last executing test programs: 5.198816759s ago: executing program 4 (id=12537): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x264, 0x23b) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 4.832587414s ago: executing program 4 (id=12540): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x22, 0xe, 0x0, 0xfffffffffffffe31) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002c, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0016801800018014000a00000007834133860d032b000000000000080004"], 0x44}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002380)='map_files\x00') getdents64(r7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b00000000000000000c00000008000300", @ANYRES32=r8], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) 4.72615152s ago: executing program 0 (id=12541): r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0x24, 0x0, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000100)={0x7, 'vlan1\x00', {0x2}, 0x6}) r5 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x14060, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfffd, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x0, 0x7}}]}}]}, 0x154}}, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) 4.465547933s ago: executing program 0 (id=12542): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYRES32=r3], 0x4c}}, 0x0) 4.347758479s ago: executing program 4 (id=12544): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x64, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a7fd4531296b6353d1f3e08847"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x64}}, 0x0) (fail_nth: 3) 4.181462305s ago: executing program 4 (id=12546): r0 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, '&\x00'}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/230, 0xe6}], 0x1}, 0x0) (fail_nth: 2) sendmsg$alg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)="6d3eac07000100000000c4697f832fd8", 0x10}], 0x1}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 3.544212268s ago: executing program 3 (id=12550): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x44d0, 0x2e, 0xf31, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x0, 0xffff}, {0xf, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x400}, @filter_kind_options=@f_basic={{0xa}, {0x373c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xfff1}}, @TCA_BASIC_POLICE={0x878, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x2, 0x2, 0x2, 0x7, {0xa, 0x0, 0x7ff, 0x3, 0x3}, {0x5, 0x1, 0x4, 0x4d4, 0xffff, 0x8}, 0xffffffff, 0x1}}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x4eb, 0x401, 0x80, 0x7, 0x4, 0x9, 0xfffffff9, 0x6, 0x7, 0x5, 0x4, 0x7, 0x8, 0x1, 0x2, 0x16d, 0x7, 0x6, 0x10001, 0x8, 0x9, 0x4, 0x3f8, 0xe, 0x10001, 0x7ff, 0xfffffff9, 0x3, 0x3b4e, 0x9, 0x3, 0x1, 0x8, 0x200, 0x1, 0x7c95, 0x7, 0x0, 0x9, 0x6, 0xc, 0x81, 0x4b, 0x0, 0x7, 0x80, 0x8c, 0x5, 0x0, 0x5, 0x2, 0x1, 0x4, 0x0, 0x1, 0x5, 0x7fff, 0xfffffffd, 0x7f, 0x9, 0x6, 0x5a8bb828, 0x0, 0x8, 0x4, 0x8, 0x6, 0x6, 0x1, 0x3, 0x40, 0xffff, 0x2, 0x3f81, 0x5, 0x2, 0x2, 0x1000, 0x47, 0x9, 0x7, 0x7, 0x7, 0x3, 0x6, 0x9, 0xff, 0x0, 0x5, 0x7, 0x2323, 0x100, 0x2, 0x1, 0x200, 0x432f, 0x5d5, 0x736, 0xffffffff, 0x0, 0x5, 0xdbe9, 0xffff7fff, 0x800, 0x83, 0x1c00000, 0x7, 0x80000000, 0x2, 0x9, 0x1edd, 0xb72, 0x1, 0x9c0, 0x56, 0x9, 0x92, 0x2, 0xc57, 0x9, 0x2, 0x7, 0x9, 0x0, 0x3, 0xfffffbff, 0xf0a3, 0x8c8, 0xac40, 0x7f, 0x1ff, 0xb, 0x7, 0x98, 0x4, 0x3, 0x1ff, 0xfffffff6, 0x9, 0xa461, 0x5, 0x0, 0x2, 0x3, 0x8, 0x200, 0x6, 0x6, 0x80000000, 0x4b, 0x800, 0x0, 0x4, 0xd, 0x3, 0x6e6, 0x7, 0x1, 0x100, 0x2, 0xffffffff, 0x2, 0x8, 0x5, 0x4, 0x10000, 0x500, 0x9, 0x5, 0x8, 0xa, 0x2, 0x6, 0x3, 0x3, 0x1, 0x5, 0xb, 0x8, 0x69, 0x101, 0x1ff, 0x2b, 0x2, 0x80000000, 0x3, 0xc854, 0x9, 0x19b, 0x5, 0x40, 0xa73, 0x3bda66c2, 0x8, 0x12, 0x800, 0xf, 0x40, 0x2, 0x3, 0x7, 0x8, 0x10, 0x8, 0x1, 0x8000, 0x0, 0x2, 0x4, 0x7, 0x9, 0x0, 0x200, 0xf, 0x2, 0x1263, 0x4, 0x6, 0x9, 0x4, 0x1ff, 0x7, 0xe, 0x6, 0x2, 0x81, 0x7, 0xfff, 0x101, 0xe, 0x8, 0x200, 0x1, 0x3, 0xffff, 0x6, 0x6, 0x80000000, 0x9, 0xfffffff8, 0x8, 0xc, 0x1ff, 0x7f, 0x9, 0xcf9b, 0x9, 0x8ff1, 0x2, 0x6, 0x0, 0x20000000, 0x9, 0x1, 0x9, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x3ff, 0xec55, 0xffff, 0x8, 0x1, 0x9, 0xc440, 0x7, 0x7fe, 0x1, 0xff, 0x2, 0x2, 0x3, 0xb, 0x8, 0xf8000000, 0x2, 0x5422, 0x4, 0x80000000, 0x0, 0xeb6a, 0xb671, 0x3, 0x0, 0x10, 0x8, 0xefa0, 0x7, 0x6, 0x3, 0x1, 0x6, 0x5, 0x0, 0x0, 0x6, 0x5, 0x86, 0x40000, 0x7, 0x1, 0x6, 0x3, 0x0, 0x5, 0x2, 0x6, 0x2, 0x1, 0x3d, 0x1a, 0x9, 0xf, 0x4ac, 0x1, 0xac1, 0xfffffff9, 0x3, 0x0, 0x1, 0x0, 0x6, 0x7, 0xb, 0x0, 0x1a7, 0x3ff, 0x6, 0x0, 0x200, 0x4, 0xffffff81, 0x7, 0x40, 0x7, 0x2, 0x3, 0x9e9e, 0xff, 0x6, 0x8, 0x7, 0x9, 0xb2c3, 0x6, 0xad, 0x4, 0x1, 0x40, 0x0, 0x4, 0x7fffffff, 0x9, 0x2bb0, 0x3, 0x9, 0xe7, 0xc7, 0x0, 0x2, 0x1, 0x1, 0x9e, 0x101, 0x5, 0x0, 0x8, 0x6, 0xd0, 0x6, 0xd41, 0x1000, 0x9, 0x8, 0x8, 0x7e000000, 0x3, 0xb910, 0x7, 0x3, 0x2, 0x0, 0x8, 0x5, 0x8, 0x8, 0x2, 0xffffffff, 0x7, 0x73, 0x0, 0x1ff, 0xf, 0xc9b, 0x5, 0x0, 0x10001, 0xc7, 0x8001, 0x22c, 0x2, 0x9, 0xd7, 0xa7e, 0x8, 0x6, 0x0, 0x9, 0x4, 0x6, 0x100, 0x8, 0xe5, 0x66, 0x6, 0x25af, 0xfffffff9, 0x4, 0x80000001, 0x4, 0x2, 0x9, 0x4, 0xffff, 0xa, 0x7000, 0x1, 0x6, 0x4, 0xc, 0xfff, 0x0, 0xfffffff8, 0xb, 0x9, 0xfffffff1, 0x426, 0x8000, 0x5, 0xb, 0x4, 0x3e, 0x8, 0x8, 0x1f3, 0x10, 0x3, 0x24, 0xff, 0x4, 0x3, 0xff, 0x1274, 0x3, 0x7fffffff, 0x7, 0xfffffffc, 0x2, 0x9, 0x80, 0x6, 0x0, 0x7fff, 0x0, 0x5, 0xc94, 0x80000001, 0x2, 0x2, 0x10, 0x1, 0x7, 0x7f, 0x81, 0x0, 0x6, 0x0, 0x20, 0xc1c4, 0x1, 0x1, 0xb67, 0x3ff, 0x9, 0x48a3aaa2, 0x7, 0x6, 0x6, 0xfa39, 0x6, 0x60e8, 0x5, 0x2, 0x10001, 0x8, 0xffff, 0x81, 0x7fff, 0x8, 0x9, 0xfffffff8, 0x9, 0x0, 0x4, 0x8, 0x7ff, 0x8, 0x6a3e884e, 0x7, 0x6, 0xffffffff, 0x2, 0x400]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x70446f9a}]}, @TCA_BASIC_POLICE={0x8f0, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xc, 0x9, 0xcd, 0x1c, 0x6, 0x101, 0x5, 0xfffffff9, 0x4b9e76ed, 0xfff, 0x400, 0x9, 0x9, 0x5, 0x4, 0x3, 0x2, 0x0, 0x9, 0xe, 0x5, 0x81, 0x8, 0xfffffc01, 0x6, 0x2, 0x6, 0xae00, 0x0, 0xeace, 0x1, 0xff, 0x5, 0xc0000, 0xffff18be, 0x80000000, 0xffffff20, 0x0, 0x2, 0x9, 0x7fffffff, 0x9, 0x10, 0xfffffffb, 0x2, 0x5, 0x1ff800, 0x9, 0x2, 0x8f, 0x1, 0xffffffc3, 0xffff, 0x5, 0xdf92, 0xb2, 0x8, 0x0, 0x2, 0x9, 0x5, 0x418e, 0x4, 0x44ff, 0x7, 0x8, 0x7, 0xfffffff9, 0x6, 0x6, 0x3, 0x0, 0x6, 0x8, 0x165e, 0xd, 0x2, 0x9, 0x6, 0xb8a, 0x3, 0x9, 0x80000000, 0x401, 0x4, 0x80000000, 0x7, 0x80000000, 0xbe1d, 0x8, 0x6, 0x3, 0x1, 0x3, 0x9, 0xfffeffff, 0x0, 0x2, 0x6, 0x4, 0x1, 0x2c6a, 0x7fff, 0x1, 0x9, 0xb, 0x8, 0x7, 0x3, 0x401, 0x3, 0x5, 0x9, 0x5, 0xe, 0x42a9, 0x2, 0xfffff801, 0x9, 0x3, 0x7, 0x9, 0x0, 0x4, 0x2, 0xd, 0x7, 0xfffffffa, 0x5, 0x7, 0x8000, 0x7dce, 0x4117, 0x6, 0x6, 0x40, 0x4, 0x10001, 0x9, 0x3, 0x7, 0x800, 0x6, 0x5, 0x40, 0xb8, 0x8, 0xfd6e, 0x5, 0x9, 0x0, 0x5, 0x5fe, 0xc, 0x7, 0xb68, 0xb, 0x81, 0xb85, 0x6, 0x7fffffff, 0x2, 0x8, 0x400000, 0x3, 0x20d97118, 0x400, 0x10000, 0xd91, 0x3, 0xfffffffe, 0x3, 0x7, 0x2, 0x86d5, 0x8, 0xffff, 0x200, 0x8, 0x3ff, 0x21f, 0x907, 0x4, 0x4, 0x5120, 0xa, 0x5, 0x7fffffff, 0x2, 0x2, 0x2, 0x3, 0x4, 0x3, 0x10, 0x627, 0x7, 0xe80, 0x81, 0x5, 0x7ac68d4a, 0x6, 0x8000, 0x2, 0x1ff, 0x8, 0xffffff39, 0x9, 0x7, 0x4, 0x2, 0x0, 0x3, 0x0, 0x0, 0xfffffff9, 0x200, 0xe86, 0x7f, 0x7f, 0x3a8, 0x4, 0x5, 0x4, 0x4, 0x3, 0x4, 0x8, 0x8bf5, 0x9, 0x7, 0x834, 0x3, 0x80000000, 0x0, 0x0, 0x4000, 0x2000, 0x717f, 0x10000, 0x7, 0x9820, 0x6, 0x7, 0x17a, 0x1, 0x77a, 0x3, 0xffff445e, 0x287e, 0xd721, 0x3, 0x0, 0x4aa, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xffff8000, 0x3ff, 0x3, 0x4, 0x4, 0x4, 0x3, 0x2, 0x1ff, 0x4, 0x0, 0x2, 0x5, 0xffffffff, 0x6, 0x6, 0xa72a, 0x3, 0x3, 0x7, 0xfffffffb, 0xffff, 0x0, 0xd4c, 0x25, 0x9, 0x7, 0x1, 0x0, 0x96, 0x8, 0x4, 0x3, 0xffffffff, 0x9, 0x3409, 0x5, 0x8000, 0x1, 0x1d3, 0x2, 0x1, 0x0, 0x401, 0x8, 0x10001, 0x400, 0x5, 0x2, 0x7fffffff, 0x5, 0xffff7fff, 0x7, 0x7b, 0x7, 0xd, 0x6, 0x4, 0x8, 0x9, 0x2, 0x7, 0x5, 0x6, 0xa, 0x50, 0x7ff, 0xfffffff5, 0x7c76, 0x8, 0x401, 0xfffffff9, 0x7, 0x5, 0x7f, 0x9b38180, 0x80000000, 0x8, 0x1, 0x3, 0x6, 0x4, 0x3, 0x7, 0x800, 0x2, 0x7, 0x1000, 0xffff0000, 0x1, 0x1, 0xe, 0x4, 0x5, 0x9, 0x0, 0x3, 0xe, 0x4, 0x1, 0x5, 0x3, 0xa90, 0x2, 0x8000, 0x4, 0x2, 0x4, 0x3f, 0x2, 0x81, 0x44f, 0x9, 0x9, 0x8, 0x9, 0x0, 0x6b61, 0x80000001, 0x1, 0x1, 0xb, 0xffff, 0x2, 0xb935, 0x7ff, 0x1, 0x0, 0x69a7, 0xc, 0x0, 0x5, 0x8b5, 0x2, 0xc0000, 0x9, 0xa, 0x5f, 0x5, 0x7, 0x5, 0x142, 0x1, 0x400, 0xffffffff, 0x0, 0x374, 0x1, 0x7f, 0x3, 0x3ff, 0x8001, 0x2, 0x8, 0x0, 0x2e3, 0x3, 0x54, 0x1, 0x0, 0x6714, 0x5, 0x5, 0x9, 0x9, 0x9, 0x6, 0x9, 0x7, 0x6, 0x0, 0x6, 0x6, 0x4, 0x81, 0x8ba9, 0x200, 0x4c0b7ed1, 0x4, 0x80000001, 0x7ff, 0xfffffff9, 0x437a, 0x40a, 0x6, 0x3, 0x200, 0xffffffff, 0xe4f, 0x7, 0x2, 0x0, 0x5, 0x8da, 0x5, 0x1000, 0x0, 0xffff, 0x40, 0x7ff, 0xad, 0x10000, 0xf, 0x5, 0x0, 0x80000000, 0xd, 0x2, 0xf96b, 0x3df, 0x1, 0x7, 0x3, 0x1000, 0xfff, 0xab6f, 0x2, 0x73e, 0x1, 0x7, 0x9, 0x5, 0x0, 0x2, 0x2, 0x7, 0xe5, 0x8, 0x2, 0x6, 0x4, 0x100, 0x0, 0x9, 0x5, 0x5, 0x9, 0x0, 0xb, 0xf4, 0x9, 0x51, 0x7, 0x0, 0x1, 0xffffff93, 0x2, 0xb5, 0x40, 0x0, 0x3, 0x81, 0x80000000, 0x9, 0x7fff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x311}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x0, 0x97, 0x0, 0x6, {0x5, 0x3, 0x0, 0x7, 0x6, 0x5}, {0x6, 0x2, 0x5, 0x1, 0x8, 0x2}, 0x7, 0x2, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x418}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x9, 0x5, 0x1, {0x0, 0x0, 0x9, 0x6, 0x8, 0x3}, {0xc, 0x1, 0x2568, 0x4800, 0x81, 0x2}, 0xb, 0x6416a799}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x40, 0x4f91, 0x6, {0x9, 0x1, 0x3040, 0x5, 0x1, 0xffffffff}, {0x38, 0x2, 0x200, 0xf7a1, 0x1, 0x2}, 0x9b9, 0xb, 0x2}}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0xfff1}}, @TCA_BASIC_ACT={0x2378, 0x3, [@m_xt={0x2058, 0x4, 0x0, 0x0, {{0x7}, {0x1030, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x102a, 0x6, {0x3, 'nat\x00', 0x4, 0x3, "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"}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x124, 0x3, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x3f2, 0x3, 0x52, 0x6b}, {0x4, 0x6, 0x15}, {0x9, 0x3, 0x6, 0xae8e}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xa6, 0x6, "8f8a13ae01c6356634c237d1ffc3617e4fc75d9f326d4ab388cffb540c3c2b5e577dc0b75a06481a0d362dbb7f015a40102e6589af3ed5710c381588bdd1edf3e3cbdb38635d26e700c1ece486bc1fb33be60b8240da75262ebf17a21e5cc233c8d561edc3a90f6ba6b37a4c82b7c65de786021d6188d31fd09abce28f12a43e19b6aa900e686a7143dfa9bd14a8e0db05480fb9f766325f67f4a118b605ca413314"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x8c, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x8, 0x20000000, 0x9, 0x7}}, @TCA_DEF_DATA={0xb, 0x3, 'clsact\x00'}]}, {0x3c, 0x6, "494fd54c337c1675a2c62fdad0d7a65c720a936cd40a6dae62abf2b6a672d060a8b739bbde807785b6e13b2b1ce2d548dca31143fe73420b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xd0, 0x1c, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x94, 0x6, "66f5b1946fa7c600db03701de59c0584b850d5e99d5ea13b6b0339c1aaca5d03f7ccba357aba6bfb03924f00682b4d1d4ec3c694b378e0af88756fba82ecfa0e889631c559a50e32821425af37bd6a89be89b1782078c37b3b9a1d94ecf6efd238802fc37e96c7f3246fbcf24e68fe82c429454cdb1fa0a40d0fc3766f34784d348612187842010d5bef6100cdc3396d"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x14, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}]}, {0x11, 0x6, "4de40fa30bf106f63519e4ee25"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1062, 0xfffffffffffffffa}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x14c0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x1, 0x0, 0xf241}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x8, 0x2, 0x93f3}, {0x8000, 0x4, 0x0, "632fb52f"}}}]}]}, @TCA_BASIC_EMATCHES={0x204, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x358, 0x1, 0x4}, {0x5730, 0x1, 0x8, 0x5, 0x5, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0xc4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfff7}, {0x10, 0x2, 0x3, 0x2, 0x8, 0x2, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x9}, {0xff, 0x4d36, 0x8, 0x9}}}, @TCF_EM_CONTAINER={0x8c, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x4}, "c0f7ce0b23026e33e9835fc28fbdb00086f1865d224f93b7b94491290d036129c3deae72f0b7a929ac815d94b55b7820d88c7e0314d33f452dcb4e4800f6cb24652a74203ba4c21777c8332e3f8c8136857da8b929d363c684f6a46c06ba00cded247df9440bb9657024d1607b3540f1f6328f0415d7adf41beb8b6373"}}]}, @TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc4, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="6c23ae4b65", @TCF_META_TYPE_VAR="dd73e43d", @TCF_META_TYPE_VAR="9d19669e5617b5d20fea", @TCF_META_TYPE_VAR="a3", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="13f02665840a8b87b2b5"]}, @TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="7b6c7176c00a97107f", @TCF_META_TYPE_VAR="0fb431aadc11272d93", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="fcd7d4d4d7aa", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x5, 0x2}, {0x3, 0x0, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x73}, {0xb, 0x11, 0x1}}}, @TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="9e4da8858c57", @TCF_META_TYPE_VAR="06b56a8b9ddf159bc24c", @TCF_META_TYPE_VAR="4369e3f1f8ba", @TCF_META_TYPE_VAR="a8efc364231ff461", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR='c', @TCF_META_TYPE_VAR="03e9562808d7"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x1, 0x1}, {0x8, 0x7, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x42b, 0x3, 0x5}, {0x3, 0x40000, 0x5, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x100}, {0x8, 0x7, 0xffffffff, 0x2}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xfff1}}]}}, @filter_kind_options=@f_u32={{0x8}, {0x42c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0xfff1}}, @TCA_U32_HASH={0x8, 0x2, 0x20000000}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_POLICE={0x410, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2400, 0x7, 0xf251, 0x2, 0xa, 0x8, 0x0, 0x5, 0x7ff, 0x7, 0xd9b2, 0xe54, 0x3, 0x2, 0x7fffffff, 0x0, 0xf5, 0x54, 0x4, 0x5, 0x4, 0x200, 0x7, 0x4, 0x1, 0xfffffff7, 0x4, 0x80000000, 0x7, 0x7, 0x101, 0x58, 0x5, 0x8, 0x401, 0xffffb9d2, 0xff, 0x80, 0x1ff, 0x4, 0xffff, 0x7, 0x5, 0x256d, 0x0, 0x2, 0x7, 0x1ff, 0x5, 0x4, 0x0, 0x81, 0x8, 0x6, 0x3, 0x2, 0x2, 0xd, 0x5, 0x3, 0x10, 0x8, 0x9, 0x9, 0x5, 0xab4, 0x3, 0x400, 0x800, 0x7, 0x6, 0xff, 0xa, 0x8, 0x80000001, 0x8001, 0xa9, 0x9, 0x4, 0x4fe1, 0x2a95, 0x9, 0x0, 0x7a95, 0xc105, 0x11, 0x9, 0x1, 0x9, 0x9, 0x80000000, 0x3, 0xd, 0x1000, 0xfffffffa, 0x7, 0x7, 0x3, 0x4, 0x6, 0x2, 0x9, 0x2, 0x8, 0x7fff, 0x10001, 0x9, 0x498, 0x6, 0x9, 0x1, 0x3, 0x80000000, 0xfffffff9, 0x2, 0x0, 0x4, 0x8000, 0x8, 0x3ff, 0x9, 0x1, 0xfffffffd, 0x81, 0x400, 0x8, 0x800, 0xf0, 0x400, 0x9, 0x73f, 0x7ff, 0x1ff, 0x7, 0xfffffff7, 0x400, 0x3, 0xa34, 0x9, 0x7, 0x1, 0x8, 0x9, 0x4, 0xd, 0x401, 0x100, 0xbf64, 0x9, 0x2ed, 0xfffffffe, 0x76, 0x3, 0x1, 0xb, 0xb, 0xffffff16, 0x3, 0x6, 0x80000001, 0x691e, 0x9, 0x5, 0x4, 0x1, 0xfffffffa, 0x800, 0xe, 0x5, 0x0, 0x8f2, 0x80000001, 0x7fffffff, 0x0, 0xe0, 0x316, 0x10001, 0xa, 0xc0000000, 0x51, 0xfffffffe, 0x4, 0x10000, 0xfffffff9, 0xffff, 0x6, 0x7fff, 0x6, 0x5, 0x7, 0x2, 0xff, 0x8, 0x0, 0x1ac8, 0x6, 0x1000, 0x3f2c, 0x81, 0xd, 0x1, 0xa9bd, 0x3, 0x3, 0x0, 0x7fff, 0x2, 0x4, 0x6, 0x10000, 0x7, 0x6, 0xf, 0x3, 0x3ff, 0x7d147d19, 0x8, 0x8, 0xfffff5a4, 0x22e8308d, 0x0, 0xfffffffc, 0xffff0694, 0x4, 0x8, 0x0, 0xf, 0x1f5, 0x7, 0x2, 0x7fffffff, 0x8, 0x4, 0xff, 0x4, 0xe, 0xffff, 0x7, 0x2, 0x4, 0x9, 0xf9e, 0x7fff, 0x10, 0x4, 0x3d2, 0x3, 0x40, 0x2, 0x8, 0x9, 0xaf1c, 0x9, 0x5, 0x5, 0x10]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_matchall={{0xd}, {0x8f0, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x6}}, @TCA_MATCHALL_ACT={0x324, 0x2, [@m_bpf={0xfc, 0x1a, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x3b, 0xffffffffffffffff, 0x83, 0x3}}]}, {0xb0, 0x6, "31bc2f63de4551494e2a1d63e4108d586aef73c24bac2d95a621be0b9d44197d4bc97c7f5e82fcf99494e775bfde7d7fd1b1117a1098b5a1044509bf6c0aaea71bfaab8a0b01533a47a2ee822dc9e097851a96bee5a68cd0cd05c055ee7ab1fca9fd7573f1d5108174758e9c44df12dec51694351549d441a0726ce5ae5ef371cd84d668fb3e1b116f3a9f14238298567caa81d5bb44b4d7c2744883c1f859f7c37671e89346cb5a109decf7"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x134, 0x7, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0xfd, 0x6, "723737a1253523a4ee1f0a379e9fa9d883e6af1598dc9aed238eabc72d7872df16cd9aa96c82e7ddd1f77a4437f13a7dc6399f9193bfe87d04e36d88c31566d36408d94f1c8a4ed5e1d04b0c7222dd5bcccf4c59190811fb06c5282daf82c9348ea4cbe34595b0c449a5d41d88a9335d9091161efb98fbdb2d84b892ea0fc917244e02a3f34a637272e7c87a3307eab2deb1829bfa521827a91d6a57c9bab1638b5ada7fd7c86945d00cde68337457c5ce23bb3fd71ead08645077f52aceeaffc1309a8f98756d00c80eca542f7c5f5b50837b799d48d326a6245dfcf6c7fb025d5c7165d2f5fc2accba6c763490947d10daacdc7cba2b314a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}, @m_ife={0xf0, 0xf, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xfffffd99}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x375f}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xf6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x7fff}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}]}, {0x63, 0x6, "685bbc6d323d963967e80cbb64d79f7ad393c7f88888a4ca3491345d4533f865ac0705976786969b541f2a061180b09770e80b72dcffaff1f79c3fdeff436cb17864e959c400ad2018a68a38d3d4cc869478ce6bc094fac2cfb8d147cb29c5"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xfff2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x58c, 0x2, [@m_nat={0x54, 0x15, 0x0, 0x0, {{0x8}, {0x4}, {0x2a, 0x6, "a11a26bb1b1b00f01f182213d884a77b8a0906cf8895a7d9299cbe2a7d06b3969a49e2c8dee0"}, {0xc}, {0xc, 0x8, {0x3, 0x6}}}}, @m_mpls={0xc4, 0xa, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x18}, @TCA_MPLS_LABEL={0x8, 0x5, 0xde1e8}]}, {0x76, 0x6, "b946b202729ede14d144fcbbb632d100f10f1bef90218d4d610c43a5e990a59bf6f937fa45cda560af04cbb85e4466d9223bcaf17cc178dc08ce5144e21b16fa91fcbd11e2f06cb9e9a42250a6f7879856c2cd8ba65501846c4ac14c6a094c44e45c209c02e861cd5aad165926ac95a50f18"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0xd8, 0x11, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xd}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1000}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}]}, {0x93, 0x6, "e01fd72b3f1427857c4e0fbd137b09afb560c2a4013e47497b65eb02865178d9de5b7a66cdef60bc39c5af287893a7bb04f62972093ee61b46ad636500848cf45dc54d367ea368463049adf3433f2371b0072351c9c46d6c277174e622c0ae839bb483843416d1323c81e70147e1914ff6bc5b9d9ef1ac2f3e19ee15d1425cea294463aafc1cd2d525fdc990f35d78"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xc0, 0x5, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xee3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0x64, 0x6, "e8daebc1494b8fea44be10a10b74b0d73a3724cbb551e1bc23521fce23e1760b8c21006f8634a4028c19ddc3ed5c49725a5b869c4dd689e1f0da35e1cfcddbcb190e84e916a3e218e3bf4223169987964387ab1ad3c0a2646848944bfefaaac5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_skbmod={0xa8, 0xb, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0xee, 0x4, 0x2, 0x2, 0x2}, 0x3}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7ff}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x9, 0x4, 0x4, 0x8df, 0x1}, 0xc}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}]}, {0x18, 0x6, "65c787f400075694a5943e0263d6e1352cecfa9d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x124, 0x2, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xe, 0x1, 0x20000000, 0x9, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xc3, 0x6, "fa794c7da171bac1b28184111e3ffd353b8c91720e65726a1c6130d4e2bbb694dc800ffedae6b564a94e84d396aeded9d0465e4cb75b21653c0ca372dd10a9c2626317ba471913b9d5a179cc0b5b2cadee6b13fc426ea1fc7166c0e327834e14be71833a9742a3ff4037074ecf99d780ea22b41326a4d5e1493b42002e5d386725d4624ec6ad9b0f8231b6041765b4c8ae81633c321140a5ee27dce6d2d04c1431578b56039584b7f33d5a374adb793b4b69e1c38f8b6d29bb7207cc360a79"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x94, 0x1b, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x23, 0x6, "42791452e7374b25dff3f7741985745da0d9db6a070195317e48aed9ba7af1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0x78, 0x9, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}]}, {0x15, 0x6, "1c36d71b9a9eb54f271de9927b2ec1c1e5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @TCA_RATE={0x6, 0x5, {0x6, 0x9}}, @TCA_RATE={0x6, 0x5, {0x2, 0x64}}]}, 0x44d0}, 0x1, 0x0, 0x0, 0x24040040}, 0x8000) 3.433690858s ago: executing program 2 (id=12551): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000440)=""/220, &(0x7f0000000340)=0xdc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0x5}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r1, 0x20003d16, 0x80000, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, 0x0, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x240048c0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) sendmsg$alg(r8, 0x0, 0x0) read$alg(r8, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x1, 0x0, 0x0) splice(r5, 0x0, r6, 0x0, 0x406f413, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x180, 0x0, 0x0, 0x0) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r9, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r9, &(0x7f0000000440)=ANY=[@ANYBLOB="00010000", @ANYRES64=r10, @ANYBLOB='\a\x00\x00\x00'], 0x100) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="39000000140081ae00003c000500218311001fa2660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb301000000dbb7d553b4e92155", 0x39}], 0x1}, 0x20000050) 3.292986881s ago: executing program 3 (id=12552): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f0000000100)) 3.110721037s ago: executing program 3 (id=12554): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x180) getdents64(r2, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="00008400000084"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.968618239s ago: executing program 1 (id=12555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x200) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newtfilter={0x48, 0x28, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x88c1}, 0x0) 2.661623687s ago: executing program 2 (id=12556): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000080)=0x10) (fail_nth: 2) 2.603585835s ago: executing program 1 (id=12557): r0 = io_uring_setup(0xfc2, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.204560979s ago: executing program 2 (id=12558): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x111, 0x2f, 0xb5, 0xf8, 0x10, 0x79b, 0xf, 0x57ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0xb7, 0xff, 0x0, 0x39, 0xd9, 0x61}}]}}]}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x301, 0x0, 0x0, {{@in6=@loopback}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {@in=@local, @in=@remote}, {{@in=@private, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}}}}, 0x128}}, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') socket(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dd1d) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) syz_io_uring_setup(0x7d9e, &(0x7f0000000040), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) eventfd2(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket(0x11, 0x800000003, 0x0) socket$alg(0x26, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[], 0x20) 2.057532714s ago: executing program 1 (id=12559): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2, 0x5}, 0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001540)=[{&(0x7f0000000540)="90", 0x1}], 0x1, 0x0) bind$packet(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0xff0c, 0x0, 0x6, @dev}, 0x14) getsockopt$netlink(r4, 0x10e, 0x9, &(0x7f0000003340)=""/4071, &(0x7f0000001100)=0xfe7) 1.641252274s ago: executing program 4 (id=12560): r0 = socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="f58b95bdc4364115dd0c9fc0e28d57973dd9aac1e52158e9b427c1391ca204eaf9a7a2143a07e72bb7c4859529818c6c5e83f1d011d55895da9f3de42383ab1017dd9e6a5da1302da08d883401fe4f", @ANYRESOCT], 0x50}, 0x1, 0x0, 0x0, 0x4884}, 0x0) (async) setsockopt$MRT_TABLE(r0, 0x0, 0xd0, &(0x7f00000002c0)=0xa4, 0x4) chmod(&(0x7f0000000180)='./file0\x00', 0x8e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) socket$unix(0x1, 0x5, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000100"/26]) (async) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000008704"]) (async) r5 = socket$packet(0x11, 0x2, 0x300) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) dup2(r2, 0xffffffffffffffff) (async) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) io_submit(0x0, 0x0, &(0x7f00000001c0)) writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='xen_mmu_flush_tlb_one_user\x00', r6, 0x0, 0x40000}, 0x18) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={&(0x7f00000001c0)="728d76f72c03c428d1313bc685485920e0717dcf43ed7ebe8e989ccd5e4f71f2cfd2ab80164dd6becf567569b7", &(0x7f0000000200)="d2e7459efb5a4d42476f01cb4b91c7fdf96df8bf71059a841abd30cd105e12aae600c7465d85e5d24ba3cf6dbaa5a2eb5813da9e1e8319bfb4ccc1"}}, &(0x7f0000000080)=0x0) timer_settime(r8, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) futex(&(0x7f0000000280), 0x6, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x5000000) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x4008000, 0x6}, 0x1c) (async) fanotify_init(0x0, 0x800) (async) r9 = dup2(r4, r0) close_range(r9, 0xffffffffffffffff, 0x0) 1.525686643s ago: executing program 4 (id=12561): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2040, 0x11) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYRESOCT=r0], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYRESOCT=r2, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000380)="3900d8e949de74454d083a00001000111867092707a640400f0021ff3f30000000170a001e5868", 0x27}], 0x1) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32], 0x34}}, 0x0) read(r3, &(0x7f0000000140)=""/196, 0xc4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001800010300000000000000000a800000000300070000000014000100fe8000000000000086"], 0x30}}, 0x0) io_setup(0x202, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x20403, 0x0) unshare(0x20000400) syz_usb_connect(0x0, 0x0, 0x0, 0x0) vmsplice(r7, 0x0, 0x0, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) 1.33359706s ago: executing program 0 (id=12562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create(0x689) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00210800000000000000000400002c04000e8004001800"], 0x1c}, 0x1, 0x3000000, 0x0, 0x11}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000602, r3, &(0x7f0000000100)={0x80, 0x95, 0x0, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000000}) 1.25308046s ago: executing program 0 (id=12563): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r2, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0xcbff9000) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000b80)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) unshare(0x6c000480) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c010000", @ANYBLOB="010065bd7000fcdbdf254f000000080003", @ANYRES32, @ANYBLOB="48007a8014000100c396d9"], 0x12c}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x100, 0x70bd2a, 0x25dfdbfc}, 0x10}}, 0x20000001) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 1.021839362s ago: executing program 0 (id=12564): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0xff0c, 0x0, 0x6, @dev}, 0x14) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000003340)=""/4071, &(0x7f0000001100)=0xfe7) 941.577839ms ago: executing program 1 (id=12565): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x42) 907.886139ms ago: executing program 0 (id=12566): r0 = socket$inet6(0xa, 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0xfc, 0x0, 0x7ffffdbf}, {0x9, 0x0, 0x3, 0x6}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, r3}, 0xc) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0x4008af13, &(0x7f0000000200)) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="a1", 0x1}, {&(0x7f0000000280)="5991f1eb35b0cc", 0x7}], 0x2}}], 0x1, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000240)=""/6, 0x6, 0x2040, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, 0x20) ioctl$KVM_RUN(r6, 0xae80, 0x0) brk(0x0) syz_usb_connect(0x0, 0x6ac, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 816.461187ms ago: executing program 3 (id=12567): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r2, 0x29, 0xcb, 0x0, 0x4b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r3, 0x10e, 0x3, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f00000000c0)={0x2, 0x4e1d, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000000000000100000003000000100000000000000001000000ffffffff180000000000000008000000", @ANYRES64=r1, @ANYBLOB="e00000027f0000014c0000000000000007000000000044149911e000000100010001ac1414bb000000008203f444248d4000000000000004f10000000800000101000000070000000200009b5f000000040000000d0000000000000001000000f9000000180000000000000008000000", @ANYRES32=0x0, @ANYRES32=r0], 0xbc}}, {{&(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000200)="d0f595d66a4866f95de10224721cbb4c935b8acf1eab3330d0fb9f0c83d89568f123da4e666bd9e3073e8db63829ae9dc1e82135f460753c127d85fedf5a2b69422b956fcb6a6f0ef8c8d260401413dcfe82e678def6fe3e5698aafae5a4e492e1105c933f260b9caf8cc71c6808e9d9dad9fb04a7d9675265c67073e46758c926c7d9790712773aba1cc8e2cdefccc879437f00e50bbf2a6a8451b10a14b75aca6e88062b06c5a194f05ca76c9d3a6e421c2281439fd6ae6c2736287478c3f16161f3c435b39cbfbea3fa0bff1e2c1274742d6f458d125142e3fb0f6cf0d23c3dd3a25d952d984205", 0xe9}, {&(0x7f0000000300)="5d6baaf5cec1369133e186", 0xb}, {&(0x7f0000000340)="cb98df97c948f054dade4e9adebea12ca9f663cff1bbc38503b596c8245cd1312e890a11f655cd0cdd0b647c257611f9717d2f8a719fb13e22b8ab65e36a1bc4813f8af64cf727", 0x47}, {&(0x7f00000003c0)="332d1dfaa7529296134f5d632b27aa9e02093e3f9fd95c0c068a474c84a5ced4261313057b8147e20b38ccbc", 0x2c}, {&(0x7f0000000400)="0c01a095c83bc37f8bb585d342763ef222dd786c3679ef2b639805fc50210913738e1264094f0052c398d4d11cc7bd921e63bf81c2fbf154b1551e46822aa9474dd378e301200ca280c5c7635492aaad4cb28d870b4496de0385ede7f4feff2200e443142d6db8ea6725dce2df1b4e68a50421246257ea06973cd02301d68cdbca41e1130f54cf53d5ba859075a8b27610b98919c7e262882ef368a16607c42c2a23c9adaf423b94eab301a6", 0xac}, {&(0x7f00000004c0)="18cc580121c16ef821dff43d4c4d117328293046de93b9808a61f18f20dd3b4f58c36d064e8c1d0667a8b467a839441bee743e01ca41f161a2cba0c1392d58c1fe14e668039c21a2fece29c1d7dba70f75ed7f5944e4011b8dcbbba1a0bedf7c811378da849d06c879b7b56422942b9773e78253b47eb4ffee0bbec36f3f7bb678dfddfe205dd1216192d8acb0d09fae36701561fe", 0x95}, {&(0x7f0000000580)="eb39563ab12793873d8773df15938de7290a88aea03d2d8dae55251adfedd2b50ac26adeb70ebcd7792a135c7ecf4a359bb856f1a55c229a4f4eb0c44c8fe7a89b11abf42bee6f5e9306d10782a800b076c072f5f4d391ca33b9af903786ee188bfca6b65903c7fb8862dec0886c523d479309df141a1a77045d596a5364a46a088dd0c7798921b4d1bd57c988e41f628ce7cc9c84ef9e71e08ba4f39a52d3e89e473f7eaf99", 0xa6}], 0x7, &(0x7f0000000680)=[@ip_ttl={{0x10, 0x0, 0x2, 0x7}}, @ip_retopts={{0x74, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xe0, [@rand_addr=0x64010102, @private=0xa010101]}, @noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x5e, [@broadcast, @local, @private=0xa010100, @empty, @rand_addr=0x64010101]}, @generic={0x83, 0xc, "7be91c3dc0362e2d671d"}, @ra={0x94, 0x4}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x4, 0xb, "177b20af8ccd925059"}, {0x0, 0xb, "d817cf4b083c7865cd"}, {0x7, 0xf, "6d19b5b9b30d328648803c5af1"}, {0x0, 0x3, 'f'}]}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x401}}, @ip_retopts={{0x50, 0x0, 0x7, {[@generic={0x94, 0x2}, @cipso={0x86, 0x20, 0x0, [{0x2, 0xc, "03eafc6da6f2eef6243d"}, {0x1, 0x9, "831d097f7dcdab"}, {0x6, 0x3, 'O'}, {0x1, 0x2}]}, @ssrr={0x89, 0x1f, 0xee, [@remote, @rand_addr=0x64010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x34}, @rand_addr=0x64010100, @empty]}]}}}], 0xe4}}], 0x2, 0x48040) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'bond0\x00', 0xff}) openat$dsp(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) r6 = openat$vmci(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b0, &(0x7f0000001100)={0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r9 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x0) pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x800) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, r10) ptrace$getregset(0x4205, r10, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 647.259683ms ago: executing program 1 (id=12568): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="90", 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r1, &(0x7f0000000280)="fd", 0x1, 0x0, 0x0, 0x0) write(r1, &(0x7f00000002c0)="f420", 0x2) shutdown(r1, 0x1) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x4}, &(0x7f0000000080)=0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="8e079d3179c04fe8bd1f33d4ee8d9f6f027680ea0fee1058d6abc99c69fe114f0fc929ce0b7bd8c63e3b3cc91a8bc6aea239b27c863bbfd5e26699fad8fd13af489a61e2a01cf88d16ab25960d2a25299bf51943bfe84d44b96479efe65d4368c6942f66a4e4573ac8460af5bf9d7096b4db613f47b44d7e854fbbab2256bd562f9784e860c2b106c4f0e31da05a40ab1f776bc37a52a6996c967923095f65f6fd5399f29f3d4e900abe240dd0ffe44c4d00aebc50560e3004c836140d74", @ANYBLOB="fa6b504760353cf18cb0a2e9861cd4020f4fda0e3977133fef19c136633ef2372d136fee734074d17472c12a0806e13c9ef333", @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r3, @ANYRES8=0x0], 0x64}}, 0x0) 461.565501ms ago: executing program 2 (id=12569): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@hyper, 0xffffffff}, @my=0x1, 0x0, 0x0, 0x2, 0x0, 0x4}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r1) 460.665471ms ago: executing program 3 (id=12570): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x3}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r1, &(0x7f0000000080)=""/61, 0x3d) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_clone(0x8004100, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000a00)=r3, 0x12) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000040), 0x1, 0x0, 0x32}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) 320.47382ms ago: executing program 3 (id=12571): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) syz_usbip_server_init(0x142efa27c63a9ee8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008010000b704000000000000850000008200000095"], &(0x7f0000000300)='GPL\x00', 0xb, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x10d, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x35, &(0x7f0000000540)={@local, @empty, @void, {@mpls_mc={0x8848, {[{0x8, 0x0, 0x1}, {0xc}, {0xe}, {0x6da6}], @llc={@llc={0xf0, 0x6, "b95f", "5d4a33edbeac82fad4dc931eec2f93a8c02db3"}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000100aaaaaaaaaabb00000a000400d8928afb702800000800030001000000040004"], 0x74}}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010ac057b02000000000001090224000100000000090400000103000000092165280001220300090581030000000000"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x1e, {0x1e, 0x0, "01267469aea9f7729916720afce6dba7e65d6cc288147818275e6905"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000020c0)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000002100)=0xc) 91.307915ms ago: executing program 2 (id=12572): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0xa, 0x1, 0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc, 0x0, 0x80000000, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0x0, 0x0) 37.349265ms ago: executing program 1 (id=12573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c01000017000100000000000000000000000000000000000000ffffac1414000000000000000000fc010000000000000000000000000000ac14140000000000000000000000000000000000000000000000ffffac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac141400000000000000000000000000e000000200000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00000000000c000800f8edc7546369f3f8"], 0x13c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040084}, 0x640000c1) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xdc, 0x24, 0xf19, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6b, 0x5, 0x0, 0x68, 0x0, 0xfffffe00, 0x8, 0x5}}, {0xe, 0x2, [0xc642, 0xd9e7, 0xcd, 0x101, 0x3ff]}}, {{0x1c, 0x1, {0xc, 0x7f, 0x2, 0x7f, 0x1, 0x3ff, 0x7, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x6, 0x9, 0x101, 0x60e, 0x2, 0x2, 0x5, 0x6}}, {0x10, 0x2, [0x7, 0xfff, 0x8454, 0xfff8, 0x8000, 0x1000]}}, {{0x1c, 0x1, {0x0, 0x4, 0x9, 0x7, 0x0, 0x8, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x1b45]}}]}]}, 0xdc}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\")\x00\x00\x00\x00\x00'], 0x0}, 0x0) syz_usb_control_io(r6, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000940)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="00142d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x1, 0x19, "590154a9522cd7bdf1a587ac1d3f036e778f60a764ee53b8d7"}, 0x0}) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c5602117436c379020000000000020058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) poll(&(0x7f0000000040)=[{r7}], 0x1, 0x400) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x5100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r8, 0x6, 0x21, 0x0, &(0x7f00000008c0)) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}, {0x0, 0xe}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x3c}}, 0x0) 0s ago: executing program 2 (id=12574): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) (fail_nth: 3) kernel console output (not intermixed with test programs): 58.747046][ T1134] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 2558.759837][ T1134] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2558.772685][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2558.806365][ T1134] usb 5-1: USB disconnect, device number 16 [ 2558.807833][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2558.828567][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2558.839927][ T1134] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2558.840251][ T1134] ftdi_sio 5-1:0.0: device disconnected [ 2558.858951][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2558.870029][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2558.882159][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2558.893357][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2558.905658][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2558.954282][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2558.965371][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2558.975769][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2558.986790][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2558.997181][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2559.008171][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2559.018853][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2559.029879][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2559.040331][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2559.052333][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2559.063807][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2559.074782][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2559.086570][T17663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2559.098362][T17663] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2559.107653][T17663] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2559.116990][T17663] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2559.126123][T17663] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2559.156766][T17702] batman_adv: batadv0: Adding interface: macsec1 [ 2559.163413][T17702] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2559.194883][T17702] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 2559.392530][ T3223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2559.400384][ T3223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2559.438812][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2559.455931][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2559.491800][ T29] audit: type=1326 audit(1728115911.294:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17710 comm="syz.1.12294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 2559.538498][T17715] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 2559.572150][T17715] audit: out of memory in audit_log_start [ 2559.578080][T17715] netlink: 'syz.1.12294': attribute type 18 has an invalid length. [ 2559.581939][ T29] audit: type=1326 audit(1728115911.294:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17710 comm="syz.1.12294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 2559.608051][ C0] vkms_vblank_simulate: vblank timer overrun [ 2559.639543][T17719] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2559.703216][ T29] audit: type=1326 audit(1728115911.334:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17710 comm="syz.1.12294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 2559.725300][ C0] vkms_vblank_simulate: vblank timer overrun [ 2559.755954][T17728] netlink: 'syz.0.12276': attribute type 2 has an invalid length. [ 2559.789624][ T29] audit: type=1326 audit(1728115911.334:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17710 comm="syz.1.12294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 2559.843386][ T29] audit: type=1326 audit(1728115911.334:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17710 comm="syz.1.12294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 2559.881829][ T29] audit: type=1326 audit(1728115911.334:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17710 comm="syz.1.12294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 2559.906111][ T29] audit: type=1326 audit(1728115911.334:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17710 comm="syz.1.12294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 2559.937312][ T29] audit: type=1326 audit(1728115911.334:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17710 comm="syz.1.12294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 2559.959384][ C0] vkms_vblank_simulate: vblank timer overrun [ 2560.042777][ T5229] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2560.153538][T23048] Bluetooth: hci5: command tx timeout [ 2560.172111][ T25] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2560.179838][ T5229] usb 4-1: device descriptor read/64, error -71 [ 2560.342002][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 2560.355238][ T25] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2560.371995][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2560.381343][ T25] usb 3-1: Product: syz [ 2560.402600][ T25] usb 3-1: Manufacturer: syz [ 2560.407206][ T25] usb 3-1: SerialNumber: syz [ 2560.423863][ T25] usb 3-1: config 0 descriptor?? [ 2560.433623][ T25] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2560.441657][ T25] usb 3-1: Detected FT232H [ 2560.452040][ T5229] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2560.593064][ T5229] usb 4-1: device descriptor read/64, error -71 [ 2560.642877][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2560.657146][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2560.672952][ T25] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 2560.685640][ T25] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2560.702612][ T5229] usb usb4-port1: attempt power cycle [ 2560.710459][ T25] usb 3-1: USB disconnect, device number 63 [ 2560.720736][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2560.730573][ T25] ftdi_sio 3-1:0.0: device disconnected [ 2560.746890][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2560.770005][T17739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12304'. [ 2561.022160][ T1134] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2561.032552][T23048] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2561.041588][T23048] Bluetooth: hci4: Injecting HCI hardware error event [ 2561.052060][ T5229] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2561.053746][T23048] Bluetooth: hci4: hardware error 0x00 [ 2561.082802][ T5229] usb 4-1: device descriptor read/8, error -71 [ 2561.181406][ T1134] usb 5-1: Using ep0 maxpacket: 16 [ 2561.203552][ T1134] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2561.223527][ T1134] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2561.233217][ T1134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2561.241562][ T1134] usb 5-1: Product: syz [ 2561.246066][ T1134] usb 5-1: Manufacturer: syz [ 2561.250687][ T1134] usb 5-1: SerialNumber: syz [ 2561.263730][ T1134] usb 5-1: config 0 descriptor?? [ 2561.332185][ T5229] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2561.372733][ T5229] usb 4-1: device descriptor read/8, error -71 [ 2561.453301][ T5281] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2561.472535][ T1134] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 2561.485980][ T5229] usb usb4-port1: unable to enumerate USB device [ 2561.492707][ T1134] usb 5-1: No valid video chain found. [ 2561.503092][ T1134] usb 5-1: USB disconnect, device number 18 [ 2561.622552][ T5281] usb 3-1: Using ep0 maxpacket: 16 [ 2561.630512][ T5281] usb 3-1: config 5 has an invalid interface number: 20 but max is 2 [ 2561.652572][ T5281] usb 3-1: config 5 has an invalid interface number: 180 but max is 2 [ 2561.660783][ T5281] usb 3-1: config 5 has an invalid interface number: 156 but max is 2 [ 2561.669703][ T5281] usb 3-1: config 5 has an invalid interface descriptor of length 5, skipping [ 2561.679464][ T5281] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 2561.688725][ T5281] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 2561.699168][ T5281] usb 3-1: config 5 has no interface number 0 [ 2561.708322][ T5281] usb 3-1: config 5 has no interface number 1 [ 2561.715214][ T5281] usb 3-1: config 5 has no interface number 2 [ 2561.721342][ T5281] usb 3-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2561.734619][ T5281] usb 3-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2561.746204][ T5281] usb 3-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 2561.758068][ T5281] usb 3-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2561.769702][ T5281] usb 3-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 2561.781253][ T5281] usb 3-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2561.793016][ T5281] usb 3-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 2561.804495][ T5281] usb 3-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 2561.820978][ T5281] usb 3-1: config 5 interface 20 has no altsetting 0 [ 2561.828484][ T5281] usb 3-1: config 5 interface 180 has no altsetting 0 [ 2561.836429][ T5281] usb 3-1: config 5 interface 156 has no altsetting 0 [ 2561.848150][ T5281] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 2561.858127][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2561.866938][ T5281] usb 3-1: Product: syz [ 2561.871116][ T5281] usb 3-1: Manufacturer: syz [ 2561.876623][ T5281] usb 3-1: SerialNumber: syz [ 2562.140238][ T5281] usb 3-1: USB disconnect, device number 64 [ 2562.243161][T10770] Bluetooth: hci5: command tx timeout [ 2562.612411][ T5281] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2562.766234][ T5281] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2562.786948][ T5281] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2562.812583][ T5281] usb 5-1: config 1 has no interface number 0 [ 2562.836108][ T5281] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2562.836550][ T5229] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2562.869514][ T5281] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2562.906969][ T5281] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2562.937828][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2562.962964][ T5281] usb 5-1: Product: syz [ 2562.977419][ T5281] usb 5-1: Manufacturer: syz [ 2562.992331][ T5281] usb 5-1: SerialNumber: syz [ 2563.032460][ T5229] usb 2-1: Using ep0 maxpacket: 8 [ 2563.043527][ T5229] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2563.054030][ T5229] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2563.065501][ T5229] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2563.078736][ T5229] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2563.094775][ T5229] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2563.104157][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2563.112501][T23048] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2563.207868][T19180] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2563.284101][T17772] input: syz0 as /devices/virtual/input/input122 [ 2563.328187][ T5229] usb 2-1: usb_control_msg returned -32 [ 2563.334379][ T5229] usbtmc 2-1:16.0: can't read capabilities [ 2563.372171][T19180] usb 4-1: Using ep0 maxpacket: 16 [ 2563.379259][T19180] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2563.401988][T19180] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2563.412375][T19180] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2563.423290][T17751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2563.432484][T17751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2563.446731][T19180] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2563.461962][T19180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2563.469977][T19180] usb 4-1: Product: syz [ 2563.492311][T19180] usb 4-1: Manufacturer: syz [ 2563.496946][T19180] usb 4-1: SerialNumber: syz [ 2563.846314][T19180] usb 4-1: 0:2 : does not exist [ 2563.887375][T19180] usb 4-1: USB disconnect, device number 28 [ 2563.927399][T14863] udevd[14863]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2563.994400][ T5281] cdc_ncm 5-1:1.1: bind() failure [ 2564.005306][ T5281] usb 5-1: USB disconnect, device number 19 [ 2564.322395][T23048] Bluetooth: hci5: command tx timeout [ 2564.352465][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2564.512450][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 2564.523756][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2564.549255][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2564.571368][T17787] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12321'. [ 2564.583145][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2564.630496][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2564.640875][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2564.657762][ T9] usb 3-1: config 0 descriptor?? [ 2564.992129][ T1134] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2565.114215][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0038/input/input123 [ 2565.144914][ T1134] usb 5-1: Using ep0 maxpacket: 16 [ 2565.153537][ T1134] usb 5-1: config 5 has an invalid interface number: 20 but max is 2 [ 2565.161645][ T1134] usb 5-1: config 5 has an invalid interface number: 180 but max is 2 [ 2565.182139][ T1134] usb 5-1: config 5 has an invalid interface number: 156 but max is 2 [ 2565.210058][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0038/input/input124 [ 2565.212811][ T1134] usb 5-1: config 5 has an invalid interface descriptor of length 5, skipping [ 2565.241734][ T1134] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 2565.257775][ T1134] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 2565.275168][ T1134] usb 5-1: config 5 has no interface number 0 [ 2565.281387][ T1134] usb 5-1: config 5 has no interface number 1 [ 2565.294083][ T9] kye 0003:0458:5011.0038: input,hiddev1,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 2565.312439][ T1134] usb 5-1: config 5 has no interface number 2 [ 2565.347169][ T1134] usb 5-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2565.374337][ T1134] usb 5-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2565.407157][ T1134] usb 5-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 2565.424013][ T1134] usb 5-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2565.437822][ T1134] usb 5-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 2565.455141][ T1134] usb 5-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2565.470731][ T1134] usb 5-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 2565.482932][ T1134] usb 5-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 2565.498319][ T1134] usb 5-1: config 5 interface 20 has no altsetting 0 [ 2565.505716][ T1134] usb 5-1: config 5 interface 180 has no altsetting 0 [ 2565.513117][ T1134] usb 5-1: config 5 interface 156 has no altsetting 0 [ 2565.530588][ T1134] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 2565.539917][ T1134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2565.548019][ T1134] usb 5-1: Product: syz [ 2565.552356][ T1134] usb 5-1: Manufacturer: syz [ 2565.556971][ T1134] usb 5-1: SerialNumber: syz [ 2565.639292][T11006] usb 2-1: USB disconnect, device number 95 [ 2565.660492][ T9] usb 3-1: USB disconnect, device number 65 [ 2565.743249][T17798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2565.822822][ T5229] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2565.851195][ T1134] usb 5-1: USB disconnect, device number 20 [ 2565.961996][ T5229] usb 4-1: device descriptor read/64, error -71 [ 2566.051371][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 2566.051389][ T29] audit: type=1326 audit(1728115917.854:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17799 comm="syz.0.12327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2566.060546][T17800] netlink: 'syz.0.12327': attribute type 18 has an invalid length. [ 2566.110216][ T29] audit: type=1326 audit(1728115917.854:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17799 comm="syz.0.12327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2566.133732][ T29] audit: type=1326 audit(1728115917.854:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17799 comm="syz.0.12327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2566.155879][ C0] vkms_vblank_simulate: vblank timer overrun [ 2566.165424][ T29] audit: type=1326 audit(1728115917.874:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17799 comm="syz.0.12327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2566.198606][ T29] audit: type=1326 audit(1728115917.874:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17799 comm="syz.0.12327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2566.212730][ T5229] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2566.222761][T17801] FAULT_INJECTION: forcing a failure. [ 2566.222761][T17801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2566.243481][ T29] audit: type=1326 audit(1728115917.874:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17799 comm="syz.0.12327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2566.266309][ T29] audit: type=1326 audit(1728115917.874:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17799 comm="syz.0.12327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2566.288449][ C0] vkms_vblank_simulate: vblank timer overrun [ 2566.295640][ T29] audit: type=1326 audit(1728115917.874:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17799 comm="syz.0.12327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2566.319356][ T29] audit: type=1326 audit(1728115917.874:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17799 comm="syz.0.12327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2566.341499][ C0] vkms_vblank_simulate: vblank timer overrun [ 2566.348538][ T29] audit: type=1326 audit(1728115917.874:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17799 comm="syz.0.12327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2566.371672][T17801] CPU: 0 UID: 0 PID: 17801 Comm: syz.0.12327 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2566.382547][T17801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2566.392618][T17801] Call Trace: [ 2566.395908][T17801] [ 2566.398853][T17801] dump_stack_lvl+0x241/0x360 [ 2566.403553][T17801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2566.408772][T17801] ? __pfx__printk+0x10/0x10 [ 2566.413389][T17801] ? __pfx_lock_release+0x10/0x10 [ 2566.418442][T17801] ? unwind_next_frame+0x18e6/0x22d0 [ 2566.422034][ T5229] usb 4-1: device descriptor read/64, error -71 [ 2566.423730][T17801] should_fail_ex+0x3b0/0x4e0 [ 2566.423765][T17801] _copy_from_user+0x2f/0xe0 [ 2566.439257][T17801] userfaultfd_ioctl+0x873/0x66f0 [ 2566.444303][T17801] ? kernel_text_address+0xa7/0xe0 [ 2566.449439][T17801] ? unwind_get_return_address+0x4d/0x90 [ 2566.455103][T17801] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 2566.460588][T17801] ? stack_trace_save+0x118/0x1d0 [ 2566.465636][T17801] ? __pfx_stack_trace_save+0x10/0x10 [ 2566.471030][T17801] ? stack_depot_save_flags+0x29/0x830 [ 2566.476522][T17801] ? kasan_save_track+0x51/0x80 [ 2566.481393][T17801] ? kasan_save_track+0x3f/0x80 [ 2566.486261][T17801] ? kasan_save_free_info+0x40/0x50 [ 2566.491481][T17801] ? __kasan_slab_free+0x59/0x70 [ 2566.496438][T17801] ? kfree+0x1a0/0x440 [ 2566.500529][T17801] ? tomoyo_path_number_perm+0x68d/0x880 [ 2566.506186][T17801] ? security_file_ioctl_compat+0xc6/0x2a0 [ 2566.512018][T17801] ? __se_compat_sys_ioctl+0xd6/0xc90 [ 2566.517415][T17801] ? do_vfs_ioctl+0xf08/0x2e40 [ 2566.522199][T17801] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2566.527255][T17801] ? mark_lock+0x9a/0x360 [ 2566.531619][T17801] ? tomoyo_path_number_perm+0x208/0x880 [ 2566.537273][T17801] ? __pfx_lock_release+0x10/0x10 [ 2566.542318][T17801] ? lockdep_hardirqs_on+0x99/0x150 [ 2566.542413][ T5229] usb usb4-port1: attempt power cycle [ 2566.547526][T17801] ? kfree+0x1a0/0x440 [ 2566.547554][T17801] ? tomoyo_path_number_perm+0x68d/0x880 [ 2566.562608][T17801] ? tomoyo_path_number_perm+0x71a/0x880 [ 2566.568267][T17801] ? tomoyo_path_number_perm+0x208/0x880 [ 2566.573924][T17801] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2566.579950][T17801] ? __fget_files+0x29/0x470 [ 2566.584566][T17801] ? __fget_files+0x3f3/0x470 [ 2566.589275][T17801] __se_compat_sys_ioctl+0x510/0xc90 [ 2566.594581][T17801] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 2566.600414][T17801] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2566.606425][T17801] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2566.612784][T17801] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2566.619401][T17801] ? lockdep_hardirqs_on+0x99/0x150 [ 2566.624629][T17801] __do_fast_syscall_32+0xb4/0x110 [ 2566.629769][T17801] ? exc_page_fault+0x590/0x8c0 [ 2566.634648][T17801] do_fast_syscall_32+0x34/0x80 [ 2566.639528][T17801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2566.645874][T17801] RIP: 0023:0xf7f37579 [ 2566.649963][T17801] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2566.669587][T17801] RSP: 002b:00000000f569556c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2566.678029][T17801] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000008010aa01 [ 2566.686022][T17801] RDX: 0000000020000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 2566.694011][T17801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2566.702008][T17801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2566.709995][T17801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2566.717995][T17801] [ 2566.721090][ C0] vkms_vblank_simulate: vblank timer overrun [ 2566.891865][T17818] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12334'. [ 2566.892091][ T5229] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2566.922594][ T5229] usb 4-1: device descriptor read/8, error -71 [ 2567.042044][T19180] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2567.162057][ T5229] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2567.190202][T19180] usb 2-1: device descriptor read/64, error -71 [ 2567.197928][ T5229] usb 4-1: device descriptor read/8, error -71 [ 2567.312507][ T5229] usb usb4-port1: unable to enumerate USB device [ 2567.433425][T19180] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2567.602028][T19180] usb 2-1: device descriptor read/64, error -71 [ 2567.721804][T19180] usb usb2-port1: attempt power cycle [ 2568.068502][T19180] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2568.128716][T19180] usb 2-1: device descriptor read/8, error -71 [ 2568.372157][T19180] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2568.394773][T19180] usb 2-1: device descriptor read/8, error -71 [ 2568.503181][T19180] usb usb2-port1: unable to enumerate USB device [ 2568.962122][T19180] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2569.132277][T19180] usb 4-1: Using ep0 maxpacket: 32 [ 2569.165818][T19180] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2569.176772][T17824] FAULT_INJECTION: forcing a failure. [ 2569.176772][T17824] name failslab, interval 1, probability 0, space 0, times 0 [ 2569.200434][T19180] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2569.200717][T17824] CPU: 0 UID: 0 PID: 17824 Comm: syz.0.12336 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2569.220143][T17824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2569.230193][T17824] Call Trace: [ 2569.233466][T17824] [ 2569.236389][T17824] dump_stack_lvl+0x241/0x360 [ 2569.241064][T17824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2569.246269][T17824] ? __pfx__printk+0x10/0x10 [ 2569.250865][T17824] ? __kmalloc_noprof+0xb0/0x400 [ 2569.255806][T17824] ? __pfx___might_resched+0x10/0x10 [ 2569.261094][T17824] ? kfree+0x1a0/0x440 [ 2569.265166][T17824] should_fail_ex+0x3b0/0x4e0 [ 2569.269853][T17824] ? input_register_device+0x801/0x1110 [ 2569.275397][T17824] should_failslab+0xac/0x100 [ 2569.280094][T17824] ? input_register_device+0x801/0x1110 [ 2569.285657][T17824] __kmalloc_noprof+0xd8/0x400 [ 2569.290522][T17824] input_register_device+0x801/0x1110 [ 2569.295901][T17824] uinput_create_device+0x40e/0x630 [ 2569.301105][T17824] uinput_ioctl_handler+0x488/0x1770 [ 2569.306387][T17824] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 2569.312109][T17824] ? __fget_files+0x3f3/0x470 [ 2569.316788][T17824] __se_compat_sys_ioctl+0x510/0xc90 [ 2569.322073][T17824] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 2569.327877][T17824] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2569.333858][T17824] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2569.340191][T17824] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2569.346795][T17824] ? lockdep_hardirqs_on+0x99/0x150 [ 2569.352013][T17824] __do_fast_syscall_32+0xb4/0x110 [ 2569.357131][T17824] ? exc_page_fault+0x590/0x8c0 [ 2569.361991][T17824] do_fast_syscall_32+0x34/0x80 [ 2569.366837][T17824] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2569.373160][T17824] RIP: 0023:0xf7f37579 [ 2569.377227][T17824] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2569.396835][T17824] RSP: 002b:00000000f56b656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2569.405252][T17824] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005501 [ 2569.413220][T17824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2569.421184][T17824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2569.429147][T17824] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2569.437113][T17824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2569.445106][T17824] [ 2569.475958][T19180] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2569.485674][T19180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2569.516119][T19180] usb 4-1: Product: syz [ 2569.520321][T19180] usb 4-1: Manufacturer: syz [ 2569.535670][T19180] usb 4-1: SerialNumber: syz [ 2569.756097][T17822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2569.765194][T17822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2569.879116][T19180] usb 4-1: skipping empty audio interface (v1) [ 2569.914535][T19180] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2569.938035][T19180] usb 4-1: USB disconnect, device number 33 [ 2569.995065][T14858] udevd[14858]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2571.052174][ T52] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2571.129928][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12343'. [ 2571.222704][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 2571.243713][ T52] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2571.281984][ T52] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2571.311956][ T52] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2571.322934][ T5229] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2571.355619][ T52] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2571.381956][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2571.389970][ T52] usb 4-1: Product: syz [ 2571.401155][T17851] program syz.2.12345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2571.411990][ T52] usb 4-1: Manufacturer: syz [ 2571.416612][ T52] usb 4-1: SerialNumber: syz [ 2571.492071][ T5229] usb 2-1: device descriptor read/64, error -71 [ 2571.543098][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 2571.543144][ T29] audit: type=1326 audit(1728115923.354:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.0.12349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2571.594383][ T29] audit: type=1326 audit(1728115923.384:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.0.12349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2571.691142][T17859] FAULT_INJECTION: forcing a failure. [ 2571.691142][T17859] name failslab, interval 1, probability 0, space 0, times 0 [ 2571.704572][T17859] CPU: 0 UID: 0 PID: 17859 Comm: syz.4.12346 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2571.715447][T17859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2571.725525][T17859] Call Trace: [ 2571.728816][T17859] [ 2571.731755][T17859] dump_stack_lvl+0x241/0x360 [ 2571.736458][T17859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2571.741684][T17859] ? __pfx__printk+0x10/0x10 [ 2571.742614][ T5229] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2571.746282][T17859] ? __pfx_lock_acquire+0x10/0x10 [ 2571.758989][T17859] ? percpu_ref_get_many+0x19/0x140 [ 2571.764221][T17859] should_fail_ex+0x3b0/0x4e0 [ 2571.768933][T17859] ? __inet_hash_connect+0x11cc/0x2170 [ 2571.774414][T17859] should_failslab+0xac/0x100 [ 2571.775030][ T29] audit: type=1326 audit(1728115923.584:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.0.12349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2571.779093][T17859] ? __inet_hash_connect+0x11cc/0x2170 [ 2571.779121][T17859] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 2571.779148][T17859] __inet_hash_connect+0x11cc/0x2170 [ 2571.779186][T17859] ? __pfx___inet_hash_connect+0x10/0x10 [ 2571.779207][T17859] ? rcu_is_watching+0x15/0xb0 [ 2571.779230][T17859] ? inet6_hash_connect+0x7d/0xd0 [ 2571.779253][T17859] dccp_v6_connect+0xcb9/0x1480 [ 2571.779281][T17859] ? __pfx_dccp_v6_connect+0x10/0x10 [ 2571.779314][T17859] ? mark_lock+0x9a/0x360 [ 2571.779336][T17859] __inet_stream_connect+0x262/0xf30 [ 2571.779365][T17859] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2571.779393][T17859] ? __local_bh_enable_ip+0x168/0x200 [ 2571.779416][T17859] ? lockdep_hardirqs_on+0x99/0x150 [ 2571.779443][T17859] ? __pfx___inet_stream_connect+0x10/0x10 [ 2571.830904][ T52] usb 4-1: 0:2 : does not exist [ 2571.832999][T17859] ? __local_bh_enable_ip+0x168/0x200 [ 2571.833031][T17859] ? inet_stream_connect+0x50/0xa0 [ 2571.833056][T17859] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2571.833088][T17859] inet_stream_connect+0x65/0xa0 [ 2571.833114][T17859] ? __pfx_inet_stream_connect+0x10/0x10 [ 2571.833139][T17859] __sys_connect+0x2d1/0x300 [ 2571.833167][T17859] ? __pfx___sys_connect+0x10/0x10 [ 2571.833213][T17859] __ia32_sys_connect+0x7a/0x90 [ 2571.833240][T17859] __do_fast_syscall_32+0xb4/0x110 [ 2571.893789][ T5229] usb 2-1: device descriptor read/64, error -71 [ 2571.896579][T17859] ? exc_page_fault+0x590/0x8c0 [ 2571.910842][ T52] usb 4-1: USB disconnect, device number 34 [ 2571.911695][T17859] do_fast_syscall_32+0x34/0x80 [ 2571.911722][T17859] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2571.917166][ T29] audit: type=1326 audit(1728115923.614:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.0.12349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2571.921649][T17859] RIP: 0023:0xf7f04579 [ 2571.921670][T17859] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2571.977992][ T29] audit: type=1326 audit(1728115923.614:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.0.12349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2571.981053][T17859] RSP: 002b:00000000f568656c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 2571.981080][T17859] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 2571.981096][T17859] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 2571.981110][T17859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2571.981121][T17859] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2572.039093][ T29] audit: type=1326 audit(1728115923.614:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.0.12349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2572.039203][T17859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2572.050359][ T5229] usb usb2-port1: attempt power cycle [ 2572.055138][T17859] [ 2572.152879][ T29] audit: type=1326 audit(1728115923.614:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.0.12349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2572.194091][ T29] audit: type=1326 audit(1728115923.614:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.0.12349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2572.236325][ T29] audit: type=1326 audit(1728115923.624:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.0.12349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2572.263577][ T29] audit: type=1326 audit(1728115923.624:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.0.12349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 2572.313033][T17872] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12351'. [ 2572.357608][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12352'. [ 2572.366943][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12352'. [ 2572.482029][ T5229] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2572.502578][ T5229] usb 2-1: device descriptor read/8, error -71 [ 2572.742072][ T5229] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2572.794148][ T5229] usb 2-1: device descriptor read/8, error -71 [ 2572.912386][ T5229] usb usb2-port1: unable to enumerate USB device [ 2573.084086][T17892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12356'. [ 2574.193950][T17917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12368'. [ 2574.228119][T17917] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12368'. [ 2574.510605][T17928] program syz.3.12371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2574.582595][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2574.695474][T17934] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 2574.712712][ T9] usb 3-1: device descriptor read/64, error -71 [ 2574.962393][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2574.973165][T17942] futex_wake_op: syz.3.12376 tries to shift op by 144; fix this program [ 2575.097195][ T9] usb 3-1: device descriptor read/64, error -71 [ 2575.175154][T17949] FAULT_INJECTION: forcing a failure. [ 2575.175154][T17949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2575.195869][T17949] CPU: 0 UID: 0 PID: 17949 Comm: syz.4.12379 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2575.206760][T17949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2575.216828][T17949] Call Trace: [ 2575.220115][T17949] [ 2575.223062][T17949] dump_stack_lvl+0x241/0x360 [ 2575.227768][T17949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2575.232987][T17949] ? __pfx__printk+0x10/0x10 [ 2575.237608][T17949] ? snprintf+0xda/0x120 [ 2575.241866][T17949] should_fail_ex+0x3b0/0x4e0 [ 2575.243609][T17952] futex_wake_op: syz.4.12379 tries to shift op by 144; fix this program [ 2575.246549][T17949] _copy_to_user+0x2f/0xb0 [ 2575.259282][T17949] simple_read_from_buffer+0xca/0x150 [ 2575.264678][T17949] proc_fail_nth_read+0x1e9/0x250 [ 2575.269727][T17949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2575.275297][T17949] ? rw_verify_area+0x55e/0x6f0 [ 2575.280169][T17949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2575.285744][T17949] vfs_read+0x201/0xbc0 [ 2575.289920][T17949] ? __pfx_lock_release+0x10/0x10 [ 2575.294971][T17949] ? __pfx_vfs_read+0x10/0x10 [ 2575.299678][T17949] ? __fget_files+0x3f3/0x470 [ 2575.304387][T17949] ? fdget_pos+0x24e/0x320 [ 2575.308830][T17949] ksys_read+0x183/0x2b0 [ 2575.313097][T17949] ? __pfx_ksys_read+0x10/0x10 [ 2575.317878][T17949] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2575.324487][T17949] ? lockdep_hardirqs_on+0x99/0x150 [ 2575.329719][T17949] __do_fast_syscall_32+0xb4/0x110 [ 2575.334849][T17949] ? exc_page_fault+0x590/0x8c0 [ 2575.339725][T17949] do_fast_syscall_32+0x34/0x80 [ 2575.344590][T17949] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2575.350929][T17949] RIP: 0023:0xf7f04579 [ 2575.355009][T17949] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2575.362187][ T52] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2575.374611][T17949] RSP: 002b:00000000f56865a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2575.374639][T17949] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5686620 [ 2575.374654][T17949] RDX: 000000000000000f RSI: 00000000f738bff4 RDI: 0000000000000000 [ 2575.374667][T17949] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2575.374679][T17949] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2575.374691][T17949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2575.374716][T17949] [ 2575.436063][ T9] usb usb3-port1: attempt power cycle [ 2575.467381][T17954] netlink: 'syz.1.12381': attribute type 9 has an invalid length. [ 2575.475341][T17954] netlink: 134640 bytes leftover after parsing attributes in process `syz.1.12381'. [ 2575.584722][T17957] netlink: 196 bytes leftover after parsing attributes in process `syz.1.12381'. [ 2575.652617][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 2575.659692][ T52] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2575.683145][ T52] usb 4-1: config 8 has an invalid interface number: 158 but max is 0 [ 2575.691345][ T52] usb 4-1: config 8 has an invalid interface number: 158 but max is 0 [ 2575.704619][ T52] usb 4-1: config 8 has no interface number 0 [ 2575.711668][ T52] usb 4-1: too many endpoints for config 8 interface 158 altsetting 215: 236, using maximum allowed: 30 [ 2575.732137][ T52] usb 4-1: config 8 interface 158 altsetting 215 has 0 endpoint descriptors, different from the interface descriptor's value: 236 [ 2575.767793][ T52] usb 4-1: config 8 interface 158 has no altsetting 0 [ 2575.779861][ T52] usb 4-1: config 8 interface 158 has no altsetting 1 [ 2575.789779][ T52] usb 4-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 2575.800083][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2575.809565][ T52] usb 4-1: Product: syz [ 2575.816520][ T52] usb 4-1: Manufacturer: syz [ 2575.822491][ T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2575.830649][ T52] usb 4-1: SerialNumber: syz [ 2575.843796][ T9] usb 3-1: device descriptor read/8, error -71 [ 2575.850798][T17961] kernel read not supported for file /rmdFΌμ (pid: 17961 comm: syz.1.12384) [ 2575.962282][T17963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12385'. [ 2576.049075][ T52] usb 4-1: selecting invalid altsetting 1 [ 2576.055280][ T52] sierra 4-1:8.158: Sierra USB modem converter detected [ 2576.064826][ T52] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 2576.079397][ T52] usb 4-1: USB disconnect, device number 35 [ 2576.088817][ T52] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 2576.098489][ T52] sierra 4-1:8.158: device disconnected [ 2576.104182][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2576.133343][ T9] usb 3-1: device descriptor read/8, error -71 [ 2576.251383][ T9] usb usb3-port1: unable to enumerate USB device [ 2576.276166][T17970] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12388'. [ 2576.309426][T17970] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12388'. [ 2576.338470][T17972] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12389'. [ 2576.742069][T17984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12393'. [ 2576.766436][T17984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12393'. [ 2577.085409][ T3222] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2577.257680][ T3222] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2577.476572][ T3222] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2577.511023][T10770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2577.522225][T10770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2577.534291][T10770] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2577.546170][T10770] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2577.555885][T10770] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2577.564146][T10770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2578.630864][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2578.920183][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 2579.004432][ T9] usb 3-1: config 5 has an invalid interface number: 20 but max is 2 [ 2579.015323][ T9] usb 3-1: config 5 has an invalid interface number: 180 but max is 2 [ 2579.024192][ T9] usb 3-1: config 5 has an invalid interface number: 156 but max is 2 [ 2579.033081][ T9] usb 3-1: config 5 has an invalid interface descriptor of length 5, skipping [ 2579.042571][ T9] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 2579.051456][ T9] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 2579.062310][ T9] usb 3-1: config 5 has no interface number 0 [ 2579.068474][ T9] usb 3-1: config 5 has no interface number 1 [ 2579.075232][ T9] usb 3-1: config 5 has no interface number 2 [ 2579.096358][ T9] usb 3-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2579.108188][ T9] usb 3-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2579.182034][ T9] usb 3-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 2579.212486][ T9] usb 3-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2579.242448][ T9] usb 3-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 2579.272875][ T9] usb 3-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2579.294289][ T9] usb 3-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 2579.320324][ T9] usb 3-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 2579.351933][ T9] usb 3-1: config 5 interface 20 has no altsetting 0 [ 2579.358676][ T9] usb 3-1: config 5 interface 180 has no altsetting 0 [ 2579.381940][ T9] usb 3-1: config 5 interface 156 has no altsetting 0 [ 2579.404007][ T9] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 2579.413785][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2579.413813][ T9] usb 3-1: Product: syz [ 2579.413829][ T9] usb 3-1: Manufacturer: syz [ 2579.413845][ T9] usb 3-1: SerialNumber: syz [ 2579.672685][T10770] Bluetooth: hci2: command tx timeout [ 2579.703098][ T9] usb 3-1: USB disconnect, device number 70 [ 2581.505971][ T3222] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2581.755379][T10770] Bluetooth: hci2: command tx timeout [ 2581.862044][T19180] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2581.925863][ T3222] bridge_slave_1: left allmulticast mode [ 2581.931569][ T3222] bridge_slave_1: left promiscuous mode [ 2581.938042][ T3222] bridge0: port 2(bridge_slave_1) entered disabled state [ 2582.007184][ T3222] bridge_slave_0: left allmulticast mode [ 2582.013431][ T3222] bridge_slave_0: left promiscuous mode [ 2582.019159][ T3222] bridge0: port 1(bridge_slave_0) entered disabled state [ 2582.085373][T19180] usb 5-1: Using ep0 maxpacket: 32 [ 2582.102844][T19180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2582.126240][T19180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2582.157184][T19180] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2582.164918][T18030] FAULT_INJECTION: forcing a failure. [ 2582.164918][T18030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2582.188179][T19180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2582.202503][T18030] CPU: 0 UID: 0 PID: 18030 Comm: syz.2.12415 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2582.213403][T18030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2582.219397][T19180] usb 5-1: config 0 descriptor?? [ 2582.223461][T18030] Call Trace: [ 2582.223476][T18030] [ 2582.223485][T18030] dump_stack_lvl+0x241/0x360 [ 2582.223511][T18030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2582.223530][T18030] ? __pfx__printk+0x10/0x10 [ 2582.223559][T18030] ? snprintf+0xda/0x120 [ 2582.223582][T18030] should_fail_ex+0x3b0/0x4e0 [ 2582.223613][T18030] _copy_to_user+0x2f/0xb0 [ 2582.223637][T18030] simple_read_from_buffer+0xca/0x150 [ 2582.223668][T18030] proc_fail_nth_read+0x1e9/0x250 [ 2582.272846][T18030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2582.278402][T18030] ? rw_verify_area+0x55e/0x6f0 [ 2582.283251][T18030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2582.288802][T18030] vfs_read+0x201/0xbc0 [ 2582.292967][T18030] ? __pfx_lock_release+0x10/0x10 [ 2582.297997][T18030] ? __pfx_vfs_read+0x10/0x10 [ 2582.302676][T18030] ? __fget_files+0x3f3/0x470 [ 2582.307358][T18030] ? fdget_pos+0x24e/0x320 [ 2582.311768][T18030] ksys_read+0x183/0x2b0 [ 2582.316005][T18030] ? __pfx_ksys_read+0x10/0x10 [ 2582.320761][T18030] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2582.327346][T18030] ? lockdep_hardirqs_on+0x99/0x150 [ 2582.332543][T18030] __do_fast_syscall_32+0xb4/0x110 [ 2582.337644][T18030] ? exc_page_fault+0x590/0x8c0 [ 2582.342507][T18030] do_fast_syscall_32+0x34/0x80 [ 2582.347349][T18030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2582.353672][T18030] RIP: 0023:0xf748d579 [ 2582.357736][T18030] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2582.377337][T18030] RSP: 002b:00000000f57765a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2582.385749][T18030] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5776620 [ 2582.393722][T18030] RDX: 000000000000000f RSI: 00000000f747bff4 RDI: 0000000000000000 [ 2582.401686][T18030] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2582.409655][T18030] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2582.417618][T18030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2582.425591][T18030] [ 2582.457415][T19180] hub 5-1:0.0: USB hub found [ 2582.575775][T23048] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2582.604231][T23048] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2582.645811][T23048] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2582.655715][T23048] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2582.664461][T19180] hub 5-1:0.0: 1 port detected [ 2582.678175][T23048] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2582.685799][T23048] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2583.240514][ T3222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2583.257259][ T3222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2583.270918][ T3222] bond0 (unregistering): Released all slaves [ 2583.291121][T19180] hub 5-1:0.0: activate --> -90 [ 2583.364356][T17993] chnl_net:caif_netlink_parms(): no params data found [ 2583.704098][T19180] usb 5-1-port1: cannot disable (err = -71) [ 2583.711105][ T5281] usb 5-1: USB disconnect, device number 21 [ 2583.802003][ T52] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2583.828760][T17993] bridge0: port 1(bridge_slave_0) entered blocking state [ 2583.836823][T17993] bridge0: port 1(bridge_slave_0) entered disabled state [ 2583.844003][T23048] Bluetooth: hci2: command tx timeout [ 2583.850270][T17993] bridge_slave_0: entered allmulticast mode [ 2583.859759][T17993] bridge_slave_0: entered promiscuous mode [ 2583.870564][T17993] bridge0: port 2(bridge_slave_1) entered blocking state [ 2583.878557][T17993] bridge0: port 2(bridge_slave_1) entered disabled state [ 2583.886224][T17993] bridge_slave_1: entered allmulticast mode [ 2583.893802][T17993] bridge_slave_1: entered promiscuous mode [ 2583.945391][ T3222] hsr_slave_0: left promiscuous mode [ 2583.952305][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 2583.959410][ T52] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2583.970327][ T52] usb 3-1: config 0 has no interfaces? [ 2583.971141][ T3222] hsr_slave_1: left promiscuous mode [ 2583.983152][ T52] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2583.994200][ T52] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2584.002842][ T52] usb 3-1: Product: syz [ 2584.007199][ T52] usb 3-1: Manufacturer: syz [ 2584.011818][ T52] usb 3-1: SerialNumber: syz [ 2584.017215][ T3222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2584.031102][ T52] usb 3-1: config 0 descriptor?? [ 2584.042127][ T3222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2584.058273][ T3222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2584.066529][ T3222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2584.103736][ T3222] veth1_macvtap: left promiscuous mode [ 2584.109430][ T3222] veth0_macvtap: left promiscuous mode [ 2584.115117][ T3222] veth1_vlan: left promiscuous mode [ 2584.120542][ T3222] veth0_vlan: left promiscuous mode [ 2584.259190][ T5281] usb 3-1: USB disconnect, device number 71 [ 2584.708708][ T5281] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2584.797427][T23048] Bluetooth: hci6: command tx timeout [ 2584.884209][ T5281] usb 5-1: Using ep0 maxpacket: 16 [ 2584.891216][ T5281] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2584.901241][ T5281] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2584.929445][ T5281] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2584.959020][ T5281] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2584.968892][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2584.978903][ T5281] usb 5-1: Product: syz [ 2585.002188][ T5281] usb 5-1: Manufacturer: syz [ 2585.006846][ T5281] usb 5-1: SerialNumber: syz [ 2585.110072][ T3222] team0 (unregistering): Port device team_slave_1 removed [ 2585.240535][ T3222] team0 (unregistering): Port device team_slave_0 removed [ 2585.371010][ T5281] usb 5-1: 0:2 : does not exist [ 2585.401245][ T5281] usb 5-1: USB disconnect, device number 22 [ 2585.435824][T14858] udevd[14858]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2585.912046][T23048] Bluetooth: hci2: command tx timeout [ 2586.386957][T17993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2586.430029][T17993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2586.446553][T18097] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12429'. [ 2586.459416][T18100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2586.476963][T18097] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12429'. [ 2586.510415][T18100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2586.637222][T17993] team0: Port device team_slave_0 added [ 2586.666216][T17993] team0: Port device team_slave_1 added [ 2586.711381][ T5281] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 2586.724083][T18038] chnl_net:caif_netlink_parms(): no params data found [ 2586.863727][ T5281] usb 3-1: device descriptor read/64, error -71 [ 2586.872050][T23048] Bluetooth: hci6: command tx timeout [ 2586.880539][T17993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2586.890004][T18113] FAULT_INJECTION: forcing a failure. [ 2586.890004][T18113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2586.912215][T17993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2586.923622][T18113] CPU: 0 UID: 0 PID: 18113 Comm: syz.0.12432 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2586.938442][T17993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2586.948918][T18113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2586.948934][T18113] Call Trace: [ 2586.948943][T18113] [ 2586.948952][T18113] dump_stack_lvl+0x241/0x360 [ 2586.948978][T18113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2586.948996][T18113] ? __pfx__printk+0x10/0x10 [ 2586.949023][T18113] ? __kasan_kmalloc_large+0x8a/0xa0 [ 2586.949052][T18113] should_fail_ex+0x3b0/0x4e0 [ 2586.949083][T18113] _copy_from_user+0x2f/0xe0 [ 2586.949108][T18113] vmemdup_user+0x149/0x1c0 [ 2586.949128][T18113] map_lookup_elem+0x249/0x780 [ 2586.949149][T18113] ? __might_fault+0xc6/0x120 [ 2586.949173][T18113] __sys_bpf+0x429/0x810 [ 2587.022832][T18113] ? __pfx___sys_bpf+0x10/0x10 [ 2587.027608][T18113] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2587.033940][T18113] __ia32_sys_bpf+0x7c/0x90 [ 2587.038437][T18113] __do_fast_syscall_32+0xb4/0x110 [ 2587.043542][T18113] ? exc_page_fault+0x590/0x8c0 [ 2587.048395][T18113] do_fast_syscall_32+0x34/0x80 [ 2587.053238][T18113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2587.059555][T18113] RIP: 0023:0xf7f37579 [ 2587.063616][T18113] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2587.083216][T18113] RSP: 002b:00000000f56b656c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 2587.091622][T18113] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000200004c0 [ 2587.099608][T18113] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 2587.107600][T18113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2587.115571][T18113] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2587.123537][T18113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2587.131515][T18113] [ 2587.155380][T17993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2587.167089][T17993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2587.232007][T17993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2587.322820][ T5281] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 2587.452475][ T5281] usb 3-1: device descriptor read/64, error -71 [ 2587.453329][T17993] hsr_slave_0: entered promiscuous mode [ 2587.497810][T17993] hsr_slave_1: entered promiscuous mode [ 2587.509183][T17993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2587.526304][T17993] Cannot create hsr debugfs directory [ 2587.586558][ T3217] bridge_slave_1: left allmulticast mode [ 2587.613187][ T3217] bridge_slave_1: left promiscuous mode [ 2587.625998][ T5281] usb usb3-port1: attempt power cycle [ 2587.627893][ T3217] bridge0: port 2(bridge_slave_1) entered disabled state [ 2587.662484][ T3217] bridge_slave_0: left allmulticast mode [ 2587.678360][ T3217] bridge_slave_0: left promiscuous mode [ 2587.692825][ T3217] bridge0: port 1(bridge_slave_0) entered disabled state [ 2587.972469][ T5281] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 2588.001678][ T5281] usb 3-1: device descriptor read/8, error -71 [ 2588.282655][ T5281] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 2588.313124][ T5281] usb 3-1: device descriptor read/8, error -71 [ 2588.397954][T19180] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2588.434648][ T5281] usb usb3-port1: unable to enumerate USB device [ 2588.463699][ T3217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2588.477153][ T3217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2588.489377][ T3217] bond0 (unregistering): Released all slaves [ 2588.502691][T18038] bridge0: port 1(bridge_slave_0) entered blocking state [ 2588.510277][T18038] bridge0: port 1(bridge_slave_0) entered disabled state [ 2588.518198][T18038] bridge_slave_0: entered allmulticast mode [ 2588.525677][T18038] bridge_slave_0: entered promiscuous mode [ 2588.552916][T19180] usb 5-1: Using ep0 maxpacket: 8 [ 2588.569295][T19180] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2588.581863][T19180] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2588.596899][T19180] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2588.619162][T19180] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2588.633283][T19180] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2588.647941][T19180] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2588.666466][T19180] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2588.706529][T18038] bridge0: port 2(bridge_slave_1) entered blocking state [ 2588.721061][T19180] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2588.729788][T18038] bridge0: port 2(bridge_slave_1) entered disabled state [ 2588.748779][T18038] bridge_slave_1: entered allmulticast mode [ 2588.752061][T19180] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2588.757780][T18038] bridge_slave_1: entered promiscuous mode [ 2588.776229][T19180] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2588.823121][T19180] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2588.830576][T19180] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2588.845136][T19180] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2588.857156][T19180] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2588.870204][T19180] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2588.889670][T19180] usb 5-1: string descriptor 0 read error: -22 [ 2588.905795][T19180] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2588.920093][T19180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2588.939238][T19180] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2588.941421][T18038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2588.952107][T23048] Bluetooth: hci6: command tx timeout [ 2589.050108][T18038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2589.247785][T18038] team0: Port device team_slave_0 added [ 2589.320369][T18140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2589.323193][T18038] team0: Port device team_slave_1 added [ 2589.346618][T18140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2589.369117][ T3217] hsr_slave_0: left promiscuous mode [ 2589.383678][ T3217] hsr_slave_1: left promiscuous mode [ 2589.393746][ T3217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2589.402707][ T3217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2589.403963][T18140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2589.419329][ T3217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2589.434623][T18140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2589.442423][ T3217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2589.530208][ T3217] veth1_macvtap: left promiscuous mode [ 2589.550228][ T3217] veth0_macvtap: left promiscuous mode [ 2589.566991][ T3217] veth1_vlan: left promiscuous mode [ 2589.580048][ T3217] veth0_vlan: left promiscuous mode [ 2589.643675][T18140] fuse: Unknown parameter 'use00000000000000000000' [ 2590.336713][T18170] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12443'. [ 2590.395291][T18172] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12443'. [ 2590.770507][ T5281] usb 5-1: USB disconnect, device number 23 [ 2590.794156][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.800595][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.035188][T23048] Bluetooth: hci6: command tx timeout [ 2591.169697][ T3217] team0 (unregistering): Port device team_slave_1 removed [ 2591.304673][ T3217] team0 (unregistering): Port device team_slave_0 removed [ 2592.598288][T18038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2592.664723][T18038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2592.730659][T18038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2592.775722][T18194] program syz.4.12450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2592.811762][T18189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12448'. [ 2592.885367][T18192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12448'. [ 2592.903923][T18192] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 2592.912491][T18192] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 2592.923379][T18038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2592.930346][T18038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2592.959353][T18038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2593.165015][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 2593.165033][ T29] audit: type=1326 audit(1728115944.974:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18198 comm="syz.2.12451" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x0 [ 2593.165406][T18038] hsr_slave_0: entered promiscuous mode [ 2593.202521][T18038] hsr_slave_1: entered promiscuous mode [ 2593.221952][T18038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2593.229546][T18038] Cannot create hsr debugfs directory [ 2593.564266][T18038] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2593.593249][T17993] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2593.604154][T17993] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2593.614420][T17993] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2593.684154][T18038] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2593.710522][T17993] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2593.854233][T18038] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2593.963904][T18038] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2594.057414][T17993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2594.133213][T17993] 8021q: adding VLAN 0 to HW filter on device team0 [ 2594.191711][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 2594.198891][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2594.227690][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 2594.234880][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2594.374128][T18038] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2594.440448][T18038] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2594.491548][T18038] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2594.553309][T18038] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2594.688838][T17993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2594.815619][T18234] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12458'. [ 2594.835157][T17993] veth0_vlan: entered promiscuous mode [ 2594.858049][T18234] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12458'. [ 2595.011547][T17993] veth1_vlan: entered promiscuous mode [ 2595.071812][T17993] veth0_macvtap: entered promiscuous mode [ 2595.112518][T17993] veth1_macvtap: entered promiscuous mode [ 2595.168592][T18038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2595.204710][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2595.223426][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.250151][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2595.261802][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.272325][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2595.283366][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.295608][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2595.307821][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.318062][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2595.332325][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.343826][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2595.355538][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.376090][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2595.402187][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.422136][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2595.443266][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.462541][T30175] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2595.481436][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2595.495760][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.509201][T17993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2595.545007][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2595.563161][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.580165][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2595.590953][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.622046][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2595.634027][T30175] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2595.642604][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.647838][T30175] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2595.663449][T30175] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2595.674399][T30175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2595.682111][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2595.702516][T19180] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2595.707083][T30175] usb 3-1: config 0 descriptor?? [ 2595.720344][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.740787][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2595.761658][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.784043][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2595.805976][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.826257][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2595.842080][T19180] usb 5-1: device descriptor read/64, error -71 [ 2595.858645][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.878913][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2595.900034][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.931523][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2595.973025][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2596.004855][T17993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2596.075890][T18038] 8021q: adding VLAN 0 to HW filter on device team0 [ 2596.102104][T19180] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2596.168193][ T3223] bridge0: port 1(bridge_slave_0) entered blocking state [ 2596.175402][ T3223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2596.188341][ T3223] bridge0: port 2(bridge_slave_1) entered blocking state [ 2596.195498][ T3223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2596.262040][T19180] usb 5-1: device descriptor read/64, error -71 [ 2596.314046][T18038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2596.347741][T18038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2596.372368][T19180] usb usb5-port1: attempt power cycle [ 2596.462757][T17993] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2596.471539][T17993] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2596.481088][T17993] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2596.490648][T17993] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2596.574820][T30175] usb 3-1: string descriptor 0 read error: -71 [ 2596.621027][T30175] usb 3-1: USB disconnect, device number 76 [ 2596.712047][T19180] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2596.738787][T19180] usb 5-1: device descriptor read/8, error -71 [ 2596.749913][T18038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2596.779860][ T3222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2596.795151][ T3222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2596.836441][ T3217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2596.850859][ T3217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2596.925070][T18038] veth0_vlan: entered promiscuous mode [ 2596.949375][T18038] veth1_vlan: entered promiscuous mode [ 2596.992071][T19180] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2597.004601][T18038] veth0_macvtap: entered promiscuous mode [ 2597.010797][T18295] program syz.3.12396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2597.023458][T19180] usb 5-1: device descriptor read/8, error -71 [ 2597.027503][T18038] veth1_macvtap: entered promiscuous mode [ 2597.097049][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.118925][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.132386][T19180] usb usb5-port1: unable to enumerate USB device [ 2597.142646][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.164338][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.186986][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.210845][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.228921][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.259073][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.281726][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.312532][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.342531][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.355678][T18303] FAULT_INJECTION: forcing a failure. [ 2597.355678][T18303] name failslab, interval 1, probability 0, space 0, times 0 [ 2597.361919][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.369282][T18303] CPU: 1 UID: 0 PID: 18303 Comm: syz.2.12465 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2597.388949][T18303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2597.398999][T18303] Call Trace: [ 2597.402272][T18303] [ 2597.405194][T18303] dump_stack_lvl+0x241/0x360 [ 2597.409869][T18303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2597.415062][T18303] ? __pfx__printk+0x10/0x10 [ 2597.419654][T18303] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 2597.425202][T18303] ? __pfx___might_resched+0x10/0x10 [ 2597.430490][T18303] should_fail_ex+0x3b0/0x4e0 [ 2597.435166][T18303] ? ep_ptable_queue_proc+0x5b/0x210 [ 2597.440447][T18303] should_failslab+0xac/0x100 [ 2597.445125][T18303] ? ep_ptable_queue_proc+0x5b/0x210 [ 2597.450408][T18303] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 2597.455781][T18303] ep_ptable_queue_proc+0x5b/0x210 [ 2597.460894][T18303] ? io_uring_poll+0xae/0x300 [ 2597.465567][T18303] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 2597.471284][T18303] io_uring_poll+0xbd/0x300 [ 2597.475786][T18303] ? __pfx_io_uring_poll+0x10/0x10 [ 2597.480899][T18303] ep_insert+0x10a3/0x1aa0 [ 2597.485322][T18303] ? __pfx_ep_insert+0x10/0x10 [ 2597.490080][T18303] ? do_epoll_ctl+0x435/0xf60 [ 2597.494752][T18303] ? __pfx___mutex_lock+0x10/0x10 [ 2597.499767][T18303] ? __fget_files+0x29/0x470 [ 2597.504349][T18303] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 2597.510063][T18303] ? __fget_files+0x29/0x470 [ 2597.514655][T18303] do_epoll_ctl+0x8c9/0xf60 [ 2597.519154][T18303] ? do_epoll_ctl+0x761/0xf60 [ 2597.523833][T18303] __ia32_sys_epoll_ctl+0x160/0x1a0 [ 2597.529032][T18303] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 2597.534749][T18303] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2597.541337][T18303] ? lockdep_hardirqs_on+0x99/0x150 [ 2597.546535][T18303] __do_fast_syscall_32+0xb4/0x110 [ 2597.551643][T18303] ? exc_page_fault+0x590/0x8c0 [ 2597.556497][T18303] do_fast_syscall_32+0x34/0x80 [ 2597.561352][T18303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2597.567670][T18303] RIP: 0023:0xf748d579 [ 2597.571728][T18303] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2597.591331][T18303] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff [ 2597.599740][T18303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 2597.607703][T18303] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000000 [ 2597.615666][T18303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2597.623633][T18303] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2597.631595][T18303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2597.639571][T18303] [ 2597.642620][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.654793][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.669166][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.679884][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.689931][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.700869][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.711217][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.722224][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.734149][T18038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2597.744749][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2597.760428][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.794589][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2597.828638][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.870587][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2597.904450][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.932443][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2597.952302][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.974439][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2598.002429][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.022428][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2598.043715][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.068481][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2598.093709][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.114444][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2598.139453][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.168190][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2598.192373][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.222441][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2598.242336][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.284162][T18038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2598.324610][T18300] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12464'. [ 2598.376656][T18038] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2598.394138][T18038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2598.413938][ T29] audit: type=1326 audit(1728115950.224:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18312 comm="syz.0.12467" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x0 [ 2598.426205][T18038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2598.445760][T18038] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2598.624390][ T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2598.646117][ T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2598.740612][ T3222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2598.763261][ T3222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2599.154135][T18333] FAULT_INJECTION: forcing a failure. [ 2599.154135][T18333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2599.202694][T18333] CPU: 0 UID: 0 PID: 18333 Comm: syz.2.12472 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2599.213604][T18333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2599.223687][T18333] Call Trace: [ 2599.226992][T18333] [ 2599.229944][T18333] dump_stack_lvl+0x241/0x360 [ 2599.234654][T18333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2599.239884][T18333] ? __pfx__printk+0x10/0x10 [ 2599.244508][T18333] ? __pfx_lock_release+0x10/0x10 [ 2599.249568][T18333] should_fail_ex+0x3b0/0x4e0 [ 2599.254281][T18333] _copy_from_user+0x2f/0xe0 [ 2599.258901][T18333] ucma_write+0x17d/0x420 [ 2599.263254][T18333] ? end_current_label_crit_section+0x151/0x180 [ 2599.269530][T18333] ? __pfx_ucma_write+0x10/0x10 [ 2599.274408][T18333] ? bpf_lsm_file_permission+0x9/0x10 [ 2599.279810][T18333] ? security_file_permission+0x74/0x280 [ 2599.285480][T18333] ? rw_verify_area+0x1c3/0x6f0 [ 2599.290367][T18333] vfs_writev+0x5a9/0xba0 [ 2599.294730][T18333] ? __pfx_ucma_write+0x10/0x10 [ 2599.299607][T18333] ? __pfx_vfs_writev+0x10/0x10 [ 2599.304507][T18333] ? fdget_pos+0x19a/0x320 [ 2599.308945][T18333] do_writev+0x1b1/0x350 [ 2599.313218][T18333] ? __pfx_do_writev+0x10/0x10 [ 2599.318017][T18333] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2599.324638][T18333] ? lockdep_hardirqs_on+0x99/0x150 [ 2599.329875][T18333] __do_fast_syscall_32+0xb4/0x110 [ 2599.335018][T18333] ? exc_page_fault+0x590/0x8c0 [ 2599.339906][T18333] do_fast_syscall_32+0x34/0x80 [ 2599.344785][T18333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2599.351142][T18333] RIP: 0023:0xf748d579 [ 2599.355235][T18333] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2599.374866][T18333] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 2599.383319][T18333] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 2599.391324][T18333] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 2599.399333][T18333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2599.407331][T18333] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2599.415335][T18333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2599.423354][T18333] [ 2599.454349][ T25] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2599.612051][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 2599.627009][ T25] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2599.642557][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2599.668856][ T25] usb 4-1: Product: syz [ 2599.681104][ T25] usb 4-1: Manufacturer: syz [ 2599.687522][ T25] usb 4-1: SerialNumber: syz [ 2599.707769][T18349] FAULT_INJECTION: forcing a failure. [ 2599.707769][T18349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2599.723196][ T25] usb 4-1: config 0 descriptor?? [ 2599.730353][ T25] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2599.745967][ T25] usb 4-1: Detected FT232H [ 2599.747171][T18351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12479'. [ 2599.750672][T18349] CPU: 1 UID: 0 PID: 18349 Comm: syz.4.12478 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2599.770411][T18349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2599.779450][T18351] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12479'. [ 2599.780463][T18349] Call Trace: [ 2599.780476][T18349] [ 2599.780485][T18349] dump_stack_lvl+0x241/0x360 [ 2599.800418][T18349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2599.805655][T18349] ? __pfx__printk+0x10/0x10 [ 2599.810287][T18349] ? __pfx_lock_release+0x10/0x10 [ 2599.815356][T18349] should_fail_ex+0x3b0/0x4e0 [ 2599.820064][T18349] _copy_from_user+0x2f/0xe0 [ 2599.824683][T18349] sk_setsockopt+0x261/0x33b0 [ 2599.829386][T18349] ? __pfx_sk_setsockopt+0x10/0x10 [ 2599.834510][T18349] ? rcu_read_lock_any_held+0xb7/0x160 [ 2599.839997][T18349] ? aa_sk_perm+0x96d/0xab0 [ 2599.844528][T18349] ? sb_end_write+0xe9/0x1c0 [ 2599.849142][T18349] ? __pfx_aa_sk_perm+0x10/0x10 [ 2599.854022][T18349] ? vfs_write+0x7bf/0xc90 [ 2599.858463][T18349] ? aa_sock_opt_perm+0x79/0x120 [ 2599.863429][T18349] do_sock_setsockopt+0x2fb/0x720 [ 2599.868490][T18349] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2599.874068][T18349] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2599.880082][T18349] __sys_setsockopt+0x1a2/0x250 [ 2599.884963][T18349] __ia32_sys_setsockopt+0xb5/0xd0 [ 2599.890107][T18349] __do_fast_syscall_32+0xb4/0x110 [ 2599.895250][T18349] ? exc_page_fault+0x590/0x8c0 [ 2599.900149][T18349] do_fast_syscall_32+0x34/0x80 [ 2599.905033][T18349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2599.911390][T18349] RIP: 0023:0xf7f04579 [ 2599.915477][T18349] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2599.935112][T18349] RSP: 002b:00000000f568656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 2599.942709][T18354] FAULT_INJECTION: forcing a failure. [ 2599.942709][T18354] name failslab, interval 1, probability 0, space 0, times 0 [ 2599.943535][T18349] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 2599.943553][T18349] RDX: 0000000000000019 RSI: 0000000020000240 RDI: 0000000000000010 [ 2599.943567][T18349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2599.943585][T18349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2599.988048][T18349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2599.996064][T18349] [ 2600.001569][T18354] CPU: 0 UID: 0 PID: 18354 Comm: syz.0.12480 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2600.012473][T18354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2600.022559][T18354] Call Trace: [ 2600.025864][T18354] [ 2600.025889][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2600.028795][T18354] dump_stack_lvl+0x241/0x360 [ 2600.036917][T18337] vlan2: entered promiscuous mode [ 2600.040378][T18354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2600.050645][T18354] ? __pfx__printk+0x10/0x10 [ 2600.055270][T18354] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 2600.061260][T18354] ? __pfx___might_resched+0x10/0x10 [ 2600.066559][T18354] ? aa_label_sk_perm+0x4f3/0x6c0 [ 2600.071614][T18354] should_fail_ex+0x3b0/0x4e0 [ 2600.076335][T18354] should_failslab+0xac/0x100 [ 2600.081032][T18354] ? __alloc_skb+0x1c3/0x440 [ 2600.085643][T18354] kmem_cache_alloc_node_noprof+0x71/0x320 [ 2600.091475][T18354] __alloc_skb+0x1c3/0x440 [ 2600.095913][T18354] ? __pfx___alloc_skb+0x10/0x10 [ 2600.100866][T18354] netlink_sendmsg+0x638/0xcb0 [ 2600.105650][T18354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2600.110959][T18354] ? aa_sock_msg_perm+0x91/0x160 [ 2600.115914][T18354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2600.121337][T18354] __sock_sendmsg+0x221/0x270 [ 2600.126062][T18354] __sys_sendto+0x39b/0x4f0 [ 2600.130599][T18354] ? __pfx___sys_sendto+0x10/0x10 [ 2600.135653][T18354] ? __might_fault+0xaa/0x120 [ 2600.140356][T18354] ? vfs_write+0x7bf/0xc90 [ 2600.144807][T18354] ? __might_fault+0xc6/0x120 [ 2600.149535][T18354] __se_compat_sys_socketcall+0xb18/0x1430 [ 2600.155391][T18354] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 2600.161684][T18354] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2600.168311][T18354] ? lockdep_hardirqs_on+0x99/0x150 [ 2600.173559][T18354] __do_fast_syscall_32+0xb4/0x110 [ 2600.178700][T18354] ? exc_page_fault+0x590/0x8c0 [ 2600.183589][T18354] do_fast_syscall_32+0x34/0x80 [ 2600.188467][T18354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2600.194824][T18354] RIP: 0023:0xf7f37579 [ 2600.198916][T18354] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2600.218553][T18354] RSP: 002b:00000000f56b5440 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 2600.227003][T18354] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f56b5454 [ 2600.235006][T18354] RDX: 0000000000000000 RSI: 00000000f56b5570 RDI: 00000000f73bbff4 [ 2600.243003][T18354] RBP: 00000000f56b5570 R08: 0000000000000000 R09: 0000000000000000 [ 2600.250994][T18354] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2600.258990][T18354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2600.267002][T18354] [ 2600.284314][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2600.291982][ T25] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 2600.312690][ T25] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2600.335395][ T25] usb 4-1: USB disconnect, device number 36 [ 2600.365200][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2600.403190][ T25] ftdi_sio 4-1:0.0: device disconnected [ 2600.502725][T19180] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2600.673255][T19180] usb 2-1: config 0 has an invalid interface number: 27 but max is 0 [ 2600.691653][T19180] usb 2-1: config 0 has no interface number 0 [ 2600.712214][T19180] usb 2-1: config 0 interface 27 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2600.739244][T19180] usb 2-1: config 0 interface 27 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2600.749429][T19180] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2600.758601][T19180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2600.773090][T19180] usb 2-1: config 0 descriptor?? [ 2601.210765][T19180] uclogic 0003:256C:006D.0039: interface is invalid, ignoring [ 2601.428454][T19180] usb 2-1: USB disconnect, device number 104 [ 2601.499275][T18391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12493'. [ 2601.565985][T18391] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2601.609173][T18393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12494'. [ 2601.634388][T18393] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2602.025429][ T5229] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2602.072743][ T5281] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2602.192165][ T5229] usb 5-1: Using ep0 maxpacket: 16 [ 2602.204832][ T5229] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2602.213648][ T5229] usb 5-1: config 6 has an invalid interface number: 49 but max is 0 [ 2602.222095][ T5229] usb 5-1: config 6 has no interface number 0 [ 2602.229845][ T5281] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2602.236704][ T5229] usb 5-1: config 6 interface 49 altsetting 8 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2602.249890][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2602.249935][ T5281] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2602.249959][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2602.283599][ T5229] usb 5-1: config 6 interface 49 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 0 [ 2602.293889][ T5281] usb 3-1: config 0 descriptor?? [ 2602.310080][ T5229] usb 5-1: config 6 interface 49 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2602.330458][ T5281] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2602.365816][ T5229] usb 5-1: config 6 interface 49 altsetting 8 endpoint 0x4 has an invalid bInterval 23, changing to 8 [ 2602.410010][ T5229] usb 5-1: config 6 interface 49 has no altsetting 0 [ 2602.435415][ T5229] usb 5-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=be.b7 [ 2602.454202][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2602.484146][ T5229] usb 5-1: Product: syz [ 2602.488429][ T5229] usb 5-1: Manufacturer: syz [ 2602.512237][ T5229] usb 5-1: SerialNumber: syz [ 2602.597325][T18420] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12504'. [ 2602.738098][ T5229] usbhid 5-1:6.49: couldn't find an input interrupt endpoint [ 2602.752724][ T5281] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2602.773332][ T5229] usb 5-1: USB disconnect, device number 28 [ 2603.112922][ T5281] usb 4-1: Using ep0 maxpacket: 16 [ 2603.119862][ T5281] usb 4-1: config 5 has an invalid interface number: 20 but max is 2 [ 2603.128540][ T5281] usb 4-1: config 5 has an invalid interface number: 180 but max is 2 [ 2603.143482][ T5281] usb 4-1: config 5 has an invalid interface number: 156 but max is 2 [ 2603.151687][ T5281] usb 4-1: config 5 has an invalid interface descriptor of length 5, skipping [ 2603.182411][ T5281] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 2603.211960][ T5281] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 2603.242517][ T5281] usb 4-1: config 5 has no interface number 0 [ 2603.249162][ T5281] usb 4-1: config 5 has no interface number 1 [ 2603.262363][ T5281] usb 4-1: config 5 has no interface number 2 [ 2603.282517][ T5281] usb 4-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2603.314255][ T5281] usb 4-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2603.332448][ T5281] usb 4-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 2603.362428][ T5281] usb 4-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2603.392453][ T5281] usb 4-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 2603.415711][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12509'. [ 2603.418197][ T5281] usb 4-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2603.443134][T18438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12509'. [ 2603.462491][ T5281] usb 4-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 2603.496207][ T5281] usb 4-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 2603.522701][ T5281] usb 4-1: config 5 interface 20 has no altsetting 0 [ 2603.529664][ T5281] usb 4-1: config 5 interface 180 has no altsetting 0 [ 2603.547260][ T5281] usb 4-1: config 5 interface 156 has no altsetting 0 [ 2603.557590][ T5281] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 2603.567413][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2603.583613][ T5281] usb 4-1: Product: syz [ 2603.601796][ T5281] usb 4-1: Manufacturer: syz [ 2603.615845][ T5281] usb 4-1: SerialNumber: syz [ 2603.702134][ T5229] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2603.762836][T18444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12512'. [ 2603.824043][T18446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12512'. [ 2603.857125][ T5281] usb 4-1: USB disconnect, device number 37 [ 2603.872309][ T5229] usb 2-1: Using ep0 maxpacket: 32 [ 2603.890077][ T5229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2603.913216][T18446] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2603.920973][T18446] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 2603.953775][ T5229] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= b.8c [ 2603.964040][ T5229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2603.981992][ T5229] usb 2-1: Product: syz [ 2603.986230][ T5229] usb 2-1: Manufacturer: syz [ 2603.990843][ T5229] usb 2-1: SerialNumber: syz [ 2604.479913][T18459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12517'. [ 2604.679917][T19180] IPVS: starting estimator thread 0... [ 2604.772108][T18471] IPVS: using max 19 ests per chain, 45600 per kthread [ 2604.853122][T11006] usb 3-1: USB disconnect, device number 77 [ 2604.966306][ T5229] empeg 2-1:1.0: empeg converter detected [ 2604.986752][ T5229] empeg 2-1:1.0: probe with driver empeg failed with error -71 [ 2604.995826][T18473] netlink: 'syz.2.12520': attribute type 11 has an invalid length. [ 2605.026039][ T5229] usb 2-1: USB disconnect, device number 105 [ 2605.434064][T18479] kernel read not supported for file /rmdFΌμ (pid: 18479 comm: syz.1.12522) [ 2605.447514][ T29] audit: type=1800 audit(1728115957.254:1232): pid=18479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12522" name=726D64461716BCEC dev="mqueue" ino=318169 res=0 errno=0 [ 2605.475506][T18481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12523'. [ 2605.487764][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12523'. [ 2605.646716][T18484] FAULT_INJECTION: forcing a failure. [ 2605.646716][T18484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2605.678097][T18484] CPU: 0 UID: 0 PID: 18484 Comm: syz.1.12524 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2605.689004][T18484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2605.699084][T18484] Call Trace: [ 2605.702382][T18484] [ 2605.705330][T18484] dump_stack_lvl+0x241/0x360 [ 2605.710033][T18484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2605.715256][T18484] ? __pfx__printk+0x10/0x10 [ 2605.719872][T18484] ? validate_chain+0x11e/0x5920 [ 2605.724832][T18484] ? __pfx_lock_release+0x10/0x10 [ 2605.729894][T18484] should_fail_ex+0x3b0/0x4e0 [ 2605.734605][T18484] _copy_to_user+0x2f/0xb0 [ 2605.739051][T18484] put_cmsg_compat+0x6b4/0x9a0 [ 2605.743851][T18484] ? __pfx_put_cmsg_compat+0x10/0x10 [ 2605.749158][T18484] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2605.755165][T18484] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2605.761524][T18484] tipc_sk_anc_data_recv+0x3bb/0x990 [ 2605.766829][T18484] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 2605.772568][T18484] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 2605.778392][T18484] tipc_recvmsg+0x72e/0x13c0 [ 2605.782990][T18484] ? __pfx_tipc_recvmsg+0x10/0x10 [ 2605.788017][T18484] ? aa_sock_msg_perm+0x91/0x160 [ 2605.792952][T18484] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 2605.798232][T18484] ? __pfx_tipc_recvmsg+0x10/0x10 [ 2605.803251][T18484] sock_recvmsg+0x22f/0x280 [ 2605.807754][T18484] ____sys_recvmsg+0x1c6/0x480 [ 2605.812518][T18484] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2605.817795][T18484] ? get_compat_msghdr+0x500/0x730 [ 2605.822951][T18484] do_recvmmsg+0x579/0xad0 [ 2605.827369][T18484] ? __pfx_do_recvmmsg+0x10/0x10 [ 2605.832306][T18484] ? __pfx_lock_release+0x10/0x10 [ 2605.837327][T18484] ? kstrtouint_from_user+0x128/0x190 [ 2605.842721][T18484] ? vfs_write+0x7bf/0xc90 [ 2605.847136][T18484] ? __pfx_vfs_write+0x10/0x10 [ 2605.851901][T18484] ? __fget_files+0x3f3/0x470 [ 2605.856586][T18484] __sys_recvmmsg+0x1a8/0x270 [ 2605.861347][T18484] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2605.867325][T18484] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2605.872518][T18484] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2605.878846][T18484] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 2605.884997][T18484] __do_fast_syscall_32+0xb4/0x110 [ 2605.890105][T18484] ? exc_page_fault+0x590/0x8c0 [ 2605.894957][T18484] do_fast_syscall_32+0x34/0x80 [ 2605.899799][T18484] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2605.906122][T18484] RIP: 0023:0xf7fb3579 [ 2605.910205][T18484] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2605.929827][T18484] RSP: 002b:00000000f573656c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 2605.938250][T18484] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 2605.946228][T18484] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2605.954197][T18484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2605.962162][T18484] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2605.970129][T18484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2605.978130][T18484] [ 2606.292021][ T52] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2606.442464][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 2606.450248][ T52] usb 4-1: config 5 has an invalid interface number: 20 but max is 2 [ 2606.460613][ T52] usb 4-1: config 5 has an invalid interface number: 180 but max is 2 [ 2606.472515][ T52] usb 4-1: config 5 has an invalid interface number: 156 but max is 2 [ 2606.481022][ T52] usb 4-1: config 5 has an invalid interface descriptor of length 5, skipping [ 2606.490890][ T52] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 2606.500091][ T25] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2606.509191][ T52] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 2606.520487][ T52] usb 4-1: config 5 has no interface number 0 [ 2606.527064][ T52] usb 4-1: config 5 has no interface number 1 [ 2606.535704][ T52] usb 4-1: config 5 has no interface number 2 [ 2606.541837][ T52] usb 4-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2606.566023][ T52] usb 4-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2606.584159][T18499] FAULT_INJECTION: forcing a failure. [ 2606.584159][T18499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2606.598269][ T52] usb 4-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 2606.610084][ T52] usb 4-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2606.621700][T18499] CPU: 1 UID: 0 PID: 18499 Comm: syz.1.12529 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2606.632589][T18499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2606.642661][T18499] Call Trace: [ 2606.645972][T18499] [ 2606.648919][T18499] dump_stack_lvl+0x241/0x360 [ 2606.653620][T18499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2606.658843][T18499] ? __pfx__printk+0x10/0x10 [ 2606.663472][T18499] ? __pfx_lock_release+0x10/0x10 [ 2606.668529][T18499] should_fail_ex+0x3b0/0x4e0 [ 2606.673242][T18499] _copy_from_iter+0x1ed/0x1d60 [ 2606.678198][T18499] ? __virt_addr_valid+0x183/0x530 [ 2606.683398][T18499] ? __pfx_lock_release+0x10/0x10 [ 2606.688429][T18499] ? __pfx__copy_from_iter+0x10/0x10 [ 2606.693711][T18499] ? __virt_addr_valid+0x183/0x530 [ 2606.698814][T18499] ? __virt_addr_valid+0x183/0x530 [ 2606.703919][T18499] ? __virt_addr_valid+0x45f/0x530 [ 2606.709026][T18499] ? __check_object_size+0x48e/0x900 [ 2606.714309][T18499] kernfs_fop_write_iter+0x1a9/0x500 [ 2606.719595][T18499] vfs_write+0xa6d/0xc90 [ 2606.723837][T18499] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2606.729643][T18499] ? __pfx_vfs_write+0x10/0x10 [ 2606.734411][T18499] ? fdget_pos+0x24e/0x320 [ 2606.738824][T18499] ksys_write+0x183/0x2b0 [ 2606.743151][T18499] ? __pfx_ksys_write+0x10/0x10 [ 2606.747993][T18499] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2606.754579][T18499] ? lockdep_hardirqs_on+0x99/0x150 [ 2606.759773][T18499] __do_fast_syscall_32+0xb4/0x110 [ 2606.764887][T18499] ? exc_page_fault+0x590/0x8c0 [ 2606.769740][T18499] do_fast_syscall_32+0x34/0x80 [ 2606.774586][T18499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2606.780908][T18499] RIP: 0023:0xf7fb3579 [ 2606.784984][T18499] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2606.804670][T18499] RSP: 002b:00000000f573656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2606.813084][T18499] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000c40 [ 2606.821046][T18499] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 2606.829020][T18499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2606.836987][T18499] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2606.844949][T18499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2606.852922][T18499] [ 2606.856108][ C1] vkms_vblank_simulate: vblank timer overrun [ 2606.863854][ T52] usb 4-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 2606.875350][ T52] usb 4-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2606.904641][ T52] usb 4-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 2606.922270][ T52] usb 4-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 2606.935827][ T52] usb 4-1: config 5 interface 20 has no altsetting 0 [ 2606.942722][ T52] usb 4-1: config 5 interface 180 has no altsetting 0 [ 2606.950005][ T52] usb 4-1: config 5 interface 156 has no altsetting 0 [ 2606.958214][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2606.972726][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2606.989338][ T25] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2607.002132][ T52] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 2607.011553][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2607.021680][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2607.030076][ T52] usb 4-1: Product: syz [ 2607.042059][ T52] usb 4-1: Manufacturer: syz [ 2607.049394][ T25] usb 3-1: config 0 descriptor?? [ 2607.081029][ T52] usb 4-1: SerialNumber: syz [ 2607.096307][ T25] usbhid 3-1:0.0: can't add hid device: -22 [ 2607.128702][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 2607.336642][ T52] usb 4-1: USB disconnect, device number 38 [ 2607.358928][T18502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12528'. [ 2607.492534][T30175] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2607.669148][T30175] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2607.700638][T30175] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2607.742462][T30175] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2607.779934][T18508] program syz.4.12531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2607.782648][T30175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2607.828366][T30175] usb 2-1: config 0 descriptor?? [ 2607.851790][T30175] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2608.155162][T18516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12535'. [ 2608.175449][T18517] FAULT_INJECTION: forcing a failure. [ 2608.175449][T18517] name failslab, interval 1, probability 0, space 0, times 0 [ 2608.178610][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12535'. [ 2608.188981][T18517] CPU: 1 UID: 0 PID: 18517 Comm: syz.4.12536 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2608.189046][T18517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2608.189060][T18517] Call Trace: [ 2608.189070][T18517] [ 2608.189081][T18517] dump_stack_lvl+0x241/0x360 [ 2608.189110][T18517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2608.189131][T18517] ? __pfx__printk+0x10/0x10 [ 2608.189171][T18517] should_fail_ex+0x3b0/0x4e0 [ 2608.189201][T18517] ? io_cqring_event_overflow+0xd3/0x660 [ 2608.189222][T18517] should_failslab+0xac/0x100 [ 2608.189247][T18517] ? io_cqring_event_overflow+0xd3/0x660 [ 2608.189267][T18517] __kmalloc_noprof+0xd8/0x400 [ 2608.189297][T18517] io_cqring_event_overflow+0xd3/0x660 [ 2608.189323][T18517] io_req_cqe_overflow+0xf2/0x150 [ 2608.189346][T18517] __io_submit_flush_completions+0x2c4/0xcf0 [ 2608.281459][T18517] ? trace_kmalloc+0x1f/0xd0 [ 2608.286062][T18517] ? __pfx___io_submit_flush_completions+0x10/0x10 [ 2608.292578][T18517] io_submit_sqes+0x17cd/0x1c00 [ 2608.297475][T18517] __se_sys_io_uring_enter+0x2c3/0x2bb0 [ 2608.303048][T18517] ? ksys_write+0x229/0x2b0 [ 2608.307547][T18517] ? __pfx_lock_release+0x10/0x10 [ 2608.312575][T18517] ? vfs_write+0x7bf/0xc90 [ 2608.316989][T18517] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2608.322965][T18517] ? __mutex_unlock_slowpath+0x21d/0x750 [ 2608.328592][T18517] ? __pfx_vfs_write+0x10/0x10 [ 2608.333349][T18517] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2608.339324][T18517] ? __fget_files+0x3f3/0x470 [ 2608.344007][T18517] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2608.349993][T18517] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2608.356324][T18517] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2608.362911][T18517] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 2608.368546][T18517] __do_fast_syscall_32+0xb4/0x110 [ 2608.373652][T18517] ? exc_page_fault+0x590/0x8c0 [ 2608.378502][T18517] do_fast_syscall_32+0x34/0x80 [ 2608.383343][T18517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2608.389665][T18517] RIP: 0023:0xf7f04579 [ 2608.393732][T18517] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2608.413342][T18517] RSP: 002b:00000000f568656c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 2608.421757][T18517] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000002d3e [ 2608.429724][T18517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2608.437686][T18517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2608.445652][T18517] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2608.453615][T18517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2608.461589][T18517] [ 2608.464682][ C1] vkms_vblank_simulate: vblank timer overrun [ 2608.661143][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12538'. [ 2608.713965][T23048] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2608.724033][T23048] Bluetooth: hci2: Injecting HCI hardware error event [ 2608.734701][T23048] Bluetooth: hci2: hardware error 0x00 [ 2609.273185][T11006] usb 3-1: USB disconnect, device number 78 [ 2609.309874][T18532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2609.595388][T18545] FAULT_INJECTION: forcing a failure. [ 2609.595388][T18545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2609.682416][T18545] CPU: 1 UID: 0 PID: 18545 Comm: syz.4.12546 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2609.693329][T18545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2609.703411][T18545] Call Trace: [ 2609.706713][T18545] [ 2609.709659][T18545] dump_stack_lvl+0x241/0x360 [ 2609.714362][T18545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2609.719576][T18545] ? __pfx__printk+0x10/0x10 [ 2609.724196][T18545] ? __pfx_lock_release+0x10/0x10 [ 2609.729240][T18545] ? __local_bh_enable_ip+0x168/0x200 [ 2609.734637][T18545] ? __convert_from_fxsr+0x5a6/0x800 [ 2609.739958][T18545] should_fail_ex+0x3b0/0x4e0 [ 2609.744672][T18545] copy_fpstate_to_sigframe+0xa5c/0xdc0 [ 2609.750255][T18545] ? copy_fpstate_to_sigframe+0x179/0xdc0 [ 2609.756003][T18545] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 2609.762118][T18545] ? fpu__alloc_mathframe+0xab/0x130 [ 2609.767432][T18545] get_sigframe+0x5d9/0x800 [ 2609.771967][T18545] ? __pfx_get_sigframe+0x10/0x10 [ 2609.777021][T18545] ia32_setup_rt_frame+0x130/0xc80 [ 2609.782147][T18545] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2609.787364][T18545] ? fput+0x1a8/0x230 [ 2609.791367][T18545] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 2609.797015][T18545] ? __mutex_unlock_slowpath+0x21d/0x750 [ 2609.802674][T18545] arch_do_signal_or_restart+0x4a8/0x860 [ 2609.808330][T18545] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2609.814519][T18545] ? syscall_exit_to_user_mode+0xa3/0x370 [ 2609.820264][T18545] syscall_exit_to_user_mode+0xc9/0x370 [ 2609.825838][T18545] __do_fast_syscall_32+0xc4/0x110 [ 2609.830965][T18545] ? exc_page_fault+0x590/0x8c0 [ 2609.835841][T18545] do_fast_syscall_32+0x34/0x80 [ 2609.840707][T18545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2609.847046][T18545] RIP: 0023:0xf7f04577 [ 2609.851109][T18545] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2609.870706][T18545] RSP: 002b:00000000f568656c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 2609.879114][T18545] RAX: 0000000000000174 RBX: 0000000000000004 RCX: 00000000200006c0 [ 2609.887076][T18545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2609.895037][T18545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2609.903006][T18545] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2609.910996][T18545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2609.918979][T18545] [ 2610.544788][T30175] usb 2-1: USB disconnect, device number 106 [ 2610.900616][T18571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12555'. [ 2610.965290][T18497] syz.1.12527 (18497) used greatest stack depth: 17272 bytes left [ 2611.042381][T23048] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2611.115440][T30175] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2611.133792][T18574] FAULT_INJECTION: forcing a failure. [ 2611.133792][T18574] name failslab, interval 1, probability 0, space 0, times 0 [ 2611.193829][T18574] CPU: 0 UID: 0 PID: 18574 Comm: syz.2.12556 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2611.204732][T18574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2611.214805][T18574] Call Trace: [ 2611.218094][T18574] [ 2611.221035][T18574] dump_stack_lvl+0x241/0x360 [ 2611.225734][T18574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2611.230944][T18574] ? __pfx__printk+0x10/0x10 [ 2611.235554][T18574] ? fs_reclaim_acquire+0x93/0x140 [ 2611.240681][T18574] ? __pfx___might_resched+0x10/0x10 [ 2611.245993][T18574] should_fail_ex+0x3b0/0x4e0 [ 2611.250696][T18574] ? tomoyo_encode+0x26f/0x540 [ 2611.255501][T18574] should_failslab+0xac/0x100 [ 2611.260198][T18574] ? tomoyo_encode+0x26f/0x540 [ 2611.264985][T18574] __kmalloc_noprof+0xd8/0x400 [ 2611.269784][T18574] tomoyo_encode+0x26f/0x540 [ 2611.274397][T18574] tomoyo_realpath_from_path+0x59e/0x5e0 [ 2611.280037][T18574] tomoyo_path_number_perm+0x23a/0x880 [ 2611.285501][T18574] ? tomoyo_path_number_perm+0x208/0x880 [ 2611.291129][T18574] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2611.297114][T18574] ? __pfx_lock_acquire+0x10/0x10 [ 2611.302150][T18574] ? __fget_files+0x29/0x470 [ 2611.306734][T18574] ? __fget_files+0x3f3/0x470 [ 2611.311409][T18574] security_file_ioctl_compat+0xc6/0x2a0 [ 2611.317050][T18574] __se_compat_sys_ioctl+0xd6/0xc90 [ 2611.322242][T18574] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 2611.328047][T18574] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2611.334027][T18574] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2611.340355][T18574] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2611.346943][T18574] ? lockdep_hardirqs_on+0x99/0x150 [ 2611.352150][T18574] __do_fast_syscall_32+0xb4/0x110 [ 2611.357266][T18574] ? exc_page_fault+0x590/0x8c0 [ 2611.362121][T18574] do_fast_syscall_32+0x34/0x80 [ 2611.366963][T18574] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2611.373288][T18574] RIP: 0023:0xf748d579 [ 2611.377350][T18574] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2611.396947][T18574] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2611.405355][T18574] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040046602 [ 2611.413320][T18574] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2611.421281][T18574] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2611.429242][T18574] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2611.437209][T18574] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2611.445187][T18574] [ 2611.493811][T18574] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2611.575543][T30175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2611.588717][T30175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2611.612782][T30175] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 2611.651919][T30175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2611.750693][T30175] usb 4-1: config 0 descriptor?? [ 2612.132134][ T25] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2612.169168][T30175] belkin 0003:1020:0006.003A: report_id 0 is invalid [ 2612.181096][T30175] belkin 0003:1020:0006.003A: item 0 0 1 8 parsing failed [ 2612.195172][T30175] belkin 0003:1020:0006.003A: parse failed [ 2612.201757][T30175] belkin 0003:1020:0006.003A: probe with driver belkin failed with error -22 [ 2612.282097][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 2612.289218][ T25] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 2612.300096][ T25] usb 3-1: config 0 has no interface number 0 [ 2612.306555][ T25] usb 3-1: config 0 interface 183 has no altsetting 0 [ 2612.315731][ T25] usb 3-1: New USB device found, idVendor=079b, idProduct=000f, bcdDevice=57.ce [ 2612.326486][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2612.335614][ T25] usb 3-1: Product: syz [ 2612.339958][ T25] usb 3-1: Manufacturer: syz [ 2612.344401][T18588] IPv6: Can't replace route, no match found [ 2612.350881][ T25] usb 3-1: SerialNumber: syz [ 2612.374108][ T5229] usb 4-1: USB disconnect, device number 39 [ 2612.415064][ T25] usb 3-1: config 0 descriptor?? [ 2612.609321][T18593] binder_alloc: 18591: binder_alloc_buf, no vma [ 2612.638902][T18578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12558'. [ 2612.662930][T18578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2612.686192][T18578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2612.731801][ T5281] usb 3-1: USB disconnect, device number 79 [ 2613.220931][T18606] syz.3.12567 (18606): drop_caches: 2 [ 2613.254540][T18606] syz.3.12567 (18606): drop_caches: 2 [ 2613.497982][T18619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12571'. [ 2613.514862][T18619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12571'. [ 2613.754159][T18624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12573'. [ 2613.772036][ T25] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2613.815954][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2613.843828][ C1] ------------[ cut here ]------------ [ 2613.850104][ C1] WARNING: CPU: 1 PID: 18626 at net/mptcp/protocol.c:695 __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 2613.861148][ C1] Modules linked in: [ 2613.865114][ C1] CPU: 1 UID: 0 PID: 18626 Comm: syz.2.12574 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2613.876068][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2613.886200][ C1] RIP: 0010:__mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 2613.893330][ C1] Code: 0f b6 dc 31 ff 89 de e8 d5 db e7 f5 89 d8 48 81 c4 50 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 b8 d8 e7 f5 90 <0f> 0b 90 e9 47 ff ff ff e8 aa d8 e7 f5 90 0f 0b 90 e9 99 e0 ff ff [ 2613.913045][ C1] RSP: 0018:ffffc90000a17db8 EFLAGS: 00010246 [ 2613.919138][ C1] RAX: ffffffff8bacfdb8 RBX: 00000000000055f0 RCX: ffff88805e9fda00 [ 2613.927185][ C1] RDX: 0000000000000100 RSI: 00000000000081eb RDI: 00000000000055f0 [ 2613.935220][ C1] RBP: 1ffff1100efd8b0e R08: ffffffff8bacedb2 R09: 1ffff1100efd8b18 [ 2613.943301][ C1] R10: dffffc0000000000 R11: ffffed100efd8b19 R12: 0000000000000000 [ 2613.951303][ C1] R13: dffffc0000000000 R14: 00000000250d88c1 R15: 00000000000081eb [ 2613.959365][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0063) knlGS:00000000f5776b40 [ 2613.968383][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2613.975055][ C1] CR2: 0000000020287000 CR3: 0000000080632000 CR4: 00000000003526f0 [ 2613.983108][ C1] Call Trace: [ 2613.986410][ C1] [ 2613.989284][ C1] ? __warn+0x168/0x4e0 [ 2613.993540][ C1] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 2614.000000][ C1] ? report_bug+0x2b3/0x500 [ 2614.004598][ C1] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 2614.011066][ C1] ? handle_bug+0x60/0x90 [ 2614.015494][ C1] ? exc_invalid_op+0x1a/0x50 [ 2614.020313][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 2614.025447][ C1] ? __mptcp_move_skbs_from_subflow+0x10a2/0x21f0 [ 2614.031940][ C1] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 2614.036726][ T5281] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2614.038372][ C1] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 2614.052598][ C1] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 2614.059097][ C1] mptcp_data_ready+0x29c/0xa90 [ 2614.064045][ C1] ? __sk_mem_raise_allocated+0x2be/0x1140 [ 2614.069903][ C1] ? __pfx_mptcp_data_ready+0x10/0x10 [ 2614.075369][ C1] subflow_data_ready+0x34a/0x920 [ 2614.080443][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 2614.086093][ C1] ? tcp_grow_window+0x4a1/0xb00 [ 2614.091064][ C1] ? tcp_data_ready+0x15b/0x4e0 [ 2614.096023][ C1] tcp_data_queue+0x20fd/0x76c0 [ 2614.100937][ C1] ? tcp_urg+0x100/0x450 [ 2614.105287][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 2614.110532][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 2614.115250][ C1] ? ktime_get+0x9b/0xb0 [ 2614.119540][ C1] tcp_rcv_established+0xfba/0x2020 [ 2614.124856][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 2614.130524][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 2614.135654][ C1] tcp_v4_do_rcv+0x96d/0xc70 [ 2614.140299][ C1] tcp_v4_rcv+0x2dc0/0x37f0 [ 2614.144931][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 2614.149825][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 2614.154769][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 2614.159651][ C1] ip_protocol_deliver_rcu+0x22e/0x440 [ 2614.165219][ C1] ? ip_local_deliver_finish+0x230/0x5f0 [ 2614.170914][ C1] ip_local_deliver_finish+0x341/0x5f0 [ 2614.176471][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2614.182518][ C1] NF_HOOK+0x3a4/0x450 [ 2614.186625][ C1] ? NF_HOOK+0x9a/0x450 [ 2614.190817][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2614.195503][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2614.201520][ C1] ? ip_rcv_finish+0x406/0x560 [ 2614.206381][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2614.211523][ C1] NF_HOOK+0x3a4/0x450 [ 2614.212664][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 2614.215656][ C1] ? NF_HOOK+0x9a/0x450 [ 2614.224994][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2614.229616][ C1] ? ip_rcv_core+0x801/0xd10 [ 2614.230262][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2614.234288][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2614.234329][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 2614.234355][ C1] __netif_receive_skb+0x2bf/0x650 [ 2614.234387][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2614.234421][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 2614.234446][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2614.234478][ C1] ? __pfx_lock_release+0x10/0x10 [ 2614.234511][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 2614.234554][ C1] process_backlog+0x662/0x15b0 [ 2614.234588][ C1] ? process_backlog+0x33b/0x15b0 [ 2614.234626][ C1] ? __pfx_process_backlog+0x10/0x10 [ 2614.234654][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2614.234690][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2614.234727][ C1] __napi_poll+0xcb/0x490 [ 2614.234760][ C1] net_rx_action+0x89b/0x1240 [ 2614.234811][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2614.234841][ C1] ? sched_clock+0x4a/0x70 [ 2614.234885][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2614.234925][ C1] handle_softirqs+0x2c5/0x980 [ 2614.234960][ C1] ? do_softirq+0x11b/0x1e0 [ 2614.234988][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2614.235025][ C1] do_softirq+0x11b/0x1e0 [ 2614.235051][ C1] [ 2614.235061][ C1] [ 2614.235072][ C1] ? __pfx_do_softirq+0x10/0x10 [ 2614.235100][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 2614.235135][ C1] ? rcu_is_watching+0x15/0xb0 [ 2614.235163][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 2614.235190][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 2614.235211][ C1] ? __dev_queue_xmit+0x2da/0x3ed0 [ 2614.235253][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2614.235285][ C1] ? __dev_queue_xmit+0x2da/0x3ed0 [ 2614.235310][ C1] __dev_queue_xmit+0x171d/0x3ed0 [ 2614.235348][ C1] ? __dev_queue_xmit+0x2da/0x3ed0 [ 2614.235371][ C1] ? __lock_acquire+0x1384/0x2050 [ 2614.235406][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2614.235472][ C1] ? ip_finish_output2+0xa14/0x1390 [ 2614.235507][ C1] ? ip_finish_output2+0x45f/0x1390 [ 2614.235537][ C1] ip_finish_output2+0xd41/0x1390 [ 2614.235570][ C1] ? ip_finish_output2+0x45f/0x1390 [ 2614.235609][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 2614.235641][ C1] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 2614.235675][ C1] ? __ip_finish_output+0x349/0x400 [ 2614.235709][ C1] __ip_queue_xmit+0x118c/0x1b80 [ 2614.235737][ C1] ? __pfx_mptcp_write_options+0x10/0x10 [ 2614.235769][ C1] ? __ip_queue_xmit+0x5f/0x1b80 [ 2614.235795][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 2614.235832][ C1] __tcp_transmit_skb+0x2544/0x3b30 [ 2614.268709][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2614.272280][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 2614.272319][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2614.272353][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2614.272405][ C1] ? tcp_init_tso_segs+0xde/0x1a0 [ 2614.272438][ C1] tcp_write_xmit+0x641d/0x6bf0 [ 2614.272480][ C1] ? ipv4_mtu+0x2bc/0x3d0 [ 2614.290242][ T5281] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2614.293510][ C1] ? tcp_current_mss+0x29b/0x4d0 [ 2614.293549][ C1] ? __pfx_tcp_current_mss+0x10/0x10 [ 2614.293583][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 2614.293636][ C1] __tcp_push_pending_frames+0x9b/0x360 [ 2614.293665][ C1] ? ktime_get+0x9b/0xb0 [ 2614.293695][ C1] tcp_rcv_established+0x1026/0x2020 [ 2614.293735][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2614.293776][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 2614.293819][ C1] tcp_v4_do_rcv+0x96d/0xc70 [ 2614.293852][ C1] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 2614.293877][ C1] __release_sock+0x214/0x350 [ 2614.293916][ C1] release_sock+0x61/0x1f0 [ 2614.293950][ C1] __mptcp_push_pending+0x6b5/0x9f0 [ 2614.293982][ C1] ? __mptcp_push_pending+0x341/0x9f0 [ 2614.294014][ C1] ? __pfx___mptcp_push_pending+0x10/0x10 [ 2614.294043][ C1] ? __virt_addr_valid+0x183/0x530 [ 2614.294065][ C1] ? __virt_addr_valid+0x183/0x530 [ 2614.294088][ C1] ? __virt_addr_valid+0x45f/0x530 [ 2614.294114][ C1] ? __check_object_size+0x48e/0x900 [ 2614.294146][ C1] mptcp_sendmsg+0x10bb/0x1b10 [ 2614.294206][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 2614.294243][ C1] ? sock_rps_record_flow+0x1a/0x400 [ 2614.294275][ C1] ? inet_sendmsg+0x330/0x390 [ 2614.294307][ C1] __sock_sendmsg+0x1a6/0x270 [ 2614.294338][ C1] __sys_sendto+0x39b/0x4f0 [ 2614.311505][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2614.317001][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 2614.317032][ C1] ? do_futex+0x392/0x560 [ 2614.317085][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2614.317127][ C1] __ia32_sys_sendto+0xdd/0x100 [ 2614.317155][ C1] __do_fast_syscall_32+0xb4/0x110 [ 2614.317181][ C1] ? exc_page_fault+0x590/0x8c0 [ 2614.317216][ C1] do_fast_syscall_32+0x34/0x80 [ 2614.317246][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2614.317273][ C1] RIP: 0023:0xf748d579 [ 2614.317295][ C1] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2614.317317][ C1] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2614.317347][ C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 2614.317365][ C1] RDX: 00000000ffffff4c RSI: 0000000000000000 RDI: 0000000000000000 [ 2614.317383][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2614.317400][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2614.317417][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2614.317451][ C1] [ 2614.317484][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2614.317508][ C1] CPU: 1 UID: 0 PID: 18626 Comm: syz.2.12574 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 2614.317541][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2614.317555][ C1] Call Trace: [ 2614.317563][ C1] [ 2614.317574][ C1] dump_stack_lvl+0x241/0x360 [ 2614.317603][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2614.317629][ C1] ? __pfx__printk+0x10/0x10 [ 2614.317657][ C1] ? _printk+0xd5/0x120 [ 2614.317694][ C1] ? __init_begin+0x41000/0x41000 [ 2614.317720][ C1] ? vscnprintf+0x5d/0x90 [ 2614.317746][ C1] panic+0x349/0x880 [ 2614.317778][ C1] ? __warn+0x177/0x4e0 [ 2614.317802][ C1] ? __pfx_panic+0x10/0x10 [ 2614.317827][ C1] ? show_trace_log_lvl+0x3b2/0x410 [ 2614.317863][ C1] __warn+0x34b/0x4e0 [ 2614.317883][ C1] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 2614.317912][ C1] report_bug+0x2b3/0x500 [ 2614.317937][ C1] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 2614.317969][ C1] handle_bug+0x60/0x90 [ 2614.317988][ C1] exc_invalid_op+0x1a/0x50 [ 2614.318008][ C1] asm_exc_invalid_op+0x1a/0x20 [ 2614.318034][ C1] RIP: 0010:__mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 2614.318062][ C1] Code: 0f b6 dc 31 ff 89 de e8 d5 db e7 f5 89 d8 48 81 c4 50 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 b8 d8 e7 f5 90 <0f> 0b 90 e9 47 ff ff ff e8 aa d8 e7 f5 90 0f 0b 90 e9 99 e0 ff ff [ 2614.318080][ C1] RSP: 0018:ffffc90000a17db8 EFLAGS: 00010246 [ 2614.318099][ C1] RAX: ffffffff8bacfdb8 RBX: 00000000000055f0 RCX: ffff88805e9fda00 [ 2614.318115][ C1] RDX: 0000000000000100 RSI: 00000000000081eb RDI: 00000000000055f0 [ 2614.318129][ C1] RBP: 1ffff1100efd8b0e R08: ffffffff8bacedb2 R09: 1ffff1100efd8b18 [ 2614.318144][ C1] R10: dffffc0000000000 R11: ffffed100efd8b19 R12: 0000000000000000 [ 2614.318160][ C1] R13: dffffc0000000000 R14: 00000000250d88c1 R15: 00000000000081eb [ 2614.318181][ C1] ? __mptcp_move_skbs_from_subflow+0x10a2/0x21f0 [ 2614.318207][ C1] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 2614.318246][ C1] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 2614.318305][ C1] mptcp_data_ready+0x29c/0xa90 [ 2614.318326][ C1] ? __sk_mem_raise_allocated+0x2be/0x1140 [ 2614.318356][ C1] ? __pfx_mptcp_data_ready+0x10/0x10 [ 2614.318388][ C1] subflow_data_ready+0x34a/0x920 [ 2614.318414][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 2614.318435][ C1] ? tcp_grow_window+0x4a1/0xb00 [ 2614.318460][ C1] ? tcp_data_ready+0x15b/0x4e0 [ 2614.318491][ C1] tcp_data_queue+0x20fd/0x76c0 [ 2614.318533][ C1] ? tcp_urg+0x100/0x450 [ 2614.318562][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 2614.318591][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 2614.318621][ C1] ? ktime_get+0x9b/0xb0 [ 2614.318646][ C1] tcp_rcv_established+0xfba/0x2020 [ 2614.318689][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 2614.318714][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 2614.318748][ C1] tcp_v4_do_rcv+0x96d/0xc70 [ 2614.318777][ C1] tcp_v4_rcv+0x2dc0/0x37f0 [ 2614.318841][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 2614.318872][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 2614.318893][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 2614.318915][ C1] ip_protocol_deliver_rcu+0x22e/0x440 [ 2614.318941][ C1] ? ip_local_deliver_finish+0x230/0x5f0 [ 2614.318963][ C1] ip_local_deliver_finish+0x341/0x5f0 [ 2614.318991][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2614.319014][ C1] NF_HOOK+0x3a4/0x450 [ 2614.319039][ C1] ? NF_HOOK+0x9a/0x450 [ 2614.319059][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2614.319083][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2614.319111][ C1] ? ip_rcv_finish+0x406/0x560 [ 2614.319135][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2614.319157][ C1] NF_HOOK+0x3a4/0x450 [ 2614.319182][ C1] ? NF_HOOK+0x9a/0x450 [ 2614.319203][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2614.319227][ C1] ? ip_rcv_core+0x801/0xd10 [ 2614.319250][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2614.319279][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 2614.319302][ C1] __netif_receive_skb+0x2bf/0x650 [ 2614.319328][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2614.319356][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 2614.319378][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2614.319406][ C1] ? __pfx_lock_release+0x10/0x10 [ 2614.319434][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 2614.319472][ C1] process_backlog+0x662/0x15b0 [ 2614.319501][ C1] ? process_backlog+0x33b/0x15b0 [ 2614.319533][ C1] ? __pfx_process_backlog+0x10/0x10 [ 2614.319556][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2614.319586][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2614.319617][ C1] __napi_poll+0xcb/0x490 [ 2614.319644][ C1] net_rx_action+0x89b/0x1240 [ 2614.319687][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2614.319716][ C1] ? sched_clock+0x4a/0x70 [ 2614.319754][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2614.319791][ C1] handle_softirqs+0x2c5/0x980 [ 2614.319823][ C1] ? do_softirq+0x11b/0x1e0 [ 2614.319850][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2614.319884][ C1] do_softirq+0x11b/0x1e0 [ 2614.319907][ C1] [ 2614.319915][ C1] [ 2614.319924][ C1] ? __pfx_do_softirq+0x10/0x10 [ 2614.319950][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 2614.319981][ C1] ? rcu_is_watching+0x15/0xb0 [ 2614.320006][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 2614.320031][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 2614.320050][ C1] ? __dev_queue_xmit+0x2da/0x3ed0 [ 2614.320072][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2614.320103][ C1] ? __dev_queue_xmit+0x2da/0x3ed0 [ 2614.320126][ C1] __dev_queue_xmit+0x171d/0x3ed0 [ 2614.320161][ C1] ? __dev_queue_xmit+0x2da/0x3ed0 [ 2614.320180][ C1] ? __lock_acquire+0x1384/0x2050 [ 2614.320212][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2614.320301][ C1] ? ip_finish_output2+0xa14/0x1390 [ 2614.320331][ C1] ? ip_finish_output2+0x45f/0x1390 [ 2614.320357][ C1] ip_finish_output2+0xd41/0x1390 [ 2614.320387][ C1] ? ip_finish_output2+0x45f/0x1390 [ 2614.320421][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 2614.320449][ C1] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 2614.320477][ C1] ? __ip_finish_output+0x349/0x400 [ 2614.320509][ C1] __ip_queue_xmit+0x118c/0x1b80 [ 2614.320535][ C1] ? __pfx_mptcp_write_options+0x10/0x10 [ 2614.320563][ C1] ? __ip_queue_xmit+0x5f/0x1b80 [ 2614.320588][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 2614.320615][ C1] __tcp_transmit_skb+0x2544/0x3b30 [ 2614.320663][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 2614.320691][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2614.320720][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2614.320768][ C1] ? tcp_init_tso_segs+0xde/0x1a0 [ 2614.320797][ C1] tcp_write_xmit+0x641d/0x6bf0 [ 2614.320837][ C1] ? ipv4_mtu+0x2bc/0x3d0 [ 2614.320863][ C1] ? tcp_current_mss+0x29b/0x4d0 [ 2614.320889][ C1] ? __pfx_tcp_current_mss+0x10/0x10 [ 2614.320922][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 2614.320956][ C1] __tcp_push_pending_frames+0x9b/0x360 [ 2614.320980][ C1] ? ktime_get+0x9b/0xb0 [ 2614.321005][ C1] tcp_rcv_established+0x1026/0x2020 [ 2614.321039][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2614.321073][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 2614.321110][ C1] tcp_v4_do_rcv+0x96d/0xc70 [ 2614.321137][ C1] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 2614.321157][ C1] __release_sock+0x214/0x350 [ 2614.321189][ C1] release_sock+0x61/0x1f0 [ 2614.321222][ C1] __mptcp_push_pending+0x6b5/0x9f0 [ 2614.321248][ C1] ? __mptcp_push_pending+0x341/0x9f0 [ 2614.321275][ C1] ? __pfx___mptcp_push_pending+0x10/0x10 [ 2614.321302][ C1] ? __virt_addr_valid+0x183/0x530 [ 2614.321322][ C1] ? __virt_addr_valid+0x183/0x530 [ 2614.321341][ C1] ? __virt_addr_valid+0x45f/0x530 [ 2614.321364][ C1] ? __check_object_size+0x48e/0x900 [ 2614.321393][ C1] mptcp_sendmsg+0x10bb/0x1b10 [ 2614.321445][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 2614.321472][ C1] ? sock_rps_record_flow+0x1a/0x400 [ 2614.321502][ C1] ? inet_sendmsg+0x330/0x390 [ 2614.321532][ C1] __sock_sendmsg+0x1a6/0x270 [ 2614.321561][ C1] __sys_sendto+0x39b/0x4f0 [ 2614.321586][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 2614.321603][ C1] ? do_futex+0x392/0x560 [ 2614.321651][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2614.321687][ C1] __ia32_sys_sendto+0xdd/0x100 [ 2614.321710][ C1] __do_fast_syscall_32+0xb4/0x110 [ 2614.321731][ C1] ? exc_page_fault+0x590/0x8c0 [ 2614.321761][ C1] do_fast_syscall_32+0x34/0x80 [ 2614.321781][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2614.321802][ C1] RIP: 0023:0xf748d579 [ 2614.321819][ C1] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2614.321836][ C1] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2614.321857][ C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 2614.321876][ C1] RDX: 00000000ffffff4c RSI: 0000000000000000 RDI: 0000000000000000 [ 2614.321890][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2614.321902][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2614.321916][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2614.321943][ C1] [ 2614.322622][ C1] Kernel Offset: disabled