfs" ino=3051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 279.869140][T12467] binder: 12466:12467 ioctl c0306201 200000000640 returned -22 [ 279.886707][ T5943] Bluetooth: hci4: command tx timeout [ 279.984064][ T12] ------------[ cut here ]------------ [ 279.988602][ T12] GID entry ref leak for dev syz1 index 2 ref=1 [ 279.990608][ T12] WARNING: drivers/infiniband/core/cache.c:806 at gid_table_release_one+0x1ad/0x450, CPU#0: kworker/u32:0/12 [ 279.994970][ T12] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 279.997139][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.000978][ T12] Tainted: [L]=SOFTLOCKUP [ 280.002378][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 280.006231][ T12] Workqueue: ib-unreg-wq ib_unregister_work [ 280.008139][ T12] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 280.010776][ T12] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 da 65 4d f9 48 8d 3d 43 ad 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 c0 65 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 280.017915][ T12] RSP: 0018:ffffc900000f7ac8 EFLAGS: 00010293 [ 280.019885][ T12] RAX: 0000000000000000 RBX: ffff88803e493200 RCX: 0000000000000001 [ 280.022713][ T12] RDX: 0000000000000002 RSI: ffff888039407f20 RDI: ffffffff90952e30 [ 280.025798][ T12] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed10056711e0 [ 280.028353][ T12] R10: ffff88802b388f03 R11: ffff88801da854b0 R12: ffffed1007c9265b [ 280.030892][ T12] R13: ffff888039d84000 R14: 0000000000000002 R15: dffffc0000000000 [ 280.033403][ T12] FS: 0000000000000000(0000) GS:ffff8880d68f5000(0000) knlGS:0000000000000000 [ 280.036615][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.038985][ T12] CR2: 0000555581b9e808 CR3: 00000000374ac000 CR4: 0000000000352ef0 [ 280.041478][ T12] Call Trace: [ 280.042615][ T12] [ 280.043604][ T12] ib_device_release+0xef/0x1e0 [ 280.045376][ T12] ? __pfx_ib_device_release+0x10/0x10 [ 280.047203][ T12] device_release+0xa4/0x240 [ 280.048760][ T12] kobject_put+0x1ef/0x6f0 [ 280.050256][ T12] put_device+0x1f/0x30 [ 280.051674][ T12] process_one_work+0x9ba/0x1b20 [ 280.053348][ T12] ? __pfx_process_one_work+0x10/0x10 [ 280.055802][ T12] ? assign_work+0x1a0/0x250 [ 280.057662][ T12] worker_thread+0x6c8/0xf10 [ 280.059402][ T12] ? __pfx_worker_thread+0x10/0x10 [ 280.061083][ T12] kthread+0x3c5/0x780 [ 280.062444][ T12] ? __pfx_kthread+0x10/0x10 [ 280.064028][ T12] ? rcu_is_watching+0x12/0xc0 [ 280.066109][ T12] ? __pfx_kthread+0x10/0x10 [ 280.067633][ T12] ret_from_fork+0x983/0xb10 [ 280.069155][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 280.070861][ T12] ? __switch_to+0x7af/0x10d0 [ 280.072704][ T12] ? __pfx_kthread+0x10/0x10 [ 280.074650][ T12] ret_from_fork_asm+0x1a/0x30 [ 280.077068][ T12] [ 280.078141][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 280.080497][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.083950][ T12] Tainted: [L]=SOFTLOCKUP [ 280.085404][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 280.089015][ T12] Workqueue: ib-unreg-wq ib_unregister_work [ 280.091219][ T12] Call Trace: [ 280.092472][ T12] [ 280.093714][ T12] dump_stack_lvl+0x3d/0x1f0 [ 280.095784][ T12] vpanic+0x640/0x6f0 [ 280.097192][ T12] ? gid_table_release_one+0x1ad/0x450 [ 280.098968][ T12] panic+0xca/0xd0 [ 280.100144][ T12] ? __pfx_panic+0x10/0x10 [ 280.101631][ T12] ? check_panic_on_warn+0x1f/0xb0 [ 280.103363][ T12] check_panic_on_warn+0xab/0xb0 [ 280.105002][ T12] __warn+0x108/0x3c0 [ 280.106284][ T12] __report_bug+0x2a0/0x520 [ 280.107782][ T12] ? gid_table_release_one+0x1ad/0x450 [ 280.109570][ T12] ? __pfx___report_bug+0x10/0x10 [ 280.111242][ T12] report_bug_entry+0xe1/0x290 [ 280.112830][ T12] ? gid_table_release_one+0x1b6/0x450 [ 280.114699][ T12] handle_bug+0x18a/0x260 [ 280.116121][ T12] exc_invalid_op+0x17/0x50 [ 280.117635][ T12] asm_exc_invalid_op+0x1a/0x20 [ 280.119269][ T12] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 280.121266][ T12] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 da 65 4d f9 48 8d 3d 43 ad 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 c0 65 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 280.127331][ T12] RSP: 0018:ffffc900000f7ac8 EFLAGS: 00010293 [ 280.129243][ T12] RAX: 0000000000000000 RBX: ffff88803e493200 RCX: 0000000000000001 [ 280.131760][ T12] RDX: 0000000000000002 RSI: ffff888039407f20 RDI: ffffffff90952e30 [ 280.134393][ T12] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed10056711e0 [ 280.137103][ T12] R10: ffff88802b388f03 R11: ffff88801da854b0 R12: ffffed1007c9265b [ 280.139687][ T12] R13: ffff888039d84000 R14: 0000000000000002 R15: dffffc0000000000 [ 280.142272][ T12] ? gid_table_release_one+0x1a6/0x450 [ 280.144220][ T12] ib_device_release+0xef/0x1e0 [ 280.145779][ T12] ? __pfx_ib_device_release+0x10/0x10 [ 280.147578][ T12] device_release+0xa4/0x240 [ 280.149111][ T12] kobject_put+0x1ef/0x6f0 [ 280.150602][ T12] put_device+0x1f/0x30 [ 280.151988][ T12] process_one_work+0x9ba/0x1b20 [ 280.153676][ T12] ? __pfx_process_one_work+0x10/0x10 [ 280.155443][ T12] ? assign_work+0x1a0/0x250 [ 280.156967][ T12] worker_thread+0x6c8/0xf10 [ 280.158516][ T12] ? __pfx_worker_thread+0x10/0x10 [ 280.160193][ T12] kthread+0x3c5/0x780 [ 280.161543][ T12] ? __pfx_kthread+0x10/0x10 [ 280.163107][ T12] ? rcu_is_watching+0x12/0xc0 [ 280.164649][ T12] ? __pfx_kthread+0x10/0x10 [ 280.166186][ T12] ret_from_fork+0x983/0xb10 [ 280.167702][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 280.169373][ T12] ? __switch_to+0x7af/0x10d0 [ 280.170933][ T12] ? __pfx_kthread+0x10/0x10 [ 280.172456][ T12] ret_from_fork_asm+0x1a/0x30 [ 280.174059][ T12] [ 280.175946][ T12] Kernel Offset: disabled [ 280.177405][ T12] Rebooting in 86400 seconds..