last executing test programs: 2m27.0130663s ago: executing program 3 (id=158): capset(0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) openat$sndseq(0xffffff9c, 0x0, 0x0) dup(r0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) madvise(&(0x7f000027e000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$inet6(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)="abf63fa63be2057e6eb311864b862f44687c12bc9818a7859baa745aff3f92ef76bdf77e7b5d02d91fc1523771c95efb", 0x30}, {&(0x7f0000000480)="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", 0xfd}, {&(0x7f0000000240)="48edc487717a690680dd1b477b1b66f6ea0142bd8ca00f8a7e3a3e520f8adcbe6dab37ba403c2e9923da1833dd11ca383a6d15e18b86b27175a14a8670146d37ce7e8d726d66bfb76649432d82c990712c96ac", 0x53}], 0x3}, 0x91) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7814, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/27, 0x1b}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000600)=""/252, 0xfc}, {0x0}], 0x3}}], 0x1, 0x10000, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="360a000000000000620a00000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) keyctl$clear(0x7, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x0, 0x0) fcntl$setownex(r0, 0xf, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m26.75479183s ago: executing program 3 (id=160): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff08000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3, @ANYBLOB="0a000100bb"], 0x48}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x2009, 0x0, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000ac00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) read$FUSE(r4, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) statfs(&(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', 0x0) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x24, 0x2004, 0x820000, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2m25.751092559s ago: executing program 3 (id=167): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000b56275a038f5bd74dea533e7adac74ab7eb1fcfba803486c5be401b2aa044befe7220e154d23f1f49d8f1641a6a6ac4afc5eecc6de94f602139946dca6f869e3ce6dd4ca0934cbe8db5cf615596673c0b35c865f97bd10fd55bdace72a521f14dfc87c6098a4c1823a43972f5a72f5c61a331aeb5b8bf771660cfb10c23009d2c688e1000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0xffffffffffffffff, 0x29) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x3ff, 0x5, 0x1, 0x40}, {0xd, 0x8, 0xfe, 0x80000001}, {0xff, 0xbb, 0x7f, 0x5}]}) r3 = socket$inet6(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c0016800800010010"], 0x38}}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8201) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x40, 0x9, @empty, 0x6}, 0x1c) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x27, &(0x7f0000000140)=[{0x8000, 0xb8, 0x0, 0x1}, {0x5, 0x3, 0xf8, 0xd8}, {0xfff7, 0x5, 0x2a}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000001c0)={0x0}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x80082102, &(0x7f0000000080)={r9, 0x1, r8, 0x8003f8}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r9, 0x0, r0, 0xb1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x1006, &(0x7f0000001e40)=""/4102, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m25.548031447s ago: executing program 3 (id=169): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0), 0x0, 0x0, 0x0) r1 = openat$vim2m(0xffffff9c, &(0x7f0000001e80), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc04c5609, &(0x7f0000001fc0)=@multiplanar_userptr={0x6, 0x0, 0x4, 0x8, 0xffff, {0x0, 0x2710}, {0x4, 0x1, 0xf6, 0x48, 0xc, 0x1, "1f3ce4d9"}, 0x7ff, 0x2, {0x0}, 0x2}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x41) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) unshare(0x2c020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000150081054e81f782db44b9040a1d3b020a000000040000a11800020000e9400084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6e94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad9561b4a29c828f6a3aa2fcf72baa7ea67e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a753916647f616b762439deec51", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) shutdown(r3, 0x1) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) recvmmsg(r4, &(0x7f0000003040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/130, 0x82}, 0x750}], 0x1, 0x2302, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x20, 0x12, 0xa01, 0x4000000, 0xfffffffc, {}, [@generic='\x00\x00\b\x00\x00\x00\x00\x00', @generic='@']}, 0x20}}, 0x8000) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x975}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r7, &(0x7f0000000580)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @loopback, 0x1fe}, 0x1c) 2m25.305958786s ago: executing program 3 (id=170): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000008711e0e17400001020301090224000101000000000000000203010303092104003901223e0d090581030002ce04ff"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x7, 0x5, 0xfa, 0x10, 0x2}, 0x97, &(0x7f00000005c0)=ANY=[@ANYBLOB="050d97000403100b14100403ac3bf2bbbdfb49d57eb8e20cfc3cddeb8bfa32f34929c3a38f08112d44671004de38e19b25819b07d18aa1fc6545e0c0d233c9bacb05e38ee2028c7979853acea79c15f477573e8a9816856fdb12de0e8b674571be031633edfb1eb0c94bb1cfacbbe7556f309bb852ae574c757eb1a4b4e7c417fff3d958905ff1a225efe909bfc447e32e2dc6c2955fc04055990dbeb42e410c1bf58710e61408ad277149fd5c8b5c0a8b6700"/192], 0x6, [{0x96, &(0x7f0000000380)=@string={0x96, 0x3, "2d3c04191e503e11f049fff1d3892090f2fc5bbc7685fe26acd6d17c14db275991aee1d125e92de1765580853be3d17ab789e46db8482aa5a8377c8264331496fa449067834e96208c6f80e4fe2517a0ca5354a464c3787ec0ee40c8568fb1685e7d7b8b68e29a4986a1dc72db63de9c38cba3acf7fa639dc8a8569fb377d1ba398ac518fc3124327cdd5e753e5cd38efa61299b"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) syz_usb_connect(0x2, 0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef", @ANYRESHEX], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129142, 0x1fa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000006, 0x10012, r4, 0x0) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f0000001440), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "0dd36a9fd9d95914", "7e314b1ae16f188480811df0a54dfebc", "6e16d07f", "24e9fc5733e5dae9"}, 0x28) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000001c0)=ANY=[@ANYBLOB="9c690001010000000a"]) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000100)={0x2, 0xfffffffb, 0x2, 0x84880, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000ea300000000000000000000000940001001000000095"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_matches\x00') read$hiddev(r7, &(0x7f0000000100)=""/100, 0x64) syz_usb_control_io$hid(r0, 0x0, 0x0) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000880)=""/120, 0x78}], 0x2) r8 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x20000) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x19f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, 0x0) 2m21.616096768s ago: executing program 1 (id=177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x0) 2m21.551364928s ago: executing program 1 (id=178): syz_io_uring_setup(0x22f, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x218, @loopback}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) shutdown(r0, 0x2) 2m20.367059788s ago: executing program 1 (id=180): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7400000002000305000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000300030000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r2], 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x0) 2m20.365873581s ago: executing program 3 (id=181): socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)={0xc0, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r6], 0x2c}}, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d0423084839010203010902520001000000000904"], 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0100001000130728bd700000000000ac1414aa0000000000000000000000002001000000000000000000000000000100020001000000000a00000084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x4000, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x3a7}], 0x1}}], 0x1, 0x11) socket$netlink(0x10, 0x3, 0x0) 2m19.267769634s ago: executing program 1 (id=186): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000040000003003e00ebffffff940200000000000040000000000000000000000000000000000000002c8f3800010000000200000003000000970f000000000d00000000000000cc01000000000000e20000000000000001000000000000000300000000000000acfb3f051b91849846ec830e8fc0391036d324f1a13b7574e061825a8f5cf1f6fa11aedf8441af886914f68393e338af41d98f7ed031e6346889031d5273cfa7d0ec1641e7928743622c8b7f7bd2c007b08f3f96046ba89c0777df0ae8f128435792116bd4e68c222c42693309d9"], 0xe6) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\b\x00', "12000700"}, 0x38) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007501"]) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r4, 0x5}, 0x8) (async) close(r0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 2m18.255883359s ago: executing program 1 (id=188): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x8000, 0x2}) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x2, 0x2, 0x1800000, 0x3}) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000300)=0x3) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc04c565d, &(0x7f0000000200)=@mmap={0x6, 0x1, 0x4, 0x2, 0xffff1789, {0x0, 0xea60}, {0x5, 0x0, 0x6, 0x5, 0xb, 0x0, "29ef9a31"}, 0x8, 0x1, {}, 0x0, 0x0, r1}) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) rt_sigqueueinfo(0x0, 0x1f, &(0x7f0000000040)={0x28, 0x8, 0x2}) syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863, "5aa772f37902"}}}, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 2m16.495818205s ago: executing program 1 (id=194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b00070066696c7465"], 0xc4}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004b41460860163209ea8001020301090212000002ffffe1000000000009100f00"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000040)="eb", 0x1}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) process_vm_readv(r2, &(0x7f0000006580)=[{&(0x7f0000003340)=""/19, 0x13}, {&(0x7f0000003380)=""/15, 0xf}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/4096, 0x1000}, {0x0}, {&(0x7f00000064c0)=""/179, 0xb3}], 0x6, &(0x7f0000003340), 0x0, 0x0) read(r1, 0x0, 0x63) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x11, &(0x7f0000000000)=0x7b, 0x4) r6 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000003300)=[{r6, 0x8766}], 0x1, 0x0) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) poll(&(0x7f0000002100)=[{r6, 0x688}], 0x1, 0x6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000032c0)}, 0x800) r8 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0xfffff801, @private2, 0x717}], 0x1c) 2m2.091503419s ago: executing program 32 (id=181): socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)={0xc0, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r6], 0x2c}}, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d0423084839010203010902520001000000000904"], 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0100001000130728bd700000000000ac1414aa0000000000000000000000002001000000000000000000000000000100020001000000000a00000084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x4000, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x3a7}], 0x1}}], 0x1, 0x11) socket$netlink(0x10, 0x3, 0x0) 1m59.252482363s ago: executing program 33 (id=194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b00070066696c7465"], 0xc4}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004b41460860163209ea8001020301090212000002ffffe1000000000009100f00"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000040)="eb", 0x1}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) process_vm_readv(r2, &(0x7f0000006580)=[{&(0x7f0000003340)=""/19, 0x13}, {&(0x7f0000003380)=""/15, 0xf}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/4096, 0x1000}, {0x0}, {&(0x7f00000064c0)=""/179, 0xb3}], 0x6, &(0x7f0000003340), 0x0, 0x0) read(r1, 0x0, 0x63) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x11, &(0x7f0000000000)=0x7b, 0x4) r6 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000003300)=[{r6, 0x8766}], 0x1, 0x0) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) poll(&(0x7f0000002100)=[{r6, 0x688}], 0x1, 0x6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000032c0)}, 0x800) r8 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0xfffff801, @private2, 0x717}], 0x1c) 9.516772771s ago: executing program 0 (id=847): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x4d2, 0x6c}, 0xa, @in6=@private2, 0x3506, 0x1, 0x1, 0x1, 0x9, 0xf, 0x869a}, {{@in=@broadcast, 0x4d2, 0x33}, 0xa, @in6=@remote, 0x0, 0x2, 0x1, 0x2, 0x2, 0x7, 0x5}]}]}, 0x13c}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=ANY=[@ANYBLOB="d3d8fd9a515304540b91b96aa06482909e37f7c7bf08764819ec0b2c1cc3ba5e72208dfa8817", @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf253400000008000300", @ANYRES32=r5, @ANYBLOB="1400550099d83fa044cad19c38f1656b005d500a1400fe00a6e17611bcfeae36cedbfe61ba1ace680a00060050505050505000000a0006005050505050500000"], 0x5c}, 0x1, 0x0, 0x0, 0x40090}, 0x2002) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x8, 0x9, 0x10, @local, @remote, 0x80, 0x7800, 0x80000000, 0xe}}) sendmsg$inet(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="b05b22ca2ba9d15a4f52e78067a3ecb2e646ef9c33ed9d6170576a878bdb697ee752bedaa77988b37799e5b43611b3e41fee0f23e9691f9bf0e33a2ab5570e82431f41e56ba05eef902f7fd19dc7adbaaa215535fc605968051961c1f1cfc51ea7f5235d274f366833c9840414f356c0ba8de0f755fc9f25fdb7b55dbca842b636b752486bda818e0f7d945c3a025afa5c49e670c40825c6a3476dbb0b8195fc185f61efb58acda539aca20b0617185ce02587c90264e3cb5acf442e6b81ea7047e3f295d9b743e73b7eddfd202fd31061b65bcdfb18c82e18501e747cb38c4864c95d82a63b0ac8a6d1cf89c2ba856a09", 0xf1}, {&(0x7f0000000300)="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", 0x1000}], 0x2, &(0x7f0000001300)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r7, @multicast1, @broadcast}}}], 0x28}, 0x8011) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40103d0b, &(0x7f0000000040)={0x10, 0x20}) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 9.105364671s ago: executing program 0 (id=849): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="76c170e23bbbbb92035908d8d71526ca90b028a26bbcbb93139b4514822dda7cdb721c68874b04bcb6b41ec87546c118513b5bd16258bcf04f0d24e65b47a80ac7d2660ce37e8b0bac52643ff1da8b161498af0333458c3c2a98fb02eaf6d8400b4eedda00d8a7a393dde85d171fd9437785762a8db949aa3a16c8acb9e83da526a225fb8c076a22020fb6e4098389eb382f7b2d7b5cca8a7d61255790b2349862a051", 0xa3, 0x40, &(0x7f0000000040)={0x11, 0x16, r1, 0x1, 0x8, 0x6, @multicast}, 0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0x35, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r9 = dup(r8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x1, 0x70bd2b, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20008}}, 0x20}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000040)=@x86={0xff, 0xed, 0x1, 0x0, 0x800, 0xc, 0x3d, 0x3, 0x2, 0x5, 0x9, 0x13, 0x0, 0x7, 0x4, 0xf9, 0x7, 0xba, 0x40, '\x00', 0x7, 0x4}) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000280)={0xb0003, 0x0, [0x7, 0x0, 0x5, 0xe, 0x0, 0x8, 0x2, 0x7]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x0) 6.015044856s ago: executing program 0 (id=861): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040050bc618000010000001090224000100000000090400000103000000092100000001220300090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) syz_usb_control_io(r0, &(0x7f0000000540)={0x18, &(0x7f0000000580)={0x0, 0xd, 0x4, {0x4, 0x8, "34d0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.971946248s ago: executing program 5 (id=862): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400030000000000731132000000000016640000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) 5.642460252s ago: executing program 5 (id=864): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x10000]}, 0x8) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x3, 0x6, 0x201, 0x0, 0x0, {0x9500ed736c4a8b79, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000008}, 0x80) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000280)={{r0}, r1, 0x12, @inherit={0x88, &(0x7f00000001c0)={0x1, 0x8, 0x3, 0x3, {0x20, 0x5, 0x600000000000000, 0x4, 0x5}, [0xfffffffffffffffa, 0x2, 0x9, 0x4, 0x1, 0x2, 0x0, 0x54]}}, @name="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"}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000001280)={0x8, 0x1}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f00000012c0)="5f6469f772780705ae33c6be59c3bc3b4383363f003c400348d07fdeb62080a11c665fc3ed8e1f0cfe102aeb55ccb6bca7bfe85d9b348de05ed552ea7e388fdd7f751068321c17b25bac51af6aa69b5b629f28628dc942a5ef055548fdab8b50fa87a96de21befe6bff4075377f7e6ae128b699934649bd85c07d41d8b17e60d03ac582908b66fa07cb104d22fc4a85901caa8cba8c5", 0x96, 0x20000001, &(0x7f0000001380)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc65}, 0x1c) (async, rerun: 32) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x11, r0, 0x8000000) (rerun: 32) r5 = syz_io_uring_setup(0x3d7e, &(0x7f00000013c0)={0x0, 0x34d4, 0x8, 0x0, 0x328, 0x0, r0}, &(0x7f0000001440), &(0x7f0000001480)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000014c0)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x3, 0x0, {0x0, r3}, 0x5, 0x4, 0x1, {0x0, r7, r2}}) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000001500)={0x0, 0x1, 0x8, 0x7}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000001540)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (rerun: 64) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000001580)) ioctl$FS_IOC_SETVERSION(r3, 0x40047602, &(0x7f00000015c0)=0x8) (async) setsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000001600)=0x3, 0x4) (async) r9 = syz_open_dev$vbi(&(0x7f0000001640), 0x0, 0x2) ioctl$FIGETBSZ(r9, 0x2, &(0x7f0000001680)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f00000016c0)={0xc}) r10 = syz_clone(0x20000, &(0x7f0000001700)="f4cc2e5d826cbfd3d525ea718f64215b386ce41052738a7b2f56443d7f758050127f548128df853074c1122ea2be3223822bc828dce79ff7c218b196b95e77", 0x3f, &(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)="b8e5d672297a808a2b806b61285004462218d619e249d52360614abef5b960a178d7e3e555dd8f27292d444aa98b68426621b683752a29d9") r11 = syz_open_dev$sndpcmc(&(0x7f0000001800), 0x5, 0x2000) ioctl$SNDRV_PCM_IOCTL_PAUSE(r11, 0x40044145, &(0x7f0000001840)) (async) listen(r3, 0x0) fcntl$getown(r5, 0x9) (async) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) fallocate(r2, 0x32, 0x2, 0x6) r12 = syz_open_procfs(r10, &(0x7f0000001880)='stack\x00') r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r12, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x20, r13, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x44}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x94}, 0x4000040) 5.428250536s ago: executing program 6 (id=865): r0 = socket$kcm(0xa, 0x2, 0x73) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xb1, 0x3}, {0xfffe, 0xb1, 0xe}, {0x2}, {0x6, 0x0, 0x3e}]}) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0x1000000}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 5.328163368s ago: executing program 5 (id=866): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x13f, 0x5}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 5.276392359s ago: executing program 6 (id=867): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8443) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000003c0)="55a834115c5c", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) eventfd2(0x0, 0x0) io_submit(r3, 0x0, &(0x7f0000000680)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = socket$kcm(0xa, 0x3, 0x73) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xb1, 0x3}, {0xfffe, 0xb1, 0xe}, {0x2}]}) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="a72d11a15c048c0a7d78aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r6, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000036000000d2e057c89500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r6, 0x2b, 0x0, @void}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000340)={{0x0, 0x9, 0xdbc, 0x9d, 0x200, 0xff, 0x8, 0x7fff, 0x4, 0x7f, 0xf0000000, 0x80000001, 0x3, 0xd, 0x1f}}) 5.042142288s ago: executing program 5 (id=868): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001040)=""/4079, 0xfef}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f00000037c0)=""/4080, 0xff0}, {&(0x7f0000000c80)=""/185, 0xb9}, {&(0x7f0000000000)=""/86, 0x56}, {&(0x7f0000000140)=""/85, 0x55}], 0x6, 0x0, 0x0, 0xc3}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 4.78814531s ago: executing program 5 (id=869): syz_open_procfs(0x0, &(0x7f00000020c0)='net/igmp\x00') r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x2000, 0x4, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 4.787310723s ago: executing program 6 (id=870): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000b56275a038f5bd74dea533e7adac74ab7eb1fcfba803486c5be401b2aa044befe7220e154d23f1f49d8f1641a6a6ac4afc5eecc6de94f602139946dca6f869e3ce6dd4ca0934cbe8db5cf615596673c0b35c865f97bd10fd55bdace72a521f14dfc87c6098a4c1823a43972f5a72f5c61a331aeb5b8bf771660cfb10c23009d2c688e1000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0xffffffffffffffff, 0x29) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x3ff, 0x5, 0x1, 0x40}, {0xd, 0x8, 0xfe, 0x80000001}, {0xff, 0xbb, 0x7f, 0x5}]}) r3 = socket$inet6(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c0016800800010010"], 0x38}}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8201) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x40, 0x9, @empty, 0x6}, 0x1c) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x5, 0x3, 0xf8, 0xd8}, {0xfff7, 0x5, 0x2a}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000001c0)={0x0}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x80082102, &(0x7f0000000080)={r9, 0x1, r8, 0x8003f8}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r9, 0x0, r0, 0xb1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x1006, &(0x7f0000001e40)=""/4102, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.542331896s ago: executing program 6 (id=871): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00003da000/0x2000)=nil, 0x2000, 0x3000007, 0x7f, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4.304228787s ago: executing program 6 (id=873): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x17) alarm(0x400) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) writev(r2, 0x0, 0x0) alarm(0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) 4.232607049s ago: executing program 5 (id=874): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000001840)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = socket$kcm(0xa, 0x2, 0x73) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xb1, 0x3}, {0xfffe, 0xb1, 0xe}, {0x2}, {0x6, 0x0, 0x3e}]}) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 3.800152516s ago: executing program 0 (id=876): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020040004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 3.518896566s ago: executing program 0 (id=878): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x40010041, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb}, {0x1000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0xffff1000, 0xc, 0x9, 0x3, 0x10, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x0, 0xfd, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0xfe, 0x0, 0x0, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) syz_usb_connect(0x3, 0x24, &(0x7f0000008ec0)={{0x12, 0x1, 0x110, 0x2b, 0x95, 0xd9, 0x8, 0x4e2, 0x1412, 0xca10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xfa, 0xa0, 0xbf, [{{0x9, 0x4, 0x0, 0x8, 0x0, 0x8, 0x6, 0x62}}]}}]}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 3.340175037s ago: executing program 4 (id=879): syz_open_procfs(0x0, &(0x7f00000020c0)='net/igmp\x00') r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) (fail_nth: 8) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2.92898034s ago: executing program 4 (id=880): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) (fail_nth: 14) 2.253556586s ago: executing program 2 (id=881): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000b56275a038f5bd74dea533e7adac74ab7eb1fcfba803486c5be401b2aa044befe7220e154d23f1f49d8f1641a6a6ac4afc5eecc6de94f602139946dca6f869e3ce6dd4ca0934cbe8db5cf615596673c0b35c865f97bd10fd55bdace72a521f14dfc87c6098a4c1823a43972f5a72f5c61a331aeb5b8bf771660cfb10c23009d2c688e1000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0xffffffffffffffff, 0x29) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x3ff, 0x5, 0x1, 0x40}, {0xd, 0x8, 0xfe, 0x80000001}, {0xff, 0xbb, 0x7f, 0x5}]}) r3 = socket$inet6(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c0016800800010010"], 0x38}}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8201) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x40, 0x9, @empty, 0x6}, 0x1c) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x5, 0x3, 0xf8, 0xd8}, {0xfff7, 0x5, 0x2a}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000001c0)={0x0}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x80082102, &(0x7f0000000080)={r9, 0x1, r8, 0x8003f8}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r9, 0x0, r0, 0xb1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x1006, &(0x7f0000001e40)=""/4102, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.180201224s ago: executing program 4 (id=882): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x1, 0xbfb3, 0x9}) fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x1c3, 0x12) 2.117613033s ago: executing program 2 (id=883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000080) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe98, 0x52}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xc}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40804}, 0x20000000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x40, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x40}}, 0x0) 2.011501284s ago: executing program 2 (id=884): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xc03e, 0x0, 0x0, 0x1f000801}, 0x0) 1.98507406s ago: executing program 4 (id=885): syz_usb_connect(0x3, 0x53, &(0x7f0000000840)={{0x12, 0x1, 0x300, 0x95, 0xce, 0x3f, 0x40, 0x421, 0x335, 0xb015, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0xe, 0xf, 0xa0, 0x7, [{{0x9, 0x4, 0x35, 0x2, 0x2, 0x2, 0x2, 0xff, 0x4, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x47a}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x29}}], [{{0x9, 0x5, 0xf, 0x1, 0x400, 0x0, 0x67, 0x54}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x8, 0x0, 0x90}}]}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0xeb, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x9f, 0x52, 0xb6, 0x8, 0x1608, 0xd, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xac, 0x0, 0x0, 0x48, 0x35, 0x48, 0x0, [@generic={0x8d, 0xe, "1ecc2f7a52037cdf5023de26f029d06b470327efac1908485adf3093a810d6f3859fb2bad626860052c5e78ac325e5f27855964c2e4687cd374632b7974b6f1d46d0df40a6ca873409c8dfe7784a812ad49d56b61bbb5dcbbcf9ad43bd3e115e1d9bcbbd7804bc715812299a399c3c43e4e7cf5130297944c732833b8029cf94a4df3659259ff67c4d2543"}, @uac_control={{0xa, 0x24, 0x1, 0x4, 0x7}, [@feature_unit={0x13, 0x24, 0x6, 0x5, 0x3, 0x6, [0x2, 0x2, 0x7, 0x2, 0x9, 0x8], 0xf1}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x202, 0x6, 0x5, 0x9}, @extension_unit={0xb, 0x24, 0x8, 0x4, 0x0, 0x4, "b52308d3"}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x3, 0x6, "2ffc10"}]}]}}]}}]}}, &(0x7f0000004c00)={0x0, 0x0, 0x5, &(0x7f00000049c0)={0x5, 0xf, 0x5}}) 1.852071942s ago: executing program 2 (id=886): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) r0 = socket$inet6(0xa, 0x800, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000e, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = syz_io_uring_setup(0x38fe, 0x0, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x20, 0x19, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4010010) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x3200, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507"], 0x48}}, 0x0) 1.522697608s ago: executing program 2 (id=887): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088474803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d100000095"], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6141e52313ee133a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x48, 0x32, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x44) truncate(&(0x7f0000000000)='./file0\x00', 0x6) 1.327786957s ago: executing program 2 (id=888): syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x408, 0x0) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004403, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x9113, 0xfffffff5}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="355275ab46b1", 0x0, 0x0, 0x34, 0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e1c, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x5, 0x3, 0x80000000, 0x9, 0x80000001}, 0x14) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000100)={@rand_addr, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newtfilter={0xf30, 0x2c, 0x20, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x6, 0x4}, {0x8, 0xb}, {0xfff2, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xe7, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0xee0, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x5}}, @TCA_BASIC_EMATCHES={0x6a0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9c}}, @TCA_EMATCH_TREE_LIST={0x1fc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xd4, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x7}, "93fd42490bee83893631785443794f6f2019b24f7d0e45fa85888b1dbf8a8d475e6be131a62719fae28d7a676e24c78ca8f83714a2bde7ffed60a36536fae8dafbb96dc7c4f354b44b8d415c9c518b4135523408483e04b74fc862f264c47581598097186b9e1e243bf38e889a95cc5d6ecfd5b9a2880d1680dbe7e6656bfb0f3414e05f48c2969e57b44dd444f31688d1d4850a8800ca66ef444fe0224d511784a6d636880f3fc93862a990e53081076e872f097df242bfe77bc1b958bb16e7d2cc06286962f3aa"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xf, 0x2, 0x6}, {0x0, 0x7, 0x0, "3065e8c8ab1984"}}}, @TCF_EM_IPT={0xc0, 0x2, 0x0, 0x0, {{0xa287, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_DATA={0xb2, 0x5, "9eba0ea7073b1c838e05089e4b236c7d7c0c7b3831c1d04c2ba79ff5a1c421e0ecd11869822862eb66ddb158c981878e8e81791d693ff1278be1ae9c160d096c1ade27318ecccafea194bb22b2d7b5344a2ebc384929a7c8814ac6996eea21acd6c7420448a2e6d96732ed9ef2ef28513d5cc0208d137b885c8b47736a391308e471cc99124d6c7793f9eceb0d15d13f67e3f1d17b3613903ebe6311fb2f059de76fbab020cd49f6e109fde29d32"}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x3, 0x9}, {0x6, 0x8, 0x38f1, 0x3}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x4}, {0xabb3, 0x8, 0x5, 0x1, 0x2, 0x0, 0x1}}}, @TCF_EM_IPT={0x18, 0x2, 0x0, 0x0, {{0x0, 0x9, 0x8955}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_LIST={0x2a0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x70, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x9}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x2d, 0x5, "d48c00802ccf2b6c57967604e86819c5281d46438a34d40e9f4a02cd4cc8527f15306be7ae37784e71"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0x3}, {0x1, 0x505, 0x0, 0x0, 0x2, 0x0, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x80}, {0x400, 0xfffffffe, 0x2, 0x2, 0xe, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0xb208}, {{0x2, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x1}, {0xe8fc, 0x2, 0x7fffffff, 0x2}}}, @TCF_EM_CONTAINER={0x90, 0x3, 0x0, 0x0, {{0x40, 0x0, 0x3}, "9e1f28fe7df7d88c1cef25361a1f0c0b856e0da35c6a533430423aa8b4eb6a8685908d9dbe5be928e59c02b6aa5d2acccb208f52740d8fade4abf6623a5acaf7dc9177797b51ed84ed3f84f16c8e562c2c3a4c27171289dc632e91613784647dd2a1d12fa46e1448c4dbaefb38639a3c662d56a030403c5ee0f2d11f38b752437c27"}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x6}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_IPT={0x120, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_DATA={0x103, 0x5, "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"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}, @TCA_EMATCH_TREE_LIST={0x1d0, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0xf66a}, {0x10000, 0x7ff, 0x6, 0x7, 0x2, 0x0, 0x1}}}, @TCF_EM_META={0x48, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x42, 0x1}, {0x8, 0x3, 0x2}}}, @TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_VAR="aaec7acbba772cf4", @TCF_META_TYPE_VAR="1858b13b29cd", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="d43d57a478823bde211e"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x9, 0x1}, {0x7ff, 0x4, 0x1}}}]}}, @TCF_EM_CONTAINER={0xb4, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x8}, "865787fcacf16cda620a376c40bacf1d147e13ba4e26bb56d48ae74263996316780a0b792b39079eaa95ac6371c7948644ef2890aed846f76c0d02c62fb3c869fd288c4c08572c6a76018d165274257a2c88a12273b9380e474b07306a1a5d5a9f1bf58f267bd9321add26e6ba6d5a80de7d8ac082753e52b008922819d6c531d117483f9950edcf0fd2a4e56f66253b91ade2825e3a0708549210e2c7f6e96ac51388a4f1"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4000, 0x7, 0x6}, {{0x3, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x1, 0x1, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7fff, 0x7, 0x3ff}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x54, 0x3, 0x0, 0x0, {{0x2, 0x0, 0x2c22}, "2b559edeb2cedf34e143405df167c49f1a0d634ce0248a5d0e82d08b583ced82ec39eb90959ed983d9cc77e4bd1e5b0b5932fcd14294c6deca9f1f45402b3cf41344a267e1950c85"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x7f}, {0x3, 0x4}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0xff80}, {0x2, 0x0, 0x5, 0x0, 0x3, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x3}, {0x3, 0xc03a, 0x200, 0x6}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0xb}}, @TCA_BASIC_POLICE={0x82c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x7, 0x7ff, 0x100, 0x101, 0x7, 0x6, 0x8, 0x3, 0xea, 0x5, 0x8, 0xffff88ac, 0xffffffff, 0x6, 0x9, 0xffffff7f, 0x7, 0x4, 0x7fff, 0xc, 0x4, 0x10000, 0x7fac27e3, 0x800, 0xb1, 0xc, 0x0, 0xfffffe00, 0x2, 0x7, 0x1, 0x5, 0x577, 0x81, 0x7, 0x300000, 0x7a0, 0x10001, 0x7fff, 0xffffa1c8, 0x82aa, 0x4, 0x3, 0x7, 0x67a4, 0x1, 0x0, 0x9, 0xff, 0xb6, 0xa8a, 0x80000001, 0x0, 0x401, 0x4, 0x7, 0x4, 0x0, 0x2, 0x4, 0x800, 0x3, 0x8, 0x401, 0x5, 0x4f536d4, 0x20057c2f, 0xffffffff, 0x1b1, 0xbff, 0x7, 0x9, 0x10000000, 0x0, 0x3f0de38d, 0x8, 0x80000001, 0x6719b21f, 0x4, 0x2e6, 0xa, 0xf, 0x7, 0xb7, 0x1, 0x2, 0x80, 0x4, 0x3, 0xfff, 0x7, 0x0, 0x4, 0x34b, 0x7, 0x8, 0x9, 0x9, 0x3, 0x4, 0xff, 0x9, 0x4, 0x0, 0x9, 0x8001, 0xfffffc00, 0x3, 0x3, 0x6, 0x2, 0x6, 0x8, 0x7fffffff, 0x905, 0x0, 0x8, 0xfe000000, 0xffffe055, 0x9a, 0x7fe00, 0x8, 0x6d7, 0x100, 0x1, 0xca, 0xd4, 0x1, 0x91, 0x10000, 0x8, 0x80000000, 0x7298d44e, 0x8, 0x5, 0x7a, 0x100, 0x400, 0x8, 0x7, 0x3, 0x0, 0x8, 0x59e, 0x7ff, 0x0, 0x10000, 0x1, 0x6, 0x5, 0x0, 0x8, 0x80c, 0xee, 0x3, 0x9, 0xff, 0x7, 0x4, 0x7ff, 0x7, 0x8001, 0x9a, 0x4, 0x3, 0x9b, 0x3, 0xc3, 0x1, 0x1, 0x8, 0x5, 0xa000000, 0x8, 0x7f, 0xea, 0x41f, 0xe6c4, 0x4, 0x4, 0x2, 0x9, 0xfffffffb, 0x6, 0x14, 0x4d, 0x3, 0x2, 0x6, 0x6, 0x6d5d, 0x2b, 0x45, 0xa0000000, 0x7f, 0xbd, 0x7f, 0x2, 0x800, 0x9, 0x2, 0x3, 0x7, 0x7, 0x7, 0x6, 0x7, 0x4, 0x6c, 0x9, 0x3, 0x4, 0xdb, 0x1, 0x803e, 0x2, 0xd205, 0x9, 0x1, 0x7ff, 0xffff0b70, 0x2, 0xdc, 0x4c, 0x8c4, 0x2e27e47c, 0x139085fd, 0x2, 0x4, 0x7, 0x9, 0x5, 0x3, 0x80, 0x3, 0x0, 0x8001, 0x2aec, 0x2d, 0xb, 0x0, 0x9, 0x9, 0x5, 0x1db4ef70, 0x7, 0x8, 0xff, 0x8001, 0x41412465, 0x80000001, 0x80000000, 0x37, 0x1, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x9, 0x9, 0x4, 0x8, 0x1, 0x5, 0x0, 0xa, 0x3ff, 0x10000, 0x2, 0xefe, 0x5, 0x400, 0x2, 0x9, 0x7ff, 0x4, 0x401, 0x7a62, 0x6, 0xfff, 0x779, 0x0, 0xaa1a, 0x5, 0x1, 0x6, 0x3, 0x11e, 0x1, 0x6, 0xffffffff, 0x9, 0x3, 0x1, 0x9, 0x7, 0x5, 0x2, 0x0, 0x401, 0x6, 0x24ad, 0x5, 0x200, 0x1, 0x1, 0xffffffff, 0x7, 0x7, 0xffffff62, 0x4, 0x9b, 0x6, 0x56b6e2eb, 0x2, 0x9, 0xf, 0x401, 0x6780c92, 0x88, 0x5f, 0x5, 0x83, 0x7, 0x95d5383, 0x4, 0x3, 0x1000, 0xaa0, 0xfffffff9, 0x8000, 0x5, 0x4e6, 0x7, 0x154d, 0xdb, 0x7f, 0x4, 0x1, 0x6, 0xa159, 0x7, 0x5, 0x8, 0xbe54, 0x7, 0x3, 0x10000, 0x8, 0x1, 0x81, 0x2, 0x6, 0x7, 0x0, 0x800, 0x7, 0x4, 0x1, 0x9, 0x1, 0x9, 0x7, 0x6, 0x7f, 0xa4de, 0x0, 0x9, 0x9, 0x1, 0x22d7, 0x0, 0x8, 0x401, 0xc, 0x1, 0x1, 0x7, 0x79a, 0x1, 0x4, 0x8, 0x3009, 0x8, 0x2a48fc00, 0x1, 0x0, 0x8, 0x0, 0x80000000, 0xe9a, 0x994, 0x6, 0x89a, 0x10, 0xefca, 0x0, 0x1, 0x3ff, 0x3, 0x7, 0x3, 0x2, 0xb4, 0x6, 0x3ff, 0x80000000, 0x7fff, 0xfff, 0x0, 0x8e6a, 0x4, 0x200, 0xd2, 0x7, 0x7, 0x9, 0xffffffff, 0x247d, 0xf, 0x10, 0xfffeffff, 0x2, 0x40, 0x7fff, 0x6, 0x2, 0x8001, 0x660f, 0x4, 0x1ff, 0x9, 0x4, 0x9, 0x5, 0x5, 0x5d, 0x7, 0x2, 0x4, 0xff, 0xb, 0x1, 0x7, 0x8, 0x9, 0xfffffff9, 0xf1c, 0x9, 0x1, 0x19, 0xf3, 0x3, 0x7, 0x9, 0xa6, 0x2, 0x9, 0x5, 0x5, 0x1000, 0x7, 0x8, 0x42e, 0x8, 0x6, 0x6, 0x10001, 0x7ff, 0x1b3, 0x2, 0xffffffff, 0x5, 0x5, 0xdf, 0x0, 0x2, 0x101, 0x2, 0x2, 0x2798abf0, 0x3, 0x6, 0x6, 0x3ff, 0x1, 0x8, 0x4ae1c896, 0x6, 0x6, 0x4, 0xffffffff, 0x7, 0x7fff, 0xc, 0x9, 0x2, 0x0, 0x5e87, 0x6, 0x6, 0x5, 0x21, 0x6, 0x5, 0x1a, 0x9cd, 0x7, 0x9, 0x1, 0x8000, 0x2, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xca8}]}]}}]}, 0xf30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800808080000000040080006400000000205000100060000000900020073797a32000000000500040000000000050005000a00000013000300686173683a6e65742c69666163650000"], 0x60}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x24, 0x28, 0x4, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0xf}, {0x5, 0xfff3}, {0xfff1, 0x8}}}, 0x24}}, 0x0) socket$unix(0x1, 0x4, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_emit_vhci(&(0x7f000000a0c0)=ANY=[@ANYBLOB="040e0c", @ANYRES16], 0xf) 1.124252292s ago: executing program 6 (id=889): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r1, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000004a80)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000440)="bd", 0x206c}], 0x1, 0x0, 0x0, 0x40500}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x533509e98f3a73c}}], 0x2, 0x1d3) 486.651225ms ago: executing program 4 (id=890): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(0x3) 327.828289ms ago: executing program 4 (id=891): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000034"]) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x60010020, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) 0s ago: executing program 0 (id=892): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000000000000000000760f00000000000000000000000000000000000007"]) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f0000000000)=0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) timerfd_gettime(r5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000007c0)="0299934456", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001500)="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", 0x5a6}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)}}], 0x3, 0x40850) kernel console output (not intermixed with test programs): dmsg+0x330/0x390 [ 183.880727][ T6816] __sock_sendmsg+0x1a6/0x270 [ 183.880761][ T6816] __sys_sendto+0x365/0x4c0 [ 183.880789][ T6816] ? __pfx___sys_sendto+0x10/0x10 [ 183.880827][ T6816] ? __fget_files+0x2a/0x420 [ 183.880859][ T6816] ? ksys_write+0x275/0x2d0 [ 183.880896][ T6816] __ia32_sys_sendto+0xdd/0x100 [ 183.880923][ T6816] __do_fast_syscall_32+0xb4/0x110 [ 183.880951][ T6816] ? exc_page_fault+0x5f8/0x920 [ 183.880983][ T6816] do_fast_syscall_32+0x34/0x80 [ 183.881011][ T6816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.881039][ T6816] RIP: 0023:0xf7f64579 [ 183.881057][ T6816] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 183.881074][ T6816] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 183.881098][ T6816] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 183.881114][ T6816] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000080000100 [ 183.881126][ T6816] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 183.881139][ T6816] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 183.881151][ T6816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.881184][ T6816] [ 184.218228][ T6634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.225229][ T6634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.251122][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.260265][ T6634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.429206][ T6634] hsr_slave_0: entered promiscuous mode [ 184.435987][ T6634] hsr_slave_1: entered promiscuous mode [ 184.467406][ T6640] hsr_slave_0: entered promiscuous mode [ 184.474400][ T6640] hsr_slave_1: entered promiscuous mode [ 184.498119][ T6640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.519549][ T6640] Cannot create hsr debugfs directory [ 185.138742][ T6840] FAULT_INJECTION: forcing a failure. [ 185.138742][ T6840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.183578][ T6840] CPU: 0 UID: 0 PID: 6840 Comm: syz.4.242 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 185.183621][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.183634][ T6840] Call Trace: [ 185.183643][ T6840] [ 185.183651][ T6840] dump_stack_lvl+0x241/0x360 [ 185.183691][ T6840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.183721][ T6840] ? __pfx__printk+0x10/0x10 [ 185.183765][ T6840] should_fail_ex+0x424/0x570 [ 185.183791][ T6840] _copy_from_iter+0x43c/0x1c70 [ 185.183834][ T6840] ? __pfx__copy_from_iter+0x10/0x10 [ 185.183860][ T6840] ? __pfx__copy_from_iter+0x10/0x10 [ 185.183896][ T6840] ? page_copy_sane+0x154/0x260 [ 185.183926][ T6840] copy_page_from_iter+0x7a/0x100 [ 185.183957][ T6840] skb_copy_datagram_from_iter+0x2e0/0x6c0 [ 185.183997][ T6840] unix_dgram_sendmsg+0x7a5/0x1ea0 [ 185.184046][ T6840] ? aa_sk_perm+0x96f/0xac0 [ 185.184079][ T6840] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 185.184117][ T6840] ? __import_iovec+0x3c2/0x830 [ 185.184145][ T6840] ? aa_sock_msg_perm+0x91/0x160 [ 185.184175][ T6840] ? unix_seqpacket_sendmsg+0x110/0x1e0 [ 185.184209][ T6840] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 185.184239][ T6840] __sock_sendmsg+0x221/0x270 [ 185.184271][ T6840] ____sys_sendmsg+0x523/0x860 [ 185.184302][ T6840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.184343][ T6840] __sys_sendmmsg+0x4a3/0x7b0 [ 185.184378][ T6840] ? __pfx___sys_sendmmsg+0x10/0x10 [ 185.184408][ T6840] ? __lock_acquire+0xad5/0xd80 [ 185.184471][ T6840] ? vfs_write+0xb29/0xd10 [ 185.184514][ T6840] ? __mutex_unlock_slowpath+0x229/0x800 [ 185.184550][ T6840] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.184575][ T6840] ? __fget_files+0x2a/0x420 [ 185.184614][ T6840] ? fput+0x9b/0xd0 [ 185.184633][ T6840] ? ksys_write+0x275/0x2d0 [ 185.184668][ T6840] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 185.184704][ T6840] __do_fast_syscall_32+0xb4/0x110 [ 185.184730][ T6840] ? exc_page_fault+0x5f8/0x920 [ 185.184760][ T6840] do_fast_syscall_32+0x34/0x80 [ 185.184786][ T6840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.184813][ T6840] RIP: 0023:0xf7f73579 [ 185.184832][ T6840] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 185.184849][ T6840] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 185.184871][ T6840] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 185.184885][ T6840] RDX: 0000000004000190 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.184898][ T6840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.184910][ T6840] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 185.184922][ T6840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.184952][ T6840] [ 185.466754][ T5896] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 185.583129][ T6634] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 185.598124][ T6634] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 185.622500][ T6634] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 185.670868][ T6634] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 185.688097][ T5896] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 185.688131][ T5896] usb 1-1: config 0 has no interface number 0 [ 185.688175][ T5896] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 185.688201][ T5896] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 185.688230][ T5896] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 185.688258][ T5896] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 185.688285][ T5896] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 185.688312][ T5896] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 185.688357][ T5896] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 185.688382][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.699713][ T5896] usb 1-1: config 0 descriptor?? [ 185.701591][ T6834] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.701783][ T6834] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.708005][ T5896] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 185.850839][ T6853] FAULT_INJECTION: forcing a failure. [ 185.850839][ T6853] name failslab, interval 1, probability 0, space 0, times 0 [ 185.850927][ T6853] CPU: 1 UID: 0 PID: 6853 Comm: syz.4.244 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 185.850953][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.850966][ T6853] Call Trace: [ 185.850975][ T6853] [ 185.850983][ T6853] dump_stack_lvl+0x241/0x360 [ 185.851022][ T6853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.851054][ T6853] ? __pfx__printk+0x10/0x10 [ 185.851081][ T6853] ? kasan_save_track+0x51/0x80 [ 185.851109][ T6853] ? __pfx___might_resched+0x10/0x10 [ 185.851141][ T6853] should_fail_ex+0x424/0x570 [ 185.851168][ T6853] should_failslab+0xac/0x100 [ 185.851198][ T6853] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 185.851225][ T6853] ? __alloc_skb+0x1c2/0x480 [ 185.851245][ T6853] __alloc_skb+0x1c2/0x480 [ 185.851271][ T6853] ? __pfx___alloc_skb+0x10/0x10 [ 185.851302][ T6853] netlink_dump+0x237/0xeb0 [ 185.851331][ T6853] ? trace_contention_end+0x3c/0x120 [ 185.851360][ T6853] ? __mutex_lock+0x380/0x10c0 [ 185.851393][ T6853] ? __pfx_netlink_dump+0x10/0x10 [ 185.851419][ T6853] ? __netlink_lookup+0x894/0x980 [ 185.851483][ T6853] ? netlink_lookup+0x31/0x200 [ 185.851520][ T6853] __netlink_dump_start+0x5a2/0x790 [ 185.851560][ T6853] rtnetlink_rcv_msg+0xbba/0xd70 [ 185.851597][ T6853] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.851627][ T6853] ? __pfx_rtnl_dumpit+0x10/0x10 [ 185.851655][ T6853] ? __pfx_rtnl_fdb_dump+0x10/0x10 [ 185.851690][ T6853] ? ref_tracker_free+0x63e/0x7e0 [ 185.851723][ T6853] netlink_rcv_skb+0x208/0x480 [ 185.851753][ T6853] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.851786][ T6853] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.851833][ T6853] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.851863][ T6853] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.851893][ T6853] netlink_unicast+0x7f8/0x9a0 [ 185.851928][ T6853] ? __pfx_netlink_unicast+0x10/0x10 [ 185.851956][ T6853] ? skb_put+0x114/0x1f0 [ 185.851997][ T6853] netlink_sendmsg+0x8c3/0xcd0 [ 185.852040][ T6853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.852074][ T6853] ? __pfx_aa_file_perm+0x10/0x10 [ 185.852104][ T6853] ? aa_sock_msg_perm+0x91/0x160 [ 185.852140][ T6853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.852168][ T6853] __sock_sendmsg+0x221/0x270 [ 185.852198][ T6853] sock_write_iter+0x2d9/0x3f0 [ 185.852228][ T6853] ? __pfx_sock_write_iter+0x10/0x10 [ 185.852268][ T6853] ? bpf_lsm_file_permission+0x9/0x10 [ 185.852301][ T6853] vfs_write+0x70f/0xd10 [ 185.852333][ T6853] ? __pfx_sock_write_iter+0x10/0x10 [ 185.852361][ T6853] ? __pfx_vfs_write+0x10/0x10 [ 185.852389][ T6853] ? __fget_files+0x2a/0x420 [ 185.852413][ T6853] ? __fget_files+0x2a/0x420 [ 185.852450][ T6853] ksys_write+0x19d/0x2d0 [ 185.852477][ T6853] ? __pfx_ksys_write+0x10/0x10 [ 185.852505][ T6853] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 185.852530][ T6853] ? lockdep_hardirqs_on+0x9d/0x150 [ 185.852558][ T6853] __do_fast_syscall_32+0xb4/0x110 [ 185.852583][ T6853] ? exc_page_fault+0x5f8/0x920 [ 185.852613][ T6853] do_fast_syscall_32+0x34/0x80 [ 185.852640][ T6853] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.852666][ T6853] RIP: 0023:0xf7f73579 [ 185.852685][ T6853] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 185.852702][ T6853] RSP: 002b:00000000f507555c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 185.852725][ T6853] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 185.852739][ T6853] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.852751][ T6853] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.852763][ T6853] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 185.852775][ T6853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.852806][ T6853] [ 185.964310][ T6855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.964556][ T6855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.970624][ T5934] usb 1-1: USB disconnect, device number 12 [ 185.974703][ T5934] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 186.011832][ T6640] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 186.043826][ T6640] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 186.134952][ T6640] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 186.161892][ T6640] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 186.276758][ T5900] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 186.700603][ T6634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.756939][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 186.774614][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.795485][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.820412][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.834465][ T5900] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 186.851641][ T6634] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.866280][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.884093][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.891359][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.896418][ T5900] usb 5-1: config 0 descriptor?? [ 186.933815][ T6752] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.941123][ T6752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.153579][ T6640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.170512][ T30] audit: type=1326 audit(1744240930.691:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 187.290167][ T30] audit: type=1326 audit(1744240930.691:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 187.311964][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.319144][ T30] audit: type=1326 audit(1744240930.691:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 187.341697][ T30] audit: type=1326 audit(1744240930.691:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 187.363369][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.370940][ T30] audit: type=1326 audit(1744240930.691:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 187.423592][ T30] audit: type=1326 audit(1744240930.701:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 187.461149][ T5900] usbhid 5-1:0.0: can't add hid device: -71 [ 187.477697][ T5900] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 187.495255][ T5900] usb 5-1: USB disconnect, device number 10 [ 187.530615][ T30] audit: type=1326 audit(1744240930.731:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 187.550652][ T6640] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.553439][ T30] audit: type=1326 audit(1744240930.731:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 187.596269][ T30] audit: type=1326 audit(1744240930.771:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 187.635701][ T30] audit: type=1326 audit(1744240930.801:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 187.713994][ T6634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.730506][ T6752] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.738578][ T6752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.769616][ T6749] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.777016][ T6749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.091637][ T6640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.144029][ T6640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.417126][ T6634] veth0_vlan: entered promiscuous mode [ 188.444981][ T6634] veth1_vlan: entered promiscuous mode [ 188.451793][ T6640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.726226][ T6892] random: crng reseeded on system resumption [ 189.478316][ T6634] veth0_macvtap: entered promiscuous mode [ 189.543018][ T6897] FAULT_INJECTION: forcing a failure. [ 189.543018][ T6897] name failslab, interval 1, probability 0, space 0, times 0 [ 189.596892][ T6897] CPU: 0 UID: 0 PID: 6897 Comm: syz.4.251 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 189.596916][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.596925][ T6897] Call Trace: [ 189.596932][ T6897] [ 189.596938][ T6897] dump_stack_lvl+0x241/0x360 [ 189.596967][ T6897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.596988][ T6897] ? __pfx__printk+0x10/0x10 [ 189.597016][ T6897] ? __mutex_unlock_slowpath+0x229/0x800 [ 189.597038][ T6897] ? __pfx___might_resched+0x10/0x10 [ 189.597063][ T6897] should_fail_ex+0x424/0x570 [ 189.597092][ T6897] should_failslab+0xac/0x100 [ 189.597125][ T6897] __kmalloc_cache_noprof+0x73/0x370 [ 189.597150][ T6897] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 189.597177][ T6897] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 189.597211][ T6897] genl_rcv_msg+0xb38/0xf00 [ 189.597235][ T6897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.597252][ T6897] ? __dev_queue_xmit+0x1780/0x3f60 [ 189.597268][ T6897] ? kasan_save_track+0x3f/0x80 [ 189.597283][ T6897] ? __kasan_slab_alloc+0x66/0x80 [ 189.597305][ T6897] ? __do_fast_syscall_32+0xb4/0x110 [ 189.597337][ T6897] ? __lock_acquire+0xad5/0xd80 [ 189.597354][ T6897] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 189.597390][ T6897] netlink_rcv_skb+0x208/0x480 [ 189.597412][ T6897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.597429][ T6897] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.597467][ T6897] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.597493][ T6897] genl_rcv+0x28/0x40 [ 189.597507][ T6897] netlink_unicast+0x7f8/0x9a0 [ 189.597533][ T6897] ? __pfx_netlink_unicast+0x10/0x10 [ 189.597554][ T6897] ? skb_put+0x114/0x1f0 [ 189.597572][ T6897] netlink_sendmsg+0x8c3/0xcd0 [ 189.597605][ T6897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.597629][ T6897] ? __import_iovec+0x585/0x830 [ 189.597649][ T6897] ? aa_sock_msg_perm+0x91/0x160 [ 189.597674][ T6897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.597693][ T6897] __sock_sendmsg+0x221/0x270 [ 189.597716][ T6897] ____sys_sendmsg+0x523/0x860 [ 189.597739][ T6897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.597767][ T6897] __sys_sendmsg+0x271/0x360 [ 189.597787][ T6897] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.597840][ T6897] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 189.597862][ T6897] ? lockdep_hardirqs_on+0x9d/0x150 [ 189.597882][ T6897] __do_fast_syscall_32+0xb4/0x110 [ 189.597899][ T6897] ? exc_page_fault+0x5f8/0x920 [ 189.597920][ T6897] do_fast_syscall_32+0x34/0x80 [ 189.597938][ T6897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.597957][ T6897] RIP: 0023:0xf7f73579 [ 189.597969][ T6897] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 189.597982][ T6897] RSP: 002b:00000000f507555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 189.598003][ T6897] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 189.598013][ T6897] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.598022][ T6897] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.598031][ T6897] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 189.598039][ T6897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.598060][ T6897] [ 189.991086][ T6634] veth1_macvtap: entered promiscuous mode [ 190.008250][ T6634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.018870][ T6634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.028834][ T6634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.039286][ T6634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.049531][ T6634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.060124][ T6634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.069983][ T6634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.080428][ T6634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.091541][ T6634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.101315][ T6634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.112815][ T6634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.122688][ T6634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.133256][ T6634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.143182][ T6634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.154291][ T6634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.164187][ T6634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.174680][ T6634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.185956][ T6634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.197353][ T6634] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.206080][ T6634] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.215088][ T6634] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.223921][ T6634] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.324246][ T6640] veth0_vlan: entered promiscuous mode [ 190.436517][ T6640] veth1_vlan: entered promiscuous mode [ 190.534237][ T6752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.592307][ T6752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.685389][ T6905] FAULT_INJECTION: forcing a failure. [ 190.685389][ T6905] name failslab, interval 1, probability 0, space 0, times 0 [ 190.776539][ T6905] CPU: 0 UID: 0 PID: 6905 Comm: syz.2.252 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 190.776573][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.776587][ T6905] Call Trace: [ 190.776595][ T6905] [ 190.776603][ T6905] dump_stack_lvl+0x241/0x360 [ 190.776642][ T6905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.776673][ T6905] ? __pfx__printk+0x10/0x10 [ 190.776705][ T6905] ? __pfx___might_resched+0x10/0x10 [ 190.776736][ T6905] should_fail_ex+0x424/0x570 [ 190.776763][ T6905] should_failslab+0xac/0x100 [ 190.776789][ T6905] __kmalloc_cache_noprof+0x73/0x370 [ 190.776814][ T6905] ? asymmetric_lookup_restriction+0x498/0x570 [ 190.776850][ T6905] asymmetric_lookup_restriction+0x498/0x570 [ 190.776874][ T6905] ? __pfx_restrict_link_by_key_or_keyring+0x10/0x10 [ 190.776902][ T6905] ? __pfx_asymmetric_lookup_restriction+0x10/0x10 [ 190.776935][ T6905] ? __pfx_asymmetric_lookup_restriction+0x10/0x10 [ 190.776966][ T6905] keyring_restrict+0x1ec/0x680 [ 190.776987][ T6905] ? __pfx_keyring_restrict+0x10/0x10 [ 190.777005][ T6905] ? _copy_from_user+0x95/0xb0 [ 190.777030][ T6905] ? memdup_user+0x99/0xd0 [ 190.777055][ T6905] keyctl_restrict_keyring+0x172/0x290 [ 190.777079][ T6905] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 190.777114][ T6905] __do_fast_syscall_32+0xb4/0x110 [ 190.777138][ T6905] ? exc_page_fault+0x5f8/0x920 [ 190.777162][ T6905] do_fast_syscall_32+0x34/0x80 [ 190.777183][ T6905] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.777204][ T6905] RIP: 0023:0xf7fb4579 [ 190.777219][ T6905] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 190.777234][ T6905] RSP: 002b:00000000f509455c EFLAGS: 00000206 ORIG_RAX: 0000000000000120 [ 190.777252][ T6905] RAX: ffffffffffffffda RBX: 000000000000001d RCX: 000000001fa9f141 [ 190.777264][ T6905] RDX: 0000000080000200 RSI: 0000000080000180 RDI: 0000000000000000 [ 190.777275][ T6905] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.777285][ T6905] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 190.777295][ T6905] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.777319][ T6905] [ 191.026906][ T6640] veth0_macvtap: entered promiscuous mode [ 191.036173][ T6640] veth1_macvtap: entered promiscuous mode [ 191.053609][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.064560][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.074935][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.085449][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.095376][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.105848][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.115870][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.126346][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.136223][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.146974][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.158136][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.168068][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.211943][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.211966][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.211984][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.211998][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.212012][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.212024][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.448510][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.501935][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.632781][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.658726][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.700736][ T6753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.724679][ T6753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.747770][ T6640] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.761221][ T6640] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.773718][ T6640] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.829517][ T6640] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.158676][ T6743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.184976][ T6743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.385554][ T6752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.431960][ T6752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.677829][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 192.876797][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 193.027031][ T10] usb 6-1: device descriptor read/64, error -71 [ 193.305161][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 193.587102][ T10] usb 6-1: device descriptor read/64, error -71 [ 193.749617][ T10] usb usb6-port1: attempt power cycle [ 194.157104][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 194.197980][ T10] usb 6-1: device descriptor read/8, error -71 [ 194.484598][ T6938] syz.0.260: attempt to access beyond end of device [ 194.484598][ T6938] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 194.493785][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 194.582579][ T10] usb 6-1: device descriptor read/8, error -71 [ 194.697401][ T10] usb usb6-port1: unable to enumerate USB device [ 194.776862][ T6959] random: crng reseeded on system resumption [ 195.947955][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 196.108414][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 196.130596][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 196.130630][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 196.130654][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 196.130704][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.130728][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.130754][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 196.130874][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 196.130902][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.135099][ T10] usb 5-1: config 0 descriptor?? [ 196.375457][ T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 196.784828][ T6967] tipc: Started in network mode [ 196.790873][ T6967] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 196.807998][ T6967] tipc: Enabled bearer , priority 10 [ 196.891056][ T5934] usb 5-1: USB disconnect, device number 11 [ 196.919827][ T5934] usblp0: removed [ 197.097085][ T5896] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 197.271574][ T5896] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 197.295981][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.308412][ T7005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'. [ 197.335930][ T7005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'. [ 197.342497][ T5896] usb 7-1: Product: syz [ 197.411094][ T7005] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 197.418583][ T5896] usb 7-1: Manufacturer: syz [ 197.418610][ T5896] usb 7-1: SerialNumber: syz [ 197.438463][ T7005] ip6gretap0: entered promiscuous mode [ 197.495798][ T5896] usb 7-1: config 0 descriptor?? [ 197.771820][ T6998] x_tables: duplicate underflow at hook 3 [ 197.806466][ T5896] usb 7-1: USB disconnect, device number 2 [ 197.850441][ T10] tipc: Node number set to 4269801491 [ 198.465595][ T7028] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 198.545328][ T7035] netlink: 'syz.2.284': attribute type 12 has an invalid length. [ 199.044496][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 199.737592][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.743965][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.463499][ T7073] random: crng reseeded on system resumption [ 203.941672][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.329'. [ 204.756773][ T5913] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 204.957162][ T5913] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 204.965495][ T5913] usb 3-1: config 0 has no interface number 0 [ 204.987000][ T5913] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 205.025109][ T5913] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 205.079532][ T5913] usb 3-1: config 0 interface 255 has no altsetting 0 [ 205.110133][ T5913] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 205.139943][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.172502][ T5913] usb 3-1: config 0 descriptor?? [ 205.192730][ T5913] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 205.398800][ T5913] usb 3-1: USB disconnect, device number 8 [ 206.629520][ T7251] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 207.729713][ T7268] tun0: tun_chr_ioctl cmd 1074025675 [ 207.735074][ T7268] tun0: persist enabled [ 207.764352][ T7268] tun0: tun_chr_ioctl cmd 1074025675 [ 207.776341][ T7268] tun0: persist disabled [ 207.901161][ T7271] netlink: 'syz.4.356': attribute type 1 has an invalid length. [ 207.909136][ T7271] netlink: 'syz.4.356': attribute type 2 has an invalid length. [ 208.195155][ T7272] netlink: 'syz.4.356': attribute type 1 has an invalid length. [ 208.509537][ T7272] netlink: 'syz.4.356': attribute type 2 has an invalid length. [ 209.787594][ T7302] input: syz1 as /devices/virtual/input/input10 [ 210.681711][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 211.125936][ T7324] netlink: 'syz.4.372': attribute type 4 has an invalid length. [ 213.063412][ T5896] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 213.256706][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 213.268936][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.315592][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.347009][ T5896] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 213.356133][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.411445][ T5896] usb 7-1: config 0 descriptor?? [ 213.431385][ T5896] hub 7-1:0.0: USB hub found [ 213.612397][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.398'. [ 213.638350][ T5896] hub 7-1:0.0: 1 port detected [ 213.663422][ T7398] netlink: 452 bytes leftover after parsing attributes in process `syz.5.398'. [ 213.672827][ T7398] netlink: 452 bytes leftover after parsing attributes in process `syz.5.398'. [ 213.686816][ T5900] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 213.859666][ T5900] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 213.886012][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.917273][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.931404][ T5900] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 213.967761][ T5900] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 213.980810][ T5900] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 214.006512][ T5900] usb 1-1: Manufacturer: syz [ 214.024052][ T5900] usb 1-1: config 0 descriptor?? [ 214.249914][ T918] hub 7-1:0.0: activate --> -90 [ 214.438038][ T7425] netlink: 24 bytes leftover after parsing attributes in process `syz.5.404'. [ 214.464734][ T5900] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 214.484321][ T5900] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 214.528278][ T5900] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 214.651656][ T918] usb 7-1: USB disconnect, device number 3 [ 215.367398][ T918] usb 1-1: USB disconnect, device number 13 [ 216.873753][ T5934] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 217.086453][ T5934] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.101755][ T7467] netlink: 72 bytes leftover after parsing attributes in process `syz.0.415'. [ 217.116721][ T5934] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.138907][ T5934] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 217.166949][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 217.196661][ T5934] usb 3-1: SerialNumber: syz [ 217.224923][ T5934] usb 3-1: 0:2 : does not exist [ 217.640471][ T5934] usb 3-1: USB disconnect, device number 9 [ 217.734687][ T6624] udevd[6624]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.832599][ T7515] input: syz1 as /devices/virtual/input/input11 [ 218.179722][ T7527] input: syz1 as /devices/virtual/input/input12 [ 218.566255][ T30] kauditd_printk_skb: 505 callbacks suppressed [ 218.566275][ T30] audit: type=1326 audit(1744240962.081:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.5.423" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x0 [ 218.622460][ T918] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 218.869508][ T918] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 218.886711][ T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.016224][ T918] usb 3-1: config 0 descriptor?? [ 220.205381][ T30] audit: type=1326 audit(1744240963.731:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 220.269160][ T918] usb 3-1: Cannot set autoneg [ 220.284120][ T918] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 220.314862][ T30] audit: type=1326 audit(1744240963.761:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 220.355383][ T918] usb 3-1: USB disconnect, device number 10 [ 220.442400][ T30] audit: type=1326 audit(1744240963.771:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 220.542639][ T30] audit: type=1326 audit(1744240963.771:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 220.623668][ T30] audit: type=1326 audit(1744240963.771:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 220.705376][ T30] audit: type=1326 audit(1744240963.771:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 220.816709][ T30] audit: type=1326 audit(1744240963.781:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73bd598 code=0x7ffc0000 [ 220.932594][ T30] audit: type=1326 audit(1744240963.781:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73bd598 code=0x7ffc0000 [ 221.036722][ T30] audit: type=1326 audit(1744240963.781:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73bd598 code=0x7ffc0000 [ 221.987182][ T5913] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 222.161448][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.185113][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.208726][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.236739][ T7616] capability: warning: `syz.4.454' uses deprecated v2 capabilities in a way that may be insecure [ 222.242301][ T5913] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.304550][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.347953][ T5913] usb 1-1: config 0 descriptor?? [ 222.508741][ T7621] warning: `syz.4.456' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 222.765859][ T5913] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 222.807228][ T5913] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 223.472511][ T7642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.759666][ T7680] batadv_slave_1: entered promiscuous mode [ 224.767977][ T7678] batadv_slave_1: left promiscuous mode [ 225.094445][ T5896] usb 1-1: USB disconnect, device number 14 [ 225.247988][ T5934] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 225.425685][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 225.438167][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.466669][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.506642][ T5934] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 225.546701][ T5934] usb 7-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 225.555820][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.609873][ T5934] usb 7-1: config 0 descriptor?? [ 226.054551][ T5934] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x2 [ 226.073365][ T5934] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x0 [ 226.081673][ T5934] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x0 [ 226.093931][ T5934] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x0 [ 226.112073][ T5934] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x0 [ 226.130641][ T5934] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x0 [ 226.307402][ T5934] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x0 [ 226.332004][ T5934] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x0 [ 226.353191][ T5934] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x0 [ 226.371575][ T5934] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x0 [ 226.388383][ T5934] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x0 [ 226.420400][ T5934] hid-multitouch 0003:045E:9994.0005: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.6-1/input0 [ 226.474749][ T5934] usb 7-1: USB disconnect, device number 4 [ 226.840464][ T7711] syzkaller0: entered allmulticast mode [ 227.435212][ T7726] netlink: 'syz.4.504': attribute type 3 has an invalid length. [ 228.447732][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 228.606887][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 228.615675][ T9] usb 6-1: config index 0 descriptor too short (expected 54066, got 72) [ 228.627773][ T9] usb 6-1: config 216 has too many interfaces: 60, using maximum allowed: 32 [ 228.638902][ T30] kauditd_printk_skb: 874 callbacks suppressed [ 228.638922][ T30] audit: type=1326 audit(1744240972.171:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.4.518" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x0 [ 228.645438][ T9] usb 6-1: config 216 has an invalid descriptor of length 0, skipping remainder of the config [ 228.762274][ T9] usb 6-1: config 216 has 0 interfaces, different from the descriptor's value: 60 [ 228.805178][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 228.819193][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.850985][ T9] usb 6-1: Product: syz [ 228.856340][ T9] usb 6-1: Manufacturer: syz [ 228.866997][ T9] usb 6-1: SerialNumber: syz [ 229.094859][ T9] usb 6-1: USB disconnect, device number 6 [ 229.126826][ T5913] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 229.286887][ T5913] usb 7-1: Using ep0 maxpacket: 16 [ 229.303861][ T5913] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 229.325546][ T5913] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 229.347427][ T5913] usb 7-1: config 0 has no interface number 0 [ 229.365152][ T5913] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 229.377416][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.385904][ T5913] usb 7-1: Product: syz [ 229.392677][ T5913] usb 7-1: Manufacturer: syz [ 229.403898][ T5913] usb 7-1: SerialNumber: syz [ 229.427361][ T5913] usb 7-1: config 0 descriptor?? [ 229.655448][ T5913] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 229.689040][ T5913] usb 7-1: No valid video chain found. [ 229.708525][ T5913] usb 7-1: USB disconnect, device number 5 [ 229.887335][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 230.617239][ T7797] futex_wake_op: syz.6.530 tries to shift op by 32; fix this program [ 231.436677][ T5934] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 231.806710][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.817896][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.846783][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.889136][ T5934] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.913788][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.938068][ T5934] usb 3-1: config 0 descriptor?? [ 232.362032][ T5934] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 232.396439][ T5934] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 232.650402][ T5913] usb 3-1: USB disconnect, device number 11 [ 233.011237][ T5843] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 237.841612][ T30] audit: type=1326 audit(1744240981.371:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 237.913364][ T30] audit: type=1326 audit(1744240981.401:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 238.007552][ T30] audit: type=1326 audit(1744240981.401:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 238.066861][ T30] audit: type=1326 audit(1744240981.401:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 238.116694][ T30] audit: type=1326 audit(1744240981.401:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 238.156842][ T30] audit: type=1326 audit(1744240981.401:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 238.230556][ T30] audit: type=1326 audit(1744240981.401:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 238.327803][ T30] audit: type=1326 audit(1744240981.401:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 238.369713][ T30] audit: type=1326 audit(1744240981.401:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 238.436868][ T30] audit: type=1326 audit(1744240981.401:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.6.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 238.637723][ T7964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.584'. [ 238.660118][ T5913] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 238.820847][ T7973] syz_tun: left promiscuous mode [ 238.857123][ T7973] net_ratelimit: 473 callbacks suppressed [ 238.857140][ T7973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.896940][ T5913] usb 5-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 238.922007][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.945537][ T5913] usb 5-1: config 0 descriptor?? [ 239.575317][ T5896] usb 5-1: USB disconnect, device number 12 [ 240.577949][ T8032] veth0_vlan: entered allmulticast mode [ 240.652862][ T8032] ÿÿÿÿÿÿ: renamed from vlan1 [ 242.822192][ T8122] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 242.857100][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 242.857123][ T30] audit: type=1326 audit(1744240986.371:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 242.948868][ T30] audit: type=1326 audit(1744240986.371:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 242.990845][ T30] audit: type=1326 audit(1744240986.431:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 243.254926][ T30] audit: type=1326 audit(1744240986.751:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 243.311197][ T30] audit: type=1326 audit(1744240986.751:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 243.407427][ T30] audit: type=1326 audit(1744240986.751:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 243.487425][ T30] audit: type=1326 audit(1744240986.751:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 243.555830][ T30] audit: type=1326 audit(1744240986.751:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 243.781849][ T30] audit: type=1326 audit(1744240987.311:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 243.846899][ T30] audit: type=1326 audit(1744240987.331:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 244.077566][ T8156] wg2: entered promiscuous mode [ 244.090633][ T8156] wg2: entered allmulticast mode [ 244.889223][ T8190] netlink: 24 bytes leftover after parsing attributes in process `syz.5.681'. [ 245.218029][ T8202] veth2: entered promiscuous mode [ 245.223153][ T8202] veth2: entered allmulticast mode [ 245.272642][ T8202] veth3: entered allmulticast mode [ 245.515436][ T8205] syzkaller0: entered promiscuous mode [ 245.525777][ T8205] syzkaller0: entered allmulticast mode [ 246.330940][ T8229] input: syz1 as /devices/virtual/input/input16 [ 248.332066][ T8240] bridge_slave_0: left allmulticast mode [ 248.340102][ T8240] bridge_slave_0: left promiscuous mode [ 248.347262][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.372656][ T8240] bridge_slave_1: left allmulticast mode [ 248.386677][ T8240] bridge_slave_1: left promiscuous mode [ 248.397824][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.441311][ T8240] bond0: (slave bond_slave_0): Releasing backup interface [ 248.464154][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 248.464174][ T30] audit: type=1326 audit(1744240991.991:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 248.498394][ T8240] bond0: (slave bond_slave_1): Releasing backup interface [ 248.505470][ T30] audit: type=1326 audit(1744240991.991:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 248.529524][ T30] audit: type=1326 audit(1744240992.031:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 248.552237][ T30] audit: type=1326 audit(1744240992.031:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 248.593718][ T8240] team0: Port device team_slave_0 removed [ 248.610145][ T30] audit: type=1326 audit(1744240992.031:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 248.639216][ T8240] team0: Port device team_slave_1 removed [ 248.648368][ T8240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.656205][ T8240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.663669][ T30] audit: type=1326 audit(1744240992.061:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 248.689024][ T8240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.699998][ T30] audit: type=1326 audit(1744240992.061:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 248.724332][ T8240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.756885][ T30] audit: type=1326 audit(1744240992.061:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 248.857579][ T30] audit: type=1326 audit(1744240992.081:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 248.956656][ T30] audit: type=1326 audit(1744240992.081:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 248.984473][ T8258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.708'. [ 249.307021][ T8265] syzkaller0: entered promiscuous mode [ 249.312654][ T8265] syzkaller0: entered allmulticast mode [ 249.403835][ T8273] input: syz0 as /devices/virtual/input/input17 [ 249.664645][ T8283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.719'. [ 251.273029][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.723'. [ 251.745229][ T8318] tipc: Publication distribution failure [ 251.789200][ T8321] random: crng reseeded on system resumption [ 252.697125][ T5934] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 252.770164][ T8346] FAULT_INJECTION: forcing a failure. [ 252.770164][ T8346] name failslab, interval 1, probability 0, space 0, times 0 [ 252.783673][ T8346] CPU: 1 UID: 0 PID: 8346 Comm: syz.0.744 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 252.783703][ T8346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 252.783727][ T8346] Call Trace: [ 252.783736][ T8346] [ 252.783745][ T8346] dump_stack_lvl+0x241/0x360 [ 252.783793][ T8346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.783823][ T8346] ? __pfx__printk+0x10/0x10 [ 252.783856][ T8346] ? __pfx___might_resched+0x10/0x10 [ 252.783888][ T8346] should_fail_ex+0x424/0x570 [ 252.783916][ T8346] should_failslab+0xac/0x100 [ 252.783946][ T8346] __kmalloc_cache_noprof+0x73/0x370 [ 252.783972][ T8346] ? ovs_flow_tbl_init+0x3f8/0x8a0 [ 252.783997][ T8346] ovs_flow_tbl_init+0x3f8/0x8a0 [ 252.784024][ T8346] ovs_dp_cmd_new+0x265/0xce0 [ 252.784065][ T8346] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 252.784097][ T8346] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 252.784130][ T8346] genl_rcv_msg+0xb38/0xf00 [ 252.784162][ T8346] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.784181][ T8346] ? __dev_queue_xmit+0x1780/0x3f60 [ 252.784204][ T8346] ? kasan_save_track+0x3f/0x80 [ 252.784238][ T8346] ? __kasan_slab_alloc+0x66/0x80 [ 252.784269][ T8346] ? __do_fast_syscall_32+0xb4/0x110 [ 252.784314][ T8346] ? __lock_acquire+0xad5/0xd80 [ 252.784345][ T8346] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 252.784385][ T8346] netlink_rcv_skb+0x208/0x480 [ 252.784416][ T8346] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.784439][ T8346] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.784491][ T8346] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.784527][ T8346] genl_rcv+0x28/0x40 [ 252.784547][ T8346] netlink_unicast+0x7f8/0x9a0 [ 252.784582][ T8346] ? __pfx_netlink_unicast+0x10/0x10 [ 252.784610][ T8346] ? skb_put+0x114/0x1f0 [ 252.784635][ T8346] netlink_sendmsg+0x8c3/0xcd0 [ 252.784678][ T8346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.784712][ T8346] ? __import_iovec+0x585/0x830 [ 252.784740][ T8346] ? aa_sock_msg_perm+0x91/0x160 [ 252.784782][ T8346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.784810][ T8346] __sock_sendmsg+0x221/0x270 [ 252.784842][ T8346] ____sys_sendmsg+0x523/0x860 [ 252.784874][ T8346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.784914][ T8346] __sys_sendmsg+0x271/0x360 [ 252.784942][ T8346] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.785017][ T8346] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 252.785044][ T8346] ? lockdep_hardirqs_on+0x9d/0x150 [ 252.785071][ T8346] __do_fast_syscall_32+0xb4/0x110 [ 252.785096][ T8346] ? exc_page_fault+0x5f8/0x920 [ 252.785125][ T8346] do_fast_syscall_32+0x34/0x80 [ 252.785151][ T8346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.785183][ T8346] RIP: 0023:0xf7f64579 [ 252.785202][ T8346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 252.785219][ T8346] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 252.785241][ T8346] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 252.785255][ T8346] RDX: 000000000000c010 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.785268][ T8346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.785279][ T8346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 252.785291][ T8346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.785321][ T8346] [ 253.196692][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 253.204039][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.215653][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.244837][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 253.258021][ T5934] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 253.267210][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.282283][ T5934] usb 3-1: config 0 descriptor?? [ 253.360619][ T8350] : entered promiscuous mode [ 253.513021][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.749'. [ 253.589115][ T8357] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 253.656453][ T8359] netlink: 'syz.4.750': attribute type 10 has an invalid length. [ 253.664674][ T8359] netlink: 40 bytes leftover after parsing attributes in process `syz.4.750'. [ 253.678517][ T8359] batadv0: entered promiscuous mode [ 253.684174][ T8359] batadv0: entered allmulticast mode [ 253.695260][ T8359] bridge0: port 3(batadv0) entered blocking state [ 253.702290][ T5896] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 253.739164][ T8359] bridge0: port 3(batadv0) entered disabled state [ 253.766802][ T5900] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 253.852192][ T8359] bridge0: port 3(batadv0) entered blocking state [ 253.858861][ T8359] bridge0: port 3(batadv0) entered forwarding state [ 253.879655][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.891712][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.906876][ T5900] usb 6-1: device descriptor read/64, error -71 [ 253.949625][ T5934] microsoft 0003:045E:07DA.0008: report_id 0 is invalid [ 253.959818][ T5934] microsoft 0003:045E:07DA.0008: item 0 0 1 8 parsing failed [ 253.978730][ T5934] microsoft 0003:045E:07DA.0008: parse failed [ 254.016359][ T8362] batman_adv: batadv0: Adding interface: dummy0 [ 254.097017][ T8362] batman_adv: batadv0: Interface activated: dummy0 [ 254.113236][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.135084][ T5934] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 254.159738][ T6746] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 254.169290][ T6746] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 254.184091][ T5896] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.236873][ T5900] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 254.275119][ T8365] batadv0: mtu less than device minimum [ 254.296908][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.392909][ T8365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 254.404632][ T8365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 254.415892][ T8365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 254.427280][ T8365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 254.438471][ T8365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 254.449632][ T8365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 254.460777][ T8365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 254.471929][ T8365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 254.483076][ T8365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 254.510375][ T5900] usb 6-1: device descriptor read/64, error -71 [ 254.560460][ T5896] usb 1-1: config 0 descriptor?? [ 254.669057][ T5900] usb usb6-port1: attempt power cycle [ 255.006804][ T5900] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 255.027511][ T5900] usb 6-1: device descriptor read/8, error -71 [ 255.156053][ T5934] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 255.181871][ T5896] usbhid 1-1:0.0: can't add hid device: -71 [ 255.188207][ T5896] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 255.217192][ T5896] usb 1-1: USB disconnect, device number 15 [ 255.296744][ T5900] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 255.326704][ T5934] usb 7-1: Using ep0 maxpacket: 8 [ 255.334933][ T5900] usb 6-1: device descriptor read/8, error -71 [ 255.342772][ T5934] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 255.350575][ T5934] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 255.363464][ T5934] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 255.384168][ T5934] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 255.396812][ T5934] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 255.409935][ T5934] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 255.420234][ T5934] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 255.435311][ T5934] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 255.447625][ T5934] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 255.459514][ T5900] usb usb6-port1: unable to enumerate USB device [ 255.466087][ T5934] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 255.480859][ T5934] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 255.492286][ T5934] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 255.503797][ T5934] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 255.515576][ T5934] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 255.527187][ T5934] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 255.541688][ T5934] usb 7-1: string descriptor 0 read error: -22 [ 255.548258][ T5934] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 255.557402][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.575539][ T5934] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 255.616648][ T5913] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 255.768823][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.783071][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.794802][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 255.809526][ T5913] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.017801][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.053426][ T9] usb 3-1: USB disconnect, device number 12 [ 256.105972][ T5934] usb 7-1: USB disconnect, device number 6 [ 256.130096][ T5913] usb 5-1: config 0 descriptor?? [ 256.216876][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 256.362442][ T8385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.395853][ T8385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.455441][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 256.518293][ T10] usb 1-1: config 0 has no interfaces? [ 256.570204][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 256.593929][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.659624][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.683040][ T10] usb 1-1: Product: syz [ 256.717623][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 256.737554][ T10] usb 1-1: Manufacturer: syz [ 256.743295][ T10] usb 1-1: SerialNumber: syz [ 256.750580][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.768623][ T10] usb 1-1: config 0 descriptor?? [ 256.803212][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.813714][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.826173][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 256.836704][ T8376] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 256.839627][ T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 256.857963][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.866241][ T9] usb 3-1: Product: syz [ 256.874652][ T9] usb 3-1: Manufacturer: syz [ 256.881104][ T9] usb 3-1: SerialNumber: syz [ 256.903193][ T9] usb 3-1: config 0 descriptor?? [ 256.935153][ T5913] plantronics 0003:047F:FFFF.0009: item fetching failed at offset 14/15 [ 256.951091][ T8376] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 256.952460][ T5913] plantronics 0003:047F:FFFF.0009: parse failed [ 256.963863][ T8376] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 256.973707][ T5913] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22 [ 257.004890][ T8381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.128949][ T8381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.152861][ T9] usb 3-1: ucan: probing device on interface #0 [ 257.196031][ T8376] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 257.202249][ T9] usb 3-1: ucan: invalid endpoint configuration [ 257.262481][ T8376] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 257.277219][ T9] usb 3-1: ucan: probe failed; try to update the device firmware [ 257.321065][ T9] usb 3-1: USB disconnect, device number 13 [ 257.429563][ T8376] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 257.485599][ T8376] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 257.529665][ T8376] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 257.566382][ T8376] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 257.846752][ T5900] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 257.917682][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 257.996887][ T5900] usb 6-1: Using ep0 maxpacket: 32 [ 258.004800][ T5900] usb 6-1: unable to get BOS descriptor or descriptor too short [ 258.016336][ T5900] usb 6-1: config 0 has an invalid interface number: 251 but max is 1 [ 258.035721][ T5900] usb 6-1: config 0 has an invalid interface number: 2 but max is 1 [ 258.060567][ T5900] usb 6-1: config 0 has no interface number 0 [ 258.075785][ T5900] usb 6-1: config 0 has no interface number 1 [ 258.084081][ T5900] usb 6-1: config 0 interface 251 has no altsetting 0 [ 258.086661][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 258.091530][ T5900] usb 6-1: config 0 interface 2 has no altsetting 0 [ 258.107079][ T9] usb 7-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 258.108741][ T5900] usb 6-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 258.116140][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.116165][ T9] usb 7-1: Product: syz [ 258.116181][ T9] usb 7-1: Manufacturer: syz [ 258.116197][ T9] usb 7-1: SerialNumber: syz [ 258.154412][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.163192][ T5900] usb 6-1: Product: syz [ 258.168104][ T5900] usb 6-1: Manufacturer: syz [ 258.172965][ T5900] usb 6-1: SerialNumber: syz [ 258.186336][ T5900] usb 6-1: config 0 descriptor?? [ 258.198638][ T9] usb 7-1: config 0 descriptor?? [ 258.219503][ T9] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 258.416199][ T5900] usb 6-1: selecting invalid altsetting 0 [ 258.434536][ T5900] usb 6-1: Could not set interface, error -22 [ 258.445454][ T5900] usb 6-1: USB disconnect, device number 11 [ 258.576769][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 258.842101][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.759'. [ 258.851224][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.6.759'. [ 258.880624][ T8396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.891915][ T8396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.977900][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 258.984044][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 259.031820][ T5843] Bluetooth: hci1: unexpected event for opcode 0x080f [ 259.140241][ T5913] usb 1-1: USB disconnect, device number 16 [ 259.532448][ T8396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.541034][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 259.570333][ T8396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.578872][ T5913] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 259.634921][ T9] gspca_sunplus: reg_w_riv err -71 [ 259.655239][ T9] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 259.685201][ T9] usb 7-1: USB disconnect, device number 7 [ 259.759000][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 259.765729][ T5896] usb 5-1: USB disconnect, device number 13 [ 259.767358][ T5913] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 259.847774][ T5913] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.865191][ T5913] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.874788][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.883512][ T5913] usb 1-1: Product: syz [ 259.888693][ T5913] usb 1-1: Manufacturer: syz [ 259.893447][ T5913] usb 1-1: SerialNumber: syz [ 260.227025][ T5896] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 260.242111][ T5913] usb 1-1: cannot find UAC_HEADER [ 260.349493][ T5913] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 260.399938][ T5896] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 260.409015][ T5896] usb 5-1: config 0 has no interface number 0 [ 260.419068][ T5896] usb 5-1: New USB device found, idVendor=12d1, idProduct=ce6f, bcdDevice=4a.9b [ 260.428840][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.437460][ T5896] usb 5-1: Product: syz [ 260.442108][ T5896] usb 5-1: Manufacturer: syz [ 260.447010][ T5896] usb 5-1: SerialNumber: syz [ 260.455674][ T5896] usb 5-1: config 0 descriptor?? [ 260.466770][ T5913] usb 1-1: USB disconnect, device number 17 [ 260.484834][ T5896] option 5-1:0.251: GSM modem (1-port) converter detected [ 260.646692][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 260.687608][ T6624] udevd[6624]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.740284][ T5900] usb 5-1: USB disconnect, device number 14 [ 260.776039][ T5900] option 5-1:0.251: device disconnected [ 260.844314][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 260.867954][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 260.899844][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.906403][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.914867][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 260.925202][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 260.934722][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.948104][ T9] usb 6-1: config 0 descriptor?? [ 260.973006][ T9] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 261.616739][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 261.872781][ T9] usb 6-1: USB disconnect, device number 12 [ 262.641026][ T8473] random: crng reseeded on system resumption [ 262.786879][ T5913] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 263.056916][ T5843] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 263.066446][ T5843] Bluetooth: hci1: Injecting HCI hardware error event [ 263.075246][ T5843] Bluetooth: hci1: hardware error 0x00 [ 263.123068][ T5913] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 263.226849][ T5913] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 263.253223][ T5913] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 263.263312][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.279099][ T8464] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 263.295374][ T5913] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 263.540206][ T10] usb 1-1: USB disconnect, device number 18 [ 263.691980][ T8483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.790'. [ 263.701193][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 264.104909][ T10] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 264.241777][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.6.794'. [ 264.312665][ T10] usb 1-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 264.336993][ T10] usb 1-1: config 24 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 264.354427][ T10] usb 1-1: config 24 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 264.366976][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d [ 264.376674][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.391115][ T8464] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.400542][ T8464] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.496476][ T5900] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 264.518252][ T10] quatech2 1-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected [ 264.612842][ T8464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.628647][ T8464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.664398][ T10] usb 1-1: qt2_attach - failed to power on unit: -71 [ 264.671527][ T10] quatech2 1-1:24.0: probe with driver quatech2 failed with error -71 [ 264.704519][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.708952][ T10] usb 1-1: USB disconnect, device number 19 [ 264.720601][ T5900] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 264.758057][ T5900] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 264.785219][ T5900] usb 5-1: Manufacturer: syz [ 264.810656][ T5900] usb 5-1: SerialNumber: syz [ 264.844070][ T5900] usb 5-1: config 0 descriptor?? [ 264.880426][ T5900] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 264.887892][ T5900] usb 5-1: No valid video chain found. [ 265.169441][ T5843] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 265.204884][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 265.215912][ T8507] netlink: 'syz.6.798': attribute type 5 has an invalid length. [ 265.238657][ T8509] netlink: 132 bytes leftover after parsing attributes in process `syz.2.799'. [ 265.285419][ T8507] FAULT_INJECTION: forcing a failure. [ 265.285419][ T8507] name failslab, interval 1, probability 0, space 0, times 0 [ 265.320029][ T8507] CPU: 1 UID: 0 PID: 8507 Comm: syz.6.798 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 265.320063][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 265.320077][ T8507] Call Trace: [ 265.320086][ T8507] [ 265.320094][ T8507] dump_stack_lvl+0x241/0x360 [ 265.320134][ T8507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.320164][ T8507] ? __pfx__printk+0x10/0x10 [ 265.320192][ T8507] ? queue_work_on+0x261/0x380 [ 265.320248][ T8507] ? __pfx___might_resched+0x10/0x10 [ 265.320281][ T8507] should_fail_ex+0x424/0x570 [ 265.320309][ T8507] should_failslab+0xac/0x100 [ 265.320340][ T8507] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 265.320372][ T8507] ? __alloc_skb+0x1c2/0x480 [ 265.320405][ T8507] __alloc_skb+0x1c2/0x480 [ 265.320431][ T8507] ? __pfx___alloc_skb+0x10/0x10 [ 265.320450][ T8507] ? fib_nlmsg_size+0x396/0x5c0 [ 265.320473][ T8507] ? notifier_chain_unregister+0x260/0x2d0 [ 265.320507][ T8507] rtmsg_fib+0x147/0x650 [ 265.320538][ T8507] ? __pfx_rtmsg_fib+0x10/0x10 [ 265.320566][ T8507] ? lockdep_rtnl_is_held+0x26/0x40 [ 265.320597][ T8507] fib_table_insert+0xed2/0x1d70 [ 265.320644][ T8507] ? __pfx___mutex_lock+0x10/0x10 [ 265.320679][ T8507] ? __pfx_fib_table_insert+0x10/0x10 [ 265.320711][ T8507] ? fib_new_table+0x120/0x2d0 [ 265.320735][ T8507] inet_rtm_newroute+0x154/0x2a0 [ 265.320762][ T8507] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 265.320807][ T8507] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 265.320832][ T8507] rtnetlink_rcv_msg+0x80f/0xd70 [ 265.320860][ T8507] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 265.320895][ T8507] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.320932][ T8507] ? ref_tracker_free+0x63e/0x7e0 [ 265.320964][ T8507] netlink_rcv_skb+0x208/0x480 [ 265.320995][ T8507] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.321031][ T8507] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.321080][ T8507] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.321112][ T8507] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.321144][ T8507] netlink_unicast+0x7f8/0x9a0 [ 265.321180][ T8507] ? __pfx_netlink_unicast+0x10/0x10 [ 265.321209][ T8507] ? skb_put+0x114/0x1f0 [ 265.321234][ T8507] netlink_sendmsg+0x8c3/0xcd0 [ 265.321278][ T8507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.321312][ T8507] ? __import_iovec+0x585/0x830 [ 265.321340][ T8507] ? aa_sock_msg_perm+0x91/0x160 [ 265.321376][ T8507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.321410][ T8507] __sock_sendmsg+0x221/0x270 [ 265.321442][ T8507] ____sys_sendmsg+0x523/0x860 [ 265.321475][ T8507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.321516][ T8507] __sys_sendmmsg+0x4a3/0x7b0 [ 265.321552][ T8507] ? __pfx___sys_sendmmsg+0x10/0x10 [ 265.321580][ T8507] ? __lock_acquire+0xad5/0xd80 [ 265.321644][ T8507] ? vfs_write+0xb29/0xd10 [ 265.321688][ T8507] ? __mutex_unlock_slowpath+0x229/0x800 [ 265.321724][ T8507] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 265.321749][ T8507] ? __fget_files+0x2a/0x420 [ 265.321783][ T8507] ? fput+0x9b/0xd0 [ 265.321801][ T8507] ? ksys_write+0x275/0x2d0 [ 265.321837][ T8507] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 265.321873][ T8507] __do_fast_syscall_32+0xb4/0x110 [ 265.321899][ T8507] ? exc_page_fault+0x5f8/0x920 [ 265.321929][ T8507] do_fast_syscall_32+0x34/0x80 [ 265.321955][ T8507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.321981][ T8507] RIP: 0023:0xf73bd579 [ 265.321999][ T8507] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 265.322017][ T8507] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 265.322039][ T8507] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 265.322053][ T8507] RDX: 0000000004924b68 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.322066][ T8507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.322079][ T8507] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 265.322091][ T8507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.322120][ T8507] [ 266.108991][ T5913] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 266.237507][ T918] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 266.355247][ T5913] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 266.373510][ T918] usb 1-1: device descriptor read/64, error -71 [ 266.391275][ T5913] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 266.410122][ T5913] usb 7-1: config 0 interface 0 has no altsetting 0 [ 266.421027][ T5913] usb 7-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 266.422388][ T8528] netlink: 'syz.5.806': attribute type 4 has an invalid length. [ 266.442761][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.458453][ T5913] usb 7-1: config 0 descriptor?? [ 266.467985][ T8515] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.480028][ T8529] netlink: 'syz.5.806': attribute type 4 has an invalid length. [ 266.536754][ T5900] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 266.616911][ T918] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 266.721283][ T5900] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 266.731220][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.752699][ T5900] usb 3-1: Product: syz [ 266.758384][ T918] usb 1-1: device descriptor read/64, error -71 [ 266.766900][ T5900] usb 3-1: Manufacturer: syz [ 266.771730][ T5900] usb 3-1: SerialNumber: syz [ 266.781445][ T5900] usb 3-1: config 0 descriptor?? [ 266.831379][ T5900] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 266.867237][ T918] usb usb1-port1: attempt power cycle [ 266.928830][ T5913] logitech 0003:046D:C24F.000A: unbalanced collection at end of report description [ 266.970872][ T5913] logitech 0003:046D:C24F.000A: parse failed [ 266.994583][ T5913] logitech 0003:046D:C24F.000A: probe with driver logitech failed with error -22 [ 267.053817][ T5913] usb 5-1: USB disconnect, device number 15 [ 267.059251][ T8533] random: crng reseeded on system resumption [ 267.286679][ T918] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 267.337510][ T918] usb 1-1: device descriptor read/8, error -71 [ 267.428024][ T8542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.808'. [ 267.459201][ T8542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.808'. [ 267.483119][ T8542] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 267.492395][ T8542] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 267.627251][ T8543] net_ratelimit: 10 callbacks suppressed [ 267.627273][ T8543] dccp_invalid_packet: invalid packet type [ 267.661496][ T918] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 267.677022][ T5934] usb 7-1: USB disconnect, device number 8 [ 267.697372][ T918] usb 1-1: device descriptor read/8, error -71 [ 267.737625][ T5900] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 267.754502][ T5900] sq905c 3-1:0.0: probe with driver sq905c failed with error -110 [ 267.807774][ T918] usb usb1-port1: unable to enumerate USB device [ 268.285777][ T8547] tap0: tun_chr_ioctl cmd 1074025677 [ 268.297043][ T8547] tap0: linktype set to 768 [ 268.670105][ T8556] loop7: detected capacity change from 0 to 7 [ 268.680933][ T8556] Dev loop7: unable to read RDB block 7 [ 268.688677][ T8556] loop7: unable to read partition table [ 268.694525][ T8556] loop7: partition table beyond EOD, truncated [ 268.701407][ T8556] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 268.907257][ T5934] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 269.097321][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 269.110224][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.131075][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.143448][ T5934] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 269.153498][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.182196][ T5934] usb 7-1: config 0 descriptor?? [ 269.365254][ T918] usb 3-1: USB disconnect, device number 14 [ 269.623000][ T5934] appleir 0003:05AC:8241.000B: unknown main item tag 0x0 [ 269.637664][ T5934] appleir 0003:05AC:8241.000B: unknown main item tag 0x0 [ 269.644788][ T5934] appleir 0003:05AC:8241.000B: unknown main item tag 0x0 [ 269.664247][ T5934] appleir 0003:05AC:8241.000B: unknown main item tag 0x0 [ 269.675230][ T5934] appleir 0003:05AC:8241.000B: unknown main item tag 0x0 [ 269.697533][ T5934] appleir 0003:05AC:8241.000B: No inputs registered, leaving [ 269.737510][ T5934] appleir 0003:05AC:8241.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 269.946489][ T5934] usb 7-1: USB disconnect, device number 9 [ 270.908620][ T8597] random: crng reseeded on system resumption [ 271.954459][ T8611] misc userio: Can't change port type on an already running userio instance [ 271.985808][ T8575] misc userio: Can't change port type on an already running userio instance [ 271.997232][ T8612] netlink: 'syz.5.828': attribute type 1 has an invalid length. [ 272.008000][ T8612] netlink: 'syz.5.828': attribute type 2 has an invalid length. [ 272.029551][ T8612] netlink: 'syz.5.828': attribute type 1 has an invalid length. [ 272.059323][ T8612] netlink: 'syz.5.828': attribute type 2 has an invalid length. [ 272.935321][ T5913] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 273.115474][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.832'. [ 273.131120][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 273.137089][ T8623] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 273.162166][ T5913] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 273.190349][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.221291][ T5913] usb 6-1: Product: syz [ 273.225506][ T5913] usb 6-1: Manufacturer: syz [ 273.251472][ T5913] usb 6-1: SerialNumber: syz [ 273.269503][ T8626] tap0: tun_chr_ioctl cmd 1074025681 [ 273.283332][ T5913] usb 6-1: config 0 descriptor?? [ 273.310055][ T5913] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 273.486720][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 273.526861][ T5934] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 273.647158][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 273.669610][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.686760][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 273.690108][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 273.710080][ T5934] usb 5-1: config 0 has an invalid interface number: 170 but max is 0 [ 273.736457][ T5934] usb 5-1: config 0 has no interface number 0 [ 273.746891][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 273.753762][ T5934] usb 5-1: config 0 interface 170 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 273.769098][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 273.802590][ T5934] usb 5-1: config 0 interface 170 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 273.806486][ T9] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 273.831501][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 273.850161][ T5934] usb 5-1: config 0 interface 170 altsetting 0 endpoint 0x88 has invalid maxpacket 10453, setting to 1024 [ 273.856939][ T9] usb 7-1: Product: syz [ 273.873148][ T5934] usb 5-1: config 0 interface 170 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 273.875900][ T9] usb 7-1: Manufacturer: syz [ 273.901235][ T9] usb 7-1: SerialNumber: syz [ 273.904164][ T5934] usb 5-1: config 0 interface 170 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 273.924275][ T5934] usb 5-1: config 0 interface 170 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 273.924976][ T9] usb 7-1: config 0 descriptor?? [ 273.935182][ T5934] usb 5-1: config 0 interface 170 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 273.942090][ T8631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.835'. [ 273.964115][ T5934] usb 5-1: New USB device found, idVendor=7366, idProduct=f8cb, bcdDevice=3a.11 [ 273.982110][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.991721][ T5934] usb 5-1: Product: syz [ 273.996060][ T5934] usb 5-1: Manufacturer: syz [ 274.001034][ T5934] usb 5-1: SerialNumber: syz [ 274.013446][ T5934] usb 5-1: config 0 descriptor?? [ 274.020205][ T8626] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 274.027932][ T8626] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 274.029659][ T8631] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 274.082059][ T8631] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 274.173843][ T9] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 274.184680][ T9] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 274.261067][ T979] usb 5-1: USB disconnect, device number 16 [ 274.321895][ T8636] FAULT_INJECTION: forcing a failure. [ 274.321895][ T8636] name failslab, interval 1, probability 0, space 0, times 0 [ 274.335959][ T8636] CPU: 1 UID: 0 PID: 8636 Comm: syz.0.837 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 274.335989][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.336003][ T8636] Call Trace: [ 274.336011][ T8636] [ 274.336020][ T8636] dump_stack_lvl+0x241/0x360 [ 274.336058][ T8636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.336089][ T8636] ? __pfx__printk+0x10/0x10 [ 274.336123][ T8636] ? __pfx___might_resched+0x10/0x10 [ 274.336156][ T8636] should_fail_ex+0x424/0x570 [ 274.336183][ T8636] should_failslab+0xac/0x100 [ 274.336215][ T8636] __kvmalloc_node_noprof+0x170/0x5a0 [ 274.336245][ T8636] ? io_alloc_cache_init+0x3f/0x140 [ 274.336285][ T8636] io_alloc_cache_init+0x3f/0x140 [ 274.336320][ T8636] io_rsrc_cache_init+0x43/0x50 [ 274.336352][ T8636] io_ring_ctx_alloc+0x4e6/0xab0 [ 274.336384][ T8636] io_uring_create+0x123/0xc90 [ 274.336416][ T8636] __se_sys_io_uring_setup+0x2e8/0x360 [ 274.336442][ T8636] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 274.336483][ T8636] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 274.336509][ T8636] ? lockdep_hardirqs_on+0x9d/0x150 [ 274.336540][ T8636] __do_fast_syscall_32+0xb4/0x110 [ 274.336565][ T8636] ? exc_page_fault+0x5f8/0x920 [ 274.336601][ T8636] do_fast_syscall_32+0x34/0x80 [ 274.336627][ T8636] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 274.336654][ T8636] RIP: 0023:0xf7f64579 [ 274.336672][ T8636] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 274.336689][ T8636] RSP: 002b:00000000f508650c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 274.336712][ T8636] RAX: ffffffffffffffda RBX: 0000000000002e9b RCX: 0000000080000580 [ 274.336727][ T8636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.336739][ T8636] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 274.336751][ T8636] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 274.336763][ T8636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.336793][ T8636] [ 274.382313][ T9] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 274.385043][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.397787][ T9] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 274.578712][ T9] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 274.601997][ T9] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 274.608070][ T8638] netlink: 44 bytes leftover after parsing attributes in process `syz.0.838'. [ 274.610775][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.626341][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.633339][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.640144][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.646859][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.653598][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.660857][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.667572][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.674243][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.680933][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.687637][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.694298][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.700937][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.707591][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.714255][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.721416][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.728454][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.735115][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.741979][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.748639][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.755317][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.761987][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.768703][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.775391][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.782081][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.788749][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.795420][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.802188][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.808892][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.818950][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.825699][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.832641][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.839315][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.846010][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.852691][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.859351][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.866113][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.872816][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.879498][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.886163][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.892846][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.899790][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.906464][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.913128][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.919812][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.926650][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.933554][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.940235][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.946899][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.953576][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.960235][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.966895][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.973584][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.980377][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.987060][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 274.993784][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.000432][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.007080][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.013746][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.020393][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.027053][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.033738][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.045884][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.052938][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.059974][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.066657][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.068581][ T5934] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 275.073480][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.087781][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.094438][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.101121][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.107812][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.112500][ T8647] bridge0: port 3(erspan0) entered blocking state [ 275.114483][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.127942][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.134646][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.141802][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.148725][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.155427][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.162182][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.168906][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.175614][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.182348][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.190240][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.191519][ T8647] bridge0: port 3(erspan0) entered disabled state [ 275.196930][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.197621][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.217594][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.224576][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.231340][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.238071][ T9] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 275.246516][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.253716][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.260385][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.267031][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.273631][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.280385][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.296661][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.303464][ T5934] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 275.304177][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.321261][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.327959][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.334634][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.340804][ T5934] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 275.341359][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.359951][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.366770][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.376792][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.383587][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.390421][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.397393][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.404068][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.405964][ T5934] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 275.410814][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.428710][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.435385][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.442182][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.449007][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.453290][ T8647] erspan0: entered allmulticast mode [ 275.455762][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.467564][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.474034][ T5934] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 275.474234][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.493953][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.500668][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.504934][ T8647] erspan0: entered promiscuous mode [ 275.507321][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.507527][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.513581][ T5934] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 275.519698][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.539691][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.541422][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.556195][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.564070][ T8652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.840'. [ 275.564159][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.579667][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.586364][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.593137][ C0] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 275.595698][ T8647] bridge0: port 3(erspan0) entered blocking state [ 275.600259][ T9] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 275.607436][ T8647] bridge0: port 3(erspan0) entered forwarding state [ 275.648311][ T9] usb 7-1: USB disconnect, device number 10 [ 275.784224][ T5913] gspca_sonixj: reg_w1 err -71 [ 275.827511][ T5913] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 275.840268][ T5913] usb 6-1: USB disconnect, device number 13 [ 275.856486][ T5934] ath6kl: Failed to submit usb control message: -71 [ 275.897013][ T5934] ath6kl: unable to send the bmi data to the device: -71 [ 275.920837][ T5934] ath6kl: Unable to send get target info: -71 [ 275.930368][ T5934] ath6kl: Failed to init ath6kl core: -71 [ 275.950681][ T5934] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 275.985891][ T5934] usb 1-1: USB disconnect, device number 24 [ 276.238916][ T8662] input: syz0 as /devices/virtual/input/input21 [ 277.030939][ T8672] random: crng reseeded on system resumption [ 277.082164][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 277.614355][ T8684] sctp: [Deprecated]: syz.2.848 (pid 8684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.614355][ T8684] Use struct sctp_sack_info instead [ 277.695968][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 277.726156][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 278.206641][ T8690] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 278.234959][ T8690] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 278.254249][ T8690] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 278.289514][ T8690] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 278.376668][ T5913] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 278.434708][ T8701] FAULT_INJECTION: forcing a failure. [ 278.434708][ T8701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.448042][ T8701] CPU: 0 UID: 0 PID: 8701 Comm: syz.5.854 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 278.448070][ T8701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 278.448083][ T8701] Call Trace: [ 278.448091][ T8701] [ 278.448101][ T8701] dump_stack_lvl+0x241/0x360 [ 278.448139][ T8701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.448170][ T8701] ? __pfx__printk+0x10/0x10 [ 278.448213][ T8701] should_fail_ex+0x424/0x570 [ 278.448241][ T8701] _copy_from_iter+0x211/0x1c70 [ 278.448276][ T8701] ? __build_skb_around+0x247/0x3d0 [ 278.448314][ T8701] ? __alloc_skb+0x298/0x480 [ 278.448332][ T8701] ? __pfx__copy_from_iter+0x10/0x10 [ 278.448363][ T8701] ? __pfx___alloc_skb+0x10/0x10 [ 278.448385][ T8701] ? skb_put+0x114/0x1f0 [ 278.448410][ T8701] netlink_sendmsg+0x73c/0xcd0 [ 278.448455][ T8701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.448508][ T8701] ? __import_iovec+0x585/0x830 [ 278.448535][ T8701] ? aa_sock_msg_perm+0x91/0x160 [ 278.448589][ T8701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.448616][ T8701] __sock_sendmsg+0x221/0x270 [ 278.448648][ T8701] ____sys_sendmsg+0x523/0x860 [ 278.448680][ T8701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.448720][ T8701] __sys_sendmsg+0x271/0x360 [ 278.448748][ T8701] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.448825][ T8701] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 278.448850][ T8701] ? lockdep_hardirqs_on+0x9d/0x150 [ 278.448878][ T8701] __do_fast_syscall_32+0xb4/0x110 [ 278.448903][ T8701] ? exc_page_fault+0x5f8/0x920 [ 278.448931][ T8701] do_fast_syscall_32+0x34/0x80 [ 278.448959][ T8701] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.448984][ T8701] RIP: 0023:0xf746d579 [ 278.449002][ T8701] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 278.449018][ T8701] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 278.449041][ T8701] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 278.449055][ T8701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.449068][ T8701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.449080][ T8701] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 278.449092][ T8701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.449123][ T8701] [ 279.008585][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 279.019821][ T5913] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 279.041412][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.079651][ T5913] usb 1-1: config 0 descriptor?? [ 279.203264][ T8683] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.339640][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.855'. [ 279.468736][ T8710] team1: entered promiscuous mode [ 279.474789][ T8710] 8021q: adding VLAN 0 to HW filter on device team1 [ 279.568285][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 279.682604][ T5913] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 279.743838][ T9] usb 3-1: config index 0 descriptor too short (expected 65134, got 72) [ 279.755869][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 279.788255][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.813978][ T9] usb 3-1: Product: syz [ 279.825268][ T9] usb 3-1: Manufacturer: syz [ 279.842204][ T9] usb 3-1: SerialNumber: syz [ 279.883630][ T5934] usb 1-1: USB disconnect, device number 25 [ 279.884768][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 280.094565][ T5913] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 280.578264][ T6746] tipc: Subscription rejected, illegal request [ 280.736955][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 280.909726][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.921309][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.946480][ T9] usb 1-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 280.956511][ T9] usb 1-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 280.966235][ T9] usb 1-1: Manufacturer: syz [ 280.981226][ T9] usb 1-1: config 0 descriptor?? [ 281.137399][ T5913] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 281.160258][ T5913] ath9k_htc: Failed to initialize the device [ 281.253148][ T5913] usb 3-1: ath9k_htc: USB layer deinitialized [ 281.266285][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 281.266307][ T30] audit: type=1326 audit(1744241024.791:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.6.867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 281.310355][ T30] audit: type=1326 audit(1744241024.831:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.6.867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 281.335655][ T30] audit: type=1326 audit(1744241024.831:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.6.867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 281.404710][ T30] audit: type=1326 audit(1744241024.831:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.6.867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 281.453609][ T30] audit: type=1326 audit(1744241024.831:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.6.867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 281.453750][ T30] audit: type=1326 audit(1744241024.831:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.6.867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 281.453798][ T30] audit: type=1326 audit(1744241024.831:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.6.867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=328 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 281.453846][ T30] audit: type=1326 audit(1744241024.831:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.6.867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 281.453889][ T30] audit: type=1326 audit(1744241024.841:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.6.867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 281.453928][ T30] audit: type=1326 audit(1744241024.841:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.6.867" exe="/root/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 281.558439][ T8740] netlink: 60 bytes leftover after parsing attributes in process `syz.5.868'. [ 281.558773][ T8738] netlink: 60 bytes leftover after parsing attributes in process `syz.5.868'. [ 281.577514][ T9] asus 0003:0B05:18C6.000D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 281.577575][ T9] asus 0003:0B05:18C6.000D: Asus input not registered [ 281.584249][ T9] asus 0003:0B05:18C6.000D: probe with driver asus failed with error -12 [ 281.936433][ T5896] usb 1-1: USB disconnect, device number 26 [ 282.256808][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 282.273468][ T9] usb 3-1: USB disconnect, device number 15 [ 282.431173][ T8760] random: crng reseeded on system resumption [ 282.607365][ T5913] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 282.771089][ T8767] IPv4: Oversized IP packet from 127.202.26.0 [ 282.788852][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 282.862368][ T5913] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 282.916827][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.929559][ T5913] usb 6-1: Product: syz [ 282.933780][ T5913] usb 6-1: Manufacturer: syz [ 282.938970][ T5913] usb 6-1: SerialNumber: syz [ 282.947225][ T5913] usb 6-1: config 0 descriptor?? [ 283.157095][ T5913] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 283.366728][ T5896] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 283.578224][ T5934] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 283.777813][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 283.790073][ T8777] FAULT_INJECTION: forcing a failure. [ 283.790073][ T8777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.836340][ T5934] usb 1-1: config 2 interface 0 has no altsetting 0 [ 283.851238][ T8777] CPU: 1 UID: 0 PID: 8777 Comm: syz.4.880 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 283.851269][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 283.851286][ T8777] Call Trace: [ 283.851294][ T8777] [ 283.851303][ T8777] dump_stack_lvl+0x241/0x360 [ 283.851344][ T8777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.851374][ T8777] ? __pfx__printk+0x10/0x10 [ 283.851417][ T8777] should_fail_ex+0x424/0x570 [ 283.851445][ T8777] _copy_from_iter+0x211/0x1c70 [ 283.851474][ T8777] ? _copy_from_iter+0x288/0x1c70 [ 283.851504][ T8777] ? skb_set_owner_w+0x246/0x380 [ 283.851532][ T8777] ? sock_alloc_send_pskb+0x944/0xa70 [ 283.851555][ T8777] ? __pfx__copy_from_iter+0x10/0x10 [ 283.851582][ T8777] ? __pfx__copy_from_iter+0x10/0x10 [ 283.851618][ T8777] ? page_copy_sane+0x154/0x260 [ 283.851647][ T8777] copy_page_from_iter+0x7a/0x100 [ 283.851678][ T8777] skb_copy_datagram_from_iter+0x2e0/0x6c0 [ 283.851718][ T8777] packet_sendmsg+0x4774/0x6ed0 [ 283.851749][ T8777] ? _parse_integer_limit+0x1b4/0x200 [ 283.851794][ T8777] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 283.851863][ T8777] ? __pfx_packet_sendmsg+0x10/0x10 [ 283.851889][ T8777] ? aa_sk_perm+0x96f/0xac0 [ 283.851924][ T8777] ? __pfx_aa_sk_perm+0x10/0x10 [ 283.851954][ T8777] ? aa_sock_msg_perm+0x91/0x160 [ 283.851990][ T8777] ? __pfx_packet_sendmsg+0x10/0x10 [ 283.852016][ T8777] __sock_sendmsg+0x221/0x270 [ 283.852054][ T8777] __sys_sendto+0x365/0x4c0 [ 283.852079][ T8777] ? __pfx___sys_sendto+0x10/0x10 [ 283.852114][ T8777] ? __fget_files+0x2a/0x420 [ 283.852143][ T8777] ? ksys_write+0x275/0x2d0 [ 283.852178][ T8777] __ia32_sys_sendto+0xdd/0x100 [ 283.852202][ T8777] __do_fast_syscall_32+0xb4/0x110 [ 283.852227][ T8777] ? exc_page_fault+0x5f8/0x920 [ 283.852256][ T8777] do_fast_syscall_32+0x34/0x80 [ 283.852282][ T8777] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.852308][ T8777] RIP: 0023:0xf7f73579 [ 283.852326][ T8777] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 283.852344][ T8777] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 283.852365][ T8777] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000180 [ 283.852380][ T8777] RDX: 0000000000010608 RSI: 0000000000000000 RDI: 0000000080000140 [ 283.852393][ T8777] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 283.852405][ T8777] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 283.852418][ T8777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.852449][ T8777] [ 283.854706][ T5934] usb 1-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 284.202048][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.210578][ T5934] usb 1-1: Product: syz [ 284.214765][ T5934] usb 1-1: Manufacturer: syz [ 284.224390][ T5934] usb 1-1: SerialNumber: syz [ 284.319441][ T8782] debugfs: File 'ram195' in directory 'ramdisk_pages' already present! [ 284.374335][ T8782] block device autoloading is deprecated and will be removed. [ 284.698480][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 284.756815][ T53] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 284.776137][ T8794] team1: entered promiscuous mode [ 284.783295][ T8794] 8021q: adding VLAN 0 to HW filter on device team1 [ 284.920314][ T53] usb 5-1: unable to get BOS descriptor or descriptor too short [ 284.935993][ T53] usb 5-1: config 14 has an invalid interface number: 53 but max is 0 [ 284.950591][ T53] usb 5-1: config 14 has no interface number 0 [ 284.961412][ T53] usb 5-1: config 14 interface 53 altsetting 2 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 284.975400][ T8796] netlink: 48 bytes leftover after parsing attributes in process `syz.2.887'. [ 284.975558][ T53] usb 5-1: config 14 interface 53 has no altsetting 0 [ 284.995715][ T53] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=b0.15 [ 285.005547][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.013916][ T53] usb 5-1: Product: syz [ 285.018612][ T53] usb 5-1: Manufacturer: syz [ 285.023517][ T53] usb 5-1: SerialNumber: syz [ 285.048054][ T8796] netlink: 'syz.2.887': attribute type 3 has an invalid length. [ 285.162350][ T8798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.888'. [ 285.321392][ T8788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.339687][ T8788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.379701][ T53] usb 5-1: bad CDC descriptors [ 285.398773][ T53] usb 5-1: USB disconnect, device number 17 [ 285.690236][ T5913] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 285.836696][ T5896] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 285.920108][ T5913] usb 6-1: USB disconnect, device number 14 [ 285.984533][ T8803] tipc: Failed to remove unknown binding: 66,1,1/4269801491:3134849547/3134849549 [ 285.997209][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 286.002550][ T8803] tipc: Failed to remove unknown binding: 66,1,1/4269801491:3134849547/3134849549 [ 286.004742][ T5896] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 286.016511][ T8803] tipc: Failed to remove unknown binding: 66,1,1/4269801491:3134849547/3134849549 [ 286.032431][ T5896] usb 3-1: config 179 has no interface number 0 [ 286.040234][ T5896] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 286.051985][ T5896] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 286.063878][ T5896] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 286.075703][ T5896] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 286.088775][ T5896] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 286.105353][ T5896] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 286.115393][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.130117][ T8798] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 286.255320][ T5934] usb 1-1: USB disconnect, device number 27 [ 286.377229][ T5843] Bluetooth: hci2: unexpected event for opcode 0x00ff [ 286.407004][ T5913] usb 3-1: USB disconnect, device number 17 [ 286.407032][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 286.422200][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 286.431200][ C1] ================================================================== [ 286.439298][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x29d/0x370 [ 286.447156][ C1] Read of size 4 at addr ffff88807cbe405c by task ksoftirqd/1/23 [ 286.454911][ C1] [ 286.457266][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 286.457296][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 286.457310][ C1] Call Trace: [ 286.457318][ C1] [ 286.457327][ C1] dump_stack_lvl+0x241/0x360 [ 286.457365][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.457395][ C1] ? __virt_addr_valid+0x183/0x530 [ 286.457423][ C1] ? rcu_is_watching+0x15/0xb0 [ 286.457449][ C1] ? __virt_addr_valid+0x183/0x530 [ 286.457475][ C1] ? lock_release+0x4e/0x3e0 [ 286.457499][ C1] ? __virt_addr_valid+0x183/0x530 [ 286.457526][ C1] ? __virt_addr_valid+0x183/0x530 [ 286.457562][ C1] print_report+0x16e/0x5b0 [ 286.457589][ C1] ? __virt_addr_valid+0x183/0x530 [ 286.457617][ C1] ? __virt_addr_valid+0x183/0x530 [ 286.457643][ C1] ? __virt_addr_valid+0x45f/0x530 [ 286.457670][ C1] ? __phys_addr+0xba/0x170 [ 286.457697][ C1] ? do_raw_spin_lock+0x29d/0x370 [ 286.457726][ C1] kasan_report+0x143/0x180 [ 286.457754][ C1] ? do_raw_spin_lock+0x29d/0x370 [ 286.457786][ C1] do_raw_spin_lock+0x29d/0x370 [ 286.457818][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 286.457846][ C1] ? do_raw_spin_lock+0x151/0x370 [ 286.457878][ C1] _raw_spin_lock_irqsave+0xe4/0x130 [ 286.457901][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 286.457923][ C1] ? kcov_remote_stop+0x78/0x6f0 [ 286.457947][ C1] __wake_up_common_lock+0x25/0x1e0 [ 286.457982][ C1] __usb_hcd_giveback_urb+0x501/0x6e0 [ 286.458010][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 286.458038][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 286.458071][ C1] dummy_timer+0x84b/0x4670 [ 286.458095][ C1] ? __lock_acquire+0xad5/0xd80 [ 286.458130][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 286.458151][ C1] ? pwq_dec_nr_in_flight+0xa59/0xd60 [ 286.458173][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 286.458202][ C1] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 286.458226][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 286.458249][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 286.458270][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 286.458291][ C1] __hrtimer_run_queues+0x5a6/0xd40 [ 286.458326][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 286.458352][ C1] ? read_tsc+0x9/0x20 [ 286.458369][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 286.458413][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 286.458442][ C1] handle_softirqs+0x2d6/0x9b0 [ 286.458468][ C1] ? run_ksoftirqd+0xcf/0x130 [ 286.458492][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 286.458518][ C1] run_ksoftirqd+0xcf/0x130 [ 286.458541][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 286.458575][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 286.458597][ C1] smpboot_thread_fn+0x576/0xaa0 [ 286.458623][ C1] ? smpboot_thread_fn+0x46/0xaa0 [ 286.458649][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 286.458673][ C1] kthread+0x7b7/0x940 [ 286.458702][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 286.458727][ C1] ? __pfx_kthread+0x10/0x10 [ 286.458753][ C1] ? __pfx_kthread+0x10/0x10 [ 286.458780][ C1] ? __pfx_kthread+0x10/0x10 [ 286.458807][ C1] ? __pfx_kthread+0x10/0x10 [ 286.458834][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.458853][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 286.458876][ C1] ? __pfx_kthread+0x10/0x10 [ 286.458904][ C1] ret_from_fork+0x4b/0x80 [ 286.458924][ C1] ? __pfx_kthread+0x10/0x10 [ 286.458952][ C1] ret_from_fork_asm+0x1a/0x30 [ 286.458979][ C1] [ 286.458987][ C1] [ 286.798357][ C1] Allocated by task 5896: [ 286.802694][ C1] kasan_save_track+0x3f/0x80 [ 286.807382][ C1] __kasan_kmalloc+0x9d/0xb0 [ 286.811977][ C1] __kmalloc_cache_noprof+0x236/0x370 [ 286.817358][ C1] xpad_probe+0x3f3/0x1d80 [ 286.821872][ C1] usb_probe_interface+0x650/0xbc0 [ 286.826986][ C1] really_probe+0x2b9/0xad0 [ 286.831530][ C1] __driver_probe_device+0x1a2/0x390 [ 286.836840][ C1] driver_probe_device+0x50/0x430 [ 286.841970][ C1] __device_attach_driver+0x2d6/0x530 [ 286.847362][ C1] bus_for_each_drv+0x258/0x2e0 [ 286.852214][ C1] __device_attach+0x341/0x530 [ 286.856985][ C1] bus_probe_device+0x189/0x260 [ 286.861836][ C1] device_add+0x856/0xbf0 [ 286.866169][ C1] usb_set_configuration+0x1999/0x1fe0 [ 286.871632][ C1] usb_generic_driver_probe+0x88/0x140 [ 286.877189][ C1] usb_probe_device+0x1b8/0x380 [ 286.882042][ C1] really_probe+0x2b9/0xad0 [ 286.886550][ C1] __driver_probe_device+0x1a2/0x390 [ 286.891851][ C1] driver_probe_device+0x50/0x430 [ 286.896889][ C1] __device_attach_driver+0x2d6/0x530 [ 286.902274][ C1] bus_for_each_drv+0x258/0x2e0 [ 286.907126][ C1] __device_attach+0x341/0x530 [ 286.911896][ C1] bus_probe_device+0x189/0x260 [ 286.916764][ C1] device_add+0x856/0xbf0 [ 286.921114][ C1] usb_new_device+0x1052/0x19a0 [ 286.925974][ C1] hub_event+0x2bfd/0x50f0 [ 286.930390][ C1] process_scheduled_works+0xac3/0x18e0 [ 286.935945][ C1] worker_thread+0x870/0xd50 [ 286.940555][ C1] kthread+0x7b7/0x940 [ 286.944629][ C1] ret_from_fork+0x4b/0x80 [ 286.949047][ C1] ret_from_fork_asm+0x1a/0x30 [ 286.953813][ C1] [ 286.956144][ C1] Freed by task 5913: [ 286.960121][ C1] kasan_save_track+0x3f/0x80 [ 286.964801][ C1] kasan_save_free_info+0x40/0x50 [ 286.969858][ C1] __kasan_slab_free+0x59/0x70 [ 286.974643][ C1] kfree+0x198/0x430 [ 286.978554][ C1] xpad_disconnect+0x359/0x490 [ 286.983330][ C1] usb_unbind_interface+0x25b/0x940 [ 286.988535][ C1] device_release_driver_internal+0x503/0x7c0 [ 286.994616][ C1] bus_remove_device+0x34f/0x420 [ 286.999573][ C1] device_del+0x57c/0x9b0 [ 287.003911][ C1] usb_disable_device+0x3c5/0x860 [ 287.008937][ C1] usb_disconnect+0x340/0x960 [ 287.013623][ C1] hub_event+0x1d2a/0x50f0 [ 287.018045][ C1] process_scheduled_works+0xac3/0x18e0 [ 287.023595][ C1] worker_thread+0x870/0xd50 [ 287.028192][ C1] kthread+0x7b7/0x940 [ 287.032266][ C1] ret_from_fork+0x4b/0x80 [ 287.036688][ C1] ret_from_fork_asm+0x1a/0x30 [ 287.041452][ C1] [ 287.043785][ C1] The buggy address belongs to the object at ffff88807cbe4000 [ 287.043785][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 287.057839][ C1] The buggy address is located 92 bytes inside of [ 287.057839][ C1] freed 1024-byte region [ffff88807cbe4000, ffff88807cbe4400) [ 287.071640][ C1] [ 287.073972][ C1] The buggy address belongs to the physical page: [ 287.080419][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cbe0 [ 287.090256][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 287.098919][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 287.106946][ C1] page_type: f5(slab) [ 287.110936][ C1] raw: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001 [ 287.119559][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 287.128326][ C1] head: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001 [ 287.137024][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 287.145716][ C1] head: 00fff00000000003 ffffea0001f2f801 00000000ffffffff 00000000ffffffff [ 287.154409][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 287.163104][ C1] page dumped because: kasan: bad access detected [ 287.169548][ C1] page_owner tracks the page as allocated [ 287.175272][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 13, tgid 13 (kworker/u8:1), ts 96861484866, free_ts 96811432025 [ 287.194203][ C1] post_alloc_hook+0x1f4/0x240 [ 287.198986][ C1] get_page_from_freelist+0x352b/0x36c0 [ 287.204562][ C1] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 287.210374][ C1] alloc_pages_mpol+0x339/0x690 [ 287.215236][ C1] allocate_slab+0x8f/0x3a0 [ 287.219745][ C1] ___slab_alloc+0xc3b/0x1500 [ 287.224433][ C1] __slab_alloc+0x58/0xa0 [ 287.228781][ C1] __kmalloc_noprof+0x2ea/0x4d0 [ 287.233638][ C1] ieee802_11_parse_elems_full+0x16d/0x2f10 [ 287.239572][ C1] ieee80211_inform_bss+0x166/0x10e0 [ 287.244863][ C1] cfg80211_inform_single_bss_data+0xf5f/0x1ed0 [ 287.251368][ C1] cfg80211_inform_bss_data+0x3c5/0x5860 [ 287.257025][ C1] cfg80211_inform_bss_frame_data+0x3c5/0x720 [ 287.263113][ C1] ieee80211_bss_info_update+0x8ac/0xbc0 [ 287.268768][ C1] ieee80211_ibss_rx_queued_mgmt+0x19ce/0x2e20 [ 287.274954][ C1] ieee80211_iface_work+0x933/0x1100 [ 287.280278][ C1] page last free pid 5213 tgid 5213 stack trace: [ 287.286612][ C1] __free_frozen_pages+0xde8/0x10a0 [ 287.291821][ C1] __put_partials+0x160/0x1c0 [ 287.296500][ C1] put_cpu_partial+0x17e/0x250 [ 287.301274][ C1] __slab_free+0x294/0x390 [ 287.305698][ C1] qlist_free_all+0x9a/0x140 [ 287.310296][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 287.315759][ C1] __kasan_slab_alloc+0x23/0x80 [ 287.320618][ C1] kmem_cache_alloc_noprof+0x1e1/0x390 [ 287.326091][ C1] getname_flags+0xb6/0x530 [ 287.330611][ C1] vfs_fstatat+0x43/0x150 [ 287.334949][ C1] __x64_sys_newfstatat+0x11f/0x1a0 [ 287.340187][ C1] do_syscall_64+0xf3/0x230 [ 287.344715][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.350627][ C1] [ 287.352958][ C1] Memory state around the buggy address: [ 287.358593][ C1] ffff88807cbe3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.366663][ C1] ffff88807cbe3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.374725][ C1] >ffff88807cbe4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.382789][ C1] ^ [ 287.390008][ C1] ffff88807cbe4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.398094][ C1] ffff88807cbe4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.406161][ C1] ================================================================== [ 287.414239][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 287.421435][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 287.433334][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.443579][ C1] Call Trace: [ 287.446866][ C1] [ 287.449808][ C1] dump_stack_lvl+0x241/0x360 [ 287.454511][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.459808][ C1] ? __pfx__printk+0x10/0x10 [ 287.464410][ C1] ? vscnprintf+0x5d/0x90 [ 287.468843][ C1] panic+0x349/0x880 [ 287.472749][ C1] ? check_panic_on_warn+0x21/0xb0 [ 287.477874][ C1] ? __pfx_panic+0x10/0x10 [ 287.482295][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.487550][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 287.493545][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 287.499874][ C1] ? print_report+0x519/0x5b0 [ 287.504647][ C1] check_panic_on_warn+0x86/0xb0 [ 287.509594][ C1] ? do_raw_spin_lock+0x29d/0x370 [ 287.514631][ C1] end_report+0x77/0x160 [ 287.518892][ C1] kasan_report+0x154/0x180 [ 287.523432][ C1] ? do_raw_spin_lock+0x29d/0x370 [ 287.528501][ C1] do_raw_spin_lock+0x29d/0x370 [ 287.533368][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 287.538942][ C1] ? do_raw_spin_lock+0x151/0x370 [ 287.543981][ C1] _raw_spin_lock_irqsave+0xe4/0x130 [ 287.549274][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 287.555178][ C1] ? kcov_remote_stop+0x78/0x6f0 [ 287.560123][ C1] __wake_up_common_lock+0x25/0x1e0 [ 287.565337][ C1] __usb_hcd_giveback_urb+0x501/0x6e0 [ 287.570718][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 287.576623][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.581835][ C1] dummy_timer+0x84b/0x4670 [ 287.586350][ C1] ? __lock_acquire+0xad5/0xd80 [ 287.591220][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 287.597556][ C1] ? pwq_dec_nr_in_flight+0xa59/0xd60 [ 287.602940][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 287.608502][ C1] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 287.614408][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 287.619355][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 287.624296][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 287.629241][ C1] __hrtimer_run_queues+0x5a6/0xd40 [ 287.634459][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 287.640189][ C1] ? read_tsc+0x9/0x20 [ 287.644259][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 287.650374][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 287.655534][ C1] handle_softirqs+0x2d6/0x9b0 [ 287.660310][ C1] ? run_ksoftirqd+0xcf/0x130 [ 287.665083][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 287.670473][ C1] run_ksoftirqd+0xcf/0x130 [ 287.675070][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 287.680190][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 287.685308][ C1] smpboot_thread_fn+0x576/0xaa0 [ 287.690276][ C1] ? smpboot_thread_fn+0x46/0xaa0 [ 287.695308][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 287.700778][ C1] kthread+0x7b7/0x940 [ 287.704857][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 287.710332][ C1] ? __pfx_kthread+0x10/0x10 [ 287.714930][ C1] ? __pfx_kthread+0x10/0x10 [ 287.719529][ C1] ? __pfx_kthread+0x10/0x10 [ 287.724130][ C1] ? __pfx_kthread+0x10/0x10 [ 287.728731][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.733951][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 287.739161][ C1] ? __pfx_kthread+0x10/0x10 [ 287.743767][ C1] ret_from_fork+0x4b/0x80 [ 287.748189][ C1] ? __pfx_kthread+0x10/0x10 [ 287.752790][ C1] ret_from_fork_asm+0x1a/0x30 [ 287.757573][ C1] [ 287.760938][ C1] Kernel Offset: disabled [ 287.765269][ C1] Rebooting in 86400 seconds..