last executing test programs: 13.980694683s ago: executing program 4 (id=401): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x4, 0x0, 0x0, 0xfffd}, 0x53, [0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x200, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x176, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) syz_usb_connect(0x3, 0x71, &(0x7f0000000280)=ANY=[@ANYBLOB="120100034ca0b5203360084113cc0102030109025f000107a14075090480020601"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x101800, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r9 = dup(r8) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r1, 0x0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2}, 0x0, 0x10100}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x954}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r11 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_UNLOCK(r11, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) 10.466707431s ago: executing program 1 (id=408): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES64=r1, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) (async) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x81, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x201, 0x20, 0x0, 0x8, 0x5c}) (async) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 10.204817126s ago: executing program 1 (id=411): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @timestamp, @sack_perm, @window, @window={0x3, 0x2, 0xe}, @timestamp, @timestamp], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) write$sequencer(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 9.362501844s ago: executing program 4 (id=416): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0xf, &(0x7f0000000380)={0x202b, 0x0, 0x1}) rt_sigtimedwait(&(0x7f0000000080)={[0xffff]}, 0x0, 0x0, 0x8) r4 = fsopen(&(0x7f0000000180)='adfs\x00', 0x0) close(r4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f00000001c0)={{0x3, 0x0, 0x8, 0x0, 0xff6e}}) syz_pidfd_open(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b70500000000000061105100000000004400000000000000950000f3ff0000008576082d8f808a63562f3c33930967a8ea999b20ccb3b9a663d05f86e2aee41d3bd9157a067eb3d06f112a2ba747cb990d3491000ac1898b4e2af602b92ff628b0593b79a5dfe6032616fcbdd1fbf63fd78a33eedeb990159a3a4d7861f5ca9730fbdb11561d65c27444be55df9baf1d75f6350cb352f1034c348a58c7bb8280e761c76b3d225a084c8db3c6eb92e80b93ca473ad6d1ef27dba8b92446136b65c02d680fcb854f69a3e53bfdf7a9ca2cb5af6ec888431bc7c71649a508d5e94a02454cc3"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xc0, &(0x7f0000000400)=""/192, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x1, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setrlimit(0xf, &(0x7f00000003c0)={0x1, 0x3}) prlimit64(0x0, 0x7, 0x0, 0x0) gettid() openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sync() socket$nl_generic(0x10, 0x3, 0x10) 9.184289652s ago: executing program 3 (id=417): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000ed0300fbdbdf0077308cf6b1a24edac4149c7359be69dc83d1c9964b8113dcd1220108139c0bf900000000000000f5880000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@delchain={0x1470, 0x65, 0x400, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0x10}, {0xffff, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xff}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0x1430, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xe1b95fd442e7dd47, 0xc}}, @TCA_BASIC_ACT={0x120c, 0x3, [@m_vlan={0x50, 0x14, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0x1c, 0x6, "5c94eccfc029e5207e0004ef5a7c6d0f46dfbe2515b8c8bd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x1068, 0x19, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x7, 0x10000000, 0xff, 0x8}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3000000, 0x3, 0x5, 0x80000000, 0x6}, 0x6c}}]}, {0x1004, 0x6, "8f053e4f00bed5f910c28f1ca51ad0aa47775748e84f0669879e72aaff052e2bd5f29a097af0921ff16786d4a1477dc801eedcd3188d0a854e9bfc795f4fbc96a2f2446a61205bce0f4c823bfc56e60aa772d4c8eb44548aa187e0b50444714dfbc206c6216c2761e076651647654180af2a617f608acd089d5151c5f0fa106a53d8b3b0d2bebb397bb8b965702c1f99a029e388668509436e761c1a148dd4c812067af34fd74372ae8550f55457311d21c93659eed5fa90c46b86c43ad58f3812eb7c551c6c2103a78c74f272a22dfee0afe3d47a99e2fde35b84d310b7c36a598accedb81b71e446af3f10bd5509ce5972aed62a98317631b4919a4114e65736f4d6778e68793c458c45232464ee81febdec91d1fdf833a575eda2a88e938204dbbbdf27d78fe2140634de1703c27607e8bad68f52eaeccf4e740733d413f3ce08c7a1bbe8ef64dbecd7c2aa9f97c967c8e24637dddddc8d1d736fc5b5d86f00a85a99288cf52cab6edc6fbb7cd872efbb24e4ce6ddb55cc54e656f025fa2485003f94e7412a2e8bf80665ddcc71ce44e6517c05c79fa43bc455383c71edc8427517b8a7cc617ac6551898137224ee353d824e08d4ba0a8a96e9e09e0c02912b761b29c7e79a460e5e9a5cdd976a7c08d31462769a6d25f20108e202b982eb23f667ab912b054a0af1a532686e98a5c2824ddef9928748a37eef58c88c5e2ab85c935edad430ce400dd7515d477cb320dbfd9ae7296571958e14302f269fac55e4525cfc9e545d05d637caa0fe4baaf5332afacd3a53a8d6b6b0ad16c35c2d1141078e34da085803cee393657c05bd0376355e00ba186e0f6ff6f8bac0c026cea518e3040cd6ee9e1c3a1889956020e758f142e82ef57dca1d18db74e9a7ad6489c59fd5618dcdbc5328889d6deefb1261d35821f2c678c9877166b4996214c08851b39d6096aef1be00528f237c943a163d03fcfb570301a70a1ddc85bf20b13b04a4ba30369b80efac3045df8cb1bc8cf67bb394ef379860248a57ee01bd54bb83e72031d4e8deac67780e21522314067fcd319b6e73c1260cbac03c36aaac3d759db53c0536cef37344affaaa80f4eeb68134d465f43ac6d11226ed808e9e9d311907082d0cfd0a8086d25c24805c39b8cdf6de9b38b98aa948826468a535c120e3163e1e9a5816c76e031f92b59fc01731276550390d956924a84bd33cb1d9edc3c67af65efa55931b5da941bfe4ba37e9e0fd407b638cbee2a71c1765fca337191978110a83fffb30df3760ae961f6055f2bf4d5d1c315b5c5cb161bd04d9038f401157a265a04a1c064c63c9dda3cf88907b3c24cc642dc50767937c3d94af668ff1270271dd16c599b5f7aedcd520d312968503f066459d56400311b2fb21ddbdddc27a309fc60256c9bc46a4a63888afc0d510ad33e4a4eafbea95982cbe279a931535c9dabe202ce42b6ce82e8b7d7270478fcdb7d31150b28cd5f70f187d69ce1b7353d423afa9916a8861b3ffa7b4742e200e06ed833f55484776c3e44af8fb29a52a5fbc12b61b0a2b28839f1a769e87c218486f90fb624a4a12321ef10557349147e4e6c66c24fef318af74d4ec2ceb8cec0e85c241fc5597a336173488345b46529b575fe0f2c70d98279d05536d21e8c034ac12f33b6471f09ead942ffa18512bffc5c0d8626e64333a380349587f66125b9905dcc773326ff686d3956669da40067db75b68887ad52fd69894856ff21f8ab98baf41625c37a174f5359f64425619eee20b443c1573855342d084568c02a1067b9bb8dd7ccef659d6e9456fc7ceae8574c7669024abd630bb22f19616dcd4f79ba5eb05dda7edd246aea80cc77e79e819f0dd644862ed8bcc115806b4d4775e7a9daa4ebe44e59b20d8885c0ccc757efba592795d4ef69116e5676feacc36197c4eedc6b6699d2055577bd556b58b8c1f8aa5e33e39c8b453c66a4b6e5719f70db4ecb39d9149c87bdd1939e8966c95581f657cb2d05b040d13236d14d0fce3d9c44998fdceb90ab44372077afe87a3b03185f1043108cfd4fa803426e694246e0cac9e203e20fdff7d40b67abca577f6ae1e8657eda7df67d0d6e2cd67ffe924d473cd841e0c48f011a68ff2f11bbb98c30feff97b97f767b583fc8074b2754b936c0140ef761493532726bb2c4dbe0cc7ff82bb209e7fea5225693b2cfc738ddc5ae2cdb95b3cc0ad4af308f4f39990509d9ae1b3c8c0e5dc34abfc2ec3163e59f4ef164483cb49aad4d336539b7ab54359f0f3657d6e4ae0ae980a40b01968f78f27128a0d1e2ba9fb9c38c48b5745617a59aee5f41b92c59e0aa20d899dddd1177ada4d52451d21e2de9f427ac8a09e1e75155190f07def0c3947ee83efd5ad68adf375b5a6fc083cc997738d0e9af4ce75c0806ed38152cb341fc26e179e137bd0033650fad52c2e117b0bcd5b90930aa0b6cfb2f5ea2c69cca3894168b9f204b5298d04db689c2b1c3468be5fca179c8066acbb119c5e338e4f279e2daed42781e097292c2661cdd428803a724ead02d0357b287a5eecd38d3917c6529ad43a31f2b1a7711450bb00aa42a9b3cef664d5b8fd90f4d1451c3d1293ad7e49d1b3f9d18328bdf584407602151da62182960a629b97c69bcd0060d6d85916156e21d6bfeabf5357904f7667b8c625e1ce88b4d3e9bac8401c4012790cbb26fd316757019cb83bc93bd166891bf5a38eba355fdcc8d91e57762796b317a1f5654bedddb9faecb0c9064c1806bd6d7f956727c5fbea06cc8b64782795ce8d0a5d88ba84df5ea1c42afc2722eaab4f8da244f6ba0acceba3c040789c689402db107d46a83100982dd304655263101e99871e6fb686859112ef8c0940ed304c972414b0994f1fb76f550e65ad8cd7ca4f5f34c62cb2e867fe26a695f3bbbca4a87ffa4b220e567927f89ea34e49de8ebd00b95a911e99910e42ea328967aa2bce8841c3e9f4c545800577d40f2e2e4e464159c1ad74697a8f727981c1ebb58b683a8e84d7f9d9b02b1ac2f4bc8d239666de15f1dcf75d69a9a67cf98ba2632c54013cb1566d2e257a768b0f49066ca64c779acb480bc95c9d18fde6ce944c3233fd82aa4ca3609322c92c4a5ee94f915738be3be14337693791789e5759b7d7d677248e394f090831768700b0ec2025d26cd7e16969d3793489c907c92f74482c5fb9bed0085c1209c5a31f17dfe35ca2792ef25cf9c1f0151ddf3ead41e700f447efcc622b3c2b8e1b2c55a0b47a3ee78cf28a711abdf338c22143856ffbef6962db05ca6203e23d2a54b810ff8818353b899a02f1c14c6454616b46d78b4647af046f841f2375f9ab6e0767f1260af6e624c22995afd6e1df39052436cd5bfd1a69daa1449e96a1f0404daa412528d9153c5fb95222530e18ed502dd35476313a1946e38d9ecf7efa627da4cd4b17fb4a65126a53fd23f7bf92c822dcb3ebf01e2b939dcc338752215874e9e4b1f354b6938c0ce73b262ff0c98c20364366a7c55994fbcb028bc0c7e1ee060f1fdcb8a5ffd862220ad2484eb69979bda8472204d32fe305210f436f5b2f90e42517d6e795199b98e17b697fed39d32e81d8c1ee670cac57e672ba1b69f8446aae67955b6fb5c84c3208b7f29353eb6e41849b6f477769cfbc821d34e9432d31bf8891ad59950f964ea7a37da2f121a5016328b38232cb0289ef1f68b9b4cf56f625ce661ebaf50ab1356585b4aff4973ebe2e0a97be11484c1f2cf044e692fb011dbb31e1958c8aab9cbc4886340867e5cea7d4615e6e0fcb4a4cadbb3b9a0c611176ea95aa657d1fad12692debe54ef91aa03d0d4f062f987e296f94a2f7502bf92d49e0d8080747c2f9cba31a609e6f192de23a6a86e6986740f2e5851a44cca944bcb6368b5934ab313dc16d906a3c74ddf457554691488448d45d009fe664f4bfbccf1c3aad62be2741552ac3dd1759145991e1bcfb2c044495c94b2323bfd811802a484fe3c01d0332bac151fc4285deb9eaa805d154647e3ff343400c9414f07350b0e13d48f00be73bb373a179ebe74b6c2a9d6ca8576c469dbad10401a4dd57a5de2b8df39e0cffa767f5b656ea6cbe3281e631363f5091db55636fd6254a209408d9cf3c84e14e33ca568dea6b7f9636abf8906ce9c611009733917f1b09306f644f2f5b2f9eae1902132552a9c17b591aca88f31958817094dd0b58f001c4ff37e4b5067a5e6275b8d9c5ac28149623811ca69de9b339194d5b85c6492f6a41f4bca83aa77f2e4212596ebafde45d029ac32a28b2a693bb653adc8137be4306c1a844b44044db9d80dd52d15413ea506ce86d34b5e080b53f0e75d06b0fa8e59ec9f8215bf50e22ea826789669d6b142513516e81e5e521c1d171d8fa2ade914ccb0fa39db234d86d01e853b618c4a334b6034c8c5f6716cb9899b850d37c6407c27ee812d65a8071e852ddc3924463523512ffadba76f8ecd1a41eeb45db73fbcd1839ee32e3e5c6c3a5f472949298fed795515ab9cb9260fb15167c18d92b464146370f676903213c34f5a8ce8c623b66d91f7b985762e958094a2010e0364f247bbd589f0d30652c1bc986fa9883108031d5326ba24807b3dae2675af52cb00bc8425a31396d22b441536e1e90c9af0388f286553b6add1fbb7f31e879086717e3d83a1bd37ea0b434f72174cc920cf041c3ddafd87d94d1084cfe9df3c2587330302e81849a15de7d8ffe4e4a136c846160624dda943d2f4e10cd2254a1a07e47fda0bfa652b22b0de5b5ee8134d8dd1493eb711035775365dc1273e7e0dde219c273cdb591daa8aff2cda9655e2102ef832ca8a0a5a394a82aef43bc8cb336f63003e0753749e81329fda5308479cc217db72d262725d358bae5e6e543793b20865d41f47e06027501fec78503c8b2ea9ea3550423d4263dd9d2ff746a8ec85a782c7a3fbe57a0aff4b7de42611c805abb0eea7a6294d4034014a78fa05cdfbcb5b7819e6d9e959e4662fe91a0254078b1096b32d0a0b3345c5d9f8df418df5fb891346e3d7d03716441ad4193d2ef0afc30bc8b675bab0d24f8e6740377c2f6bc2140249156597e306095c075dfff1119e3689ad1f59ba5c7be688f3ed014be08df9190ededabea4cf52b25ef64cba7faa4337a0c8d8ead45a4f9f542dd1c9154d8c70e9012ca24baf0fdc454c94b17cfa3f382f4a04f791b02768f032719244a783bca8b280b1d0fc85a58e2a005a47715e9023608bbc00e54db367c50886fbf2fec0593280d260fd2a98919fa7c87ace5c457c0169fbbc6d47a2c8cc5479afc74fdd6760c2604016c1763c6a0a1c80832a2722c90fbbe9a3a93523e2e35ba49eef1cf412639c975d5a63f8e78f230166e8214ff68b4ab1b5f3b29d7e26c778718736e540cd5a8dc2be902c85bf2feda50e9975896874e927421e390b74ead639b3eecf1947775941f916a8483a8982927c3882c45313ce68b56c27181a8426b4b1cd6bc8636ef13e54e323f425807455d1bfb6d0ca82b1c346e338d0748a3e11577b21ac0c286cfba708b02331edf6f04b144a3621a172357e3bf1dc7f97b4550278e98d31dde77694d89fb88887a879852cf08ba771ceb321dfbf860e8034436bc3bb46116a176fdd60f0f5a641c5b303f217de68eea3982ba8967fc133efb799a563169c592887039d94d8fb5cac7a515a37a0ab451f44428a417fc96d1cce9a8dabc14a425bb3f6a17cb0a50b272761419f5147ef4ae5bbaeab9c998788d5763011a01ddb5a9e2e43ef28acd0a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x3}}}}, @m_ct={0x150, 0x12, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "e7b1f95a4bd67ded7770ba934cb27243"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "5978707d0d6cc97602067d1244d49da1"}, @TCA_CT_PARMS={0x18, 0x1, {0xffff8001, 0x5, 0x4, 0x5000000, 0x2}}, @TCA_CT_PARMS={0x18, 0x1, {0x3, 0x2, 0x4, 0x3, 0x1}}]}, {0xcd, 0x6, "430e5b456ff318ec2becb9f4223fd034480b48da36470e53b213e3e2effc8ff681e2e194ffff3d0067b300430270a0cb8528c31a4e9c0b441ca10de7b5ebdfe378d5b3799676e668547a0fe25f7ca742023b8dc657e5d4e43551455e52af2318babca48a240f70043925ca7f19b394a36a804b1a923f66f4325abe9dcdc7bc39ebb6e0b598c4f5b136cc5cf8ad1c57c6ba8f0d8d307b3daab99556ccd2bfc599dc6dfed7d90ef3d954298173be45d2f94c1996bf35b43b9e3d1d7c61821124f000be10828eac07ba55"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0x2}}, @TCA_BASIC_EMATCHES={0x210, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xcee, 0x1, 0x6}, {0x9, 0x2, 0x0, 0x1, 0x8, 0x59f791fb4754e93c}}}, @TCF_EM_U32={0x1c, 0x4, 0x0, 0x0, {{0x3, 0x3, 0x3}, {0xbdf2, 0xff, 0x219, 0x2}}}, @TCF_EM_CONTAINER={0x64, 0x3, 0x0, 0x0, {{0x2c82, 0x0, 0x6}, "bc7490433656638a0327a745a784d1de1071201fb0900002e93ed20cc6126c44ae3d69471a3407433222ae30d4d9c7779117e1bb17007ea65e445f9055894d44fb94725f8945cd54a747d1f12a001c357bc4823a11ac19"}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x4}, {0x8, 0x3, 0x2, "3bd3a2"}}}]}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x44, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x6}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xbb}, {0x0, 0x0, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x81, 0x1, 0x3}, {0x7ff3, 0x4, 0xfff0, 0x0, 0x4, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x9}, {0x5, 0x6, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7, 0x7, 0x3}, {{0x3, 0x0, 0x0, 0x1}, {0x3}}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x77d9, 0x2, 0x80}, {0x80, 0x2, 0x1, "06ce"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x80, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x87}, {0x6, 0x5, 0x2}}}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="abd4ad", @TCF_META_TYPE_VAR="80f35eec68574c6eb4"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x5, 0x1}, {0x8, 0x4}}}, @TCA_EM_META_RVALUE={0x2e, 0x3, [@TCF_META_TYPE_VAR="c6aec1044d31af1a", @TCF_META_TYPE_VAR="12b4508392d20607", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="b0e54342cd746cba49d2", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="d1d236e20111bfa2"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x8, 0x2}, {0x1, 0x1, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x8, 0x1}, {0x56, 0x1, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0x9}, {0x2000000, 0x8b, 0x401, 0x4, 0x9, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x98}}]}]}}]}, 0x1470}}, 0x0) r5 = memfd_create(&(0x7f0000000380)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\x97d\x00\x00\x00\x00\x00\x00\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea\x00\x00\x00\x00\x00\x00\x00\x00\x03\xc23l\x9c\xda\xed\x98\x0fK=X\xfdY`l\xe7\x00K\xc2K\xb34\xd8\x1e\xa7\nEJ\x9b\x1bb\x80|`\xfb\x16\xcf5F\xac\xae=r\x8c)\x97\x9e7\xd7\x01\x0e\a\x17F\xb8\x1eD\r-\x11o\xa1X\x90\x8f^\xf0S\xb2\xce\x06\xa4\x8e\xc6\x9a:\xd9\x02\x90\x8db\xee\xc7}\xb0W\xea\xcbm\x17.%\"\xec\x9d\x90\xb7[W\xce\xb9^\xa3|\xd4\xeb\xc1\xcd@\x15n/\xbf\x86\xea\xe9O\xaf\xee\x88W\x0f00~\xf2\xe9\xcdm\xb9e|O.\xc8\x85\x1a\xe9\xcf\xe5\x1e\x86\xaa\xed|\x15i\xeb4pv\"\fd\xa4\xf4\xc0\xac\x8eO\xb8\xa8\x8e\x9c\x0f\xf9\x80\x90\xdf3[\xee\r\x88\x9f', 0x3) r6 = fcntl$dupfd(r5, 0x0, r5) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x8000000) sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000002a00)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000029c0)={&(0x7f0000002500)={0x4bc, 0x1, 0x5, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [{{0x254, 0x1, {{0x9064baa79c83c85c}, 0x5, 0x10, 0x0, 0x3, 0x8, 'syz1\x00', "b20b72775a339a25e24c15cd645e5738041e4e98eab79c9575c31d0d210fc10f", "342166209827d987824a8c418341c0825a93fee6aafa51567d14d87dab3357fd", [{0x0, 0x8, {0x3, 0x10}}, {0x9, 0x323a, {0x3, 0x1}}, {0x3, 0x185, {0x1, 0xe45}}, {0x5, 0xa, {0x3, 0x2e07}}, {0x3, 0xfffd, {0x3, 0x8}}, {0xf29, 0x5, {0x0, 0x7}}, {0x1, 0x3, {0x3, 0xbeb9}}, {0x7f, 0x1, {0x2, 0x4}}, {0x2, 0x5, {0x0, 0x2}}, {0x0, 0x400, {0x3, 0x4}}, {0x8, 0x1000, {0x0, 0x7}}, {0x4, 0x7, {0x3, 0x2}}, {0xfff8, 0xffc0, {0x0, 0x7}}, {0x0, 0xffff, {0x3, 0xeb7}}, {0x6, 0x6, {0x2, 0x100}}, {0x3, 0x8, {0x2, 0xd}}, {0x7, 0x4, {0x0, 0xbe}}, {0x8, 0x1, {0x0, 0x6}}, {0xecb, 0x2, {0x1, 0x8}}, {0x7b, 0x4dd2, {0x3, 0x8f2}}, {0x9, 0x1, {0x1, 0x9}}, {0x81, 0x8, {0x0, 0x23}}, {0x4, 0xf221, {0x0, 0xb4e}}, {0x1800, 0x80, {0x3, 0x8001}}, {0x6, 0x7, {0x3, 0x69c}}, {0x5, 0x2, {0x3, 0xfffffff7}}, {0x10, 0x5, {0x0, 0x3}}, {0x5, 0xff, {0x2, 0xffff}}, {0x1be6, 0x7, {0x0, 0xff}}, {0x6, 0x2, {0x2, 0x4131}}, {0x8, 0x91, {0x2, 0x2}}, {0x1, 0xc, {0x1, 0x7}}, {0xfff5, 0xf47f, {0x2, 0x6}}, {0x2, 0x81, {0x0, 0x800}}, {0x0, 0x4, {0x0, 0x800}}, {0x9, 0x20, {0x1, 0x11}}, {0x2, 0x8, {0x1, 0x7}}, {0x1, 0xf, {0x2, 0xad}}, {0x7ff, 0x8, {0x0, 0xf}}, {0x0, 0x7, {0x3, 0xd14e}}]}}}, {{0x254, 0x1, {{0x2, 0xee}, 0x1, 0x8, 0x3, 0x0, 0x24, 'syz1\x00', "93f75abe7c4d9191c568d5f1c97210fee5ef1b593da2e6fe4745b2a91b597ff2", "3086f95beac225fac463ea70e564bb652a932a132532a5b2f831422e9d28748f", [{0x8, 0x7647, {0x1, 0x93a1}}, {0x7a, 0x2, {0x2, 0x3}}, {0x4c, 0xff16, {0x1, 0x3c7}}, {0x2fa, 0x780, {0x1, 0x4}}, {0x4, 0x0, {0x2, 0x5}}, {0x2, 0xff86, {0x1, 0x80}}, {0x73, 0xf7}, {0x0, 0x6, {0x1, 0x101}}, {0x1, 0x6, {0x0, 0xfffffff5}}, {0x5, 0x0, {0x0, 0x3}}, {0xfff1, 0x81, {0x1, 0x8001}}, {0x9, 0x3, {0x2, 0x4}}, {0x3, 0x6, {0x1, 0x67}}, {0xe, 0x200, {0x1, 0x10000}}, {0x8001, 0x3, {0x2, 0x2}}, {0xf, 0x6, {0x1, 0x80000001}}, {0x5, 0x4, {0x2, 0x9}}, {0x6f23, 0x9e6, {0x1, 0x1}}, {0xc, 0x4, {0x2, 0x1}}, {0x1, 0x0, {0x2, 0xc}}, {0x600, 0xfd, {0x2, 0x4}}, {0x55b, 0x5, {0x0, 0xffff223f}}, {0x3, 0x3ff, {0x3, 0x200}}, {0x5, 0x81, {0x0, 0x9}}, {0x1, 0x7fff, {0x2, 0xf}}, {0x80, 0xfff8}, {0x4, 0xfff6, {0x1, 0x3}}, {0x3, 0x4, {0x2, 0x200}}, {0x1, 0x1, {0x0, 0x5}}, {0x6, 0xd4, {0x0, 0x80000000}}, {0xb, 0x5, {0x1, 0x81}}, {0x8000, 0x7, {0x1, 0x8}}, {0x3, 0x3, {0x3, 0xffffffff}}, {0x9, 0x6, {0x3, 0xffffffff}}, {0x7, 0x5, {0x3, 0x80000}}, {0x7, 0x3ff, {0x3, 0x80}}, {0x6, 0xfffc, {0x2, 0x4}}, {0x6c1, 0x11a, {0x3, 0x3}}, {0x90, 0x3, {0x2, 0x8}}, {0xed6, 0xfff5, {0x0, 0x8c49}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x10}, 0x800) fallocate(r6, 0x3, 0x81ff, 0x1000000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) bind$can_j1939(r1, &(0x7f0000002480)={0x1d, r4, 0x0, {}, 0xfc}, 0x18) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002440)={0xaa, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={0x0, 0x0, 0x37, 0x0, 0x9, 0x0, 0x0, @void, @value}, 0x28) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r7, 0x80047456, &(0x7f00000019c0)) sendmsg$rds(r3, &(0x7f0000002400)={&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001b80)=[{&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000300)=""/140, 0x8c}, {&(0x7f00000018c0)=""/180, 0xb4}, {&(0x7f0000001980)=""/90, 0x5a}, {&(0x7f0000001a00)=""/190, 0xbe}, {&(0x7f0000001ac0)=""/141, 0x8d}], 0x6, &(0x7f0000002180)=[@rdma_dest={0x18, 0x114, 0x2, {0x8, 0x4}}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x8}, {&(0x7f0000001c00)=""/33, 0x21}, &(0x7f0000001dc0)=[{&(0x7f0000001c40)=""/142, 0x8e}, {&(0x7f0000001d00)=""/151, 0x97}], 0x2, 0x20, 0xfffffffffffffffe}}, @mask_fadd={0x58, 0x114, 0x8, {{0x400}, &(0x7f0000001e00)=0x3, &(0x7f0000001e40)=0xfff, 0x4, 0x6, 0x0, 0x5, 0x24, 0x956f}}, @cswp={0x58, 0x114, 0x7, {{0xffff2fd4, 0x4}, &(0x7f0000001e80)=0x78ff, &(0x7f0000001ec0)=0xba, 0x3ff, 0xabab, 0x632, 0x4, 0x40, 0x5}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x2}, &(0x7f0000001f00)=0x90a, &(0x7f0000001f40)=0x5, 0x6, 0x7, 0x5, 0x5, 0x21, 0x6}}, @cswp={0x58, 0x114, 0x7, {{0x2, 0x1}, &(0x7f0000001f80), &(0x7f0000001fc0)=0x76, 0x456, 0x8, 0x1, 0x9, 0x0, 0x1}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x1ff}, &(0x7f0000002000)=0x7, &(0x7f0000002040)=0xc7e, 0x100000000, 0x2, 0xffffffffffffffff, 0x1e, 0x0, 0x417}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002080)=""/173, 0xad}, &(0x7f0000002140), 0x2}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x260, 0x20040810}, 0x44000) 9.116661439s ago: executing program 1 (id=418): r0 = socket(0x29, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="78000000030801020000000000000000000000020600024000000000540004800800014046aea47d08000b2704d60c0608000740000000000800094000000000080008400000a9c80800044000000008080005400000000808000840fffffe01080001400000000c080002400000000305000300ff"], 0x78}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000000206a563000000000003000000000000000000000ee4b8d3f64c9cab5432e87b840000090002007376997d000000000c00478008001240ff61726b0000000005000500020000d77c12cd707441da00edd58a4af6211003542c3a3b7e756287503cc019cf21d97079f90b545c3f7fc70dbc1a6c75e3e6997b3e7701dc3cba6320eca1d3d23386f69e04d99e000000000000000000000000000000000c5108e6b2f3a2205acbdae53a"], 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="99742bbd7000fbdbdf25150000004c00018038e004001400010002003e20ac14141d0000000000000000200002000a004e000000000000000000040000000d0001007564703a73797a3200000000a8227f853f6546fd2b190af9d57f076b8507bef3f02ab3ff5c0eb790841d303ff3c459d4b527280d66a2d70211839a171f00"/139], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) socket$inet(0xa, 0x801, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000180), 0x4) close(r7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) r8 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r9 = shmat(r8, &(0x7f0000ffc000/0x2000)=nil, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x100, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xb, 0xf}, {0x9, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40045}, 0xc000) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r1, @ANYBLOB='\x00'/20, @ANYRES32=r11, @ANYRES64=r7, @ANYRESDEC=r9, @ANYRES64=r9, @ANYRESHEX=r4], 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x4) 8.633489379s ago: executing program 1 (id=419): socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000001c0)=0x8, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000001040500000000000000000007000008060006400000000005000aff0200000008000440000007ff0a00"], 0x64}, 0x1, 0x0, 0x0, 0xc051}, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x2000, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xfffffffffffffff7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x244041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYRES8=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001500010300000000000000000b000000548d5decf18735e5f9ed007b2fbaac7adaf38e9b69ce65c105741e1f6391155302764b9533214ed336df2110462ce873116f73a5a44702df416271bd70232965612e584684768bc84dae5e498c8feb610ed83410f716b4fc97eac60f24ebd635f3507d581acf3d62ac691fefed25b8866a66ac3630d1b6965d3668d2639e0be12951cd1a97026139339d40a40eea410be36938afa270663f1a8d155b6c36b6ea2fb1b5629d1156d4ce9939010ec016f724204489a35b02fd416d90c183581ff339f330d961"], 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x20) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x404c840) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x6, 0x3, 0x20000, 0x1}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) 8.616564196s ago: executing program 3 (id=420): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) io_setup(0x58, &(0x7f0000000300)) io_setup(0xffff, &(0x7f00000002c0)) 7.425936295s ago: executing program 2 (id=424): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa750, &(0x7f0000000b40)) setpgid(0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) statx(r2, 0x0, 0x100, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18", @ANYRESHEX=r1, @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x2, 0x0, {0x7, 0x0, 0x0, r10, 0x3, 0x7, 0x6}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}}, 0xc000) sendmsg$tipc(r6, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000400)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r7, r6) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r11 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r11, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000002fc0)={{0x0, 0x3177, 0x4, 0x8, 0x314939f3, 0x2, 0xfffffffffffffffd, 0x0, 0x5, 0x1, 0xfffffffd, 0x1ac4600, 0x1, 0x3, 0x40}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000003fc0)={{r13, 0x90e6, 0xfff, 0x4, 0x1, 0x7, 0x100, 0x0, 0xda, 0x9, 0x10000, 0x40, 0x1658, 0x7, 0x65}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r14}, 0x8) 7.027898257s ago: executing program 2 (id=426): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) close_range(r0, r0, 0x0) 6.628715896s ago: executing program 2 (id=427): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000987000/0x2000)=nil, 0x4000000000000000, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0x1, 0x66, 0x0, 0x46, 0x5c}) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="020b0700fc670000e4a17c45c8d260c98fe9f76a13a68e6e45bb95852cf62f8f9da737a8f8fb337ac369281e4435d1d5d5de6e3e7b6e55dcc245bc8cc0b63071912346081a6b2e63aa74cdab133c3067e8d946e10155549a6b54e3d5fe7c37ae545414bd95b2b33c58ce1232e1d68e505874ef95f42639d800231c73995b642d31e14b5effcf24694c4f08b6332390484af39fe71b21f199dc5320fd9eb6f973c0aa70eb43e5b8f9de3200e0727fc4f830fdeed1806dd3fd0f027c2c59480313f56429fdd9b171153b22e1380900fc403f178b43aee6e01b71a01c046ea94d4a9a542cabda6409167c0f", 0xea}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = getpid() fcntl$setown(r2, 0x8, r3) sendto$inet6(r2, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) unshare(0x62040200) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000440)={0x60, 0x1, &(0x7f0000398000/0x1000)=nil, &(0x7f0000942000/0x1000)=nil, 0x0, &(0x7f00000003c0)=[{0x9, 0x80, 0x3}, {0x0, 0x6, 0x1}, {0x7, 0x1e82a80000000000, 0x1}, {0x10, 0x1, 0x120000000000000}], 0x4, 0x3, 0x20, 0x47, 0x60, 0x51}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xa0080, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, '\x00'}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) io_setup(0x1, &(0x7f00000004c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000240), 0x4) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x9) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040), 0x0) 6.472678087s ago: executing program 0 (id=428): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @timestamp, @sack_perm, @window, @window={0x3, 0x2, 0xe}, @timestamp, @timestamp], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) write$sequencer(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 5.515396214s ago: executing program 0 (id=429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0xac, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x8, 0x2, 0x6, 0x3, 0x6, 0x6, 0x1, 0xa, 0x0, 0xe, 0xf, 0xa, 0x2, 0x6, 0xd, 0x2], 0x1, [0x8, 0x800, 0xd09, 0x5, 0xff62, 0x2, 0x1, 0x2, 0x3, 0x6, 0x2, 0x3, 0x4, 0x4, 0xfff, 0xfff8], [0x1, 0x41e, 0x2, 0x7, 0x1, 0x9, 0x2, 0x0, 0x9921, 0x1, 0x1ff, 0x4, 0x7, 0xeb11, 0x4, 0x401]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}, {0x4}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x3}, 0x20004004) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) getsockname$inet6(r3, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}]}, 0x34}}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) 5.275852634s ago: executing program 0 (id=430): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x4000, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) 5.227587917s ago: executing program 4 (id=431): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsmount(r1, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 5.108711719s ago: executing program 2 (id=432): mknod$loop(&(0x7f0000000040)='./file0\x00', 0xfff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x58fe7ab67a988db6}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0xc5, 0x3}, 0x18, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x68000, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8) bind$inet(r4, &(0x7f0000000700)={0x2, 0x0, @multicast2}, 0x10) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000001c0)={0x14, &(0x7f0000000240)={0x40, 0xc, 0xf6, {0xf6, 0x24, "36e574d4022462d08029390e14f089bdb6f149840f83c13adcdb642be01d944f740e33994b7f60e6cfd7e47c09f522bfa43a891bf3cec0ba2b062fd804093e6bcb83c4b398b67003fd5576595fc043e7b1028c487a7f01cddbbe8308f0371e958b3090de59e4498b6516745ea6f39db0b217a60044507460f181af08dc3f20fe5142d6cd672ac3467083be926264a2c3745c610a9684bc1b8cb607e237512d0d57f5344e2310698d246f204d633f0fd74e05052ddc2cacc0b76dfb8f039c82c98b60e7b7468f35ddabc0df261099faaf332621fe0a00b0304eb081c5f2378b023653e44c3f0007c3d4f56d734f2db8a774da0736"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x1c, &(0x7f0000000540)={0x40, 0xd686ec5085a4b499, 0x86, "5cc11769313001777015dccfba3d5833469af7867feb05173b21a64bd5bb119e9d7cb3a68dd76f271be08f776c4bcc20e106480bdd23f2bdf3005a43c6997557be65383468fe8f2731a65f65094018a87d7ef12a8c0166a4af7f096360937225123b0926e343aafb745d79db4e3328c623d12aac3b66c98dd1af7487c701138eaa50619eb01c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}}) pidfd_send_signal(r1, 0x12, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x41, 0x107, 0x0, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xd, 0x1, 0x0, 0x1, [@generic="169fc4f5f2e0e303ef"]}]}, 0x28}}, 0x4010) 5.031177141s ago: executing program 0 (id=433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x2}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x2000014) 4.849828515s ago: executing program 1 (id=434): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x404c040) r1 = socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$rds(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f0000000d40), 0x0, 0x24004084}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x184}) ioctl$VT_OPENQRY(r4, 0x5600, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000340)="9323c4aad168db32d156afe439ac4590978bb38689037253ce5720a9ab1077b38b91f11c1d8f344f26cafe7ea1b9621513bfc224b0f17103e0300882e20c9eef18ce273bbc9c1919b7d400d41b05b43646460121c7fe7a75786a762fe0abb1f8a774ee4a09d127", 0x67}, {&(0x7f00000003c0)="0a332f41d5573f88cf47d79f2551b5626073f45bea3ecd076a34d0ae8652143c2cc36218406637284c9c067b1795a083da53401f0d72bd422cdce9f5461b8e3464a4425c7a31f529529b14375be6e44d73b85e8221213aa757d440fd42548fff40936d705f7c31f074d790ad2117e2d0a326713ccf56ecf2e96b63837f734d2778e0f532272e089ff9c13caa0161fa237fc9ef84230eab15d5a95f8b1fad69ca6af76e2732a559cb8c5583cc371ee3f43fc0522200daae", 0xb7}, {&(0x7f00000001c0)}], 0x3, 0x7, 0x7) pread64(r6, 0x0, 0x0, 0x8) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x2, 0x38, {0x8, 0xffffffff}, 0xd0, 0x9}}) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000240)=""/87, 0x57}, {&(0x7f0000002b00)=""/4106, 0x100a}, {&(0x7f0000000040)=""/11, 0xb}], 0x4}, 0xa}], 0x4, 0x0, 0x0) 4.809719551s ago: executing program 3 (id=435): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000240)='\x00', 0xfffffffffffffce0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 4.700570534s ago: executing program 0 (id=436): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa750, &(0x7f0000000b40)) setpgid(0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) statx(r2, 0x0, 0x100, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18", @ANYRESHEX=r1, @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x2, 0x0, {0x7, 0x0, 0x0, r10, 0x3, 0x7, 0x6}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}}, 0xc000) sendmsg$tipc(r6, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000400)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r7, r6) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r11 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r11, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000002fc0)={{0x0, 0x3177, 0x4, 0x8, 0x314939f3, 0x2, 0xfffffffffffffffd, 0x0, 0x5, 0x1, 0xfffffffd, 0x1ac4600, 0x1, 0x3, 0x40}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000003fc0)={{r13, 0x90e6, 0xfff, 0x4, 0x1, 0x7, 0x100, 0x0, 0xda, 0x9, 0x10000, 0x40, 0x1658, 0x7, 0x65}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r14}, 0x8) 4.591256841s ago: executing program 4 (id=437): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) close_range(r0, r0, 0x0) 4.332806674s ago: executing program 3 (id=438): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x345}}]}]}]}, 0x48}, 0x1, 0x0, 0x300, 0x800}, 0x20004000) 4.254919426s ago: executing program 4 (id=439): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0xffffff96}}, 0x1006) syz_usb_control_io$printer(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000440)={0x40, 0x7, 0x62, {0x62, 0x2, "b4751e9521c83b2d16389b1c8d57cfd459154dd324541ec9f20ae3478f11d6e311220994936996818d5af6e85be4bcae9307e6d717ecf96ffa57ba24a1f9b118567c4bfae0fc3373cc90ead46e5d79cf3e6d52b39310887a52f78a0104731311"}}, &(0x7f0000000580)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "17fb2327a0c888d3018fa73aa7a240d15aa3a8a7d8bb0008b13de3423b35a41d7f8af68ecdf6d3134b9cbb46968c319d108288020e3e4f0f30eb359078201ec180a6ef2c3ce9c8a3d8ac4685989b6a0d4c63c2e95dc4ca1b80a9322fd19f8b97066af12a4fdad4c53879cff17a208e24dcd728d541636be421a8bbaa57816250075381659cecbc00ab272b30fa4dc47c2853ce9e721df957d8eb3402688824df3183bc0dbd9b2121a6f37c265137187c5cfd30a4e057f8b286429920d5738ba83db827580449c7815dbe09f01015"}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000680)={0x20, 0x18, 0x8a, "3f29dab6c686ef4c0462f353123c3f49ee66deccf6934e7d837f23d96019c4ec1196cc5745c981b12ee9ef771c378df7a0a53e5f8f352c761df0509a3c5b1933f5807cedbb65ebb07f8686fbb7a90abdb6d62c49de2e7994e20ec023923edbb3015da8d4c5c2198597979e279305b16fc0127726f4bb278b9162e6bec3e82c540907e4632fd111d65b25"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x24}, &(0x7f0000000780)={0x20, 0x0, 0xa8, {0xa6, "38fee54011ce9b8c0cc73f07f20a85e7e87d636c568a0819b25c234397d2d7ca09980c28e81bdacb9b97ffb63bda2bdd2e0d7742696ca7355208e12771ae66ba8fc169516d84e5c98d2a86b0a2ac3045e320d5b9f96d7927cd2a799dfbd78a02872da8b9821762a5641be75bbcfbf69ff3220f060655c1481482624fe5f01ba7e85fc0ed20f4be0dfbff9432c164b61e9cb1302fed1e025e69f0ac639374bc12307f88f21a9f"}}, &(0x7f0000000840)={0x20, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x0, 0x1}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="40ce01"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x4e22, 0x0, @mcast2, 0x1e8000}, 0x1c) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x0, 0xc, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x11, 0x44, {0x44, 0x22, "cb7e9c3b87a1439cc2fae63b35f576c91e5c95f9ebca4c7b5e3ed51963088e113ee339cdad330cfef3e696d9002f63e537a33cefa9449096d3d0ef6e025295689b99"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000280)={0x40, 0x16, 0xc7, "93ef8bab677241585f0491367029b496f8ec1b321ae38ea1672b8dc9147afac8b0d1b38818a44d46d54b7a94900dd7dead3fb6a15880d294f0133911fa09ec7ff22cbf2a8f1646161147942509020e948fe944f580848b82fe06d5f9a7e4a235a9d4fa4453a8c3824cc7c5c4c473993b6dfa9ee9beafa6d43fc01b69e97694c3e824117bd855cb9a91a7b1e216325d11a719f78735e24c6e5adbc1f38f7f56646dac50273df3af9ba14a3a3a13875c3ebbf07deb90807232e980bc483f2aa9acd2264830c69069"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.072608078s ago: executing program 3 (id=440): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="00001500"}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc0106442, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) r3 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc0106442, &(0x7f0000000080)) 3.833605993s ago: executing program 3 (id=441): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0xf, &(0x7f0000000380)={0x202b, 0x0, 0x1}) rt_sigtimedwait(&(0x7f0000000080)={[0xffff]}, 0x0, 0x0, 0x8) r4 = fsopen(&(0x7f0000000180)='adfs\x00', 0x0) close(r4) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) sched_setattr(r5, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b70500000000000061105100000000004400000000000000950000f3ff0000008576082d8f808a63562f3c33930967a8ea999b20ccb3b9a663d05f86e2aee41d3bd9157a067eb3d06f112a2ba747cb990d3491000ac1898b4e2af602b92ff628b0593b79a5dfe6032616fcbdd1fbf63fd78a33eedeb990159a3a4d7861f5ca9730fbdb11561d65c27444be55df9baf1d75f6350cb352f1034c348a58c7bb8280e761c76b3d225a084c8db3c6eb92e80b93ca473ad6d1ef27dba8b92446136b65c02d680fcb854f69a3e53bfdf7a9ca2cb5af6ec888431bc7c71649a508d5e94a02454cc3"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xc0, &(0x7f0000000400)=""/192, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x1, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setrlimit(0xf, &(0x7f00000003c0)={0x1, 0x3}) prlimit64(r5, 0x7, 0x0, 0x0) gettid() openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sync() socket$nl_generic(0x10, 0x3, 0x10) 3.781424595s ago: executing program 0 (id=442): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x0, 0xf, 0x6, "aed2e1a3120f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000640)={0x40, 0xd, 0x3, "9de1cd"}, 0x0, 0x0, 0x0, 0x0}) keyctl$clear(0x3, 0xfffffffffffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f00000000c0), 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x8, 0x1, 0x2, "3a7107ca5de21f000000f373000000e0ff00", 0x56595559}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x20, 0x572, 0xcb01, 0x663d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5b, 0xe8, 0xeb}}]}}]}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0417"], 0x528}}, 0xc000) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![&\\^\'$)\x00', 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES64=r8, @ANYBLOB="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"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (fail_nth: 4) 1.912819013s ago: executing program 2 (id=443): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 792.537995ms ago: executing program 2 (id=444): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100), 0x24, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000326bd7000fddbdf251000000008002b007c840000050037000100000008002c000400000008002b009f1e00000a000900aaaaaaaaaaaa000005002e0000000000050037e005000000"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4040004) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1b01040000000905830300b3"], 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)={0x28, 0x4, 0x0, {0x400000000001, 0x400000000000000}}, 0x28) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private=0x1000, 0x0, 0x0, 0x0, 0xfffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}, {0x0, 0xffffffffffffff6e}, 0xfffffffd, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x10680, 0x0) 409.575122ms ago: executing program 1 (id=445): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f0600000090d2e1a3120f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000640)={0x40, 0xd, 0x3, "9de1cd"}, 0x0, 0x0, 0x0, 0x0}) keyctl$clear(0x3, 0xfffffffffffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f00000000c0), 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x0, 0x40000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x802, 0xfffffffffffffffe, 0x40, 0x2}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000000c0)={0xa, 0x1, 0x2, "3a7107ca5de21f000000f373000000e0ff00", 0x56595559}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ff000020720572892aca13453697e33d660000000109021200023700000037f00490220951cec4dcecfe9594d5a2"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0417"], 0x528}}, 0xc000) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![&\\^\'$)\x00', 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r10, @ANYRES8=r5, @ANYRES8, @ANYBLOB="32aaf2df02567b013e16d2e2090bfc2942ef07e2bae76f1b61ad877f", @ANYRES64=r10], 0x3c}}, 0x2004c894) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES64=r7, @ANYRESOCT, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x8880}, 0x4000) 0s ago: executing program 4 (id=446): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffc}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0x36, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xac}, 0x1, 0x7a00, 0x0, 0x4010041}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, r5, 0x0, 0x7, &(0x7f0000000080)='taprio\x00'}, 0x30) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000180)=0x80000001, 0x4) kernel console output (not intermixed with test programs): erval 1, probability 0, space 0, times 0 [ 133.723251][ T6335] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 133.748260][ T30] audit: type=1326 audit(1743976414.556:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f76f418d169 code=0x7ffc0000 [ 133.770741][ T6341] CPU: 0 UID: 0 PID: 6341 Comm: syz.1.112 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 133.770771][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.770788][ T6341] Call Trace: [ 133.770796][ T6341] [ 133.770806][ T6341] dump_stack_lvl+0x241/0x360 [ 133.770859][ T6341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.770889][ T6341] ? __pfx__printk+0x10/0x10 [ 133.770923][ T6341] ? __pfx___might_resched+0x10/0x10 [ 133.770955][ T6341] should_fail_ex+0x424/0x570 [ 133.770984][ T6341] should_failslab+0xac/0x100 [ 133.771015][ T6341] __kmalloc_noprof+0xdf/0x4d0 [ 133.771043][ T6341] ? ovs_vport_set_upcall_portids+0xfa/0x2e0 [ 133.771077][ T6341] ovs_vport_set_upcall_portids+0xfa/0x2e0 [ 133.771111][ T6341] ovs_vport_alloc+0x261/0x300 [ 133.771142][ T6341] internal_dev_create+0x2b/0x450 [ 133.771176][ T6341] ovs_vport_add+0x13f/0x420 [ 133.771206][ T6341] new_vport+0x1a/0x190 [ 133.771232][ T6341] ovs_dp_cmd_new+0x81c/0xce0 [ 133.771274][ T6341] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 133.771307][ T6341] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 133.771341][ T6341] genl_rcv_msg+0xb38/0xf00 [ 133.771374][ T6341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 133.771393][ T6341] ? __dev_queue_xmit+0x1780/0x3f60 [ 133.771416][ T6341] ? kasan_save_track+0x3f/0x80 [ 133.771438][ T6341] ? __kasan_slab_alloc+0x66/0x80 [ 133.771470][ T6341] ? do_syscall_64+0xf3/0x230 [ 133.771515][ T6341] ? __lock_acquire+0xad5/0xd80 [ 133.771538][ T6341] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 133.771579][ T6341] netlink_rcv_skb+0x208/0x480 [ 133.771610][ T6341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 133.771634][ T6341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.771693][ T6341] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.771730][ T6341] genl_rcv+0x28/0x40 [ 133.771754][ T6341] netlink_unicast+0x7f8/0x9a0 [ 133.771790][ T6341] ? __pfx_netlink_unicast+0x10/0x10 [ 133.771819][ T6341] ? skb_put+0x114/0x1f0 [ 133.771845][ T6341] netlink_sendmsg+0x8c3/0xcd0 [ 133.771889][ T6341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.771924][ T6341] ? aa_sock_msg_perm+0x91/0x160 [ 133.771960][ T6341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.771987][ T6341] __sock_sendmsg+0x221/0x270 [ 133.772019][ T6341] ____sys_sendmsg+0x523/0x860 [ 133.772052][ T6341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.772072][ T6341] ? __fget_files+0x2a/0x420 [ 133.772095][ T6341] ? __fget_files+0x2a/0x420 [ 133.772124][ T6341] __sys_sendmsg+0x271/0x360 [ 133.772153][ T6341] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.772236][ T6341] ? do_syscall_64+0xb6/0x230 [ 133.772264][ T6341] do_syscall_64+0xf3/0x230 [ 133.772290][ T6341] ? clear_bhb_loop+0x45/0xa0 [ 133.772315][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.772335][ T6341] RIP: 0033:0x7fb8da18d169 [ 133.772359][ T6341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.772375][ T6341] RSP: 002b:00007fb8daf0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.772406][ T6341] RAX: ffffffffffffffda RBX: 00007fb8da3a5fa0 RCX: 00007fb8da18d169 [ 133.772421][ T6341] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 133.772435][ T6341] RBP: 00007fb8daf0b090 R08: 0000000000000000 R09: 0000000000000000 [ 133.772448][ T6341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.772460][ T6341] R13: 0000000000000000 R14: 00007fb8da3a5fa0 R15: 00007fb8da4cfa28 [ 133.772493][ T6341] [ 134.110417][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.140492][ T30] audit: type=1326 audit(1743976414.556:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f418d169 code=0x7ffc0000 [ 134.165640][ T30] audit: type=1326 audit(1743976414.556:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f418d169 code=0x7ffc0000 [ 134.383831][ T30] audit: type=1326 audit(1743976414.556:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76f418bad0 code=0x7ffc0000 [ 134.406254][ T30] audit: type=1326 audit(1743976414.556:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f418d169 code=0x7ffc0000 [ 134.428891][ T30] audit: type=1326 audit(1743976414.556:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f76f418d169 code=0x7ffc0000 [ 134.450886][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.458793][ T30] audit: type=1326 audit(1743976414.556:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f418d169 code=0x7ffc0000 [ 134.480872][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.487917][ T30] audit: type=1326 audit(1743976414.556:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76f418d169 code=0x7ffc0000 [ 134.803745][ T6353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.847559][ T6353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.885766][ T5897] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.185739][ T5896] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 135.202666][ T6354] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 135.228170][ T6354] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 135.288256][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 135.308024][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.319186][ T5897] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 135.337757][ T5896] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 135.340829][ T5897] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 135.347775][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.358000][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.376497][ T5897] usb 4-1: Product: syz [ 135.380675][ T5897] usb 4-1: Manufacturer: syz [ 135.394405][ T5897] usb 4-1: SerialNumber: syz [ 135.395356][ T5896] usb 5-1: config 0 descriptor?? [ 135.418137][ T5896] gspca_main: spca508-2.14.0 probing 8086:0110 [ 135.457531][ T5897] usb 4-1: config 0 descriptor?? [ 135.618627][ T5896] gspca_spca508: reg_read err -71 [ 135.624180][ T5896] gspca_spca508: reg_read err -71 [ 135.629749][ T5896] gspca_spca508: reg_read err -71 [ 135.650016][ T5896] gspca_spca508: reg_read err -71 [ 135.666262][ T5896] gspca_spca508: reg_read err -71 [ 135.684052][ T5896] gspca_spca508: reg write: error -71 [ 135.696009][ T5896] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 135.725908][ T5896] usb 5-1: USB disconnect, device number 10 [ 135.755456][ T6349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.818806][ T6349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.873917][ T6349] netlink: 'syz.3.115': attribute type 10 has an invalid length. [ 135.921184][ T6349] bridge0: port 3(team0) entered disabled state [ 135.933821][ T6349] team0: left allmulticast mode [ 135.934422][ T6364] netlink: 'syz.3.115': attribute type 10 has an invalid length. [ 135.948728][ T6364] netlink: 2 bytes leftover after parsing attributes in process `syz.3.115'. [ 135.948741][ T6349] team_slave_0: left allmulticast mode [ 135.948763][ T6349] team_slave_1: left allmulticast mode [ 135.988922][ T6349] team0: left promiscuous mode [ 136.011996][ T6349] team_slave_0: left promiscuous mode [ 136.019928][ T6349] team_slave_1: left promiscuous mode [ 136.028826][ T6349] bridge0: port 3(team0) entered disabled state [ 136.073225][ T6349] batman_adv: batadv0: Adding interface: team0 [ 136.084544][ T6349] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.109686][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.118641][ T6349] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 136.230910][ T6364] team0: entered promiscuous mode [ 136.240307][ T6364] team_slave_0: entered promiscuous mode [ 136.358177][ T6364] team_slave_1: entered promiscuous mode [ 136.379538][ T6364] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.445561][ T6364] batman_adv: batadv0: Interface activated: team0 [ 136.478053][ T6364] batman_adv: batadv0: Interface deactivated: team0 [ 136.485948][ T6364] batman_adv: batadv0: Removing interface: team0 [ 136.497519][ T6364] bridge0: port 3(team0) entered blocking state [ 136.568052][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 136.596871][ T6386] FAULT_INJECTION: forcing a failure. [ 136.596871][ T6386] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 136.619397][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 136.632772][ T6386] CPU: 0 UID: 0 PID: 6386 Comm: syz.0.124 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 136.632803][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.632817][ T6386] Call Trace: [ 136.632825][ T6386] [ 136.632834][ T6386] dump_stack_lvl+0x241/0x360 [ 136.632874][ T6386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.632906][ T6386] ? __pfx__printk+0x10/0x10 [ 136.632952][ T6386] should_fail_ex+0x424/0x570 [ 136.632982][ T6386] _copy_from_user+0x2d/0xb0 [ 136.633015][ T6386] kstrtouint_from_user+0xce/0x1a0 [ 136.633045][ T6386] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 136.633076][ T6386] ? __lock_acquire+0xad5/0xd80 [ 136.633112][ T6386] proc_fail_nth_write+0xac/0x2d0 [ 136.633136][ T6386] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 136.633167][ T6386] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 136.633197][ T6386] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 136.633222][ T6386] vfs_write+0x2bc/0xd10 [ 136.633254][ T6386] ? fdget_pos+0x247/0x310 [ 136.633278][ T6386] ? __pfx_vfs_write+0x10/0x10 [ 136.633307][ T6386] ? __fget_files+0x2a/0x420 [ 136.633329][ T6386] ? __fget_files+0x39d/0x420 [ 136.633347][ T6386] ? __fget_files+0x2a/0x420 [ 136.633377][ T6386] ksys_write+0x19d/0x2d0 [ 136.633405][ T6386] ? __pfx_ksys_write+0x10/0x10 [ 136.633437][ T6386] ? do_syscall_64+0xb6/0x230 [ 136.633468][ T6386] do_syscall_64+0xf3/0x230 [ 136.633495][ T6386] ? clear_bhb_loop+0x45/0xa0 [ 136.633522][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.633544][ T6386] RIP: 0033:0x7f56c4d8bc1f [ 136.633564][ T6386] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 136.633581][ T6386] RSP: 002b:00007f56c5c52030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 136.633604][ T6386] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f56c4d8bc1f [ 136.633626][ T6386] RDX: 0000000000000001 RSI: 00007f56c5c520a0 RDI: 0000000000000003 [ 136.633639][ T6386] RBP: 00007f56c5c52090 R08: 0000000000000000 R09: 0000000000000000 [ 136.633653][ T6386] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 136.633665][ T6386] R13: 0000000000000001 R14: 00007f56c4fa6080 R15: 00007f56c50cfa28 [ 136.633699][ T6386] [ 136.879140][ T6364] bridge0: port 3(team0) entered disabled state [ 136.980065][ T6364] team0: entered allmulticast mode [ 137.127046][ T6364] team_slave_0: entered allmulticast mode [ 137.132879][ T6364] team_slave_1: entered allmulticast mode [ 137.175770][ T5896] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 137.217881][ T6364] bridge0: port 3(team0) entered blocking state [ 137.224262][ T6364] bridge0: port 3(team0) entered forwarding state [ 137.337831][ T10] usb 4-1: USB disconnect, device number 7 [ 137.372644][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 137.391221][ T5896] usb 3-1: config 6 has an invalid interface number: 66 but max is 0 [ 137.402081][ T5896] usb 3-1: config 6 has no interface number 0 [ 137.414168][ T5896] usb 3-1: config 6 interface 66 has no altsetting 0 [ 137.441229][ T5896] usb 3-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice=d6.95 [ 137.470080][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.503264][ T5896] usb 3-1: Product: syz [ 137.511180][ T5896] usb 3-1: Manufacturer: syz [ 137.531488][ T5896] usb 3-1: SerialNumber: syz [ 137.980211][ T6385] fuse: Bad value for 'fd' [ 138.020828][ T6397] veth2: entered promiscuous mode [ 138.091236][ T5896] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.195122][ T6396] batadv0: entered promiscuous mode [ 138.200860][ T6396] macsec1: entered allmulticast mode [ 138.211778][ T6396] batadv0: entered allmulticast mode [ 138.257123][ T5896] snd-usb-audio 3-1:6.66: probe with driver snd-usb-audio failed with error -2 [ 138.328575][ T6396] batadv0: left allmulticast mode [ 138.338108][ T6396] batadv0: left promiscuous mode [ 138.436803][ T5896] usb 3-1: USB disconnect, device number 6 [ 138.617251][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.66/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.465777][ T1215] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.802719][ T1215] usb 3-1: config 0 has no interfaces? [ 139.856857][ T6419] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 140.003341][ T1215] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 140.030727][ T1215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.049324][ T1215] usb 3-1: Product: syz [ 140.054866][ T1215] usb 3-1: Manufacturer: syz [ 140.059715][ T1215] usb 3-1: SerialNumber: syz [ 140.175315][ T1215] usb 3-1: config 0 descriptor?? [ 142.209615][ T6443] netlink: 32 bytes leftover after parsing attributes in process `syz.3.142'. [ 142.228956][ T6443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.142'. [ 142.675233][ T977] usb 3-1: USB disconnect, device number 7 [ 142.677889][ T6452] : entered promiscuous mode [ 142.826138][ T6456] capability: warning: `syz.2.147' uses 32-bit capabilities (legacy support in use) [ 142.911657][ T6463] FAULT_INJECTION: forcing a failure. [ 142.911657][ T6463] name failslab, interval 1, probability 0, space 0, times 0 [ 142.955152][ T6463] CPU: 1 UID: 0 PID: 6463 Comm: syz.4.149 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 142.955189][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.955198][ T6463] Call Trace: [ 142.955205][ T6463] [ 142.955212][ T6463] dump_stack_lvl+0x241/0x360 [ 142.955241][ T6463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.955267][ T6463] ? __pfx__printk+0x10/0x10 [ 142.955291][ T6463] ? __pfx___might_resched+0x10/0x10 [ 142.955314][ T6463] should_fail_ex+0x424/0x570 [ 142.955338][ T6463] should_failslab+0xac/0x100 [ 142.955367][ T6463] __kmalloc_noprof+0xdf/0x4d0 [ 142.955395][ T6463] ? sock_kmalloc+0xd7/0x160 [ 142.955415][ T6463] ? do_raw_spin_unlock+0x13c/0x8b0 [ 142.955447][ T6463] sock_kmalloc+0xd7/0x160 [ 142.955470][ T6463] hash_recvmsg+0x1bd/0x7f0 [ 142.955495][ T6463] ? hash_check_key+0x15c/0x1d0 [ 142.955523][ T6463] ? __pfx_hash_recvmsg_nokey+0x10/0x10 [ 142.955552][ T6463] sock_recvmsg_nosec+0x18e/0x1d0 [ 142.955583][ T6463] ____sys_recvmsg+0x3d4/0x480 [ 142.955614][ T6463] ? __pfx_____sys_recvmsg+0x10/0x10 [ 142.955661][ T6463] do_recvmmsg+0x428/0xab0 [ 142.955697][ T6463] ? __pfx_do_recvmmsg+0x10/0x10 [ 142.955737][ T6463] ? rcu_read_lock_any_held+0xbb/0x160 [ 142.955765][ T6463] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 142.955796][ T6463] ? vfs_write+0xb29/0xd10 [ 142.955830][ T6463] ? ksys_write+0x24e/0x2d0 [ 142.955857][ T6463] ? __mutex_unlock_slowpath+0x229/0x800 [ 142.955894][ T6463] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.955918][ T6463] ? __fget_files+0x2a/0x420 [ 142.955953][ T6463] __x64_sys_recvmmsg+0x1ab/0x260 [ 142.955979][ T6463] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 142.956009][ T6463] ? do_syscall_64+0xb6/0x230 [ 142.956035][ T6463] do_syscall_64+0xf3/0x230 [ 142.956060][ T6463] ? clear_bhb_loop+0x45/0xa0 [ 142.956084][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.956102][ T6463] RIP: 0033:0x7f76f418d169 [ 142.956121][ T6463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.956137][ T6463] RSP: 002b:00007f76f1fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 142.956158][ T6463] RAX: ffffffffffffffda RBX: 00007f76f43a6080 RCX: 00007f76f418d169 [ 142.956181][ T6463] RDX: 000000000000049f RSI: 0000200000006100 RDI: 0000000000000006 [ 142.956193][ T6463] RBP: 00007f76f1fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 142.956205][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.956217][ T6463] R13: 0000000000000000 R14: 00007f76f43a6080 R15: 00007f76f44cfa28 [ 142.956247][ T6463] [ 143.213293][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.686694][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.694387][ T5897] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 143.838914][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 143.838940][ T30] audit: type=1400 audit(1743976424.826:22): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6468 comm="syz.4.151" [ 143.888170][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.908142][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 143.918070][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.933947][ T5897] usb 4-1: config 0 has no interfaces? [ 143.953850][ T10] usb 2-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 143.961942][ T6470] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.964291][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.973285][ T6470] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.990519][ T6470] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.999323][ T6470] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.013412][ T5897] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 144.025026][ T10] usb 2-1: config 0 descriptor?? [ 144.033931][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.043543][ T5897] usb 4-1: Product: syz [ 144.056319][ T5897] usb 4-1: Manufacturer: syz [ 144.064036][ T5897] usb 4-1: SerialNumber: syz [ 144.079791][ T5897] usb 4-1: config 0 descriptor?? [ 144.095143][ T6470] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.104260][ T6470] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.113388][ T6470] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.122386][ T6470] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.515704][ T5896] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 144.606440][ T6485] net_ratelimit: 1051 callbacks suppressed [ 144.606461][ T6485] IPv4: Oversized IP packet from 127.202.26.0 [ 144.670115][ T6458] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.705767][ T10] usb 2-1: string descriptor 0 read error: -71 [ 144.828872][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.838858][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.855689][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 144.861092][ T10] uclogic 0003:256C:006E.0003: failed retrieving string descriptor #200: -71 [ 144.872940][ T5896] usb 3-1: config 5 has an invalid interface number: 191 but max is 0 [ 144.878924][ T10] uclogic 0003:256C:006E.0003: failed retrieving pen parameters: -71 [ 144.913174][ T5896] usb 3-1: config 5 has no interface number 0 [ 144.914951][ T10] uclogic 0003:256C:006E.0003: failed probing pen v2 parameters: -71 [ 144.923549][ T977] IPVS: starting estimator thread 0... [ 144.932177][ T10] uclogic 0003:256C:006E.0003: failed probing parameters: -71 [ 144.940958][ T10] uclogic 0003:256C:006E.0003: probe with driver uclogic failed with error -71 [ 144.950346][ T5896] usb 3-1: config 5 interface 191 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 144.973591][ T5896] usb 3-1: config 5 interface 191 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 144.985460][ T5896] usb 3-1: config 5 interface 191 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 1023 [ 145.124120][ T10] usb 2-1: USB disconnect, device number 9 [ 145.126437][ T6490] IPVS: using max 27 ests per chain, 64800 per kthread [ 145.145089][ T5896] usb 3-1: config 5 interface 191 altsetting 6 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 145.216959][ T5896] usb 3-1: config 5 interface 191 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 145.308523][ T6498] : entered promiscuous mode [ 145.345981][ T977] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 145.402812][ T5896] usb 3-1: config 5 interface 191 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 145.483734][ T5896] usb 3-1: config 5 interface 191 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 145.540413][ T5896] usb 3-1: config 5 interface 191 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 145.567785][ T977] usb 5-1: config 0 has no interfaces? [ 145.594856][ T5896] usb 3-1: config 5 interface 191 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 145.609478][ T977] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 145.631717][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.648442][ T5896] usb 3-1: config 5 interface 191 has no altsetting 0 [ 145.663623][ T977] usb 5-1: Product: syz [ 145.677601][ T5896] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff43, bcdDevice=8f.5a [ 145.687003][ T977] usb 5-1: Manufacturer: syz [ 145.712510][ T977] usb 5-1: SerialNumber: syz [ 145.717504][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.762496][ T977] usb 5-1: config 0 descriptor?? [ 145.775488][ T5896] usb 3-1: Product: ఉ [ 145.790028][ T5896] usb 3-1: Manufacturer: 㠁 [ 145.803324][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 145.876884][ T6478] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 146.014670][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 146.035584][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 146.065152][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.085113][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 146.113621][ T10] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 146.122997][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 146.143040][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.172499][ T10] usb 2-1: config 0 descriptor?? [ 146.271592][ T5896] option 3-1:5.191: GSM modem (1-port) converter detected [ 146.356736][ T5896] usb 3-1: USB disconnect, device number 8 [ 146.411402][ T5896] option 3-1:5.191: device disconnected [ 146.651424][ T1215] usb 4-1: USB disconnect, device number 8 [ 146.672264][ T10] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 146.756820][ T10] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 146.766013][ T10] samsung 0003:0419:0001.0004: report_id 56523 is invalid [ 146.773308][ T10] samsung 0003:0419:0001.0004: item 0 2 1 8 parsing failed [ 146.783278][ T10] samsung 0003:0419:0001.0004: parse failed [ 146.789852][ T10] samsung 0003:0419:0001.0004: probe with driver samsung failed with error -22 [ 146.803741][ T6524] FAULT_INJECTION: forcing a failure. [ 146.803741][ T6524] name failslab, interval 1, probability 0, space 0, times 0 [ 146.842381][ T6502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.860282][ T6524] CPU: 0 UID: 0 PID: 6524 Comm: syz.3.165 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 146.860314][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.860327][ T6524] Call Trace: [ 146.860334][ T6524] [ 146.860343][ T6524] dump_stack_lvl+0x241/0x360 [ 146.860381][ T6524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.860412][ T6524] ? __pfx__printk+0x10/0x10 [ 146.860440][ T6524] ? __lock_acquire+0xad5/0xd80 [ 146.860474][ T6524] should_fail_ex+0x424/0x570 [ 146.860501][ T6524] should_failslab+0xac/0x100 [ 146.860533][ T6524] kmem_cache_alloc_noprof+0x78/0x390 [ 146.860561][ T6524] ? skb_clone+0x20c/0x390 [ 146.860589][ T6524] skb_clone+0x20c/0x390 [ 146.860617][ T6524] __netlink_deliver_tap+0x3c4/0x7f0 [ 146.860669][ T6524] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.860694][ T6524] netlink_deliver_tap+0x19d/0x1b0 [ 146.860723][ T6524] netlink_unicast+0x7c6/0x9a0 [ 146.860758][ T6524] ? __pfx_netlink_unicast+0x10/0x10 [ 146.860790][ T6524] ? skb_put+0x114/0x1f0 [ 146.860814][ T6524] netlink_sendmsg+0x8c3/0xcd0 [ 146.860856][ T6524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.860889][ T6524] ? aa_sock_msg_perm+0x91/0x160 [ 146.860931][ T6524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.860957][ T6524] __sock_sendmsg+0x221/0x270 [ 146.860988][ T6524] ____sys_sendmsg+0x523/0x860 [ 146.861019][ T6524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.861038][ T6524] ? __fget_files+0x2a/0x420 [ 146.861060][ T6524] ? __fget_files+0x2a/0x420 [ 146.861088][ T6524] __sys_sendmsg+0x271/0x360 [ 146.861115][ T6524] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.861195][ T6524] ? do_syscall_64+0xb6/0x230 [ 146.861224][ T6524] do_syscall_64+0xf3/0x230 [ 146.861248][ T6524] ? clear_bhb_loop+0x45/0xa0 [ 146.861272][ T6524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.861291][ T6524] RIP: 0033:0x7fd44e78d169 [ 146.861309][ T6524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.861325][ T6524] RSP: 002b:00007fd44f5ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.861346][ T6524] RAX: ffffffffffffffda RBX: 00007fd44e9a5fa0 RCX: 00007fd44e78d169 [ 146.861362][ T6524] RDX: 0000000000000000 RSI: 0000200000004340 RDI: 0000000000000003 [ 146.861374][ T6524] RBP: 00007fd44f5ae090 R08: 0000000000000000 R09: 0000000000000000 [ 146.861386][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.861398][ T6524] R13: 0000000000000000 R14: 00007fd44e9a5fa0 R15: 00007fd44eacfa28 [ 146.861428][ T6524] [ 146.862316][ T6502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.119542][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.270811][ T1215] usb 2-1: USB disconnect, device number 10 [ 147.626484][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 147.711727][ T6539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.719278][ T6539] IPv6: NLM_F_CREATE should be set when creating new route [ 147.726657][ T6539] IPv6: NLM_F_CREATE should be set when creating new route [ 148.083438][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 148.235803][ T1215] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.513642][ T1215] usb 1-1: config 0 has no interfaces? [ 148.529493][ T1215] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 148.538767][ T1215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.552113][ T1215] usb 1-1: Product: syz [ 148.683172][ T1215] usb 1-1: Manufacturer: syz [ 148.695088][ T1215] usb 1-1: SerialNumber: syz [ 148.727552][ T1215] usb 1-1: config 0 descriptor?? [ 148.869386][ T10] usb 5-1: USB disconnect, device number 11 [ 149.750063][ T6567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.821669][ T6571] syzkaller1: entered promiscuous mode [ 149.833989][ T6571] syzkaller1: entered allmulticast mode [ 150.067892][ T6574] bridge_slave_0: default FDB implementation only supports local addresses [ 150.089050][ T6574] sctp: [Deprecated]: syz.4.182 (pid 6574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.089050][ T6574] Use struct sctp_sack_info instead [ 150.928403][ T1215] usb 1-1: USB disconnect, device number 6 [ 151.003993][ T6587] FAULT_INJECTION: forcing a failure. [ 151.003993][ T6587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.065778][ T6587] CPU: 0 UID: 0 PID: 6587 Comm: syz.0.185 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 151.065809][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.065821][ T6587] Call Trace: [ 151.065828][ T6587] [ 151.065836][ T6587] dump_stack_lvl+0x241/0x360 [ 151.065872][ T6587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.065900][ T6587] ? __pfx__printk+0x10/0x10 [ 151.065938][ T6587] should_fail_ex+0x424/0x570 [ 151.065968][ T6587] _copy_to_user+0x31/0xb0 [ 151.066000][ T6587] __se_sys_shmctl+0x301/0x3d0 [ 151.066030][ T6587] ? __pfx___se_sys_shmctl+0x10/0x10 [ 151.066067][ T6587] ? __fget_files+0x2a/0x420 [ 151.066091][ T6587] ? fput+0x9b/0xd0 [ 151.066110][ T6587] ? ksys_write+0x275/0x2d0 [ 151.066144][ T6587] ? do_syscall_64+0xb6/0x230 [ 151.066172][ T6587] do_syscall_64+0xf3/0x230 [ 151.066197][ T6587] ? clear_bhb_loop+0x45/0xa0 [ 151.066220][ T6587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.066240][ T6587] RIP: 0033:0x7f56c4d8d169 [ 151.066257][ T6587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.066274][ T6587] RSP: 002b:00007f56c5c74038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 151.066296][ T6587] RAX: ffffffffffffffda RBX: 00007f56c4fa5fa0 RCX: 00007f56c4d8d169 [ 151.066311][ T6587] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000000 [ 151.066323][ T6587] RBP: 00007f56c5c74090 R08: 0000000000000000 R09: 0000000000000000 [ 151.066336][ T6587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.066348][ T6587] R13: 0000000000000000 R14: 00007f56c4fa5fa0 R15: 00007f56c50cfa28 [ 151.066378][ T6587] [ 151.556626][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 151.579474][ T6589] team0: left allmulticast mode [ 151.584423][ T6589] team_slave_0: left allmulticast mode [ 151.603927][ T6589] team_slave_1: left allmulticast mode [ 151.616902][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 151.636250][ T6589] bridge0: port 3(team0) entered disabled state [ 151.654307][ T6589] bridge_slave_1: left allmulticast mode [ 151.669844][ T6589] bridge_slave_1: left promiscuous mode [ 151.706100][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.786912][ T6589] bridge_slave_0: left allmulticast mode [ 151.813020][ T6589] bridge_slave_0: left promiscuous mode [ 151.836917][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.355747][ T5895] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 152.535838][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 152.585799][ T1215] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 152.798148][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.849381][ T5895] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 152.884987][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.893522][ T977] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 152.918774][ T1215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 93, changing to 10 [ 152.938587][ T1215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41264, setting to 1024 [ 152.954643][ T5895] usb 5-1: Product: syz [ 152.980585][ T5895] usb 5-1: Manufacturer: syz [ 152.987879][ T5895] usb 5-1: SerialNumber: syz [ 152.995188][ T1215] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.025842][ T977] usb 4-1: device descriptor read/64, error -71 [ 153.066379][ T5895] usb 5-1: config 0 descriptor?? [ 153.088314][ T1215] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.130046][ T5895] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 153.145573][ T1215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.171407][ T5895] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 153.224778][ T1215] usb 1-1: config 0 descriptor?? [ 153.265808][ T977] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 153.325928][ T53] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 153.406169][ T977] usb 4-1: device descriptor read/64, error -71 [ 153.413070][ T6607] bond_slave_1: entered promiscuous mode [ 153.487742][ T53] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 153.547575][ T977] usb usb4-port1: attempt power cycle [ 153.554042][ T53] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 153.563924][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.634211][ T53] usb 3-1: config 0 descriptor?? [ 153.644411][ T1215] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 153.649845][ T6623] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 153.655478][ T1215] plantronics 0003:047F:FFFF.0005: item fetching failed at offset 14/15 [ 153.704951][ T1215] plantronics 0003:047F:FFFF.0005: parse failed [ 153.719721][ T1215] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 153.905925][ T977] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 153.926515][ T977] usb 4-1: device descriptor read/8, error -71 [ 154.078917][ T53] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 154.165787][ T977] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 154.207512][ T977] usb 4-1: device descriptor read/8, error -71 [ 154.298740][ T53] usb 3-1: USB disconnect, device number 9 [ 154.326229][ T977] usb usb4-port1: unable to enumerate USB device [ 154.861919][ T6600] bond_slave_1: left promiscuous mode [ 154.886928][ T919] usb 5-1: USB disconnect, device number 12 [ 154.950264][ T6625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.989973][ T6627] fuse: Bad value for 'fd' [ 154.990488][ T6625] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 155.286387][ T919] usb 1-1: USB disconnect, device number 7 [ 155.365778][ T53] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 155.587182][ T53] usb 3-1: Using ep0 maxpacket: 32 [ 155.602401][ T53] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 155.628892][ T53] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 155.659657][ T53] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 155.683564][ T53] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 155.702012][ T53] usb 3-1: Product: syz [ 155.707340][ T53] usb 3-1: Manufacturer: syz [ 155.711990][ T53] usb 3-1: SerialNumber: syz [ 155.730520][ T53] usb 3-1: config 0 descriptor?? [ 155.932207][ T6644] ALSA: mixer_oss: invalid OSS volume '' [ 156.055931][ T919] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 156.097431][ T53] usb 3-1: USB disconnect, device number 10 [ 156.230173][ T919] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 156.244438][ T6630] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 156.280691][ T919] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 156.304543][ T919] usb 1-1: can't read configurations, error -61 [ 156.412507][ T6657] netlink: 68 bytes leftover after parsing attributes in process `syz.4.212'. [ 156.456635][ T919] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 156.626618][ T53] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 156.650454][ T919] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 156.664585][ T919] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 156.685451][ T919] usb 1-1: can't read configurations, error -61 [ 156.701300][ T919] usb usb1-port1: attempt power cycle [ 156.892683][ T53] usb 3-1: Using ep0 maxpacket: 8 [ 156.905526][ T53] usb 3-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 32 [ 156.918510][ T53] usb 3-1: config 1 interface 0 altsetting 14 bulk endpoint 0x3 has invalid maxpacket 1024 [ 156.933270][ T53] usb 3-1: config 1 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.974959][ T53] usb 3-1: config 1 interface 0 has no altsetting 0 [ 156.995740][ T53] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.012138][ T53] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.023365][ T53] usb 3-1: Product: Ф [ 157.029176][ T53] usb 3-1: Manufacturer: ж [ 157.035129][ T53] usb 3-1: SerialNumber: syz [ 157.080610][ T919] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 157.096466][ T6630] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.110402][ T6630] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.120175][ T919] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 157.135046][ T919] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 157.147837][ T919] usb 1-1: can't read configurations, error -61 [ 157.285917][ T919] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 157.332407][ T919] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 157.338131][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.349266][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.351256][ T919] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 157.381594][ T53] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 157.407789][ T919] usb 1-1: can't read configurations, error -61 [ 157.450843][ T919] usb usb1-port1: unable to enumerate USB device [ 157.466355][ T53] usb 3-1: USB disconnect, device number 11 [ 157.965722][ T53] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 157.986454][ T6691] xt_socket: unknown flags 0x4 [ 158.115881][ T53] usb 5-1: Using ep0 maxpacket: 16 [ 158.129079][ T53] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 158.141599][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.150333][ T53] usb 5-1: Product: syz [ 158.154654][ T53] usb 5-1: Manufacturer: syz [ 158.163400][ T53] usb 5-1: SerialNumber: syz [ 158.341188][ T53] r8152-cfgselector 5-1: Unknown version 0x0000 [ 158.347688][ T53] r8152-cfgselector 5-1: config 0 descriptor?? [ 158.355184][ T6694] veth1_vlan: mtu less than device minimum [ 158.772827][ T6687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.802929][ T6687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.858325][ T6687] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 158.865047][ T6687] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 158.875335][ T6687] vhci_hcd vhci_hcd.0: Device attached [ 158.887375][ T6687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.969438][ T6687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.045815][ T53] vhci_hcd: vhci_device speed not set [ 159.106074][ T53] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 159.154854][ T6702] vhci_hcd: connection reset by peer [ 159.156345][ T10] r8152-cfgselector 5-1: USB disconnect, device number 13 [ 159.180437][ T151] vhci_hcd: stop threads [ 159.193754][ T151] vhci_hcd: release socket [ 159.512598][ T151] vhci_hcd: disconnect device [ 159.616086][ T919] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 159.805775][ T919] usb 1-1: Using ep0 maxpacket: 8 [ 159.832935][ T6718] FAULT_INJECTION: forcing a failure. [ 159.832935][ T6718] name failslab, interval 1, probability 0, space 0, times 0 [ 159.863315][ T919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.885820][ T6718] CPU: 1 UID: 0 PID: 6718 Comm: syz.4.230 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 159.885852][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.885865][ T6718] Call Trace: [ 159.885874][ T6718] [ 159.885883][ T6718] dump_stack_lvl+0x241/0x360 [ 159.885923][ T6718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.885954][ T6718] ? __pfx__printk+0x10/0x10 [ 159.885989][ T6718] ? __pfx___might_resched+0x10/0x10 [ 159.886021][ T6718] should_fail_ex+0x424/0x570 [ 159.886048][ T6718] should_failslab+0xac/0x100 [ 159.886080][ T6718] __kmalloc_cache_noprof+0x73/0x370 [ 159.886109][ T6718] ? __request_module+0x2bb/0x640 [ 159.886137][ T6718] __request_module+0x2bb/0x640 [ 159.886164][ T6718] ? crypto_alg_mod_lookup+0x8c/0x640 [ 159.886188][ T6718] ? __pfx___request_module+0x10/0x10 [ 159.886209][ T6718] ? __up_read+0x2c4/0x6b0 [ 159.886238][ T6718] ? __pfx___up_read+0x10/0x10 [ 159.886278][ T6718] ? crypto_alg_lookup+0x3d2/0x450 [ 159.886304][ T6718] crypto_alg_mod_lookup+0xac/0x640 [ 159.886333][ T6718] crypto_alloc_tfm_node+0x131/0x3a0 [ 159.886367][ T6718] esp_init_state+0x627/0x1180 [ 159.886396][ T6718] ? __sock_sendmsg+0x221/0x270 [ 159.886421][ T6718] ? ____sys_sendmsg+0x523/0x860 [ 159.886454][ T6718] ? __pfx_esp_init_state+0x10/0x10 [ 159.886521][ T6718] ? __xfrm_init_state+0x6d9/0x1050 [ 159.886548][ T6718] ? __xfrm_init_state+0x6d9/0x1050 [ 159.886578][ T6718] __xfrm_init_state+0x7ac/0x1050 [ 159.886612][ T6718] xfrm_add_sa+0x2fb9/0x4230 [ 159.886650][ T6718] ? __pfx_xfrm_add_sa+0x10/0x10 [ 159.886701][ T6718] ? __nla_parse+0x40/0x60 [ 159.886730][ T6718] xfrm_user_rcv_msg+0x9c3/0xca0 [ 159.886763][ T6718] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 159.886827][ T6718] ? __mutex_trylock_common+0x184/0x2e0 [ 159.886860][ T6718] ? __pfx___mutex_trylock_common+0x10/0x10 [ 159.886899][ T6718] netlink_rcv_skb+0x208/0x480 [ 159.886928][ T6718] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 159.886956][ T6718] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.887007][ T6718] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.887040][ T6718] xfrm_netlink_rcv+0x79/0x90 [ 159.887066][ T6718] netlink_unicast+0x7f8/0x9a0 [ 159.887101][ T6718] ? __pfx_netlink_unicast+0x10/0x10 [ 159.887128][ T6718] ? skb_put+0x114/0x1f0 [ 159.887153][ T6718] netlink_sendmsg+0x8c3/0xcd0 [ 159.887194][ T6718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.887228][ T6718] ? aa_sock_msg_perm+0x91/0x160 [ 159.887263][ T6718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.887289][ T6718] __sock_sendmsg+0x221/0x270 [ 159.887319][ T6718] ____sys_sendmsg+0x523/0x860 [ 159.887351][ T6718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.887375][ T6718] ? __fget_files+0x2a/0x420 [ 159.887397][ T6718] ? __fget_files+0x2a/0x420 [ 159.887425][ T6718] __sys_sendmsg+0x271/0x360 [ 159.887452][ T6718] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.887550][ T6718] ? do_syscall_64+0xb6/0x230 [ 159.887579][ T6718] do_syscall_64+0xf3/0x230 [ 159.887605][ T6718] ? clear_bhb_loop+0x45/0xa0 [ 159.887630][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.887649][ T6718] RIP: 0033:0x7f76f418d169 [ 159.887668][ T6718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.887685][ T6718] RSP: 002b:00007f76f1ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.887715][ T6718] RAX: ffffffffffffffda RBX: 00007f76f43a5fa0 RCX: 00007f76f418d169 [ 159.887731][ T6718] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 159.887744][ T6718] RBP: 00007f76f1ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 159.887756][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.887768][ T6718] R13: 0000000000000000 R14: 00007f76f43a5fa0 R15: 00007f76f44cfa28 [ 159.887801][ T6718] [ 160.273771][ T919] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 160.385249][ T919] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 160.387807][ T6722] FAULT_INJECTION: forcing a failure. [ 160.387807][ T6722] name failslab, interval 1, probability 0, space 0, times 0 [ 160.398166][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.407071][ T6722] CPU: 1 UID: 0 PID: 6722 Comm: syz.3.232 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 160.407103][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.407116][ T6722] Call Trace: [ 160.407125][ T6722] [ 160.407134][ T6722] dump_stack_lvl+0x241/0x360 [ 160.407173][ T6722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.407203][ T6722] ? __pfx__printk+0x10/0x10 [ 160.407231][ T6722] ? __lock_acquire+0xad5/0xd80 [ 160.407263][ T6722] should_fail_ex+0x424/0x570 [ 160.407293][ T6722] should_failslab+0xac/0x100 [ 160.407328][ T6722] kmem_cache_alloc_noprof+0x78/0x390 [ 160.407361][ T6722] ? skb_clone+0x20c/0x390 [ 160.407393][ T6722] skb_clone+0x20c/0x390 [ 160.407422][ T6722] __netlink_deliver_tap+0x3c4/0x7f0 [ 160.407468][ T6722] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.407496][ T6722] netlink_deliver_tap+0x19d/0x1b0 [ 160.407527][ T6722] netlink_unicast+0x7c6/0x9a0 [ 160.407566][ T6722] ? __pfx_netlink_unicast+0x10/0x10 [ 160.407597][ T6722] ? skb_put+0x114/0x1f0 [ 160.407625][ T6722] netlink_sendmsg+0x8c3/0xcd0 [ 160.407681][ T6722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.407718][ T6722] ? aa_sock_msg_perm+0x91/0x160 [ 160.407757][ T6722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.407786][ T6722] __sock_sendmsg+0x221/0x270 [ 160.407821][ T6722] ____sys_sendmsg+0x523/0x860 [ 160.407855][ T6722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.407876][ T6722] ? __fget_files+0x2a/0x420 [ 160.407901][ T6722] ? __fget_files+0x2a/0x420 [ 160.407931][ T6722] __sys_sendmsg+0x271/0x360 [ 160.407962][ T6722] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.408049][ T6722] ? do_syscall_64+0xb6/0x230 [ 160.408080][ T6722] do_syscall_64+0xf3/0x230 [ 160.408108][ T6722] ? clear_bhb_loop+0x45/0xa0 [ 160.408134][ T6722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.408156][ T6722] RIP: 0033:0x7fd44e78d169 [ 160.408178][ T6722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.408196][ T6722] RSP: 002b:00007fd44f5ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.408221][ T6722] RAX: ffffffffffffffda RBX: 00007fd44e9a5fa0 RCX: 00007fd44e78d169 [ 160.408238][ T6722] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 160.408252][ T6722] RBP: 00007fd44f5ae090 R08: 0000000000000000 R09: 0000000000000000 [ 160.408265][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.408279][ T6722] R13: 0000000000000000 R14: 00007fd44e9a5fa0 R15: 00007fd44eacfa28 [ 160.408314][ T6722] [ 160.919691][ T919] usb 1-1: Product: syz [ 160.923975][ T919] usb 1-1: Manufacturer: syz [ 160.962302][ T919] usb 1-1: SerialNumber: syz [ 161.013529][ T6736] bridge_slave_0: default FDB implementation only supports local addresses [ 161.062187][ T6737] vlan2: entered allmulticast mode [ 161.068897][ T6737] bond0: entered allmulticast mode [ 161.074076][ T6737] bond_slave_0: entered allmulticast mode [ 161.081584][ T6737] bond_slave_1: entered allmulticast mode [ 161.109052][ T919] usb 1-1: config 0 descriptor?? [ 161.423600][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.435768][ T919] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 161.477637][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.538546][ T6714] netlink: 'syz.0.228': attribute type 10 has an invalid length. [ 161.543701][ T6744] syzkaller1: entered promiscuous mode [ 161.552404][ T6744] syzkaller1: entered allmulticast mode [ 161.597148][ T919] usb 2-1: Using ep0 maxpacket: 32 [ 161.612306][ T919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 161.624898][ T6747] netlink: 'syz.0.228': attribute type 10 has an invalid length. [ 161.639664][ T6747] netlink: 2 bytes leftover after parsing attributes in process `syz.0.228'. [ 161.692671][ T6714] team0: left promiscuous mode [ 161.732032][ T919] usb 2-1: config 5 has an invalid interface number: 4 but max is 0 [ 161.766248][ T6751] kvm: pic: non byte write [ 161.776354][ T6714] batman_adv: batadv0: Adding interface: team0 [ 161.785297][ T6714] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.810496][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.820706][ T6714] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 161.865722][ T919] usb 2-1: config 5 has no interface number 0 [ 161.871943][ T919] usb 2-1: config 5 interface 4 has no altsetting 0 [ 161.901062][ T919] usb 2-1: New USB device found, idVendor=1199, idProduct=6809, bcdDevice=61.47 [ 161.910390][ T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.918599][ T919] usb 2-1: Product: syz [ 161.922834][ T919] usb 2-1: Manufacturer: syz [ 161.944986][ T919] usb 2-1: SerialNumber: syz [ 161.995024][ T6747] team0: entered promiscuous mode [ 162.106841][ T6747] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.205109][ T6747] batman_adv: batadv0: Interface activated: team0 [ 162.213469][ T6747] batman_adv: batadv0: Interface deactivated: team0 [ 162.223849][ T6747] batman_adv: batadv0: Removing interface: team0 [ 162.267330][ T6747] bridge0: port 1(team0) entered blocking state [ 162.348677][ T6747] bridge0: port 1(team0) entered disabled state [ 162.360060][ T6747] team0: entered allmulticast mode [ 162.484410][ T977] usb 1-1: USB disconnect, device number 12 [ 162.595902][ T5895] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 162.802852][ T5895] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.822754][ T5895] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 162.846834][ T5895] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.871591][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.991350][ T6763] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 163.048404][ T5895] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.331287][ T5895] usb 3-1: USB disconnect, device number 12 [ 163.772370][ T5897] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 164.065703][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 164.080447][ T5897] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.105671][ T5897] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 164.131372][ T919] sierra 2-1:5.4: Sierra USB modem converter detected [ 164.204301][ T5897] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 164.245452][ T919] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 164.246457][ T53] vhci_hcd: vhci_device speed not set [ 164.258781][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.293926][ T5897] usb 1-1: Product: syz [ 164.401164][ T5897] usb 1-1: Manufacturer: syz [ 164.416781][ T919] usb 2-1: USB disconnect, device number 11 [ 164.481419][ T5897] usb 1-1: SerialNumber: syz [ 164.487515][ T919] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 164.505184][ T5897] usb 1-1: config 0 descriptor?? [ 164.514332][ T919] sierra 2-1:5.4: device disconnected [ 164.689939][ T6777] bridge_slave_0: default FDB implementation only supports local addresses [ 164.756414][ T6779] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 164.841926][ T6781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.851161][ T6781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.866561][ T6781] netlink: 'syz.0.243': attribute type 10 has an invalid length. [ 165.044463][ T6781] bridge0: port 1(team0) entered disabled state [ 165.052200][ T6781] team0: left allmulticast mode [ 165.057621][ T6781] team0: left promiscuous mode [ 165.065761][ T6781] bridge0: port 1(team0) entered disabled state [ 165.102043][ T6781] batman_adv: batadv0: Adding interface: team0 [ 165.108476][ T6781] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.133667][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.219226][ T6781] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 165.249904][ T30] audit: type=1326 audit(1743976446.236:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44e78d169 code=0x7ffc0000 [ 165.350101][ T30] audit: type=1326 audit(1743976446.236:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd44e78d169 code=0x7ffc0000 [ 165.431117][ T30] audit: type=1326 audit(1743976446.236:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44e78d169 code=0x7ffc0000 [ 165.487679][ T30] audit: type=1326 audit(1743976446.236:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd44e78d169 code=0x7ffc0000 [ 165.514464][ T977] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 165.553193][ T30] audit: type=1326 audit(1743976446.236:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44e78d169 code=0x7ffc0000 [ 165.578383][ T30] audit: type=1326 audit(1743976446.236:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd44e78d169 code=0x7ffc0000 [ 165.602595][ T30] audit: type=1326 audit(1743976446.236:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44e78d169 code=0x7ffc0000 [ 165.629853][ T30] audit: type=1326 audit(1743976446.236:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd44e78bad0 code=0x7ffc0000 [ 165.655226][ T30] audit: type=1326 audit(1743976446.236:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd44e78cd6b code=0x7ffc0000 [ 165.696419][ T30] audit: type=1326 audit(1743976446.236:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd44e78cd6b code=0x7ffc0000 [ 165.718822][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 165.733581][ T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.744814][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 165.905527][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 165.944773][ T977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.031841][ T977] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 166.069914][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.124869][ T977] usb 4-1: Product: syz [ 166.165199][ T977] usb 4-1: Manufacturer: syz [ 166.202517][ T977] usb 4-1: SerialNumber: syz [ 166.260350][ T977] usb 4-1: config 0 descriptor?? [ 166.297465][ T977] xbox_remote_probe: Unexpected endpoint_in [ 166.501376][ T5841] Bluetooth: hci4: command tx timeout [ 166.573593][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.602836][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.680455][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 166.695938][ T6799] FAULT_INJECTION: forcing a failure. [ 166.695938][ T6799] name failslab, interval 1, probability 0, space 0, times 0 [ 166.711996][ T6799] CPU: 1 UID: 0 PID: 6799 Comm: syz.1.255 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 166.712029][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.712042][ T6799] Call Trace: [ 166.712051][ T6799] [ 166.712060][ T6799] dump_stack_lvl+0x241/0x360 [ 166.712099][ T6799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.712129][ T6799] ? __pfx__printk+0x10/0x10 [ 166.712156][ T6799] ? __lock_acquire+0xad5/0xd80 [ 166.712188][ T6799] should_fail_ex+0x424/0x570 [ 166.712225][ T6799] should_failslab+0xac/0x100 [ 166.712255][ T6799] kmem_cache_alloc_noprof+0x78/0x390 [ 166.712283][ T6799] ? skb_clone+0x20c/0x390 [ 166.712310][ T6799] skb_clone+0x20c/0x390 [ 166.712337][ T6799] __netlink_deliver_tap+0x3c4/0x7f0 [ 166.712387][ T6799] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.712414][ T6799] netlink_deliver_tap+0x19d/0x1b0 [ 166.712444][ T6799] netlink_unicast+0x7c6/0x9a0 [ 166.712480][ T6799] ? __pfx_netlink_unicast+0x10/0x10 [ 166.712508][ T6799] ? skb_put+0x114/0x1f0 [ 166.712533][ T6799] netlink_sendmsg+0x8c3/0xcd0 [ 166.712575][ T6799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.712626][ T6799] ? aa_sock_msg_perm+0x91/0x160 [ 166.712661][ T6799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.712689][ T6799] __sock_sendmsg+0x221/0x270 [ 166.712721][ T6799] ____sys_sendmsg+0x523/0x860 [ 166.712754][ T6799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.712774][ T6799] ? __fget_files+0x2a/0x420 [ 166.712797][ T6799] ? __fget_files+0x2a/0x420 [ 166.712830][ T6799] __sys_sendmsg+0x271/0x360 [ 166.712859][ T6799] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.712939][ T6799] ? do_syscall_64+0xb6/0x230 [ 166.712970][ T6799] do_syscall_64+0xf3/0x230 [ 166.712996][ T6799] ? clear_bhb_loop+0x45/0xa0 [ 166.713022][ T6799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.713043][ T6799] RIP: 0033:0x7fb8da18d169 [ 166.713063][ T6799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.713082][ T6799] RSP: 002b:00007fb8daf0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.713105][ T6799] RAX: ffffffffffffffda RBX: 00007fb8da3a5fa0 RCX: 00007fb8da18d169 [ 166.713121][ T6799] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 166.713134][ T6799] RBP: 00007fb8daf0b090 R08: 0000000000000000 R09: 0000000000000000 [ 166.713148][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.713162][ T6799] R13: 0000000000000000 R14: 00007fb8da3a5fa0 R15: 00007fb8da4cfa28 [ 166.713194][ T6799] [ 166.964831][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.061983][ T6801] vlan2: entered allmulticast mode [ 167.067319][ T6801] hsr0: entered allmulticast mode [ 167.072520][ T6801] hsr_slave_0: entered allmulticast mode [ 167.079076][ T6801] hsr_slave_1: entered allmulticast mode [ 167.172315][ T6801] vlan2: entered allmulticast mode [ 167.617376][ T6812] bridge_slave_0: default FDB implementation only supports local addresses [ 167.802576][ T5897] usb 1-1: USB disconnect, device number 13 [ 168.241039][ T10] usb 4-1: USB disconnect, device number 13 [ 168.344120][ T5897] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 168.626431][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 168.635562][ T5897] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 168.645201][ T5897] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 168.693287][ T5897] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 168.773657][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.816452][ T5897] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 168.860058][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 168.876153][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 168.939114][ T5897] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 168.979447][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.023197][ T5897] usb 1-1: config 0 descriptor?? [ 169.050599][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.072555][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.112169][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 169.146034][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.166088][ T10] usb 4-1: config 0 descriptor?? [ 169.271843][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.320959][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.374035][ T5897] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 170.200381][ T6842] FAULT_INJECTION: forcing a failure. [ 170.200381][ T6842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.280220][ T6842] CPU: 1 UID: 0 PID: 6842 Comm: syz.4.266 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 170.280252][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.280266][ T6842] Call Trace: [ 170.280272][ T6842] [ 170.280278][ T6842] dump_stack_lvl+0x241/0x360 [ 170.280307][ T6842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.280329][ T6842] ? __pfx__printk+0x10/0x10 [ 170.280358][ T6842] should_fail_ex+0x424/0x570 [ 170.280378][ T6842] _copy_from_user+0x2d/0xb0 [ 170.280400][ T6842] __sys_bpf+0x1c5/0x8b0 [ 170.280417][ T6842] ? __pfx___sys_bpf+0x10/0x10 [ 170.280441][ T6842] ? ksys_write+0x275/0x2d0 [ 170.280467][ T6842] __x64_sys_bpf+0x7c/0x90 [ 170.280494][ T6842] do_syscall_64+0xf3/0x230 [ 170.280513][ T6842] ? clear_bhb_loop+0x45/0xa0 [ 170.280531][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.280545][ T6842] RIP: 0033:0x7f76f418d169 [ 170.280558][ T6842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.280570][ T6842] RSP: 002b:00007f76f1ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.280587][ T6842] RAX: ffffffffffffffda RBX: 00007f76f43a5fa0 RCX: 00007f76f418d169 [ 170.280598][ T6842] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000009 [ 170.280607][ T6842] RBP: 00007f76f1ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 170.280617][ T6842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.280626][ T6842] R13: 0000000000000001 R14: 00007f76f43a5fa0 R15: 00007f76f44cfa28 [ 170.280648][ T6842] [ 170.467737][ T5897] usb 1-1: USB disconnect, device number 14 [ 170.677618][ T5897] usblp0: removed [ 170.900538][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 170.923283][ T6848] team0: left allmulticast mode [ 170.953853][ T6848] team_slave_0: left allmulticast mode [ 170.985710][ T6848] team_slave_1: left allmulticast mode [ 170.992799][ T6848] bridge0: port 3(team0) entered disabled state [ 171.070175][ T6848] bridge_slave_1: left allmulticast mode [ 171.078112][ T6848] bridge_slave_1: left promiscuous mode [ 171.084032][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.098653][ T6848] bridge_slave_0: left allmulticast mode [ 171.108032][ T6848] bridge_slave_0: left promiscuous mode [ 171.113934][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.328493][ T6857] bridge_slave_0: default FDB implementation only supports local addresses [ 171.785555][ T6870] netlink: 156 bytes leftover after parsing attributes in process `syz.2.275'. [ 171.846868][ T6872] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 171.870434][ T6874] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 171.883336][ T6872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.907629][ T6872] bond1: (slave gretap1): making interface the new active one [ 171.918876][ T6872] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 172.355775][ T919] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 172.477998][ T5897] usb 4-1: USB disconnect, device number 14 [ 172.514532][ T6880] FAULT_INJECTION: forcing a failure. [ 172.514532][ T6880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.529017][ T919] usb 1-1: Using ep0 maxpacket: 32 [ 172.534606][ T6880] CPU: 0 UID: 0 PID: 6880 Comm: syz.1.278 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 172.534634][ T6880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.534647][ T6880] Call Trace: [ 172.534655][ T6880] [ 172.534663][ T6880] dump_stack_lvl+0x241/0x360 [ 172.534703][ T6880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.534732][ T6880] ? __pfx__printk+0x10/0x10 [ 172.534775][ T6880] should_fail_ex+0x424/0x570 [ 172.534801][ T6880] _copy_from_user+0x2d/0xb0 [ 172.534831][ T6880] generic_map_update_batch+0x53b/0x8e0 [ 172.534870][ T6880] ? __pfx_generic_map_update_batch+0x10/0x10 [ 172.534897][ T6880] ? __fget_files+0x39d/0x420 [ 172.534915][ T6880] ? __fget_files+0x2a/0x420 [ 172.534941][ T6880] ? __pfx_generic_map_update_batch+0x10/0x10 [ 172.534968][ T6880] bpf_map_do_batch+0x39a/0x660 [ 172.535004][ T6880] __sys_bpf+0x3c1/0x8b0 [ 172.535027][ T6880] ? __pfx___sys_bpf+0x10/0x10 [ 172.535062][ T6880] ? ksys_write+0x275/0x2d0 [ 172.535099][ T6880] __x64_sys_bpf+0x7c/0x90 [ 172.535130][ T6880] do_syscall_64+0xf3/0x230 [ 172.535157][ T6880] ? clear_bhb_loop+0x45/0xa0 [ 172.535182][ T6880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.535202][ T6880] RIP: 0033:0x7fb8da18d169 [ 172.535220][ T6880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.535238][ T6880] RSP: 002b:00007fb8daf0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.535260][ T6880] RAX: ffffffffffffffda RBX: 00007fb8da3a5fa0 RCX: 00007fb8da18d169 [ 172.535275][ T6880] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 172.535289][ T6880] RBP: 00007fb8daf0b090 R08: 0000000000000000 R09: 0000000000000000 [ 172.535302][ T6880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.535315][ T6880] R13: 0000000000000000 R14: 00007fb8da3a5fa0 R15: 00007fb8da4cfa28 [ 172.535345][ T6880] [ 172.852013][ T919] usb 1-1: config 0 has an invalid interface number: 215 but max is 0 [ 172.857201][ T6882] syzkaller1: entered promiscuous mode [ 172.860744][ T919] usb 1-1: config 0 has no interface number 0 [ 172.899282][ T6882] syzkaller1: entered allmulticast mode [ 172.947098][ T919] usb 1-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 172.956373][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.964408][ T919] usb 1-1: Product: syz [ 172.968797][ T919] usb 1-1: Manufacturer: syz [ 172.977363][ T919] usb 1-1: SerialNumber: syz [ 172.985225][ T919] usb 1-1: config 0 descriptor?? [ 173.028794][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 173.063708][ T919] io_ti 1-1:0.215: required endpoints missing [ 173.234335][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 173.293427][ T6890] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.302591][ T6890] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.311426][ T6890] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.320189][ T6890] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.340694][ T6890] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.350243][ T6890] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.359577][ T6890] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.369805][ T6890] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.410441][ T5897] usb 1-1: USB disconnect, device number 15 [ 173.785707][ T5895] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 173.808587][ T6899] bridge_slave_0: default FDB implementation only supports local addresses [ 173.950419][ T5895] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 173.964156][ T5895] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.985725][ T5895] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.996970][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.027348][ T5895] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.086620][ T6872] syz.0.276 (6872) used greatest stack depth: 18248 bytes left [ 174.132075][ T5895] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 174.257755][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.331717][ T6890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.376414][ T6890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.445753][ T5895] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 174.620070][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 174.630411][ T5895] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 174.644850][ T5895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 174.687390][ T5897] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 174.743536][ T5895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.774973][ T5895] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.829111][ T5895] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 174.864382][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.876023][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 174.910003][ T5897] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 174.920003][ T5897] usb 5-1: config 0 has no interface number 0 [ 174.933955][ T5897] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 174.961413][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 174.965765][ T977] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 174.985464][ T5897] usb 5-1: Product: syz [ 174.991124][ T5897] usb 5-1: SerialNumber: syz [ 175.005467][ T5897] usb 5-1: config 0 descriptor?? [ 175.023943][ T5897] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input7 [ 175.135887][ T5930] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 175.163269][ T5895] usb 2-1: GET_CAPABILITIES returned 0 [ 175.178733][ T5895] usbtmc 2-1:16.0: can't read capabilities [ 175.233829][ T977] usb 4-1: config 0 has no interfaces? [ 175.275152][ T977] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 175.308564][ T5930] usb 1-1: not running at top speed; connect to a high speed hub [ 175.321632][ T5930] usb 1-1: config 1 has an invalid interface number: 74 but max is 0 [ 175.331231][ T5930] usb 1-1: config 1 has no interface number 0 [ 175.340892][ T5930] usb 1-1: config 1 interface 74 has no altsetting 0 [ 175.354175][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.368181][ T5897] usb 2-1: USB disconnect, device number 12 [ 175.383462][ T5930] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=22.be [ 175.420179][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.444443][ T977] usb 4-1: Product: syz [ 175.452287][ T5930] usb 1-1: Product: syz [ 175.463500][ T5930] usb 1-1: Manufacturer: syz [ 175.474779][ T5930] usb 1-1: SerialNumber: syz [ 175.482240][ T977] usb 4-1: Manufacturer: syz [ 175.494091][ T977] usb 4-1: SerialNumber: syz [ 175.524876][ T977] usb 4-1: config 0 descriptor?? [ 176.205289][ T5895] usb 3-1: USB disconnect, device number 13 [ 176.339824][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.348544][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.355773][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.362908][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.371133][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.378884][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.386187][ T5897] usb 5-1: USB disconnect, device number 14 [ 176.392162][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.392180][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 176.473701][ T5897] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 176.509238][ T5930] usb 1-1: unknown interface protocol 0x55, assuming v1 [ 176.535976][ T5930] usb 1-1: cannot find UAC_HEADER [ 176.546621][ T919] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 176.638043][ T6938] bridge_slave_0: default FDB implementation only supports local addresses [ 176.723683][ T5930] snd-usb-audio 1-1:1.74: probe with driver snd-usb-audio failed with error -22 [ 176.803770][ T5930] usb 1-1: USB disconnect, device number 16 [ 176.810987][ T919] usb 2-1: Using ep0 maxpacket: 8 [ 176.832039][ T919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.832172][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'. [ 176.866000][ T919] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 176.901786][ T919] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 176.913160][ T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.935426][ T919] usb 2-1: Product: syz [ 176.959336][ T919] usb 2-1: Manufacturer: syz [ 176.976280][ T919] usb 2-1: SerialNumber: syz [ 177.004711][ T919] usb 2-1: config 0 descriptor?? [ 177.046657][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.393011][ T6954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.402036][ T6954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.475838][ T5895] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 177.514938][ T6954] netlink: 'syz.1.295': attribute type 10 has an invalid length. [ 177.544799][ T6954] team0: left promiscuous mode [ 177.550114][ T6954] team_slave_0: left promiscuous mode [ 177.557342][ T6954] team_slave_1: left promiscuous mode [ 177.656522][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 177.672100][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.692475][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 177.724070][ T5895] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 177.734287][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.747092][ T5895] usb 1-1: Product: syz [ 177.760385][ T5895] usb 1-1: Manufacturer: syz [ 177.774430][ T6954] batman_adv: batadv0: Adding interface: team0 [ 177.782450][ T6954] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.814649][ T6954] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 177.855694][ T5895] usb 1-1: SerialNumber: syz [ 177.883485][ T5895] usb 1-1: config 0 descriptor?? [ 178.114666][ T53] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 178.180165][ T53] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 178.203197][ T919] usb 4-1: USB disconnect, device number 15 [ 178.587671][ T6969] sctp: [Deprecated]: syz.3.308 (pid 6969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.587671][ T6969] Use struct sctp_sack_info instead [ 179.389127][ T6982] FAULT_INJECTION: forcing a failure. [ 179.389127][ T6982] name failslab, interval 1, probability 0, space 0, times 0 [ 179.425980][ T6982] CPU: 1 UID: 0 PID: 6982 Comm: syz.2.311 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 179.426004][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 179.426014][ T6982] Call Trace: [ 179.426020][ T6982] [ 179.426027][ T6982] dump_stack_lvl+0x241/0x360 [ 179.426056][ T6982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.426078][ T6982] ? __pfx__printk+0x10/0x10 [ 179.426103][ T6982] ? __pfx___might_resched+0x10/0x10 [ 179.426125][ T6982] should_fail_ex+0x424/0x570 [ 179.426145][ T6982] should_failslab+0xac/0x100 [ 179.426169][ T6982] kmem_cache_alloc_noprof+0x78/0x390 [ 179.426189][ T6982] ? ptlock_alloc+0x20/0x70 [ 179.426215][ T6982] ptlock_alloc+0x20/0x70 [ 179.426237][ T6982] pte_alloc_one+0x6d/0x160 [ 179.426259][ T6982] __pte_alloc+0x7b/0x240 [ 179.426278][ T6982] ? __pfx___pte_alloc+0x10/0x10 [ 179.426296][ T6982] ? handle_pte_fault+0x3b91/0x61c0 [ 179.426317][ T6982] handle_pte_fault+0x4ede/0x61c0 [ 179.426343][ T6982] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 179.426374][ T6982] ? __pfx_handle_pte_fault+0x10/0x10 [ 179.426399][ T6982] ? rcu_is_watching+0x15/0xb0 [ 179.426422][ T6982] ? __lock_acquire+0xad5/0xd80 [ 179.426449][ T6982] ? __lock_acquire+0xad5/0xd80 [ 179.426468][ T6982] ? do_raw_spin_lock+0x151/0x370 [ 179.426497][ T6982] handle_mm_fault+0x1129/0x1bf0 [ 179.426545][ T6982] ? __pfx_handle_mm_fault+0x10/0x10 [ 179.426578][ T6982] ? __pfx_find_vma+0x10/0x10 [ 179.426601][ T6982] ? vma_is_secretmem+0xd/0x50 [ 179.426620][ T6982] ? check_vma_flags+0x4ea/0x590 [ 179.426647][ T6982] __get_user_pages+0x1adc/0x4180 [ 179.426698][ T6982] ? __pfx___get_user_pages+0x10/0x10 [ 179.426719][ T6982] ? __gup_longterm_locked+0xd86/0x1850 [ 179.426741][ T6982] ? __switch_to+0xe97/0x1c30 [ 179.426764][ T6982] ? __pfx_down_read_killable+0x10/0x10 [ 179.426786][ T6982] ? sched_clock_cpu+0x77/0x4d0 [ 179.426806][ T6982] ? __pfx___switch_to+0x10/0x10 [ 179.426830][ T6982] ? __lock_acquire+0xad5/0xd80 [ 179.426850][ T6982] __gup_longterm_locked+0xec1/0x1850 [ 179.426902][ T6982] ? rcu_is_watching+0x15/0xb0 [ 179.426937][ T6982] ? ___pte_offset_map+0x29a/0x350 [ 179.426966][ T6982] ? __pfx___gup_longterm_locked+0x10/0x10 [ 179.426991][ T6982] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 179.427015][ T6982] ? gup_fast_fallback+0x203f/0x2980 [ 179.427054][ T6982] gup_fast_fallback+0x2227/0x2980 [ 179.427101][ T6982] ? __pfx_gup_fast_fallback+0x10/0x10 [ 179.427135][ T6982] ? lockdep_hardirqs_on+0x9d/0x150 [ 179.427154][ T6982] ? __local_bh_enable_ip+0x168/0x200 [ 179.427170][ T6982] ? kernel_fpu_end+0xf9/0x150 [ 179.427192][ T6982] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 179.427214][ T6982] ? is_valid_gup_args+0x124/0x200 [ 179.427238][ T6982] pin_user_pages_fast+0xd2/0x160 [ 179.427265][ T6982] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 179.427287][ T6982] ? poly1305_blocks_avx2+0xe5/0x780 [ 179.427313][ T6982] ? poly1305_simd_blocks+0x115/0x520 [ 179.427338][ T6982] iov_iter_extract_pages+0x3bd/0x5c0 [ 179.427367][ T6982] extract_iter_to_sg+0xebc/0x2680 [ 179.427398][ T6982] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 179.427418][ T6982] ? unpin_user_page+0xe5/0x1e0 [ 179.427437][ T6982] ? __pfx_unpin_user_page+0x10/0x10 [ 179.427456][ T6982] ? __local_bh_enable_ip+0x168/0x200 [ 179.427474][ T6982] ? __asan_memset+0x23/0x50 [ 179.427492][ T6982] ? __asan_memset+0x23/0x50 [ 179.427516][ T6982] hash_sendmsg+0x522/0x11c0 [ 179.427553][ T6982] ? __pfx_hash_sendmsg+0x10/0x10 [ 179.427570][ T6982] __sock_sendmsg+0x221/0x270 [ 179.427593][ T6982] ____sys_sendmsg+0x523/0x860 [ 179.427617][ T6982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.427631][ T6982] ? __fget_files+0x2a/0x420 [ 179.427647][ T6982] ? __fget_files+0x2a/0x420 [ 179.427668][ T6982] __sys_sendmsg+0x271/0x360 [ 179.427688][ T6982] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.427750][ T6982] ? do_syscall_64+0xb6/0x230 [ 179.427771][ T6982] do_syscall_64+0xf3/0x230 [ 179.427789][ T6982] ? clear_bhb_loop+0x45/0xa0 [ 179.427807][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.427822][ T6982] RIP: 0033:0x7f6e07f8d169 [ 179.427836][ T6982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.427849][ T6982] RSP: 002b:00007f6e08e15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.427866][ T6982] RAX: ffffffffffffffda RBX: 00007f6e081a6160 RCX: 00007f6e07f8d169 [ 179.427878][ T6982] RDX: 0000000000000000 RSI: 0000200000008dc0 RDI: 0000000000000009 [ 179.427888][ T6982] RBP: 00007f6e08e15090 R08: 0000000000000000 R09: 0000000000000000 [ 179.427898][ T6982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.427907][ T6982] R13: 0000000000000000 R14: 00007f6e081a6160 R15: 00007f6e082cfa28 [ 179.427930][ T6982] [ 180.292855][ T53] usb 2-1: USB disconnect, device number 13 [ 180.331679][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.486831][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.705981][ T53] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 180.880813][ T53] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.904570][ T53] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 180.924117][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.954645][ T53] usb 3-1: config 0 descriptor?? [ 180.983989][ T53] pwc: Askey VC010 type 2 USB webcam detected. [ 181.386375][ T53] pwc: recv_control_msg error -32 req 02 val 2b00 [ 181.396568][ T53] pwc: recv_control_msg error -32 req 02 val 2700 [ 181.423058][ T53] pwc: recv_control_msg error -32 req 02 val 2c00 [ 181.439572][ T53] pwc: recv_control_msg error -32 req 04 val 1000 [ 181.450166][ T53] pwc: recv_control_msg error -32 req 04 val 1300 [ 181.458871][ T53] pwc: recv_control_msg error -32 req 04 val 1400 [ 181.466294][ T1215] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 181.474017][ T53] pwc: recv_control_msg error -32 req 02 val 2000 [ 181.482621][ T53] pwc: recv_control_msg error -32 req 02 val 2100 [ 181.643077][ T1215] usb 4-1: Using ep0 maxpacket: 16 [ 181.656629][ T1215] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 181.677849][ T1215] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.698361][ T1215] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.710436][ T1215] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.720615][ T53] pwc: recv_control_msg error -71 req 04 val 1500 [ 181.727595][ T53] pwc: recv_control_msg error -71 req 02 val 2500 [ 181.736939][ T1215] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.746719][ T53] pwc: recv_control_msg error -71 req 02 val 2400 [ 181.754668][ T1215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.783283][ T53] pwc: recv_control_msg error -71 req 02 val 2600 [ 181.829417][ T1215] usb 4-1: Product: syz [ 181.833695][ T1215] usb 4-1: Manufacturer: syz [ 181.844767][ T53] pwc: recv_control_msg error -71 req 02 val 2900 [ 181.873115][ T1215] usb 4-1: SerialNumber: syz [ 181.881132][ T53] pwc: recv_control_msg error -71 req 02 val 2800 [ 181.908542][ T53] pwc: recv_control_msg error -71 req 04 val 1100 [ 181.931274][ T53] pwc: recv_control_msg error -71 req 04 val 1200 [ 181.971334][ T5895] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 182.007525][ T53] pwc: Registered as video103. [ 182.022796][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.030382][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.037736][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.045084][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.052518][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.061171][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.069597][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.076959][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.095935][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.104138][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.113988][ T53] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 182.123538][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.130876][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.138173][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.145384][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.152674][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.159975][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.167203][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.176262][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.183750][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.183791][ T5197] usb 1-1: control msg error: -71 [ 182.195680][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.203713][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.211084][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.218468][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.225937][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.233426][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.240873][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.248342][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.255704][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.262917][ C1] usb 1-1: pegasus_irq - usb_submit_urb failed with result -1 [ 182.295381][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.302855][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.310344][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.317735][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.325094][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.332608][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.340062][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.347415][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.354753][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.362157][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.370027][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 182.373226][ T5895] usb 1-1: USB disconnect, device number 17 [ 182.377171][ C0] usb 1-1: pegasus_irq - usb_submit_urb failed with result -19 [ 182.408404][ T5197] usb 1-1: control msg error: -71 [ 182.410650][ T53] usb 3-1: USB disconnect, device number 14 [ 182.742064][ T1215] usb 4-1: USB disconnect, device number 16 [ 183.023462][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.105733][ T5897] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 183.308005][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 183.332821][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.375291][ T5897] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 183.406052][ T5897] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 183.415155][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.435254][ T5897] usb 5-1: Product: syz [ 183.439827][ T5897] usb 5-1: Manufacturer: syz [ 183.445261][ T5897] usb 5-1: SerialNumber: syz [ 183.463889][ T5897] usb 5-1: config 0 descriptor?? [ 183.890279][ T7039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.968884][ T7039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.997242][ T7039] netlink: 'syz.4.324': attribute type 10 has an invalid length. [ 184.014526][ T7039] team0: left promiscuous mode [ 184.022470][ T7039] team_slave_0: left promiscuous mode [ 184.028406][ T7039] team_slave_1: left promiscuous mode [ 184.037908][ T7039] batman_adv: batadv0: Adding interface: team0 [ 184.044119][ T7039] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.069526][ T7039] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 184.115774][ T5897] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 184.225719][ T5895] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 184.234412][ T7042] FAULT_INJECTION: forcing a failure. [ 184.234412][ T7042] name failslab, interval 1, probability 0, space 0, times 0 [ 184.252274][ T7042] CPU: 1 UID: 0 PID: 7042 Comm: syz.2.330 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 184.252306][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.252320][ T7042] Call Trace: [ 184.252328][ T7042] [ 184.252337][ T7042] dump_stack_lvl+0x241/0x360 [ 184.252376][ T7042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.252407][ T7042] ? __pfx__printk+0x10/0x10 [ 184.252441][ T7042] ? __pfx___might_resched+0x10/0x10 [ 184.252474][ T7042] should_fail_ex+0x424/0x570 [ 184.252502][ T7042] should_failslab+0xac/0x100 [ 184.252533][ T7042] __kmalloc_cache_noprof+0x73/0x370 [ 184.252561][ T7042] ? snd_pcm_oss_change_params_locked+0xb30/0x4150 [ 184.252599][ T7042] snd_pcm_oss_change_params_locked+0xb30/0x4150 [ 184.252642][ T7042] ? rcu_is_watching+0x15/0xb0 [ 184.252673][ T7042] ? __mutex_lock+0x380/0x10c0 [ 184.252709][ T7042] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 184.252741][ T7042] ? snd_pcm_oss_get_active_substream+0x140/0x280 [ 184.252789][ T7042] ? tomoyo_path_number_perm+0x215/0x790 [ 184.252826][ T7042] snd_pcm_oss_get_active_substream+0x1cc/0x280 [ 184.252863][ T7042] snd_pcm_oss_get_formats+0xa4/0x540 [ 184.252898][ T7042] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 184.252940][ T7042] snd_pcm_oss_set_format+0x8e/0x5e0 [ 184.252982][ T7042] ? __pfx_snd_pcm_oss_set_format+0x10/0x10 [ 184.253017][ T7042] ? __might_fault+0xaa/0x120 [ 184.253053][ T7042] snd_pcm_oss_ioctl+0xe8b/0x10b0 [ 184.253085][ T7042] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 184.253111][ T7042] ? __fget_files+0x2a/0x420 [ 184.253129][ T7042] ? __fget_files+0x2a/0x420 [ 184.253155][ T7042] ? __fget_files+0x2a/0x420 [ 184.253179][ T7042] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 184.253210][ T7042] __se_sys_ioctl+0xf1/0x160 [ 184.253238][ T7042] do_syscall_64+0xf3/0x230 [ 184.253265][ T7042] ? clear_bhb_loop+0x45/0xa0 [ 184.253291][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.253311][ T7042] RIP: 0033:0x7f6e07f8d169 [ 184.253329][ T7042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.253347][ T7042] RSP: 002b:00007f6e08e57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.253371][ T7042] RAX: ffffffffffffffda RBX: 00007f6e081a5fa0 RCX: 00007f6e07f8d169 [ 184.253387][ T7042] RDX: 0000200000000080 RSI: 00000000c0045005 RDI: 0000000000000003 [ 184.253401][ T7042] RBP: 00007f6e08e57090 R08: 0000000000000000 R09: 0000000000000000 [ 184.253414][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.253428][ T7042] R13: 0000000000000000 R14: 00007f6e081a5fa0 R15: 00007f6e082cfa28 [ 184.253461][ T7042] [ 184.597408][ T5897] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.676448][ T5897] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.698559][ T5897] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 184.857460][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.937010][ T5895] usb 4-1: config 0 has no interfaces? [ 184.948277][ T5895] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 184.994945][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.012611][ T5895] usb 4-1: Product: syz [ 185.024606][ T5895] usb 4-1: Manufacturer: syz [ 185.039190][ T5895] usb 4-1: SerialNumber: syz [ 185.216682][ T5895] usb 4-1: config 0 descriptor?? [ 185.268299][ T5897] usb 1-1: config 0 descriptor?? [ 185.496209][ T5897] usbhid 1-1:0.0: can't add hid device: -71 [ 185.502325][ T5897] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 185.719065][ T5897] usb 1-1: USB disconnect, device number 18 [ 186.364762][ T7051] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 186.378234][ T7051] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 186.415712][ T5897] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 186.645294][ T5897] usb 2-1: config 0 has no interfaces? [ 186.721135][ T5897] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 186.732411][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.794616][ T5897] usb 2-1: Product: syz [ 186.812982][ T5897] usb 2-1: Manufacturer: syz [ 186.830395][ T5897] usb 2-1: SerialNumber: syz [ 186.850684][ T5897] usb 2-1: config 0 descriptor?? [ 187.223364][ T5893] usb 5-1: USB disconnect, device number 15 [ 187.488953][ T7053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.498166][ T7053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.565812][ T5895] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 187.705304][ T5893] usb 4-1: USB disconnect, device number 17 [ 187.755763][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 187.780522][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.803253][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.074513][ T5895] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 188.113381][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.144143][ T5895] usb 3-1: config 0 descriptor?? [ 188.175842][ T5930] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 188.419294][ T5930] usb 1-1: config 0 has no interfaces? [ 188.432964][ T5930] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 188.442518][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.466799][ T5930] usb 1-1: Product: syz [ 188.486443][ T5930] usb 1-1: Manufacturer: syz [ 188.494888][ T5930] usb 1-1: SerialNumber: syz [ 188.522202][ T5930] usb 1-1: config 0 descriptor?? [ 188.805830][ T919] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 189.038411][ T919] usb 5-1: config 0 has no interfaces? [ 189.263884][ T919] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 189.273297][ T919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.285322][ T919] usb 5-1: Product: syz [ 189.345892][ T919] usb 5-1: Manufacturer: syz [ 189.367381][ T919] usb 5-1: SerialNumber: syz [ 189.384846][ T919] usb 5-1: config 0 descriptor?? [ 189.603547][ T7083] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 189.634119][ T7083] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 189.657797][ T919] usb 2-1: USB disconnect, device number 14 [ 189.733811][ T7087] mmap: syz.4.342 (7087) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 190.815785][ T919] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 190.975533][ T919] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 191.015937][ T919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.038351][ T5895] usbhid 3-1:0.0: can't add hid device: -71 [ 191.076519][ T919] usb 4-1: config 0 descriptor?? [ 191.082740][ T5895] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 191.108922][ T5896] usb 1-1: USB disconnect, device number 19 [ 191.134007][ T5895] usb 3-1: USB disconnect, device number 15 [ 191.301888][ T919] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 191.311367][ T919] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 191.612329][ T919] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 191.627227][ T919] [drm] Initialized udl on minor 2 [ 191.682348][ T5893] usb 5-1: USB disconnect, device number 16 [ 191.950129][ T919] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 191.995517][ T919] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 192.040573][ T5893] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 192.049899][ T919] usb 4-1: USB disconnect, device number 18 [ 192.079729][ T5893] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 192.450287][ T7124] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 192.460125][ T7124] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 193.745727][ T5896] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 193.788506][ T7158] netlink: 'syz.3.366': attribute type 10 has an invalid length. [ 193.812235][ T7158] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 194.067014][ T5896] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 194.090438][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.184572][ T5896] usb 1-1: config 0 descriptor?? [ 194.205508][ T5896] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 194.261833][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.269912][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.425904][ T5896] gspca_sunplus: reg_w_riv err -71 [ 194.455276][ T5896] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 194.497419][ T5896] usb 1-1: USB disconnect, device number 20 [ 194.554462][ T7165] pimreg: entered allmulticast mode [ 194.571286][ T7165] pimreg: left allmulticast mode [ 194.770546][ T7168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.369'. [ 195.162467][ T7176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.197809][ T7176] delete_channel: no stack [ 195.292633][ T7175] delete_channel: no stack [ 195.592969][ T7172] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 195.628753][ T7172] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 196.015999][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 196.331265][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 196.397064][ T5930] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 196.635724][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 196.673698][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.693359][ T5930] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 196.721840][ T5930] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 196.744304][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.765262][ T5930] usb 4-1: Product: syz [ 196.774471][ T5930] usb 4-1: Manufacturer: syz [ 196.813910][ T5930] usb 4-1: SerialNumber: syz [ 196.910043][ T5930] usb 4-1: config 0 descriptor?? [ 197.035460][ T7184] batman_adv: batadv0: Removing interface: team0 [ 197.329180][ T7192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.362659][ T7192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.462191][ T7192] netlink: 'syz.3.378': attribute type 10 has an invalid length. [ 197.517551][ T7215] netlink: 'syz.3.378': attribute type 10 has an invalid length. [ 197.533620][ T7215] netlink: 2 bytes leftover after parsing attributes in process `syz.3.378'. [ 197.535279][ T7192] bridge0: port 3(team0) entered disabled state [ 197.610079][ T7192] team0: left allmulticast mode [ 197.616034][ T7192] team_slave_0: left allmulticast mode [ 197.629283][ T7192] team_slave_1: left allmulticast mode [ 197.636753][ T7192] team0: left promiscuous mode [ 197.642543][ T7192] team_slave_0: left promiscuous mode [ 197.690876][ T7192] team_slave_1: left promiscuous mode [ 197.721233][ T7192] bridge0: port 3(team0) entered disabled state [ 197.787497][ T7192] batman_adv: batadv0: Adding interface: team0 [ 197.799475][ T7192] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.839370][ T7192] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 197.873327][ T7215] team0: entered promiscuous mode [ 197.878797][ T7215] team_slave_0: entered promiscuous mode [ 197.888611][ T7215] team_slave_1: entered promiscuous mode [ 197.928100][ T7215] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.936598][ T7215] batman_adv: batadv0: Interface activated: team0 [ 197.949862][ T7215] batman_adv: batadv0: Interface deactivated: team0 [ 197.960012][ T7215] batman_adv: batadv0: Removing interface: team0 [ 197.984914][ T7215] bridge0: port 3(team0) entered blocking state [ 198.015017][ T7215] bridge0: port 3(team0) entered disabled state [ 198.027929][ T7215] team0: entered allmulticast mode [ 198.035173][ T7215] team_slave_0: entered allmulticast mode [ 198.043661][ T7215] team_slave_1: entered allmulticast mode [ 198.059970][ T7215] bridge0: port 3(team0) entered blocking state [ 198.066464][ T7215] bridge0: port 3(team0) entered forwarding state [ 198.132807][ T5893] usb 4-1: USB disconnect, device number 19 [ 198.223599][ T151] tipc: Subscription rejected, illegal request [ 198.297943][ T7229] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 198.310166][ T7229] bond0: (slave lo): Error: Device can not be enslaved while up [ 198.433118][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 198.433138][ T30] audit: type=1326 audit(1743976479.416:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f418d169 code=0x7ffc0000 [ 198.539347][ T30] audit: type=1326 audit(1743976479.446:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f418d169 code=0x7ffc0000 [ 198.627060][ T7239] dccp_invalid_packet: P.Data Offset(10) too large [ 198.684450][ T30] audit: type=1326 audit(1743976479.446:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f76f418d169 code=0x7ffc0000 [ 198.797631][ T30] audit: type=1326 audit(1743976479.446:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f418d169 code=0x7ffc0000 [ 198.819746][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.901727][ T30] audit: type=1326 audit(1743976479.446:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f418d169 code=0x7ffc0000 [ 198.995732][ T30] audit: type=1326 audit(1743976479.446:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f76f418d169 code=0x7ffc0000 [ 199.017850][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.071848][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 199.176074][ T30] audit: type=1326 audit(1743976479.446:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76f4129359 code=0x7ffc0000 [ 199.544130][ T30] audit: type=1326 audit(1743976479.446:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76f4129359 code=0x7ffc0000 [ 199.680705][ T30] audit: type=1326 audit(1743976479.446:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76f4129359 code=0x7ffc0000 [ 199.702712][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.811828][ T30] audit: type=1326 audit(1743976479.446:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76f4129359 code=0x7ffc0000 [ 199.833871][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.858655][ T53] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 200.059394][ T53] usb 1-1: config 0 has no interfaces? [ 200.194771][ T53] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 200.275731][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.301506][ T7268] xt_TPROXY: Can be used only with -p tcp or -p udp [ 200.327488][ T53] usb 1-1: Product: syz [ 200.353439][ T53] usb 1-1: Manufacturer: syz [ 200.369654][ T53] usb 1-1: SerialNumber: syz [ 200.402796][ T53] usb 1-1: config 0 descriptor?? [ 200.905827][ T5893] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 201.189970][ T7283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.402'. [ 201.242846][ T7283] vlan2: entered promiscuous mode [ 201.254985][ T5893] usb 3-1: config 0 has no interfaces? [ 201.265231][ T5893] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 201.305858][ T7283] hsr0: entered promiscuous mode [ 201.313237][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.405981][ T53] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 201.467578][ T5893] usb 3-1: Product: syz [ 201.522430][ T5893] usb 3-1: Manufacturer: syz [ 201.562520][ T5893] usb 3-1: SerialNumber: syz [ 201.575849][ T53] usb 5-1: Using ep0 maxpacket: 32 [ 201.685741][ T5893] usb 3-1: config 0 descriptor?? [ 202.402799][ T7282] ALSA: seq fatal error: cannot create timer (-19) [ 203.526459][ T7276] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 203.534303][ T7276] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 203.565146][ T7276] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 203.595507][ T5893] usb 1-1: USB disconnect, device number 21 [ 203.751013][ T7276] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 203.758069][ T7276] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 203.812643][ T7276] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 203.838080][ T7276] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.848365][ T7276] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 203.868789][ T7276] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 203.906737][ T7276] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.913003][ T7276] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 203.991741][ T7276] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 204.034070][ T7276] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 204.046610][ T7276] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 204.190968][ T7303] netlink: 32 bytes leftover after parsing attributes in process `syz.1.408'. [ 204.335752][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.413599][ T30] kauditd_printk_skb: 223 callbacks suppressed [ 204.413615][ T30] audit: type=1326 audit(1743976485.396:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c4d8d169 code=0x7ffc0000 [ 204.505827][ T30] audit: type=1326 audit(1743976485.436:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c4d8d169 code=0x7ffc0000 [ 204.529421][ T30] audit: type=1326 audit(1743976485.436:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f56c4d8d169 code=0x7ffc0000 [ 204.560362][ T30] audit: type=1326 audit(1743976485.436:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c4d8d169 code=0x7ffc0000 [ 204.594438][ T30] audit: type=1326 audit(1743976485.436:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c4d8d169 code=0x7ffc0000 [ 204.693770][ T30] audit: type=1326 audit(1743976485.436:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f56c4d8d169 code=0x7ffc0000 [ 204.719740][ T30] audit: type=1326 audit(1743976485.436:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56c4d29359 code=0x7ffc0000 [ 204.752350][ T30] audit: type=1326 audit(1743976485.436:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c4d8d169 code=0x7ffc0000 [ 204.780377][ T30] audit: type=1326 audit(1743976485.436:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c4d8d169 code=0x7ffc0000 [ 204.812461][ T30] audit: type=1326 audit(1743976485.436:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56c4d29359 code=0x7ffc0000 [ 204.983895][ T5893] usb 3-1: USB disconnect, device number 16 [ 205.185134][ T53] usb 5-1: unable to get BOS descriptor or descriptor too short [ 205.219422][ T53] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 205.243681][ T53] usb 5-1: can't read configurations, error -71 [ 205.268823][ T7321] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 205.647677][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.417'. [ 205.762097][ T7332] netlink: 68 bytes leftover after parsing attributes in process `syz.1.418'. [ 205.776109][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 205.848279][ T7332] netlink: 72 bytes leftover after parsing attributes in process `syz.1.418'. [ 205.860982][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.936098][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.102073][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 206.133666][ T7341] netlink: 44 bytes leftover after parsing attributes in process `syz.1.419'. [ 206.416123][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.495848][ T5896] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 206.595797][ T5897] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 206.789872][ T5897] usb 4-1: config 0 has no interfaces? [ 206.836052][ T5896] usb 2-1: device descriptor read/64, error -71 [ 206.850995][ T5897] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 206.874580][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.910706][ T5897] usb 4-1: Product: syz [ 206.939041][ T5897] usb 4-1: Manufacturer: syz [ 206.969307][ T5897] usb 4-1: SerialNumber: syz [ 206.983474][ T5897] usb 4-1: config 0 descriptor?? [ 207.109258][ T5896] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 207.242854][ T7355] bridge_slave_0: default FDB implementation only supports local addresses [ 207.316280][ T5896] usb 2-1: device descriptor read/64, error -71 [ 207.338911][ T7355] sctp: [Deprecated]: syz.2.424 (pid 7355) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.338911][ T7355] Use struct sctp_sack_info instead [ 207.436919][ T5896] usb usb2-port1: attempt power cycle [ 207.873814][ T5896] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 207.897262][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 207.914181][ T5896] usb 2-1: device descriptor read/8, error -71 [ 207.936089][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 208.015771][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 208.175868][ T5896] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 208.183623][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 208.209258][ T5896] usb 2-1: device descriptor read/8, error -71 [ 208.326017][ T5896] usb usb2-port1: unable to enumerate USB device [ 208.495716][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 209.587186][ T7376] : entered promiscuous mode [ 209.734770][ T5930] usb 4-1: USB disconnect, device number 20 [ 209.909457][ T7385] gretap0: entered promiscuous mode [ 209.917594][ T7385] macsec1: entered promiscuous mode [ 209.935853][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 209.969535][ T7385] gretap0: left promiscuous mode [ 210.017393][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 210.095796][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 210.122060][ T7393] sctp: [Deprecated]: syz.0.436 (pid 7393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.122060][ T7393] Use struct sctp_sack_info instead [ 210.125690][ T24] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 210.182172][ T7388] bridge_slave_0: default FDB implementation only supports local addresses [ 210.325790][ T5896] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 210.352534][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 210.397604][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.441683][ T24] usb 3-1: config 0 descriptor?? [ 210.469510][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 210.572091][ T5896] usb 2-1: config 0 has no interfaces? [ 210.591070][ T5896] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 210.600580][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.611184][ T5896] usb 2-1: Product: syz [ 210.617525][ T5896] usb 2-1: Manufacturer: syz [ 210.622376][ T5896] usb 2-1: SerialNumber: syz [ 210.645287][ T5896] usb 2-1: config 0 descriptor?? [ 210.705832][ T5930] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 210.912179][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 210.933968][ T5930] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 210.946960][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.969534][ T5930] usb 5-1: config 0 descriptor?? [ 211.180715][ T5895] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 211.355679][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 211.374419][ T5895] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 211.392109][ T5895] usb 1-1: config 0 has no interface number 0 [ 211.412471][ T5895] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 211.465161][ T5895] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 211.491568][ T5895] usb 1-1: config 0 interface 41 has no altsetting 0 [ 211.514550][ T5895] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 211.539529][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.583916][ T5895] usb 1-1: Product: syz [ 211.615456][ T5895] usb 1-1: Manufacturer: syz [ 211.657028][ T5895] usb 1-1: SerialNumber: syz [ 211.705755][ T5895] usb 1-1: config 0 descriptor?? [ 211.716811][ T7404] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 211.725652][ T7404] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 211.936376][ T7378] netlink: zone id is out of range [ 211.949724][ T7404] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 211.949867][ T7404] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 211.965925][ T24] gspca_sonixj: i2c_w8 err -71 [ 211.997394][ T24] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 212.028092][ T24] usb 3-1: USB disconnect, device number 17 [ 212.824167][ T7399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.836356][ T7399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.887942][ T7417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.896978][ T7417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.905350][ T7417] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 212.913108][ T7417] netlink: 'syz.0.442': attribute type 2 has an invalid length. [ 212.923352][ T7417] FAULT_INJECTION: forcing a failure. [ 212.923352][ T7417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.944570][ T7417] CPU: 1 UID: 0 PID: 7417 Comm: syz.0.442 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 212.944602][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.944615][ T7417] Call Trace: [ 212.944624][ T7417] [ 212.944633][ T7417] dump_stack_lvl+0x241/0x360 [ 212.944678][ T7417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.944709][ T7417] ? __pfx__printk+0x10/0x10 [ 212.944752][ T7417] should_fail_ex+0x424/0x570 [ 212.944781][ T7417] _copy_from_iter+0x211/0x1c70 [ 212.944816][ T7417] ? __build_skb_around+0x247/0x3d0 [ 212.944854][ T7417] ? __alloc_skb+0x298/0x480 [ 212.944873][ T7417] ? __pfx__copy_from_iter+0x10/0x10 [ 212.944903][ T7417] ? __pfx___alloc_skb+0x10/0x10 [ 212.944925][ T7417] ? skb_put+0x114/0x1f0 [ 212.944950][ T7417] netlink_sendmsg+0x73c/0xcd0 [ 212.944993][ T7417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.945036][ T7417] ? aa_sock_msg_perm+0x91/0x160 [ 212.945071][ T7417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.945099][ T7417] __sock_sendmsg+0x221/0x270 [ 212.945131][ T7417] ____sys_sendmsg+0x523/0x860 [ 212.945162][ T7417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.945193][ T7417] ? __fget_files+0x2a/0x420 [ 212.945215][ T7417] ? __fget_files+0x2a/0x420 [ 212.945242][ T7417] __sys_sendmsg+0x271/0x360 [ 212.945268][ T7417] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.945340][ T7417] ? do_syscall_64+0xb6/0x230 [ 212.945367][ T7417] do_syscall_64+0xf3/0x230 [ 212.945392][ T7417] ? clear_bhb_loop+0x45/0xa0 [ 212.945415][ T7417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.945435][ T7417] RIP: 0033:0x7f56c4d8d169 [ 212.945452][ T7417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.945469][ T7417] RSP: 002b:00007f56c5c32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.945491][ T7417] RAX: ffffffffffffffda RBX: 00007f56c4fa6160 RCX: 00007f56c4d8d169 [ 212.945506][ T7417] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 000000000000000a [ 212.945519][ T7417] RBP: 00007f56c5c32090 R08: 0000000000000000 R09: 0000000000000000 [ 212.945531][ T7417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.945543][ T7417] R13: 0000000000000000 R14: 00007f56c4fa6160 R15: 00007f56c50cfa28 [ 212.945590][ T7417] [ 213.170159][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.971895][ T5930] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 213.982340][ T5930] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 214.010718][ T5930] asix 5-1:0.0: probe with driver asix failed with error -71 [ 214.027187][ T5930] usb 5-1: USB disconnect, device number 19 [ 214.075772][ T5893] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 214.130193][ T919] usb 2-1: USB disconnect, device number 19 [ 214.229342][ T5893] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 214.249288][ T5893] usb 3-1: config 179 has no interface number 0 [ 214.265327][ T5893] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 214.282408][ T5893] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 214.295440][ T5893] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 214.345996][ T5893] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 214.358667][ T5893] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 214.373179][ T5893] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 214.383293][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.399893][ T7419] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 214.413668][ T7419] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 214.605869][ T919] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 214.766459][ T919] usb 2-1: device descriptor read/64, error -71 [ 214.780896][ T7419] vlan2: entered allmulticast mode [ 214.802121][ T7419] hsr0: entered allmulticast mode [ 214.819952][ T7419] hsr_slave_0: entered allmulticast mode [ 214.833507][ T7419] hsr_slave_1: entered allmulticast mode [ 215.034318][ T5896] usb 3-1: USB disconnect, device number 18 [ 215.036215][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 215.048671][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 215.057679][ C0] ================================================================== [ 215.065788][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x29d/0x370 [ 215.073643][ C0] Read of size 4 at addr ffff88805885785c by task swapper/0/0 [ 215.081132][ C0] [ 215.083484][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 215.083510][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.083523][ C0] Call Trace: [ 215.083531][ C0] [ 215.083539][ C0] dump_stack_lvl+0x241/0x360 [ 215.083573][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.083601][ C0] ? __virt_addr_valid+0x183/0x530 [ 215.083629][ C0] ? rcu_is_watching+0x15/0xb0 [ 215.083653][ C0] ? __virt_addr_valid+0x183/0x530 [ 215.083678][ C0] ? lock_release+0x4e/0x3e0 [ 215.083704][ C0] ? __virt_addr_valid+0x183/0x530 [ 215.083732][ C0] ? __virt_addr_valid+0x183/0x530 [ 215.083760][ C0] print_report+0x16e/0x5b0 [ 215.083786][ C0] ? __virt_addr_valid+0x183/0x530 [ 215.083811][ C0] ? __virt_addr_valid+0x183/0x530 [ 215.083837][ C0] ? __virt_addr_valid+0x45f/0x530 [ 215.083863][ C0] ? __phys_addr+0xba/0x170 [ 215.083890][ C0] ? do_raw_spin_lock+0x29d/0x370 [ 215.083916][ C0] kasan_report+0x143/0x180 [ 215.083941][ C0] ? do_raw_spin_lock+0x29d/0x370 [ 215.083972][ C0] do_raw_spin_lock+0x29d/0x370 [ 215.084002][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 215.084032][ C0] ? do_raw_spin_lock+0x151/0x370 [ 215.084062][ C0] _raw_spin_lock_irqsave+0xe4/0x130 [ 215.084083][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 215.084104][ C0] ? kcov_remote_stop+0x78/0x6f0 [ 215.084128][ C0] __wake_up_common_lock+0x25/0x1e0 [ 215.084164][ C0] __usb_hcd_giveback_urb+0x501/0x6e0 [ 215.084192][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 215.084219][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 215.084252][ C0] dummy_timer+0x84b/0x4670 [ 215.084277][ C0] ? __lock_acquire+0xad5/0xd80 [ 215.084311][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 215.084333][ C0] ? do_raw_spin_lock+0x151/0x370 [ 215.084369][ C0] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 215.084393][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 215.084416][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 215.084437][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 215.084458][ C0] __hrtimer_run_queues+0x5a6/0xd40 [ 215.084493][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 215.084518][ C0] ? read_tsc+0x9/0x20 [ 215.084536][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 215.084559][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 215.084588][ C0] handle_softirqs+0x2d6/0x9b0 [ 215.084614][ C0] ? __irq_exit_rcu+0xfb/0x220 [ 215.084636][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 215.084657][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 215.084696][ C0] __irq_exit_rcu+0xfb/0x220 [ 215.084717][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 215.084743][ C0] irq_exit_rcu+0x9/0x30 [ 215.084762][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 215.084785][ C0] [ 215.084792][ C0] [ 215.084800][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.084822][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 215.084847][ C0] Code: cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 a1 17 00 f3 0f 1e fa fb f4 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 215.084866][ C0] RSP: 0018:ffffffff8ea07d60 EFLAGS: 000002c6 [ 215.084904][ C0] RAX: cc79f3e464fdd600 RBX: ffffffff8197af7e RCX: ffffffff8c30995c [ 215.084921][ C0] RDX: 0000000000000001 RSI: ffffffff8e69c681 RDI: ffffffff8ca1b660 [ 215.084937][ C0] RBP: ffffffff8ea07eb8 R08: ffff8880b8632b5b R09: 1ffff110170c656b [ 215.084951][ C0] R10: dffffc0000000000 R11: ffffed10170c656c R12: 1ffffffff1d40fc6 [ 215.084968][ C0] R13: 1ffffffff1d52cb0 R14: 0000000000000000 R15: dffffc0000000000 [ 215.084986][ C0] ? do_idle+0x22e/0x5d0 [ 215.085012][ C0] ? ct_kernel_exit+0x12c/0x1a0 [ 215.085040][ C0] default_idle+0x13/0x20 [ 215.085066][ C0] default_idle_call+0x74/0xb0 [ 215.085092][ C0] do_idle+0x22e/0x5d0 [ 215.085117][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 215.085139][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 215.085164][ C0] ? __pfx_do_idle+0x10/0x10 [ 215.085190][ C0] ? do_idle+0x10/0x5d0 [ 215.085213][ C0] ? rest_init+0x31/0x300 [ 215.085241][ C0] cpu_startup_entry+0x42/0x60 [ 215.085265][ C0] rest_init+0x2dc/0x300 [ 215.085293][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 215.085336][ C0] start_kernel+0x484/0x510 [ 215.085361][ C0] x86_64_start_reservations+0x2a/0x30 [ 215.085387][ C0] x86_64_start_kernel+0x66/0x70 [ 215.085412][ C0] common_startup_64+0x13e/0x147 [ 215.085449][ C0] [ 215.085456][ C0] [ 215.520353][ C0] Allocated by task 5893: [ 215.524685][ C0] kasan_save_track+0x3f/0x80 [ 215.529372][ C0] __kasan_kmalloc+0x9d/0xb0 [ 215.533966][ C0] __kmalloc_cache_noprof+0x236/0x370 [ 215.539349][ C0] xpad_probe+0x3f3/0x1d80 [ 215.543769][ C0] usb_probe_interface+0x650/0xbc0 [ 215.548885][ C0] really_probe+0x2b9/0xad0 [ 215.553403][ C0] __driver_probe_device+0x1a2/0x390 [ 215.558698][ C0] driver_probe_device+0x50/0x430 [ 215.563744][ C0] __device_attach_driver+0x2d6/0x530 [ 215.569152][ C0] bus_for_each_drv+0x258/0x2e0 [ 215.574023][ C0] __device_attach+0x341/0x530 [ 215.578799][ C0] bus_probe_device+0x189/0x260 [ 215.583656][ C0] device_add+0x856/0xbf0 [ 215.587992][ C0] usb_set_configuration+0x1999/0x1fe0 [ 215.593453][ C0] usb_generic_driver_probe+0x88/0x140 [ 215.598930][ C0] usb_probe_device+0x1b8/0x380 [ 215.603805][ C0] really_probe+0x2b9/0xad0 [ 215.608321][ C0] __driver_probe_device+0x1a2/0x390 [ 215.613611][ C0] driver_probe_device+0x50/0x430 [ 215.618645][ C0] __device_attach_driver+0x2d6/0x530 [ 215.624025][ C0] bus_for_each_drv+0x258/0x2e0 [ 215.628884][ C0] __device_attach+0x341/0x530 [ 215.633665][ C0] bus_probe_device+0x189/0x260 [ 215.638521][ C0] device_add+0x856/0xbf0 [ 215.642865][ C0] usb_new_device+0x1052/0x19a0 [ 215.647729][ C0] hub_event+0x2bfd/0x50f0 [ 215.652168][ C0] process_scheduled_works+0xac3/0x18e0 [ 215.657731][ C0] worker_thread+0x870/0xd50 [ 215.662332][ C0] kthread+0x7b7/0x940 [ 215.666412][ C0] ret_from_fork+0x4b/0x80 [ 215.670827][ C0] ret_from_fork_asm+0x1a/0x30 [ 215.675592][ C0] [ 215.677920][ C0] Freed by task 5896: [ 215.681899][ C0] kasan_save_track+0x3f/0x80 [ 215.686579][ C0] kasan_save_free_info+0x40/0x50 [ 215.691615][ C0] __kasan_slab_free+0x59/0x70 [ 215.696541][ C0] kfree+0x198/0x430 [ 215.700451][ C0] xpad_disconnect+0x359/0x490 [ 215.705229][ C0] usb_unbind_interface+0x25b/0x940 [ 215.710438][ C0] device_release_driver_internal+0x503/0x7c0 [ 215.716517][ C0] bus_remove_device+0x34f/0x420 [ 215.721467][ C0] device_del+0x57c/0x9b0 [ 215.725805][ C0] usb_disable_device+0x3c5/0x860 [ 215.730830][ C0] usb_disconnect+0x340/0x960 [ 215.735518][ C0] hub_event+0x1d2a/0x50f0 [ 215.739960][ C0] process_scheduled_works+0xac3/0x18e0 [ 215.745513][ C0] worker_thread+0x870/0xd50 [ 215.750121][ C0] kthread+0x7b7/0x940 [ 215.754202][ C0] ret_from_fork+0x4b/0x80 [ 215.758715][ C0] ret_from_fork_asm+0x1a/0x30 [ 215.763480][ C0] [ 215.765806][ C0] The buggy address belongs to the object at ffff888058857800 [ 215.765806][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 215.779863][ C0] The buggy address is located 92 bytes inside of [ 215.779863][ C0] freed 1024-byte region [ffff888058857800, ffff888058857c00) [ 215.793661][ C0] [ 215.795982][ C0] The buggy address belongs to the physical page: [ 215.802399][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58850 [ 215.811163][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 215.819668][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 215.827261][ C0] page_type: f5(slab) [ 215.831253][ C0] raw: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122 [ 215.839840][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 215.848429][ C0] head: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122 [ 215.857120][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 215.865807][ C0] head: 00fff00000000003 ffffea0001621401 00000000ffffffff 00000000ffffffff [ 215.874478][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 215.883238][ C0] page dumped because: kasan: bad access detected [ 215.889660][ C0] page_owner tracks the page as allocated [ 215.895371][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3529, tgid 3529 (kworker/u8:7), ts 101984750821, free_ts 29046694173 [ 215.914822][ C0] post_alloc_hook+0x1f4/0x240 [ 215.919696][ C0] get_page_from_freelist+0x352b/0x36c0 [ 215.925330][ C0] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 215.931142][ C0] alloc_pages_mpol+0x339/0x690 [ 215.936003][ C0] allocate_slab+0x8f/0x3a0 [ 215.940505][ C0] ___slab_alloc+0xc3b/0x1500 [ 215.945182][ C0] __slab_alloc+0x58/0xa0 [ 215.949604][ C0] __kmalloc_noprof+0x2ea/0x4d0 [ 215.954482][ C0] ieee802_11_parse_elems_full+0x16d/0x2f10 [ 215.960388][ C0] ieee80211_inform_bss+0x166/0x10e0 [ 215.965676][ C0] cfg80211_inform_single_bss_data+0xf5f/0x1ed0 [ 215.971916][ C0] cfg80211_inform_bss_data+0x3c5/0x5860 [ 215.977548][ C0] cfg80211_inform_bss_frame_data+0x3c5/0x720 [ 215.983618][ C0] ieee80211_bss_info_update+0x8ac/0xbc0 [ 215.989256][ C0] ieee80211_ibss_rx_queued_mgmt+0x19ce/0x2e20 [ 215.995410][ C0] ieee80211_iface_work+0x933/0x1100 [ 216.000698][ C0] page last free pid 1 tgid 1 stack trace: [ 216.006508][ C0] __free_frozen_pages+0xde8/0x10a0 [ 216.011723][ C0] free_contig_range+0x154/0x430 [ 216.016667][ C0] destroy_args+0x94/0x4b0 [ 216.021094][ C0] debug_vm_pgtable+0x555/0x590 [ 216.025948][ C0] do_one_initcall+0x24a/0x940 [ 216.030741][ C0] do_initcall_level+0x157/0x210 [ 216.035698][ C0] do_initcalls+0x71/0xd0 [ 216.040061][ C0] kernel_init_freeable+0x432/0x5d0 [ 216.045269][ C0] kernel_init+0x1d/0x2b0 [ 216.049616][ C0] ret_from_fork+0x4b/0x80 [ 216.054044][ C0] ret_from_fork_asm+0x1a/0x30 [ 216.058818][ C0] [ 216.061143][ C0] Memory state around the buggy address: [ 216.066774][ C0] ffff888058857700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 216.074872][ C0] ffff888058857780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 216.082938][ C0] >ffff888058857800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.091001][ C0] ^ [ 216.097935][ C0] ffff888058857880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.105999][ C0] ffff888058857900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.114054][ C0] ================================================================== [ 216.122127][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 216.129326][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 216.140616][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.150713][ C0] Call Trace: [ 216.153999][ C0] [ 216.156858][ C0] dump_stack_lvl+0x241/0x360 [ 216.161559][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.166776][ C0] ? __pfx__printk+0x10/0x10 [ 216.171393][ C0] ? vscnprintf+0x5d/0x90 [ 216.175744][ C0] panic+0x349/0x880 [ 216.179653][ C0] ? check_panic_on_warn+0x21/0xb0 [ 216.184771][ C0] ? __pfx_panic+0x10/0x10 [ 216.189197][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 216.194434][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 216.200331][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 216.206665][ C0] ? print_report+0x519/0x5b0 [ 216.211351][ C0] check_panic_on_warn+0x86/0xb0 [ 216.216300][ C0] ? do_raw_spin_lock+0x29d/0x370 [ 216.221333][ C0] end_report+0x77/0x160 [ 216.225592][ C0] kasan_report+0x154/0x180 [ 216.230101][ C0] ? do_raw_spin_lock+0x29d/0x370 [ 216.235141][ C0] do_raw_spin_lock+0x29d/0x370 [ 216.240003][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 216.245384][ C0] ? do_raw_spin_lock+0x151/0x370 [ 216.250418][ C0] _raw_spin_lock_irqsave+0xe4/0x130 [ 216.255702][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 216.261602][ C0] ? kcov_remote_stop+0x78/0x6f0 [ 216.266554][ C0] __wake_up_common_lock+0x25/0x1e0 [ 216.271792][ C0] __usb_hcd_giveback_urb+0x501/0x6e0 [ 216.277179][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 216.283079][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 216.288292][ C0] dummy_timer+0x84b/0x4670 [ 216.292798][ C0] ? __lock_acquire+0xad5/0xd80 [ 216.297660][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 216.303999][ C0] ? do_raw_spin_lock+0x151/0x370 [ 216.309038][ C0] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 216.314942][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 216.319884][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 216.324825][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 216.329769][ C0] __hrtimer_run_queues+0x5a6/0xd40 [ 216.334989][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 216.340722][ C0] ? read_tsc+0x9/0x20 [ 216.344790][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 216.350853][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 216.355970][ C0] handle_softirqs+0x2d6/0x9b0 [ 216.360738][ C0] ? __irq_exit_rcu+0xfb/0x220 [ 216.365509][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 216.370808][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 216.376027][ C0] __irq_exit_rcu+0xfb/0x220 [ 216.380623][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 216.385831][ C0] irq_exit_rcu+0x9/0x30 [ 216.390075][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 216.395715][ C0] [ 216.398659][ C0] [ 216.401598][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.407590][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 216.413319][ C0] Code: cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 a1 17 00 f3 0f 1e fa fb f4 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 216.432932][ C0] RSP: 0018:ffffffff8ea07d60 EFLAGS: 000002c6 [ 216.439008][ C0] RAX: cc79f3e464fdd600 RBX: ffffffff8197af7e RCX: ffffffff8c30995c [ 216.446990][ C0] RDX: 0000000000000001 RSI: ffffffff8e69c681 RDI: ffffffff8ca1b660 [ 216.454966][ C0] RBP: ffffffff8ea07eb8 R08: ffff8880b8632b5b R09: 1ffff110170c656b [ 216.462943][ C0] R10: dffffc0000000000 R11: ffffed10170c656c R12: 1ffffffff1d40fc6 [ 216.470929][ C0] R13: 1ffffffff1d52cb0 R14: 0000000000000000 R15: dffffc0000000000 [ 216.478914][ C0] ? do_idle+0x22e/0x5d0 [ 216.483170][ C0] ? ct_kernel_exit+0x12c/0x1a0 [ 216.488034][ C0] default_idle+0x13/0x20 [ 216.492384][ C0] default_idle_call+0x74/0xb0 [ 216.497159][ C0] do_idle+0x22e/0x5d0 [ 216.501239][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 216.507396][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 216.512601][ C0] ? __pfx_do_idle+0x10/0x10 [ 216.517205][ C0] ? do_idle+0x10/0x5d0 [ 216.521438][ C0] ? rest_init+0x31/0x300 [ 216.525779][ C0] cpu_startup_entry+0x42/0x60 [ 216.530548][ C0] rest_init+0x2dc/0x300 [ 216.534801][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 216.540370][ C0] start_kernel+0x484/0x510 [ 216.544878][ C0] x86_64_start_reservations+0x2a/0x30 [ 216.550348][ C0] x86_64_start_kernel+0x66/0x70 [ 216.555317][ C0] common_startup_64+0x13e/0x147 [ 216.560277][ C0] [ 216.563630][ C0] Kernel Offset: disabled [ 216.567956][ C0] Rebooting in 86400 seconds..