last executing test programs: 23.311969462s ago: executing program 0 (id=452): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x3) bind$inet(r0, &(0x7f0000000180)={0x2, 0xc620, @local}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0xa0, 0x6, 0x0, 0x1, 0x0, 0x2000, 0x0}) listen(r0, 0x3) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x92, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003020000202505a1a44000010203010902800002010050050904000001020d000005240600010524000900100000000000000090e30700e506241a6000100a2407020180070007000e24070107002f600400080000fc07240a0007080805241500000905810330000500030904010000020d00000904010102020d00000905820240004004fe090503020004090105"], &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x4, 0xb, 0x5, 0x20, 0x7}, 0x4b, &(0x7f0000000280)={0x5, 0xf, 0x4b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x5, 0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0xa3, 0xc, 0x1000, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x2, 0xf000, 0x3, [0xf, 0xff0030, 0x30, 0xffc0, 0x0, 0x62b71a3ebcfd2fd0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x6, 0x3, 0x2}]}, 0x4, [{0x3d, &(0x7f0000000300)=@string={0x3d, 0x3, "29d89aae6af97b8db9e21028fd5d9a0ef3aa97ac68f0cdd13b822bbe14bf22c0ab9aff77b515446ff07de344159150ff9678ca317fe73f9ed09bbc"}}, {0xac, &(0x7f0000000340)=@string={0xac, 0x3, "62316635626e8c70723d513bfa5aab3e616d99c38772cf9e0c049c6e082bc255b69276976222e62ddfbc6f1032190e482ae3e66ce80a5fbda1aead2b3c9ea6488e837bf9015bd426edfb6fc3544fcdeaf28e527bd6b08ce1b546130c0b38fdedbf1c838aab803b444fb8e1d6ecebb0a0996b7631bb741ebe8ad19eb70a2fc0debe557e279cc7c8c3905e769bc473648b0ea62c7c8538c9feb9b0cda3e13836f6eaa6029e04fcf5b23998"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x419}}]}) r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000040)) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x1b, 0x6, 0x6, 0x0, "0ff8001717c3a86d1000", 0x0, 0x7, 0x7, 0xff, 0xc3, 0xfe, 0xff}) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000140)=0xa5b, 0x12) sendmsg$kcm(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000004c0)="434648e5a9ed5fe76b81f2e30eb8c33ae40fae532c76693e651b4a20fb00fe5d9801366fa7826c986bc1d96e0a4bc6579d11fc", 0x33}, {&(0x7f0000000500)="aa07", 0x2}, {&(0x7f0000000540)="3148d89ad390e984505d5a1c02866213201afd9dcdafdd99a8250e7a1734a118bd729597929eacbbedc66cbb806b833d2cfaeb98084797bc0dbf166b0436f7c79cfd418ba50774bb7fe63fc989038f6345f7262c5596740eafeeca12599ab359a9118be52c38", 0x66}, {&(0x7f00000005c0)="3ddc6d75800d1a118b5f0314bc43209884004546433238a93cd479243708acca9818f15a96280adc2ed436c29c761677b2210316cec91ccf81a5c4d059180f9f39c5e002c66d01a09bc325a08f8dbcc5eed294a8a476897810a18eeeac", 0x5d}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="ab0898e55ad4c8d45bd185dd5883f16aa53eb6bc463ddbcf793c02e788ac43ad33ec211092204e94aef6846259440b912710948515650f38f1ef07173d1e7de247798776e74f667e7763a34675f19fb352e866b45772c86ec18768051cb834ce0aa60f7c4c977ac1606a6b2c5de097244a3b91453dfa6d84ea336501a209c1d4", 0x80}, {&(0x7f00000016c0)="3d4fc2d2303e", 0x6}], 0x7, &(0x7f0000001840)=[{0xf4, 0x112, 0x0, "fbb7bdbffe7ce3362397e371a8fdce6e0751cedf4630eb6740220888ea25590d7664a604e828171093025382f295ded73e3046cd41afffde64f4ce16375f2020129615fdf202012ee93b74fa5f2bbde16146217dddcdf4c6808dc78b0db6d021132bfc3257bf9b8dd7b3c1486ed6824cc05f3ee1ec0a003c395101df10681651d0892fe868eac8be28aab91dfb58522183ca385dd8a5bbf11b030c9ecf0223695effccedee072a7070cd2481683bd7174ee307ca9d802d65bec5179f3d3821c224de9ce4594b6c0d7870e8e37e7b060e1f7af138ebb2f8661f07bb4eeb8f01b5fd906f1763"}, {0xd0, 0x108, 0x5, "b15e8db9ce2304cd2a2da40eae819143d63914880bb7613ad96bd50749a6b1c2769e23c60f43e9d98f0b6cc2b67d58c51fbc6e73e14aa27565a535ee3dd1b07e9dfe28a88a0e9733e2563189e34ab298e0509ad6a47fbec4a95453e4e88bf92721f747665c5e68ca44da551a8f6c24ffe4ed4c9bc082f65b306726d93bd0b9f8e81e7ff1b7824a4cee79d376b3cd177038fd4a2b86de3d888a9ba44efe15238efc2aa4767d107dd8476369d64ab530e094d41ea0c1b9bf441710fdf6ee223e2a4dd343"}, {0xb0, 0x10f, 0xffff8001, "2a2d7dd72d7741e669ceb084970cea9680af21c2b2ce5e771dae9fa0c4b9e2de98b7f41f745f3c1452f3dc5f7eb04f4aac87f379bdcdbdb60d8dc126624bced1b4a065a4f6eca0e715a3b51bf5fee710bb3adc5afdfc56148dc1d18a5fbb6e1f84fd0628e3c878b7e4361be90f4df719258a279bd1c2e2c7bfa0377a2b383f3568d1642a4b93cf6b7b525d6ed9a61ce2d6894bc4d3852e83f500f8d284cd87b1e4"}, {0x90, 0x10b, 0x7, "53e8fe7376cdc4337d8628c31964b9524c3248461d9eed07a808c7164c9f716b69558b0c48b6053ffa2a64423157a1d3046e1f28b9a4fa1ca677acf9b84c41c295932b16770211b1eb95883a4c0ca21db4c70f366a267f2b02712f7a33ee5b3864f4fc4ac9df0b1988d86ab093e849de199be9dd73c668180c8a70f708313ba9f7f2"}, {0x88, 0x115, 0x2, "4020f1c2df82e70e4f169976fba42d3e8adb8ef5fdfe7999b2d97e3de6d25cab66ffb5e1ee3db723c6ad9f9428c70a75c7fd703f4d916ddbe910bce9b92149e77f733321abeac54a88893dedb04cf6a85ef360ed1d3ac5fbf093f58a334d4f60f99920610bf06ae9f31cea11577b35bf07efcb0742783590fd4f"}, {0xdc, 0x115, 0x400, "41c392323c3715c7289d28be99a7901de3c6e41cc69691b6a0fbf8a2d1fa4fb30723ed9951dce379e828ec85ab85bc9068464ab1eb607905e0763d92a25b5201b82afb644fac726e8be36ab4327b598481071f89a670e285bb7c68acc1d1ec320c6c82c72a36a06615f33b2f8c98dd2fbe78d99d6bdf961c07493e6c9a11f3ad23c5d080349752539aaa92511ee7b101c1115b235a6f199d245951556900a587681bc4df56566b5d13431534b03a79fa274ea375cf6146f6258292759c100306734b74a005dc5d185e5e3a7350929f5b"}, {0xbc, 0xff, 0x1, "b5ebb58650680896af90f89a8120ed36759d4f3b560ad87ba42ef9450f53d2494cc9c05667fee65415fb56308bcd7fea514727048786c75be91c5ad708d7aaf05cc8f514d3c85d182fb580f0e124860c764bff40d4f5d0eafa76e515af68a86c1eec7e7d098a171a2b2ba7aea90c86e025f315f64450752ff7bf98cc339a31a44723067faea2cb9ea60c904f79aa9b081cda182b26783f55238706256105a9474adc029006fc57781cd4b91256"}, {0xd0, 0x10c, 0x7, "9ac8e231202cda8de7b6346ed2afc0372b38db4e5ce149175747ac8ecdf5a2d132fbd0f9df2fd50ea62b5e13c9d562d79b150b8ddbecb6ee2eb3ce1e9402e8431f626a319eb7c3939e7f2b362f15876a89269086785bd7bc948943e1b285c902bb6f2ecede6cddcb53362a7f3d780e2d9e2844c2210c1ac99947bd080ee7d5d9cf65d2e41052d5b5ff5d8468d3ef4cd14fe4260a0a24ff7f08e3bcb6134e98c34dac243fb33d318580a596ac0b303edfc406e4873c91e428b05beaf4c0f53f1b146932"}, {0x5c, 0x10b, 0x4, "c68614086233f6ad945c375963e1cb969c9269b0bb6ca2210619a593abedd568de2e9b2cee7563e99f4a2e95cdf661bf206f43a1290734321737b9535238dc80315d49befe178ea38eb8bdf89b"}, {0xf0, 0x29, 0x4, "9dc58004097e7b00020f53f926079a4545c949d5b7f6f0f894dab13880ea23f8f4ff2d9b4edf114126ae14a0970183f2526d25f09d13e731d699c6ad80009f157f310de9f2448739eee5c79bc685393c8020e088e664f838a05dd013f7a60818329c5c0ee4cd0c145a214d706aae4229b033ef72ae17082f295cc85f61deb4882ead35f39843067b572e73dea5bfc1d32b67fb1df5d1031508b984f2ff299790632e74791c405cbedc94310fc0625f7b35c6cade1445f2d48ee1fd24bc0bff843e4c942259f69f5ef9aa98653b5d84468c251bdfaa2da95daf1895a2d38a135247"}], 0x740}, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x88) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0xb, &(0x7f0000001800)=0x4000edf, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001f80)=ANY=[@ANYBLOB="380000001800290200000000000000000200000008000000000000001c00098008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\b\x00+\x00', @ANYRES32=0x0, @ANYBLOB="5a1d34a4f33f5733daff4c689fef8c1425d848fded4f0cf686f29341660eb395adc97d843005c077f6d1b72e5e7f39235a5f6fc3a86901d1a2fbdde2e82dd779ba78c03a290a20e19794a5b40f4a274b3f9baf3a5bdca1d292bf0660502a2d79d0f5587a83b8a2096605bc4fb21ba9de2c9099b38258e5d9398c45c33679d44bc8d07e139ea2ac842b9e9f7e9e269c324a1143a6e2c8b42036b159fd7631822a273198abfa03f4d0b5343034244e47e7353ea5ddc5242fc630fe04462f51d96c4537224757bca5ef9bb5cc0ccbb28cb65ee73d731f7a2a0f1bf87af71336770d68aa654cf3a0a07e6cbbb835051fb2b5f5a7e5ae"], 0x38}}, 0x0) 19.725458597s ago: executing program 0 (id=461): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4d26c0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) r6 = socket(0x18, 0x1, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000100000002"]) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000040)={0x1, 0xf}) getsockopt$inet_int(r6, 0x111, 0x32, 0x0, &(0x7f0000000380)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 18.203996941s ago: executing program 0 (id=469): msgctl$IPC_RMID(0x0, 0x300) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x0) (async, rerun: 32) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000044d564b"]) (async, rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000180)={{@my=0x1, 0xffffffff}, @my=0x0, 0x0, 0x0, 0x8000000, 0x0, 0x6}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') openat$tcp_mem(0xffffff9c, &(0x7f0000001840)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) read$usbfs(r5, &(0x7f0000000000)=""/131, 0x83) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r5, 0x3ba0, &(0x7f0000000300)={0x48, 0xb, r6, 0x0, r7}) (async) r8 = socket$inet6(0xa, 0x2, 0x0) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f0000000100)={0x2b}, 0x8) (async) write$binfmt_misc(r9, &(0x7f0000000040), 0xfe46) (async) syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x24, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @generic={0x5, 0xa, "0c311500073bb9b0"}]}}}}}}}}, 0x0) (async) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) (async, rerun: 64) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRES64=r8, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="9c8c7d8187e5b43750ce32737957b1b4be622ead4e17ef0016855a25c74172e6024933b6092c08d827a4f228682bebbea3f070fc5c9294f29926652d6d023e014fba9cd455"]) (async, rerun: 64) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x2, 0x6, 0x7}}, 0x28) 18.024552915s ago: executing program 0 (id=473): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000280)={0x6, @output={0x0, 0x1, {0x4, 0x2}, 0x1, 0x2}}) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902"], 0x0) ioctl$EVIOCRMFF(r3, 0x550c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0xf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001900000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "020037e0"}, 0x0, 0x2, {0x0}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}, 0x0, 0x1, {}, 0x0, 0x0, r1}) 14.911505493s ago: executing program 0 (id=483): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048cc) write$binfmt_elf32(r2, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xd3, 0x0, 0xff, 0x4, 0x2, 0x3, 0xb, 0x36f, 0x34, 0xaf, 0x7bffffff, 0x0, 0x20, 0x0, 0x4, 0x2, 0x7}}, 0x34) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ftruncate(0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') syz_open_dev$media(0x0, 0x10, 0x2901) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r4, r4, 0x0, 0x6) membarrier(0x10, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000010000d0400"/20, @ANYRES32=0x0], 0x4c}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000003080103000000000000000000000000140004800800064000000000080005400000000005000300840000005c8fb44d06d5e7513b050055043763b658b02cc4c24fcb215d719a773e851ff4916a4b621619be474fc9be42dd5360dcb5e5318478d9658d47e0184b614c4d"], 0x30}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) openat$vhost_vsock(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) 14.315580873s ago: executing program 0 (id=486): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800) keyctl$update(0x2, 0x0, &(0x7f0000000300)='1', 0x1) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0x9) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x88}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000240)=0x1000, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r7, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x16, 0x0, @l2={'eth', 0x3a, 'gre0\x00'}}}}}, 0x34}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 12.827878577s ago: executing program 32 (id=486): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800) keyctl$update(0x2, 0x0, &(0x7f0000000300)='1', 0x1) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0x9) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x88}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000240)=0x1000, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r7, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x16, 0x0, @l2={'eth', 0x3a, 'gre0\x00'}}}}}, 0x34}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 8.301579687s ago: executing program 2 (id=501): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffffc, @empty, 0x2}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ustat(0x2, &(0x7f0000000080)) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffffc, @empty, 0x2}, 0x1c) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ustat(0x2, &(0x7f0000000080)) (async) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) (async) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) (async) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) (async) 8.219511691s ago: executing program 2 (id=503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000100)={0x200, 0xa, 0x4, 0x20, 0x8, {0x77359400}, {0x5, 0xc, 0xa, 0x0, 0x1, 0x81}, 0xfffffff4, 0x4, {}, 0x400}) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20004801) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=@can_newroute={0x14, 0x18, 0x1, 0x70bd2d, 0x9, {0x1d, 0x1, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x40000c0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x404060}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={0x1cb8, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x403}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x2a}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfa}, @NL80211_ATTR_CSA_IES={0x1c6c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x338, 0x91, "d941f11ea2cf21859408988b3fbd305bced2f503dd7294411cbef7814105606044b1cf38e19546507419e74b459f238c2c300302642ccbbae66d56e9775d94a20e51ee0ac0d349dab7ef472702ac1e7980d8dd59d303e0f65cc22a570419650305053047e2e5fe9166123a120e3cecc424de9790fb0175771582dbef46957246ac07d9672761fd50552d45660ac6daec51bc73cd566e6e78c56ef5d3a35427d6111c5fb57a770bec4f1b74c4d8d3875b237662a1aafcf2adb3703cfe4b6aa58f0745955f7a13893e3540328bb35143db05a9bda39e41f3e9df024156d1bee2aa2a288918f0e3dbeffabe911b42bfacdb81a1226f3e854a29f3cf9d7431dc682e6c31dff8d49ed6b1b055b0909d5e3bfe10ace1059ec87eb633fe7ed504156ee7bcf988e0cd57fd7537719e109679f925a94ff03c1357df3804a556d96e6e888986e7bdc16e92cbd5727e940f019c7c459979ee4d215eab9cb5469620b0c6a9f01ff3063677f01299d1e111ba2948849bb377f78825578cba905ce1d16fa30280965b8267cd9b0318ced87b4dcd3cf918dafa9090be16fface82cf74ef832c814c4dfb7999acdc17cbe43b147a76b79e07f8be11c0f3c06b58dce00f0e70263e0f31a9eacfd1aeb0ca36ceb0d603ec953637ca9729842cc79582a49cc9b528f41e2f73e832f23205d3b3dc602058d31611f4208d1265016ca0b122cf08a3c9eff1ee88e55c8cc1360a136cc18b0a8c5c4ac655d6a1b7ab363a768bde3d5a17c088d1c6602cee5376347ff9e85cf41ab9860b0d32b0ae698ffb254287aebdf91019933e906557399297c8e6d12a3d71d2cadc863174ab271f02faeeaa440d47455878b98901c42e43fa44dd2d6dee02177c314f7e4a80c322f57c96352c089a9c84d82b0d81e6ca800d378a8267193302eb19a5ee7939856e98625c2f3ab62df0769c905516307f1b79b2f54fafa17ac49eca1388b9d7ac41d3fe99ab6600d6e7fe6b0d3c4010ecd6dc8c8e10f2dd3c688bf8aaa9aae7292018f7f5c32a2d384755b3ce3d1d3969222a79e915492753ee1fe56c495f29e9ce6cb30106a572c63437e7ef88348323c65e580d704c31197c27680893951bb79c7d1de3518825638cd0a42c4d87ea5b9e8a3daf37135187d82b14abf05"}, @NL80211_ATTR_FTM_RESPONDER={0xd8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xcd, 0x2, "c40ee6d592be44706a3998bb12a3bba3288c9f9c8df81a029eef0c05895e8cc037b520632146e03e88037cd38402689036599af8183d2323d7eb4cc8de714bf5c43ca58269a1f6d9f9ccb9ae52183dbfc32ffda4aca62a511694fa1cb7156f5bcd795f6dc8671a34c48f28a87881571626b00fa4a6fd325004c1a408cb3cf2d7b07cb01395ff50a4c3fee5a821f6dd39f81b8ec85ec9a99a50b22f545de341f27736b18b61da0acc2a6f9cec5f70eccda2e8d3427b4e9fec8a865a8a02c0b6f05f63b31a5a2a7c78b7"}]}, @NL80211_ATTR_BEACON_TAIL={0xb5, 0xf, [@erp={0x2a, 0x1}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0xbf, 0x6}}, @tim={0x5, 0x9f, {0x5, 0x5a, 0x7, "fba6d897d9fa32106cf49f003dc3c432b347b4d0b2eebcf7dcb269840b8904c414297f8460a1686b5f1c90fd3f18dca8f31997e4288f4576ffaad4a534bec971c5d85ebb478602431437c827213a133cf5edb226c97f7987a67feb509d7752bf7598037e2f0419e83368944e49f4d0082ee5e31bcbdf34d67fbcaee06b5e62a3644ca7adf5a4a7b65864c38f9cd771cf0be4e35d06f7422986108c9a"}}, @supported_rates={0x1, 0x5, [{0x18}, {0x24, 0x1}, {}, {0x2}, {0x6c}]}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1ea, 0x80, [@measure_req={0x26, 0x91, {0x2, 0x8, 0x3, "6adbc105d82d8588f3ad6cc6b0a441380402a658b63e85bf8ec54bea3b6495e18860b99289114c0322518b96617ceff80d3e9b0d5a846b61276e67d21cf9ddb5097f81daf4b39475816c5128e57c75f92ca70236aa616eae21eba763c86e4ceda5046da511590985e67f6763792f34aa5d93705f022a2ad0b3d3551f3b3cb22b01f33c845640b13dc7e30c967db6"}}, @preq={0x82, 0x57, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x9, 0xe, 0x7f, @device_a, 0x100, @value=@broadcast, 0x7fffffff, 0x0, 0x5, [{{0x1, 0x0, 0x1}, @device_b, 0x9}, {{}, @broadcast, 0x1}, {{0x1}, @broadcast, 0x3}, {{0x1, 0x0, 0x1}, @device_a, 0x4}, {{0x1}, @device_a, 0x100}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @random_vendor={0xdd, 0xb2, "05660ea69de8724000000000000000954488f124190c530a1bc07dd23af71fffc97822880cbf9fef8b9b8f07903401b41bca8fa911afbfa07e64158b0b39bf86077b267851971340f5fc8f52c94963b90f866ecc491dab97600c4eae2adb83f56d6b9213961e70b41119e46ef0f9e0d2a62a404e1c64a64ceeac9b41ca044276cd29e803f36bd1cca0c50000000000000007d28dd4a2e7cb73d74bd2fd33da4281c77677a1af7d29aa49031e76172cca1900"}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0x36, "eb30fa901e64cb3e957203828e96755818288c3ea775dd1440fb656d1e591c314e4cd6d86b620aed8725fe03bb7bc2f829384a8c2aee"}, @erp={0x2a, 0x1, {0x0, 0x1}}]}, @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x8, 0x1, 0x1, 0x0, {0x8000, 0x3, 0x0, 0x3fd, 0x0, 0x0, 0x0, 0x3}, 0x6, 0x0, 0x7f}}]}, @NL80211_ATTR_BEACON_TAIL={0x9d, 0xf, [@perr={0x84, 0x76, {0x3, 0x8, [{{}, @device_a, 0x10000, @void, 0x35}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0x1b}, {{}, @broadcast, 0x5329c858, @void, 0x3e}, {{}, @device_b, 0xfffffffc, @void, 0x2d}, {{}, @device_b, 0x6, @void, 0x1}, {{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x41}, {{}, @device_b, 0x9, @void, 0x10}, {{}, @device_a, 0x1, @void, 0x3a}]}}, @prep={0x83, 0x1f, {{}, 0x7, 0x4, @device_a, 0x3, @void, 0x4, 0x9a, @device_a, 0x7f}}]}, @NL80211_ATTR_FTM_RESPONDER={0x174, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x14, 0x3, "7af9186f25070f7365cc12ad4bc3cb4a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc8, 0x3, "55ed0f859714db3d1c3eb4f163a3e800b8f18bedf8a890e7dec0514bf5ab98c7838e3a85e7cbcb3820579e40cbee645694aa887cd493e47c90e7e8eea53dbdb2c723758af7ac95c236c637e4972551fcbd14ad18721634a4f524ae942d3c44ef84833e4e5c8a601e49fa7db2bfd3f0dceec5554c75bebbfeff656ad57f74b3f4f9bf52835a7d9b315b015035abcc584210b6e0861e80d3d7f410f2107ef26f7602e00e613068db4d34f099344287ff53f9a80c05f5841798c098030f52071a87af3aec18"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x91, 0x3, "441454f90be4fa1cf8301e3a4609f6a56b16408b6271754daaaa957eaeba117ea1e03f32ee15479fa45e3dc73bf69298b8f0d62daf216c7c92bee844fc9799a4b6af1f37e2cbc258a98b478f3e1388a868a21439bf76102a1822bbaf09712e8b8ffeaf9dda6e40cb754d5845ca50081b8ea4ea2a3e98cea4ee8be00f2d715c40ea72c6cf527fe260343038ce1f"}]}, @NL80211_ATTR_BEACON_HEAD={0x31d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xc6e}, @broadcast, @broadcast, @random="817dd6e3f050", {0x0, 0x5}, @value=@ver_80211n={0x0, 0xb, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x6, @default, 0x4024, @void, @val={0x1, 0x1, [{0xb, 0x1}]}, @val={0x3, 0x1, 0x80}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x0, 0x3, 0x0, {0x9, 0x9c3, 0x0, 0x81, 0x0, 0x1, 0x1, 0x3}, 0x1, 0x3e42, 0x80}}, @void, @void, @void, [{0xdd, 0x18, "8b1f7fea9ff341e545c7f6f3ab00835752e0f7840893e470"}, {0xdd, 0x34, "618314a7130f314d0c337100392bd2f9bca95634cd6c93a86df1e6cb45130b3b4344edfa8cac97afa68e51eb9dd086748bf051dd"}, {0xdd, 0xf0, "d4052e669770489e027bcdc62c4bd4d014d344c7f814625274d7399927f22cc9f7a7d6f2ee2ddaa5f208a259b6794e9889e2aeb7007de8d6381b7f039fdbef4c4cb65221350d9562c212c293f41a9daacd77be9c97fa2a28397eb45b107ca9f1ddee9555e399a196c80cffbd784bb242fc08f0f640156add2a861c707710a7102c7d414919df1f66e24d76acd9c8dcf3b96d62b2c544786488e09ddbebf59710e93d30295f1f07909249467fcce14f728a6d3ffaebd5143c0773beea0f9169fc95cc954a89bf9400d974958c3fb6466727972966d1abac1cddbc1973ebd4c3319eca9ef15a4535c36c9e7258766cb037"}, {0xdd, 0xbc, "7c2d5b832793e3ace602344c22a8dabfb00d9aa641b5001bee017aee8f2d9f7b7bbfdd3b99a71e0a72b056896d9eb9c1cfa70742d4afb5c2ab5ff744acac58db062abc4de035ee9e8a1d4e71049aedd5a3f79f14b3753e03e78bc42c66402d66f79e9bf0b99048721f036e9ac665199b401a6dde1a79e30069ca28ac2c5245e4179bc656e3003d2c53bb141680439a9657a9735761af99f9bb1bd3d8db24fe56c47e5c5837aac282bd59a7a78e5c0a8f9e20ef7e92ae0e71a5d1e9d9"}, {0xdd, 0xe, "c64c2ec48c133e1a16c4d9cccca1"}, {0xdd, 0xbd, "d490f10b8a66676cdb22a9bb05307db50c8ea26df1dd520cd569df760bbdd466e9c79c73f4b6a95506f0740ec674afccd16b9716f1c4d816599c03fc017e1fcdb04b616b517a67b3b3ed8d53cb0d48ce019653629d3560009f46535be61435335fece5285ffa2a33b285c088d779d12ac208d3da3c90580bf679cc8aed199d3ea74c3ec8892479db9916c9e621ab283ec040c725893f6690e1faadb1016c6e94fd68e739f2355e0e9e6ad73eae99a9e194557dc053f2b27c285bf7f2a3"}]}}, @NL80211_ATTR_BEACON_HEAD={0x3ea, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x9}, @broadcast, @broadcast, @random="d8f65175051b", {0x3, 0xe}}, 0x9, @default, 0x9331, @val={0x0, 0x1c, @random="bae78371c6ceebae084f3e54ffe59d46d2307820862b2e4001fbd454"}, @void, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x10, 0x9, 0x5, 0x8}}, @val={0x6, 0x2, 0x8}, @val={0x5, 0x63, {0x96, 0x6e, 0x1, "02061c149e1e8649f127a217c384073e9647da02b081622903e0ee2f1a6c02d0655b6dd160decd62ec8efc6ad94c5be609db895a55915ce93cdea0e7ea53daa380e01140d0bef5f444dc675b79899c97516f08b45edc1fa0a39efbb02f619092"}}, @val={0x25, 0x3, {0x0, 0x6c, 0x2}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x9, 0xb1, 0x10}}, @void, @void, @void, @void, [{0xdd, 0xa0, "9a43415c7fcf0a3ef4b6c4a5dee6d936452b43e6b312c012588d44d42f3b08bfa61aacd3af0a46fa572ad44ed7b4cbf007f07d8666c451cf31ae078cf780fe91aaaa91ea04da3014746c005cba664daf21fa2e1b308d1e9f5520cc987857e32763a17e8db8af711a8f93941066d66ee92f1c1e2f5b1ff15c4c855f2a8100bbe065cd6e21e0c320844e6b202ef9d6cb6b709fbd843e3b8af99ce4b7cf5113d346"}, {0xdd, 0x61, "027b0a44f2557e7eccbeae921e815c76d3e2c714abd7a8aa8dbc3c3a577b9f591b7b1a1423447e1860b970cbf8d5105c7285265f6111d50fc5ddcde6f5d7a45fb504ad7159f630232156606f35b03f55cc5744173a262c9c727c55326d4423db86"}, {0xdd, 0xc3, "315e9d51c56f44b5d79f2c8dd1d9ae6ca3d5ffd6e837560665085aea5e2f206837ea4fdebad94ae22e59f13264e41175c81cd2058b03bfc675d6d64bd1a6a49ce1dfbdbdd0366a71ce7ba579c7fc87b213003f26e8df2c2d1b9ad0027e5a858c043d9bf3fd1199dd0f56a3a279620d34b31617188c140baf9adaa244c7696677d39738fbe5993f1a7466c56be0e51815e2caa4f60ac69c69232c9af2f8960927cb4f289f3a4c8fafd8516f3a091e8fa963789f70a56ed6721625c0f3beaee478960e01"}, {0xdd, 0xe1, "eb57a65a4b05b4884c7af2f0a76ba65d244a1753bc1938fce07bf0bdfa12ed66c5b839d07a2540c6447d2f4feb750089b2d9f8d14891c4d40ca2f45ac7cf3b6e2c8494fdd6797cbe282cdf639dac9952a7d9fe0e89734da059c595019971353b30c4c38bcb2839c1eaacc01c5c0c95487aa5a4c3d157c4fff5ddaa73eb7a33869cbf73e51389a764f336308506ca0f3476350b11bc01f99606c5a7cac4e505ceb9637346deb6b6911a97e591827022381958842a03765284a8078cddeb66f041dffcb68b5729ab8bbb36a8829ec4f36697d0c41ef7b06fbb162d894fcb01b17113"}, {0xdd, 0x73, "5bb62386b4a97dec1bc1179130b71279cffcf3b990aa38f70dafd77cdcbfa23344ef4ede9f40c51b6d2c2e8b37ccbc73c96ce678a9d1c85e11d5657d2890bab61040587387da17d575ca6401390b8e72d47da14b0b37d3aecdb733af1bd05b55481c738ce9b77a9c05548b77a884ff3457f2f5"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x1e0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x6a, 0x2, "0a1d9faf0e6bfcf973ffbbd66b105f4e0321269c68eb802ce73344a3f1407e63f6b8af56e3189eae08173004d6105df788b8090396c19928a68e2494ced7cc3954e94ed4379f8edaa703a99aa6a0ad1c5bd41e6ccd303de5d6f95181346f3c496c1a48b1755c"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x27, 0x3, "5ee3766ab00754d38cd729cf4f289c16663f6ffa5dd7664b6a98bfacf66d292dc875b3"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xea, 0x2, "19df19d2b06e400db61c495e01ee43c0500f9ac3e22b779a44770c59b45573d8fd1753c56da5ab3282dea952fe8d8b9b6d541b9c01e64bbd55a909d7619b53294074af17f3b0115dfdadde9b30f46eb0721f7325092232f61b4806ca57057fc67c4990d077ce4fdf4b3a0c7b4111c43d17c9225b8a5434f36c28a3f9d9eff079d17dfdc514bb5bf6168e2b47716563948e66410715d0b1819e74dd73bbab0b8acba64bcb240d4c07d9103e5851d26d88327a701ee12ee85d5eabec2f346c98aa3417d6e94d2098aa37f56afed083ba6ede400585c412be0b83cd20675041a4e50fd916fc066f"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x53, 0x3, "a37192e278086c9155b3bc15f3f2ae7a829a401175c411d66a2b3ff84a68890251ec09f26a102d6ecd06087a21abb6ffdba3dfe103f26d229814ebfef676c20aba5d3d6aca2a334e64682b17db666e"}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x438f, 0x81, 0x81, 0x9, 0x3b, 0x8, 0x7, 0x9]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x4000, 0xfff8, 0x50, 0x81]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x693, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xff}, @device_b, @broadcast, @random="42cb0330e07a", {0x3, 0xf81}}, 0x9, @default, 0x2, @void, @val={0x1, 0x2, [{0x3}, {0x1b, 0x1}]}, @val={0x3, 0x1, 0xdc}, @void, @void, @val={0x5, 0x38, {0x10, 0xd6, 0x40, "d36f6c34bb68c67888d2c7782cd9052120b0e2f8b26edb1b3d72c0b1016435e5bd6891c489d463e9df45d29259df501a50e32bdf33"}}, @val={0x25, 0x3, {0x0, 0xb1, 0xf}}, @void, @val={0x3c, 0x4, {0x1, 0x9, 0x68}}, @val={0x2d, 0x1a, {0x4000, 0x2, 0x1, 0x0, {0xfffffffffffffffd, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x5}}, @void, @void, @void, [{0xdd, 0xb4, "5a94268b6bcf70744a1f6c547e4f1f691481b8597b956669d290c10093b795a9b512f164b9cbeff50717019537d48a0b11214038f5ac02184c213bd890f789704da16a074bd2751cc6c604c67ba5f1078bd3698918f6f063e4d41100c8311eeba06dbe2a97812b403e35e7e0d9146c5d3bb21c1e271f5d3399855aa901f819d41d9585892efb743c9141f53f9201e7854c8dcb9cea243d55f8de5f5d48b49b8f59bb21b0c146a2f2c8a716435eab009246337533"}, {0xdd, 0xf8, "7d5577ffdf793639d4e78abd41cc232c7da141efb7724a288a14b77df7397cf738f070609e11ecca13234ac6dffb7f739ca9411e405c3a982717cd28c46d6dd8bb1752e5b5f0d838776d4a693cf8ed1c86310fdaef6b5ac2122947c2c50f86dd5b78f79f83d53257e558b063b8589bdf353466bf38523bf0a70bfbace2879ff7f6bfc2ff6af1aafa329b315303ac9fb98377192711032d3a54747d81e542cdb06ce5216a64f66be9f4c2203a43948bb2f2f89df66332dd58ca9bfd11ba680ceacd6460b1105e5a59e753a884bbd338926e2f1ac47fc5e91340ce06ff2a16ee628f5428882e98ef58a319ec59a1f4a3d11cfcf9d50cc1c576"}, {0xdd, 0xa7, "8e901df5010bb84030e90ad7d7da9868542516816c6a5871b472a02b379e0acd4725d390ac01e08b20348a04a408db2e07612318b0c4c1e28cd54156ddfc32831f038e8337ed441e99c1c6ccd5159c6fb303dee6d1e2985eb631f0ce49002af4b84efeaa642a278419f9001b080a8a93d0f24cde5e41ef867b8136a9109f1ff6633868691827b1de961fa414959cd8e06651f6dc7c3e458f473ed9cde39c23bb22fd947028113e"}, {0xdd, 0x46, "f8f30894e89a09ecb4b241fa8c5275e8b415d5fd757b79b5d9faf58582ba9d891bc7870edc8c61cb855802f2e465f5e8e5e8666b0993e07a68d650df8f6bf354774e5a60e138"}, {0xdd, 0xb3, "8b0b295559ef04d489f7e47782757197e407b6f10dfa9d3ddfb016350829261248354041a02009fd7634138cb4877c4573b405efb21ab56abaff55339056762048cd3e43d5cbb335728af096a7cbf185606da8a22040d48adce637b75433e04a3175ff955a61f76cc75e1b4911a33cbcda632759983e30682aa3318ae73584712b28066b173b8c4429a61dc1078b096e43164fb250258c6d00bd34eae6d55eb7db06c168cf1ef2593d3bac6a01a4d4becf9793"}, {0xdd, 0x91, "3717124551e68cf81aebb0f65a2119d1cbc9bb0632dbab601872920ebaf12cd64a1b0bfb2daed833d250b82f2aec41f3f0c50b6e920a896fe86b7c4ec1b4e4d0e793e01a029c5d978d192159c8f8b67cf682b1a2cedd631d5018adf8f14ac0bee570bd7dba04b2c609fc4ad6ff53e8712c7b96a94c1447c29232fd169aa1f2b17f64575e88bb11705bb4d7e2e420b332df"}, {0xdd, 0x3d, "cd5c33ba6d6483d72267cb0363a28e16a3dcef48bf95577d69a2782d019900a42f3646e450d64c3c2e40c5446ccf44a1f6849e37b9be2845bc980e0adf"}, {0xdd, 0xc1, "adffd20d08151e2d08918c4bc591e832824cc868ae211f08d7323e2566e34bfdf0b709ea64e2eec94ae00190e5be2f53d81b1e0483bb90b130f2475d3606611370459fdbf7c54fdb1dde3b12d2e7d1c590c6ab9dacf7d1d4fd416dad0cf42bab1a2411109b3c68e0e108826197045aa8477271da66c5e7bb9451fc22aab4777c3ebebe5b2bfd423397aa582575ea8b468b69e74fd2035aa88543c0a972fb46bbf3357e689f04f1cf59baf1728cf403a486d9751348ea35effb0096db9668cac268"}, {0xdd, 0xdd, "d83105b6714f1307a92efadedc06697eb7f870ac2d7b56d0d8ec9a728d265260e0a49c0d6e779c156be14a17da38606cf7990c8c7dce61ce41e304582eab0b1a7c2d722e346eb3c475995bf5fd3e56482e50e25c70de5c4081381bd9c82917baee0e8fc7aaf87213b043c982b544ebea349657ee5ea541f9fdac1d4a9ceabf5bc15e1fb70bc83177c561aa929d587b234d23ed5647341ac757fc8def879851b50cf00d20864e66fa1b0db1609501fa70c877432a49b12674bbd440071249174599355d7b4bbf97333abcfac863cbb6d846dcf39c54b07c24ee30f0bd22"}, {0xdd, 0x37, "c26411149ab11a0bc47ef77469cb6950b958341bbb9bade137986295ae10485e7ec539f6a4dfd17e6e7683cd5ec5b229a4fa8acdaf28cc"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x8a, 0x80, [@tim={0x5, 0x55, {0x5, 0x31, 0xbb, "7b9c6156e8c991018b972b22faf29ff4afa62e7080e03399428c133f1b66ce540f564ee8a09263f394285130f9c3acb12804c33ce2c0e2104ebfb5b871d750458cf969222573adb0e8f9b9fb293cc081d285"}}, @measure_req={0x26, 0x2d, {0xd, 0x4, 0x72, "5892706583386b50f6e7d480e0593f2e0f3b5001ffd72bf8e552c573cddd660aa2179eeb5f52b7408d0a"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x67, 0x80, [@prep={0x83, 0x1f, {{}, 0x3, 0x9, @device_b, 0xfffffff8, @void, 0xffff, 0x6, @device_b, 0x80}}, @measure_req={0x26, 0x40, {0x8, 0x2, 0x0, "fc44e69240a9081feaae246680cd48a0027b32e5f3c18b1d20de27e72d2277074e42f315a25c32a38ff5bcf10e76a5b797ac3887515e8af4a88c614efa"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x11f, 0x7f, [@ht={0x2d, 0x1a, {0x1, 0x2, 0x6, 0x0, {0x7, 0x3, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x300, 0xc, 0x8}}, @random_vendor={0xdd, 0x15, "f8c8c231196820d5cc0e50548ff22b92cd9a7cbfda"}, @supported_rates, @random_vendor={0xdd, 0x1a, "4902dd48a92e5a2896e8b893d41bc8c0d4441402187419f73953"}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3}}, @random_vendor={0xdd, 0xb2, "2e6dc28826f3d18becff4596571b4a99af7e19d483e06504b3be5dbd027a33b150be1393eca57cd04c82c74ab2b719269953f21f6584e481e2cb8cdfd43c382dae568d42f667bb1a8382d3f32c3d73e4d2c493fba3525ace06a928c0c25b2b2ffbba29f34561e49569b56f0333000d1f2a5521b800b30816cb89897842bb8ecccbba705ad96fee22a1baaa736b7aa692268db152744616ad7f5544ba574d5017d1f81cd265767cf789b45159cfca92e090f4"}, @channel_switch={0x25, 0x3, {0x0, 0xe, 0x3}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1c9, 0x80, [@ssid={0x0, 0x6, @default_ap_ssid}, @random={0x4, 0xe9, "208bfcb604f7126634ceafaa2b5b359b605dc5023886d4f8a1a3bb103f49a1c82fd3c11dfb0e81066404ff245ba4f99cfa310b29b0de46593cc1dd270c5e5f2181d4d3c677b05b79a9ebce1bd45a0b5ee90683d18ae0e13e53685dfef23e5cbc5e56cd0956e5a2413fbd8340b965aecb0f515ea9ad0fd80797bb5833f094fd732cff11974238fd6a65559267719ae592dd5cb187e6c24c5541943506f9d3831dab8df36c4819934ec932750c67241a89e313298bf375a1818e56d8913901561c4518c2f8b55f8f48ef5931414831382524240cdb668fd4a1755bedc55ec6c476ccdf061ace8c5e39f1"}, @ssid={0x0, 0x6, @default_ap_ssid}, @perr={0x84, 0xc8, {0x9, 0xc, [{{}, @broadcast, 0x0, @void, 0xf}, {{}, @device_a, 0x10009, @void, 0x33}, {{0x0, 0x1}, @device_a, 0x94, @value=@device_b, 0x21}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x18}, {{}, @device_a, 0x9, @void, 0x41}, {{}, @device_b, 0x8, @void, 0x17}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x2}, {{0x0, 0x1}, @broadcast, 0x2, @value}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x1d}, {{0x0, 0x1}, @device_a, 0xc, @value=@broadcast, 0x27}, {{0x0, 0x1}, @broadcast, 0x3ff, @value, 0x29}, {{}, @device_a, 0xfffffffa, @void, 0x3e}]}}]}]]}]}, 0x1cb8}}, 0x4000050) 6.701026657s ago: executing program 4 (id=505): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c00044000000000000000090c0005"], 0xe8}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000001bbb8389a46eb7225600dde7", @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/194, 0xc2}, {&(0x7f0000000440)=""/232, 0xe8}, {&(0x7f0000000540)=""/135, 0x87}], 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0100001a00010000749ed72f27a062466559d5551900000000000000fe80000000000000000000000000003923697b4bd94400000000000000000000000000000000fffc00daa501fba093512bd82d4997b6d75c52f85b875fa9e00179b6399b6828", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000000300000000330000002001000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x13c}}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) sendto(r6, &(0x7f0000000600)="5d94c62a510b80a19a8f2fc88d15471917bed22cddce4a868995e1e8bca86057b82b0cb01510d336dd18a532d1e393eeb6022693aeacbe6c13225610bc45a79c3fc732885f669e14766add2011ac1f5a87c4f1d6b915e38e855e00b0b728fb9f621ec02b83c51d0adcbca9fbe920b0e7c660880889596b163006a5fec12b7b96fcd4dd397785ee523954acbd23a474616671d595af337022", 0x98, 0x4000801, &(0x7f00000006c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x4, 0x3, 0x2}}, 0x80) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) r11 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, 0x4e20, 0x6, 0x4e23, 0x9, 0xa, 0x80, 0x40, 0x0, 0x0, r11}, {0x2, 0xfffffffffffffff8, 0x4, 0xfffffffffffff800, 0x7, 0x200, 0x6f0deaa4, 0x1a}, {0xffffffff, 0x200000009, 0x8, 0xa0}, 0x1, 0x6e6bbd, 0x1, 0x0, 0x2}, {{@in6=@mcast1, 0x4d4, 0x33}, 0x2, @in=@local, 0x0, 0x1, 0x2, 0xf, 0x101, 0x0, 0x1}}, 0xe4) 6.63600438s ago: executing program 1 (id=506): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f926a3c92b", 0x14}], 0x1}, 0x40050) r1 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setuid(0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa", @ANYRES8], 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0xc3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x30}, 0x1, 0xffffa888}, 0x8810) 6.602661928s ago: executing program 2 (id=507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}, 0x1, 0x40000000}, 0x0) 6.577194622s ago: executing program 1 (id=508): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x40, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x4000}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000040)) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x24040084) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000d9000000d9000000030000000a0000000100000f010000000500000000000080a8c20000e31000000006000013040000001eee0000030000000300000010000000ffffff7f0700000004000000070000000400000006000000020000000600000005000000010000007f0000000c00000001000000ffffffff0000000000000003000000000100000003000000070000000700000005000013010000000c000000030000000bf400000800000001000000ff85e2000c00000009000000ff0f000007000000d2000000040000000b0000000600000005e50000020000000000001008000000000000003000"], &(0x7f0000000580)=""/146, 0xf7, 0x92, 0x0, 0x2, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x8, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x2, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000006000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000a25c21a4061656328e045f4275e7996e31ffffffffffffffff2126a38e5a69e8eef432c3983b104d3351ba4001ccf4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x3}) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 6.483240186s ago: executing program 3 (id=509): openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000500)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10, 0x0}, 0x0) r2 = openat$dlm_plock(0xffffff9c, &(0x7f0000000340), 0x204000, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x6, 0xc2c7, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x3, {0x0, 0x3}}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x23f58e5b666e3706) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$media(0x0, 0x0, 0x101d01) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) dup(r6) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x84, 0x8, 0xfffffffe, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 5.967833627s ago: executing program 2 (id=510): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0xb, 0x1, 0x0, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540), 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00'}) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000300)={[0x7, 0xffffffffffffffca, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x8, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.805056029s ago: executing program 4 (id=511): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0xb, 0x1, 0x0, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540), 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00'}) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000300)={[0x7, 0xffffffffffffffca, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x8, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.621104539s ago: executing program 1 (id=512): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000140)={{0x1, 0x0, 0xc9b, 0x3, 0x8}, 0x7f, 0x80, 'id0\x00', 'timer0\x00', 0x0, 0xfffffffffffffff9, 0x2000000000001, 0xa2, 0x6}) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x22, 0x0}, 0x80000000}], 0x1c284f836fac35b, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5e) 4.282631229s ago: executing program 4 (id=513): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x10, 0xffffffff, 0x16}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {}, 0x2}, 0x18) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x6c20}, 0x1, 0x0, 0x0, 0x804}, 0x0) 4.067780333s ago: executing program 3 (id=514): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x6}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe"], 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020"], 0x80}}, 0x4814) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@getchain={0x6c, 0x66, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0x5, 0x4}, {0xfff3}}, [{0x8}, {0x8, 0xb, 0xaf18}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xc36f}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2844}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 3.708926864s ago: executing program 1 (id=515): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4d26c0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) r5 = socket(0x18, 0x1, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000100000002"]) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000040)={0x1, 0xf}) getsockopt$inet_int(r5, 0x111, 0x32, 0x0, &(0x7f0000000380)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 3.608680686s ago: executing program 3 (id=516): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x6, 0x3a, ',', 0x3a, '\xaa\xaa\xaa\xaa\xaa', 0x3a, './file0', 0x3a, [0x50, 0x50]}, 0x2f) r1 = userfaultfd(0x80801) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x84}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000380)={0x1, @vbi={0x0, 0x0, 0x0, 0x48524742}}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRESHEX=r6, @ANYRES16, @ANYRES32=r5, @ANYRES64=r0], 0x4c}}, 0x4001) stat(&(0x7f0000000f40)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bac0c2402c1051623e7501030109021200010000000009040000006a73a900"], 0x0) 3.161694117s ago: executing program 4 (id=517): syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x48, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x10, {0x9, 0x21, 0x8, 0x30, 0x1, {0x22, 0x7e8}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x8, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x3}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x80, 0xe, 0x6, 0x20, 0x1}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0x6, 0x3, 0x80, 0x8}]}, 0x1, [{0xb4, &(0x7f0000000140)=@string={0xb4, 0x3, "65dcfdfb7073b90e3ba78c4616c905e441f1362f5db253c68add4cfe77b214241e7e4b9a12088c5eccce94742b1306f28b55a26ab42fb64fa42cc9e525557edd7dd17b4c20a599135bf05be096336b1ee31c2798f8ed3053c954ac5a1ff0020b8478db13bf20c5c6eb639e95f6ab1002cc8a29abfcac86f224cbdf3bd6acc07fb7d5a670959f0ad6fada824180f191f142009bc6fa5030ed0b273fd3994ebf43fca79e78eb471c1749e19c170cb0df3c0ab9"}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0) 2.666441269s ago: executing program 1 (id=518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f0000000140)=@raw=[@exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x46}, @map_fd={0x18, 0x9}, @generic={0xa, 0xd, 0x5, 0x1, 0xb51}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x75, &(0x7f0000000240)=""/117, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x4, 0x5, 0xe, 0x4}, {0x4, 0x2, 0xa, 0xb}], 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000000c0)='cpuhp_multi_enter\x00', r2, 0x0, 0x4}, 0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet(0x2, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x61, 0x0, 0xe803, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x17b}, {"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"}}}}, 0xfdef) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) 2.496009693s ago: executing program 4 (id=519): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@dontfrag={{0x10}}], 0x10}, 0x40080) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ff", 0x2d}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef0000000000000000000000000600030000000000080001000000000024000200"], 0x4c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 2.36453056s ago: executing program 4 (id=520): socket(0xa, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="20040000f30300022dbd7000ffdbdf2502000000020000002300000006000000090000000900000007000000070000000500000006000000010100009d0600000100010004000000020000008d5c0000060000000002000036d80000ff0f0000080000000800000000000100010000007f000000000000008f0000000000000010000000810000000c0000000200000007000000080000000a000000ba0f000005000000030000000900000000000400070000000700000001000080020000000c000000070000000400000003000000fdffffff070000007f0000007200000000800000d300000004000000020000000b0000000100000002000000060000000700000006000000040000000700000067da00000500000002000000260200000300000003000000010000006200000000000000080000000800000000000000000000000c000000de080000c400000002000000fbffffff00040000050000006061000008000000faffffff0500000001000000010000003baa0000ff03000008000000020000000004000005000000000400000800000000000000080000000400000001000000010400000500000004000000030000000d000000010000000180000004000000030000000010000081000000ff070000060000000000000000000000060000000b00000004000000030000000800000003000000ae06000000000000090000000b640000020000000100000007000000000000000600000004000000010000000000000003000000030000000000010000000000030000000d00000071000000060000000600000003000000000000600000000021060000060000000000000005000000e8040000538d0000000001003900000005000000090000001c000000db0f00000200000008000000000000000000008001000000800000000600000009000000010400000d0600000200000000000080ff7fffff0900000007000000080000000900000027b7000000f8ffffffff0000ff070000030000000500000005000000000000004d000000ffb0000000020000000100000001000002000000010000002000000008000000ff7f0000cee200001500000003000000020000000500000000000000020000000600000081000000020000000000600001000000070000000600000006000000070000002b050000030000000b000000050000000800000003000000480200000800000007000000070000000000000000800200020099222da3f697b7cf000009000000ffffff7f0004000007000000080000000700000006000000e300000007"], 0x420}, 0x1, 0x0, 0x0, 0x40}, 0x4040011) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x14, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000001c40)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000001580), 0xffffffffffffff74, 0x8c441) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 943.408521ms ago: executing program 2 (id=521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r1 = socket(0x10, 0x3, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') write$vga_arbiter(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000180)={0x327b9ae7, 0x4, 0x3, 0x0, 0x59}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xf}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}]}, 0x34}}, 0x0) 470.571709ms ago: executing program 3 (id=522): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x24040040) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r4, 0x80045520, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r5, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r5, 0x1}, &(0x7f0000000080)=0x8) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}}}, &(0x7f0000000200)=0x84) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x24040040) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ioctl$USBDEVFS_CONNECTINFO(r4, 0x80045520, &(0x7f00000000c0)) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r5, 0x5}, 0x8) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r5, 0x1}, &(0x7f0000000080)=0x8) (async) shutdown(r0, 0x1) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}}}, &(0x7f0000000200)=0x84) (async) 316.112134ms ago: executing program 3 (id=523): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003800010310bd7000ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x40) syz_genetlink_get_family_id$batadv(0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, 0x0) 263.522123ms ago: executing program 1 (id=524): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x10, 0xffffffff, 0x16}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="ff"], 0x8) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001780)=@delsa={0x28, 0x11, 0x1, 0x70bd2a, 0x25dfdbfb, {@in6=@empty, 0x4d2, 0xa, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8c800}, 0x4000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x18, 0x0, @fd_index=0x5}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {}, 0x2}, 0x18) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x6c20}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000100)={0x5, 0x2000008, 0x7}) 102.570714ms ago: executing program 2 (id=525): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x303b4000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000045000/0x3000)=nil, 0x3) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="8fc5", 0x2, 0x0, 0x0, 0x0) creat(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 0s ago: executing program 3 (id=526): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x29, 0x0, &(0x7f00000000c0)=0x11e) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xe001, 0x0, 0x0) mmap(&(0x7f0000719000/0x3000)=nil, 0x3000, 0x3, 0x10, 0xffffffffffffffff, 0x51855000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) kernel console output (not intermixed with test programs): budget: no frontend driver found for device [0b48:1005] [ 165.163199][ T24] usb 5-1: USB disconnect, device number 12 [ 165.394042][ T6644] syzkaller0: entered promiscuous mode [ 165.401069][ T6644] syzkaller0: entered allmulticast mode [ 168.344986][ T6653] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 168.355909][ T6653] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 168.367796][ T6653] batadv0: mtu less than device minimum [ 168.376028][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.388334][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.399766][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.411241][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.422619][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.434008][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.445407][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.456820][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.468203][ T6653] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.022268][ T6677] FAULT_INJECTION: forcing a failure. [ 169.022268][ T6677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.036157][ T6677] CPU: 1 UID: 0 PID: 6677 Comm: syz.4.204 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 169.036187][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.036199][ T6677] Call Trace: [ 169.036207][ T6677] [ 169.036215][ T6677] dump_stack_lvl+0x241/0x360 [ 169.036253][ T6677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.036283][ T6677] ? __pfx__printk+0x10/0x10 [ 169.036324][ T6677] should_fail_ex+0x424/0x570 [ 169.036351][ T6677] _copy_to_user+0x31/0xb0 [ 169.036384][ T6677] simple_read_from_buffer+0xc4/0x170 [ 169.036418][ T6677] proc_fail_nth_read+0x1ef/0x260 [ 169.036443][ T6677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.036468][ T6677] ? rw_verify_area+0x246/0x630 [ 169.036490][ T6677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.036513][ T6677] vfs_read+0x21f/0xb90 [ 169.036541][ T6677] ? __pfx___mutex_lock+0x10/0x10 [ 169.036568][ T6677] ? __pfx_vfs_read+0x10/0x10 [ 169.036595][ T6677] ? __fget_files+0x2a/0x420 [ 169.036615][ T6677] ? __fget_files+0x39d/0x420 [ 169.036632][ T6677] ? __fget_files+0x2a/0x420 [ 169.036661][ T6677] ksys_read+0x19d/0x2d0 [ 169.036686][ T6677] ? __pfx_ksys_read+0x10/0x10 [ 169.036712][ T6677] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 169.036737][ T6677] ? lockdep_hardirqs_on+0x9d/0x150 [ 169.036765][ T6677] __do_fast_syscall_32+0xb4/0x110 [ 169.036790][ T6677] ? exc_page_fault+0x5f8/0x920 [ 169.036820][ T6677] do_fast_syscall_32+0x34/0x80 [ 169.036846][ T6677] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.036870][ T6677] RIP: 0023:0xf7ff4579 [ 169.036887][ T6677] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 169.036903][ T6677] RSP: 002b:00000000f5116590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 169.036924][ T6677] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5116620 [ 169.036938][ T6677] RDX: 000000000000000f RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 169.036950][ T6677] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 169.036962][ T6677] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 169.036973][ T6677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.037011][ T6677] [ 169.446711][ T6491] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.505055][ T6491] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.534668][ T6491] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.599582][ T6491] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 170.816269][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.826930][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.836430][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.845710][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.866574][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.178354][ T6707] x_tables: duplicate underflow at hook 3 [ 171.313513][ T6491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.405528][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 171.808674][ T5892] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 172.256857][ T6491] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.336003][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.343301][ T6616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.385467][ T5892] usb 4-1: config 0 has no interfaces? [ 172.410139][ T5892] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 172.424636][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.464015][ T5892] usb 4-1: Product: syz [ 172.468404][ T5892] usb 4-1: Manufacturer: syz [ 172.473735][ T5892] usb 4-1: SerialNumber: syz [ 172.485980][ T5892] usb 4-1: config 0 descriptor?? [ 172.622117][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.629368][ T6169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.705062][ T5894] usb 4-1: USB disconnect, device number 11 [ 172.919316][ T55] Bluetooth: hci0: command tx timeout [ 173.144677][ T6491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.215941][ T6491] veth0_vlan: entered promiscuous mode [ 173.312352][ T6705] chnl_net:caif_netlink_parms(): no params data found [ 173.501944][ T6491] veth1_vlan: entered promiscuous mode [ 173.798877][ T882] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 174.511220][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.530562][ T882] usb 4-1: Using ep0 maxpacket: 32 [ 174.543100][ T882] usb 4-1: config 8 has an invalid interface number: 136 but max is 3 [ 174.554255][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.561926][ T882] usb 4-1: config 8 has an invalid interface number: 152 but max is 3 [ 174.571693][ T6705] bridge_slave_0: entered allmulticast mode [ 174.577728][ T882] usb 4-1: config 8 has an invalid interface number: 139 but max is 3 [ 174.589178][ T6705] bridge_slave_0: entered promiscuous mode [ 174.595567][ T882] usb 4-1: config 8 has an invalid interface number: 130 but max is 3 [ 174.621082][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.621084][ T882] usb 4-1: config 8 has an invalid interface number: 4 but max is 3 [ 174.621113][ T882] usb 4-1: config 8 has 5 interfaces, different from the descriptor's value: 4 [ 174.646775][ T882] usb 4-1: config 8 has no interface number 0 [ 174.654301][ T882] usb 4-1: config 8 has no interface number 1 [ 174.661060][ T882] usb 4-1: config 8 has no interface number 2 [ 174.667278][ T882] usb 4-1: config 8 has no interface number 3 [ 174.673996][ T882] usb 4-1: config 8 interface 136 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 174.678996][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.684820][ T882] usb 4-1: config 8 interface 136 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023 [ 174.701793][ T882] usb 4-1: config 8 interface 136 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 174.717520][ T882] usb 4-1: config 8 interface 136 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 174.738929][ T6705] bridge_slave_1: entered allmulticast mode [ 174.760684][ T6705] bridge_slave_1: entered promiscuous mode [ 174.781204][ T6491] veth0_macvtap: entered promiscuous mode [ 174.781303][ T882] usb 4-1: config 8 interface 136 altsetting 0 endpoint 0x8A has an invalid bInterval 70, changing to 10 [ 174.807775][ T882] usb 4-1: config 8 interface 136 altsetting 0 endpoint 0x8A has invalid maxpacket 59304, setting to 1024 [ 174.823130][ T882] usb 4-1: config 8 interface 136 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 174.834998][ T882] usb 4-1: config 8 interface 136 altsetting 0 endpoint 0x7 has an invalid bInterval 36, changing to 7 [ 174.846418][ T882] usb 4-1: config 8 interface 136 altsetting 0 endpoint 0x3 has an invalid bInterval 86, changing to 10 [ 174.857730][ T882] usb 4-1: config 8 interface 136 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 174.868984][ T882] usb 4-1: config 8 interface 136 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 174.885926][ T882] usb 4-1: config 8 interface 136 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 174.909290][ T882] usb 4-1: too many endpoints for config 8 interface 152 altsetting 80: 141, using maximum allowed: 30 [ 174.940735][ T882] usb 4-1: config 8 interface 152 altsetting 80 has 1 endpoint descriptor, different from the interface descriptor's value: 141 [ 174.954979][ T882] usb 4-1: config 8 interface 139 altsetting 199 has an invalid descriptor for endpoint zero, skipping [ 174.966213][ T882] usb 4-1: config 8 interface 139 altsetting 199 bulk endpoint 0x1 has invalid maxpacket 32 [ 174.976602][ T882] usb 4-1: config 8 interface 139 altsetting 199 has an invalid descriptor for endpoint zero, skipping [ 174.981291][ T6491] veth1_macvtap: entered promiscuous mode [ 174.988674][ T882] usb 4-1: config 8 interface 139 altsetting 199 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 175.004896][ T882] usb 4-1: config 8 interface 139 altsetting 199 has a duplicate endpoint with address 0x8, skipping [ 175.005119][ T55] Bluetooth: hci0: command tx timeout [ 175.026938][ T6705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.041331][ T882] usb 4-1: config 8 interface 139 altsetting 199 has an endpoint descriptor with address 0x93, changing to 0x83 [ 175.066865][ T6705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.081458][ T5890] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 175.103951][ T882] usb 4-1: config 8 interface 139 altsetting 199 has a duplicate endpoint with address 0x83, skipping [ 175.117691][ T882] usb 4-1: config 8 interface 139 altsetting 199 has a duplicate endpoint with address 0xA, skipping [ 175.129547][ T882] usb 4-1: config 8 interface 139 altsetting 199 has a duplicate endpoint with address 0x8, skipping [ 175.141130][ T882] usb 4-1: config 8 interface 139 altsetting 199 has a duplicate endpoint with address 0x3, skipping [ 175.152970][ T882] usb 4-1: config 8 interface 139 altsetting 199 has a duplicate endpoint with address 0xA, skipping [ 175.180469][ T882] usb 4-1: config 8 interface 130 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 175.192698][ T882] usb 4-1: config 8 interface 130 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 175.224006][ T882] usb 4-1: config 8 interface 130 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 175.242694][ T6705] team0: Port device team_slave_0 added [ 175.250537][ T882] usb 4-1: config 8 interface 130 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 175.253333][ T5890] usb 2-1: not running at top speed; connect to a high speed hub [ 175.276761][ T882] usb 4-1: config 8 interface 4 altsetting 201 has a duplicate endpoint with address 0xD, skipping [ 175.289854][ T5890] usb 2-1: config 1 interface 0 altsetting 197 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 175.296099][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.311525][ T5890] usb 2-1: config 1 interface 0 altsetting 197 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.335069][ T5890] usb 2-1: config 1 interface 0 has no altsetting 0 [ 175.341925][ T882] usb 4-1: config 8 interface 4 altsetting 201 has a duplicate endpoint with address 0x7, skipping [ 175.351446][ T5890] usb 2-1: New USB device found, idVendor=056a, idProduct=0032, bcdDevice= 0.40 [ 175.353067][ T882] usb 4-1: config 8 interface 4 altsetting 201 has a duplicate endpoint with address 0xE, skipping [ 175.372737][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.386221][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.386256][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.396916][ T882] usb 4-1: config 8 interface 4 altsetting 201 has an invalid descriptor for endpoint zero, skipping [ 175.416090][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.427118][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.440417][ T882] usb 4-1: config 8 interface 4 altsetting 201 has a duplicate endpoint with address 0x4, skipping [ 175.449041][ T5890] usb 2-1: Product: syz [ 175.456019][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.465639][ T5890] usb 2-1: Manufacturer: syz [ 175.470565][ T882] usb 4-1: config 8 interface 4 altsetting 201 has a duplicate endpoint with address 0xD, skipping [ 175.470595][ T882] usb 4-1: config 8 interface 4 altsetting 201 has an invalid descriptor for endpoint zero, skipping [ 175.470615][ T882] usb 4-1: config 8 interface 4 altsetting 201 has an invalid descriptor for endpoint zero, skipping [ 175.470636][ T882] usb 4-1: config 8 interface 152 has no altsetting 0 [ 175.470655][ T882] usb 4-1: config 8 interface 139 has no altsetting 0 [ 175.470673][ T882] usb 4-1: config 8 interface 130 has no altsetting 0 [ 175.470692][ T882] usb 4-1: config 8 interface 4 has no altsetting 0 [ 175.482265][ T5890] usb 2-1: SerialNumber: syz [ 175.540000][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.564619][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.589373][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.593826][ T882] usb 4-1: Dual-Role OTG device on HNP port [ 175.609461][ T6705] team0: Port device team_slave_1 added [ 175.615953][ T882] usb 4-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 175.634412][ T882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.652158][ T6775] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 175.652758][ T882] usb 4-1: Product: syz [ 175.667287][ T882] usb 4-1: Manufacturer: syz [ 175.672708][ T882] usb 4-1: SerialNumber: syz [ 175.716328][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.728202][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.751104][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.755426][ T6750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.769403][ T6750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.776826][ T6750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.779182][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.784584][ T6750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.801779][ T6750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.810157][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.821427][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.831388][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.842314][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.856114][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.901998][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.964555][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.990551][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.016408][ T5890] usbhid 2-1:1.0: can't add hid device: -71 [ 176.027969][ T5890] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 176.050140][ T6705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.066623][ T882] usb-storage 4-1:8.136: USB Mass Storage device detected [ 176.091325][ T6491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.100547][ T6491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.121740][ T6491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.130859][ T6491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.137727][ T5890] usb 2-1: USB disconnect, device number 7 [ 176.173435][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.184485][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.195283][ T882] usb-storage 4-1:8.152: USB Mass Storage device detected [ 176.251106][ T6705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.303805][ T882] usb-storage 4-1:8.139: USB Mass Storage device detected [ 176.405778][ T882] usb-storage 4-1:8.130: USB Mass Storage device detected [ 176.440142][ T6705] hsr_slave_0: entered promiscuous mode [ 176.447154][ T6705] hsr_slave_1: entered promiscuous mode [ 176.456241][ T6705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.464783][ T6705] Cannot create hsr debugfs directory [ 176.486081][ T882] usb-storage 4-1:8.4: USB Mass Storage device detected [ 176.851608][ T30] audit: type=1326 audit(1744781795.319:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.4.226" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x0 [ 176.892530][ T882] usb 4-1: USB disconnect, device number 12 [ 177.085823][ T55] Bluetooth: hci0: command tx timeout [ 177.533851][ T6824] kvm: kvm [6814]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 177.549608][ T6824] kvm: kvm [6814]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 177.558235][ T6824] kvm: kvm [6814]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 177.572541][ T6824] kvm_intel: kvm [6814]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 178.583054][ T6817] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 178.595476][ T6817] bond0: (slave lo): Error: Device can not be enslaved while up [ 178.638747][ T6831] netlink: 1072 bytes leftover after parsing attributes in process `syz.3.231'. [ 178.647954][ T6831] FAULT_INJECTION: forcing a failure. [ 178.647954][ T6831] name failslab, interval 1, probability 0, space 0, times 0 [ 178.661273][ T6831] CPU: 1 UID: 0 PID: 6831 Comm: syz.3.231 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 178.661303][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 178.661316][ T6831] Call Trace: [ 178.661324][ T6831] [ 178.661332][ T6831] dump_stack_lvl+0x241/0x360 [ 178.661371][ T6831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.661402][ T6831] ? __pfx__printk+0x10/0x10 [ 178.661436][ T6831] ? __pfx___might_resched+0x10/0x10 [ 178.661468][ T6831] should_fail_ex+0x424/0x570 [ 178.661495][ T6831] should_failslab+0xac/0x100 [ 178.661526][ T6831] __kmalloc_node_noprof+0xe7/0x4d0 [ 178.661555][ T6831] ? qdisc_alloc+0x9a/0xa80 [ 178.661589][ T6831] qdisc_alloc+0x9a/0xa80 [ 178.661620][ T6831] ? qdisc_create+0xf4/0xdf0 [ 178.661650][ T6831] qdisc_create+0x104/0xdf0 [ 178.661684][ T6831] tc_modify_qdisc+0x156d/0x2610 [ 178.661708][ T6831] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 178.661748][ T6831] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 178.661774][ T6831] ? __mutex_lock+0xbe3/0x10c0 [ 178.661806][ T6831] ? __mutex_lock+0x5f3/0x10c0 [ 178.661859][ T6831] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 178.661885][ T6831] rtnetlink_rcv_msg+0x7c2/0xd70 [ 178.661914][ T6831] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 178.661949][ T6831] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 178.661986][ T6831] ? ref_tracker_free+0x63e/0x7e0 [ 178.662017][ T6831] netlink_rcv_skb+0x208/0x480 [ 178.662048][ T6831] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 178.662079][ T6831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.662129][ T6831] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.662169][ T6831] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.662202][ T6831] netlink_unicast+0x7f8/0x9a0 [ 178.662239][ T6831] ? __pfx_netlink_unicast+0x10/0x10 [ 178.662268][ T6831] ? skb_put+0x114/0x1f0 [ 178.662297][ T6831] netlink_sendmsg+0x8c3/0xcd0 [ 178.662341][ T6831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.662375][ T6831] ? __import_iovec+0x585/0x830 [ 178.662403][ T6831] ? aa_sock_msg_perm+0x91/0x160 [ 178.662439][ T6831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.662467][ T6831] __sock_sendmsg+0x221/0x270 [ 178.662499][ T6831] ____sys_sendmsg+0x523/0x860 [ 178.662532][ T6831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.662573][ T6831] __sys_sendmsg+0x271/0x360 [ 178.662601][ T6831] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.662680][ T6831] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 178.662706][ T6831] ? lockdep_hardirqs_on+0x9d/0x150 [ 178.662734][ T6831] __do_fast_syscall_32+0xb4/0x110 [ 178.662760][ T6831] ? exc_page_fault+0x5f8/0x920 [ 178.662790][ T6831] do_fast_syscall_32+0x34/0x80 [ 178.662816][ T6831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.662841][ T6831] RIP: 0023:0xf7f21579 [ 178.662858][ T6831] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 178.662874][ T6831] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 178.662895][ T6831] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001200 [ 178.662909][ T6831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.662920][ T6831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.662931][ T6831] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 178.662943][ T6831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.662973][ T6831] [ 179.158670][ T55] Bluetooth: hci0: command tx timeout [ 179.568655][ T882] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 179.630880][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.710357][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.798759][ T882] usb 4-1: Using ep0 maxpacket: 32 [ 179.850761][ T882] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 179.868500][ T882] usb 4-1: config 0 has no interface number 0 [ 179.912795][ T882] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 180.007331][ T882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.048709][ T5893] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 180.060371][ T882] usb 4-1: Product: syz [ 180.064636][ T882] usb 4-1: Manufacturer: syz [ 180.084032][ T882] usb 4-1: SerialNumber: syz [ 180.200190][ T882] usb 4-1: config 0 descriptor?? [ 180.218690][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 180.256767][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 180.268303][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.282339][ T882] smsc95xx v2.0.0 [ 180.286820][ T5893] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 180.298235][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 180.308623][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 180.321606][ T5893] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 180.327838][ T6705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.331998][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 180.388685][ T5893] usb 5-1: Product: syz [ 180.393158][ T5893] usb 5-1: Manufacturer: syz [ 180.397812][ T5893] usb 5-1: SerialNumber: syz [ 180.419397][ T5893] usb 5-1: config 0 descriptor?? [ 180.461705][ T5893] redrat3 5-1:0.0: Couldn't find all endpoints [ 180.583502][ T6705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.609076][ T6868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 180.700035][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.715579][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.793622][ T6705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.956528][ T6705] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.106257][ T882] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 181.501820][ T6705] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 181.519215][ T882] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 181.542465][ T882] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 181.563256][ T6705] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.566824][ T882] usb 4-1: USB disconnect, device number 13 [ 181.597201][ T6705] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.629185][ T6705] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.792238][ T6705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.831199][ T6705] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.856149][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.863465][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.884499][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.891729][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.043641][ T6705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.226587][ T6705] veth0_vlan: entered promiscuous mode [ 182.242129][ T6705] veth1_vlan: entered promiscuous mode [ 182.305265][ T6705] veth0_macvtap: entered promiscuous mode [ 182.344034][ T6705] veth1_macvtap: entered promiscuous mode [ 182.426906][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.473747][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.488060][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.490847][ T6916] FAULT_INJECTION: forcing a failure. [ 182.490847][ T6916] name failslab, interval 1, probability 0, space 0, times 0 [ 182.505029][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.521428][ T6916] CPU: 1 UID: 0 PID: 6916 Comm: syz.3.247 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 182.521462][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.521475][ T6916] Call Trace: [ 182.521483][ T6916] [ 182.521492][ T6916] dump_stack_lvl+0x241/0x360 [ 182.521532][ T6916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.521563][ T6916] ? __pfx__printk+0x10/0x10 [ 182.521591][ T6916] ? __lock_acquire+0xad5/0xd80 [ 182.521616][ T6916] ? __pfx___might_resched+0x10/0x10 [ 182.521651][ T6916] should_fail_ex+0x424/0x570 [ 182.521679][ T6916] should_failslab+0xac/0x100 [ 182.521710][ T6916] ? __get_vm_area_node+0x132/0x2d0 [ 182.521739][ T6916] __kmalloc_cache_node_noprof+0x74/0x3c0 [ 182.521778][ T6916] __get_vm_area_node+0x132/0x2d0 [ 182.521815][ T6916] __vmalloc_node_range_noprof+0x349/0x1390 [ 182.521837][ T6916] ? n_tty_open+0x1d/0x150 [ 182.521891][ T6916] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 182.521922][ T6916] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.521952][ T6916] ? n_tty_open+0x1d/0x150 [ 182.521981][ T6916] vzalloc_noprof+0x79/0x90 [ 182.522001][ T6916] ? n_tty_open+0x1d/0x150 [ 182.522030][ T6916] n_tty_open+0x1d/0x150 [ 182.522069][ T6916] tty_ldisc_setup+0xe3/0x280 [ 182.522101][ T6916] tty_init_dev+0x275/0x4c0 [ 182.522130][ T6916] tty_open+0x9de/0xde0 [ 182.522175][ T6916] ? __pfx_tty_open+0x10/0x10 [ 182.522204][ T6916] ? do_raw_spin_unlock+0x13c/0x8b0 [ 182.522244][ T6916] chrdev_open+0x514/0x600 [ 182.522277][ T6916] ? __pfx_chrdev_open+0x10/0x10 [ 182.522309][ T6916] ? file_set_fsnotify_mode_from_watchers+0x123/0x640 [ 182.522346][ T6916] ? __pfx_chrdev_open+0x10/0x10 [ 182.522373][ T6916] do_dentry_open+0xdec/0x1960 [ 182.522411][ T6916] ? vfs_open+0x31/0x370 [ 182.522445][ T6916] vfs_open+0x3b/0x370 [ 182.522477][ T6916] path_openat+0x2caf/0x35d0 [ 182.522509][ T6916] ? __pfx_kstrtoull+0x10/0x10 [ 182.522538][ T6916] ? stack_depot_save_flags+0x44/0x940 [ 182.522570][ T6916] ? kasan_save_track+0x51/0x80 [ 182.522598][ T6916] ? __pfx_path_openat+0x10/0x10 [ 182.522619][ T6916] ? do_fast_syscall_32+0x34/0x80 [ 182.522644][ T6916] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.522690][ T6916] do_filp_open+0x284/0x4e0 [ 182.522717][ T6916] ? __pfx_do_filp_open+0x10/0x10 [ 182.522739][ T6916] ? do_raw_spin_lock+0x151/0x370 [ 182.522837][ T6916] do_sys_openat2+0x12b/0x1d0 [ 182.522876][ T6916] ? __pfx_do_sys_openat2+0x10/0x10 [ 182.522907][ T6916] ? __fget_files+0x2a/0x420 [ 182.522933][ T6916] ? __fget_files+0x2a/0x420 [ 182.522960][ T6916] __ia32_compat_sys_openat+0x241/0x290 [ 182.522997][ T6916] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 182.523030][ T6916] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 182.523064][ T6916] ? lockdep_hardirqs_on+0x9d/0x150 [ 182.523095][ T6916] __do_fast_syscall_32+0xb4/0x110 [ 182.523122][ T6916] ? exc_page_fault+0x5f8/0x920 [ 182.523156][ T6916] do_fast_syscall_32+0x34/0x80 [ 182.523186][ T6916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.523211][ T6916] RIP: 0023:0xf7f21579 [ 182.523232][ T6916] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 182.523252][ T6916] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 182.523275][ T6916] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080001840 [ 182.523291][ T6916] RDX: 0000000000002982 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.523305][ T6916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.523318][ T6916] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 182.523330][ T6916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.523364][ T6916] [ 182.523747][ T6916] syz.3.247: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 182.561560][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.576655][ T6916] ,cpuset= [ 182.676043][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.680897][ T6916] / [ 182.927734][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.959704][ T6916] ,mems_allowed=0-1 [ 182.963709][ T6916] CPU: 1 UID: 0 PID: 6916 Comm: syz.3.247 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 182.963760][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.963774][ T6916] Call Trace: [ 182.963783][ T6916] [ 182.963792][ T6916] dump_stack_lvl+0x241/0x360 [ 182.963832][ T6916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.963863][ T6916] ? __pfx__printk+0x10/0x10 [ 182.963891][ T6916] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 182.963928][ T6916] ? __rcu_read_unlock+0xa1/0x110 [ 182.963953][ T6916] warn_alloc+0x27c/0x410 [ 182.963981][ T6916] ? __pfx_warn_alloc+0x10/0x10 [ 182.964014][ T6916] ? __get_vm_area_node+0x280/0x2d0 [ 182.964053][ T6916] __vmalloc_node_range_noprof+0x36e/0x1390 [ 182.964098][ T6916] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 182.964129][ T6916] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.964159][ T6916] ? n_tty_open+0x1d/0x150 [ 182.964190][ T6916] vzalloc_noprof+0x79/0x90 [ 182.964209][ T6916] ? n_tty_open+0x1d/0x150 [ 182.964239][ T6916] n_tty_open+0x1d/0x150 [ 182.964271][ T6916] tty_ldisc_setup+0xe3/0x280 [ 182.964303][ T6916] tty_init_dev+0x275/0x4c0 [ 182.964334][ T6916] tty_open+0x9de/0xde0 [ 182.964377][ T6916] ? __pfx_tty_open+0x10/0x10 [ 182.964406][ T6916] ? do_raw_spin_unlock+0x13c/0x8b0 [ 182.964447][ T6916] chrdev_open+0x514/0x600 [ 182.964490][ T6916] ? __pfx_chrdev_open+0x10/0x10 [ 182.964521][ T6916] ? file_set_fsnotify_mode_from_watchers+0x123/0x640 [ 182.964557][ T6916] ? __pfx_chrdev_open+0x10/0x10 [ 182.964583][ T6916] do_dentry_open+0xdec/0x1960 [ 182.964622][ T6916] ? vfs_open+0x31/0x370 [ 182.964655][ T6916] vfs_open+0x3b/0x370 [ 182.964687][ T6916] path_openat+0x2caf/0x35d0 [ 182.964745][ T6916] ? __pfx_kstrtoull+0x10/0x10 [ 182.964776][ T6916] ? stack_depot_save_flags+0x44/0x940 [ 182.964809][ T6916] ? kasan_save_track+0x51/0x80 [ 182.964836][ T6916] ? __pfx_path_openat+0x10/0x10 [ 182.964857][ T6916] ? do_fast_syscall_32+0x34/0x80 [ 182.964883][ T6916] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.964933][ T6916] do_filp_open+0x284/0x4e0 [ 182.964960][ T6916] ? __pfx_do_filp_open+0x10/0x10 [ 182.964982][ T6916] ? do_raw_spin_lock+0x151/0x370 [ 182.965056][ T6916] do_sys_openat2+0x12b/0x1d0 [ 182.965091][ T6916] ? __pfx_do_sys_openat2+0x10/0x10 [ 182.965120][ T6916] ? __fget_files+0x2a/0x420 [ 182.965143][ T6916] ? __fget_files+0x2a/0x420 [ 182.965169][ T6916] __ia32_compat_sys_openat+0x241/0x290 [ 182.965194][ T6916] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 182.965222][ T6916] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 182.965248][ T6916] ? lockdep_hardirqs_on+0x9d/0x150 [ 182.965277][ T6916] __do_fast_syscall_32+0xb4/0x110 [ 182.965303][ T6916] ? exc_page_fault+0x5f8/0x920 [ 182.965334][ T6916] do_fast_syscall_32+0x34/0x80 [ 182.965361][ T6916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.965387][ T6916] RIP: 0023:0xf7f21579 [ 182.965405][ T6916] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 182.965422][ T6916] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 182.965444][ T6916] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080001840 [ 182.965459][ T6916] RDX: 0000000000002982 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.965471][ T6916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.965484][ T6916] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 182.965496][ T6916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.965527][ T6916] [ 182.965609][ T6916] Mem-Info: [ 182.994171][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.000689][ T6916] active_anon:5742 inactive_anon:0 isolated_anon:0 [ 183.000689][ T6916] active_file:12826 inactive_file:38311 isolated_file:0 [ 183.000689][ T6916] unevictable:768 dirty:398 writeback:0 [ 183.000689][ T6916] slab_reclaimable:9854 slab_unreclaimable:100480 [ 183.000689][ T6916] mapped:31736 shmem:1418 pagetables:971 [ 183.000689][ T6916] sec_pagetables:0 bounce:0 [ 183.000689][ T6916] kernel_misc_reclaimable:0 [ 183.000689][ T6916] free:1321039 free_pcp:926 free_cma:0 [ 183.038308][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.042781][ T6916] Node 0 active_anon:22864kB inactive_anon:0kB active_file:51304kB inactive_file:153172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126944kB dirty:1588kB writeback:0kB shmem:4136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11112kB pagetables:3884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 183.101195][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.118765][ T6916] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 183.133132][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.147071][ T6916] Node 0 [ 183.170436][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.188897][ T6916] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.194768][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.198363][ T6916] lowmem_reserve[]: [ 183.203061][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.208510][ T6916] 0 [ 183.214691][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.228651][ T6916] 2487 [ 183.231717][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.236971][ T6916] 2487 [ 183.242183][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.248729][ T6916] 2487 [ 183.254044][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.277222][ T6916] 2487 [ 183.427503][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.427541][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.438805][ T6916] [ 183.468902][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.546021][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.563167][ T6916] Node 0 DMA32 free:1370204kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:21216kB inactive_anon:0kB active_file:51304kB inactive_file:153080kB unevictable:1536kB writepending:1592kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:1768kB local_pcp:732kB free_cma:0kB [ 183.686823][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.689997][ T6916] lowmem_reserve[]: 0 0 0 0 0 [ 183.705550][ T6916] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 183.740935][ T6916] lowmem_reserve[]: 0 0 0 0 0 [ 183.746176][ T6916] Node 1 Normal free:3905800kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:256kB local_pcp:256kB free_cma:0kB [ 183.775760][ T6916] lowmem_reserve[]: 0 0 0 0 0 [ 183.780622][ T6916] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 183.793749][ T6916] Node 0 DMA32: 82*4kB (UE) 260*8kB (UME) 369*16kB (UME) 374*32kB (UME) 337*64kB (UME) 70*128kB (UME) 21*256kB (UME) 14*512kB (UME) 10*1024kB (UME) 8*2048kB (UME) 313*4096kB (UM) = 1372024kB [ 183.814047][ T6916] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 183.825780][ T6916] Node 1 Normal: 214*4kB (UE) 58*8kB (UE) 42*16kB (UE) 202*32kB (UE) 92*64kB (UME) 30*128kB (UE) 16*256kB (UME) 7*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3905800kB [ 183.846405][ T6916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.856991][ T6916] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 183.866512][ T6916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.876271][ T6916] Node 1 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 183.886475][ T6916] 52556 total pagecache pages [ 183.891272][ T6916] 0 pages in swap cache [ 183.895445][ T6916] Free swap = 124996kB [ 183.900080][ T6916] Total swap = 124996kB [ 183.904263][ T6916] 2097051 pages RAM [ 183.908091][ T6916] 0 pages HighMem/MovableOnly [ 183.912986][ T6916] 428585 pages reserved [ 183.913505][ T6705] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.917147][ T6916] 0 pages cma reserved [ 183.930377][ T6916] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 184.003963][ T882] usb 5-1: USB disconnect, device number 13 [ 184.023823][ T6705] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.113820][ T6705] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.144402][ T6705] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.628746][ T882] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 184.695973][ T6943] kvm: kvm [6939]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 184.711459][ T6943] kvm: kvm [6939]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 184.733886][ T6943] kvm: kvm [6939]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 184.912159][ T6943] kvm_intel: kvm [6939]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 185.458654][ T882] usb 5-1: Invalid ep0 maxpacket: 16 [ 185.600339][ T882] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 185.627626][ T6169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.637354][ T6169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.668674][ T5891] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 185.676364][ T5893] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 185.709970][ T6616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.717845][ T6616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.769063][ T882] usb 5-1: Invalid ep0 maxpacket: 16 [ 185.775692][ T882] usb usb5-port1: attempt power cycle [ 185.843705][ T5893] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 185.854746][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 185.868398][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.884605][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.901772][ T5893] usb 4-1: config 0 descriptor?? [ 185.909630][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.926177][ T5893] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 185.956445][ T5891] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.973930][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.983548][ T5891] usb 2-1: Product: syz [ 185.987792][ T5891] usb 2-1: Manufacturer: syz [ 185.992619][ T5891] usb 2-1: SerialNumber: syz [ 186.038918][ T5894] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 186.084262][ T6966] syzkaller1: entered promiscuous mode [ 186.090099][ T6966] syzkaller1: entered allmulticast mode [ 186.147599][ T882] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 186.155603][ T5893] usb 4-1: Detected FT232B [ 186.179696][ T882] usb 5-1: Invalid ep0 maxpacket: 16 [ 186.189061][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 186.201530][ T5894] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 186.211850][ T5894] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 186.223979][ T5894] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 186.235674][ T5894] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 186.238904][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.250515][ T5894] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 186.264109][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.279304][ T5894] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 186.298804][ T5894] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 186.312336][ T5894] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 186.325352][ T5894] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 186.332996][ T882] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 186.340891][ T5894] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 186.353027][ T5894] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 186.365254][ T5894] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 186.376262][ T882] usb 5-1: Invalid ep0 maxpacket: 16 [ 186.383770][ T5893] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 186.393882][ T882] usb usb5-port1: unable to enumerate USB device [ 186.402198][ T5893] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 186.415710][ T5893] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 186.430039][ T5894] usb 1-1: string descriptor 0 read error: -22 [ 186.437293][ T5893] usb 4-1: USB disconnect, device number 14 [ 186.443644][ T5894] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 186.467838][ T5893] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 186.482151][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.501865][ T5893] ftdi_sio 4-1:0.0: device disconnected [ 186.520305][ T5894] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 186.627890][ T5891] usb 2-1: 0:2 : does not exist [ 186.682415][ T5891] usb 2-1: USB disconnect, device number 8 [ 186.784477][ T5893] usb 1-1: USB disconnect, device number 5 [ 186.793142][ T6133] udevd[6133]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.298636][ T5848] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 187.500237][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 187.528014][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 187.569739][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 187.595664][ T5848] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 187.615440][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.646346][ T5848] usb 4-1: Product: syz [ 187.656962][ T5848] usb 4-1: Manufacturer: syz [ 187.689983][ T5891] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 187.709303][ T5848] usb 4-1: SerialNumber: syz [ 187.732891][ T5848] usb 4-1: config 0 descriptor?? [ 187.753597][ T6985] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 187.761696][ T6985] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 187.770752][ T5848] usb 4-1: ucan: probing device on interface #0 [ 187.872709][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 187.881536][ T5891] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.892184][ T5891] usb 5-1: config 0 has no interface number 0 [ 187.912740][ T5891] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 187.926656][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.935382][ T5891] usb 5-1: Product: syz [ 187.939680][ T5891] usb 5-1: Manufacturer: syz [ 187.945625][ T5891] usb 5-1: SerialNumber: syz [ 187.959366][ T5891] usb 5-1: config 0 descriptor?? [ 187.972498][ T5891] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 188.070444][ T6985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.259'. [ 188.114976][ T5848] usb 4-1: ucan: could not read protocol version, ret=-71 [ 188.140000][ T5848] usb 4-1: ucan: probe failed; try to update the device firmware [ 188.189850][ T5891] gspca_spca1528: reg_w err -71 [ 188.246757][ T5848] usb 4-1: USB disconnect, device number 15 [ 188.316438][ T5891] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 188.425005][ T5891] usb 5-1: USB disconnect, device number 18 [ 188.748832][ T5891] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 188.914839][ T5891] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 188.941243][ T5891] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 188.970157][ T5891] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.896124][ T7002] bridge0: entered promiscuous mode [ 189.902193][ T7002] macvlan2: entered promiscuous mode [ 189.920482][ T7012] bridge_slave_0: left allmulticast mode [ 189.926318][ T7012] bridge_slave_0: left promiscuous mode [ 189.932786][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.955503][ T7012] bridge_slave_1: left allmulticast mode [ 189.961760][ T7012] bridge_slave_1: left promiscuous mode [ 189.967895][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.014276][ T7012] bond0: (slave bond_slave_0): Releasing backup interface [ 190.052297][ T7012] bond0: (slave bond_slave_1): Releasing backup interface [ 190.076990][ T7048] mmap: syz.2.272 (7048) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 190.156108][ T7012] team0: Port device team_slave_0 removed [ 190.169370][ T7012] team0: Port device team_slave_1 removed [ 190.177141][ T7012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.184762][ T7012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.194768][ T7012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.204073][ T7012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.301694][ T7050] FAULT_INJECTION: forcing a failure. [ 190.301694][ T7050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.319614][ T7050] CPU: 0 UID: 0 PID: 7050 Comm: syz.1.273 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 190.319646][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.319662][ T7050] Call Trace: [ 190.319670][ T7050] [ 190.319679][ T7050] dump_stack_lvl+0x241/0x360 [ 190.319717][ T7050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.319748][ T7050] ? __pfx__printk+0x10/0x10 [ 190.319790][ T7050] should_fail_ex+0x424/0x570 [ 190.319818][ T7050] _copy_from_user+0x2d/0xb0 [ 190.319851][ T7050] copy_from_sockptr+0x57/0xb0 [ 190.319884][ T7050] ip_mroute_setsockopt+0x66f/0x11f0 [ 190.319927][ T7050] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 190.319984][ T7050] do_ip_setsockopt+0x1114/0x39c0 [ 190.320021][ T7050] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 190.320051][ T7050] ? aa_sk_perm+0x96f/0xac0 [ 190.320085][ T7050] ? ksys_write+0x24e/0x2d0 [ 190.320108][ T7050] ? __pfx_aa_sk_perm+0x10/0x10 [ 190.320136][ T7050] ? __lock_acquire+0xad5/0xd80 [ 190.320164][ T7050] ip_setsockopt+0x63/0x100 [ 190.320191][ T7050] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 190.320221][ T7050] do_sock_setsockopt+0x3b1/0x710 [ 190.320251][ T7050] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 190.320272][ T7050] ? __fget_files+0x2a/0x420 [ 190.320293][ T7050] ? __fget_files+0x39d/0x420 [ 190.320310][ T7050] ? __fget_files+0x2a/0x420 [ 190.320339][ T7050] __ia32_sys_setsockopt+0x1f2/0x280 [ 190.320376][ T7050] __do_fast_syscall_32+0xb4/0x110 [ 190.320404][ T7050] ? exc_page_fault+0x5f8/0x920 [ 190.320434][ T7050] do_fast_syscall_32+0x34/0x80 [ 190.320462][ T7050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.320487][ T7050] RIP: 0023:0xf7fd2579 [ 190.320504][ T7050] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 190.320522][ T7050] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 190.320543][ T7050] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 190.320557][ T7050] RDX: 00000000000000d0 RSI: 0000000080000000 RDI: 0000000000000004 [ 190.320570][ T7050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.320581][ T7050] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 190.320593][ T7050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.320624][ T7050] [ 190.561141][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.641356][ T7054] warning: `syz.3.274' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 190.799773][ T7059] FAULT_INJECTION: forcing a failure. [ 190.799773][ T7059] name failslab, interval 1, probability 0, space 0, times 0 [ 190.858330][ T7059] CPU: 0 UID: 0 PID: 7059 Comm: syz.1.275 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 190.858364][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.858378][ T7059] Call Trace: [ 190.858387][ T7059] [ 190.858396][ T7059] dump_stack_lvl+0x241/0x360 [ 190.858439][ T7059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.858470][ T7059] ? __pfx__printk+0x10/0x10 [ 190.858514][ T7059] should_fail_ex+0x424/0x570 [ 190.858542][ T7059] should_failslab+0xac/0x100 [ 190.858572][ T7059] __kmalloc_cache_noprof+0x73/0x370 [ 190.858601][ T7059] ? sctp_add_bind_addr+0x89/0x3a0 [ 190.858635][ T7059] sctp_add_bind_addr+0x89/0x3a0 [ 190.858667][ T7059] sctp_copy_local_addr_list+0x313/0x500 [ 190.858699][ T7059] ? sctp_copy_local_addr_list+0xad/0x500 [ 190.858728][ T7059] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 190.858762][ T7059] ? sctp_v4_is_any+0x35/0x60 [ 190.858790][ T7059] ? sctp_copy_one_addr+0x94/0x360 [ 190.858823][ T7059] sctp_bind_addr_copy+0xad/0x3b0 [ 190.858851][ T7059] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 190.858881][ T7059] sctp_connect_new_asoc+0x337/0x700 [ 190.858907][ T7059] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 190.858928][ T7059] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 190.858954][ T7059] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 190.858982][ T7059] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 190.859001][ T7059] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 190.859025][ T7059] __sctp_connect+0x6ab/0xe60 [ 190.859060][ T7059] ? __pfx___sctp_connect+0x10/0x10 [ 190.859088][ T7059] ? _copy_from_user+0x95/0xb0 [ 190.859117][ T7059] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 190.859144][ T7059] sctp_getsockopt_connectx3+0x46e/0x730 [ 190.859172][ T7059] ? __local_bh_enable_ip+0x168/0x200 [ 190.859197][ T7059] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 190.859224][ T7059] ? __local_bh_enable_ip+0x168/0x200 [ 190.859246][ T7059] ? sctp_getsockopt+0x13a/0xbb0 [ 190.859279][ T7059] sctp_getsockopt+0x8de/0xbb0 [ 190.859297][ T7059] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 190.859330][ T7059] do_sock_getsockopt+0x391/0x740 [ 190.859360][ T7059] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 190.859379][ T7059] ? __fget_files+0x2a/0x420 [ 190.859400][ T7059] ? __fget_files+0x39d/0x420 [ 190.859417][ T7059] ? __fget_files+0x2a/0x420 [ 190.859443][ T7059] __ia32_sys_getsockopt+0x2a1/0x370 [ 190.859475][ T7059] ? __pfx___ia32_sys_getsockopt+0x10/0x10 [ 190.859502][ T7059] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 190.859529][ T7059] ? lockdep_hardirqs_on+0x9d/0x150 [ 190.859557][ T7059] __do_fast_syscall_32+0xb4/0x110 [ 190.859584][ T7059] ? exc_page_fault+0x5f8/0x920 [ 190.859614][ T7059] do_fast_syscall_32+0x34/0x80 [ 190.859641][ T7059] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.859666][ T7059] RIP: 0023:0xf7fd2579 [ 190.859684][ T7059] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 190.859702][ T7059] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 190.859725][ T7059] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 190.859739][ T7059] RDX: 000000000000006f RSI: 00000000800000c0 RDI: 0000000080000100 [ 190.859752][ T7059] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.859764][ T7059] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 190.859776][ T7059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.859807][ T7059] [ 191.201298][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.342114][ T7071] FAULT_INJECTION: forcing a failure. [ 191.342114][ T7071] name failslab, interval 1, probability 0, space 0, times 0 [ 191.355050][ T7071] CPU: 1 UID: 0 PID: 7071 Comm: syz.3.279 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 191.355079][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.355092][ T7071] Call Trace: [ 191.355100][ T7071] [ 191.355114][ T7071] dump_stack_lvl+0x241/0x360 [ 191.355193][ T7071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.355249][ T7071] ? __pfx__printk+0x10/0x10 [ 191.355298][ T7071] ? __pfx___might_resched+0x10/0x10 [ 191.355344][ T7071] should_fail_ex+0x424/0x570 [ 191.355380][ T7071] should_failslab+0xac/0x100 [ 191.355422][ T7071] __kmalloc_noprof+0xdf/0x4d0 [ 191.355460][ T7071] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 191.355495][ T7071] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 191.355531][ T7071] tomoyo_realpath_from_path+0xcf/0x5e0 [ 191.355574][ T7071] tomoyo_path_number_perm+0x245/0x790 [ 191.355600][ T7071] ? __lock_acquire+0xad5/0xd80 [ 191.355623][ T7071] ? tomoyo_path_number_perm+0x215/0x790 [ 191.355651][ T7071] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 191.355714][ T7071] ? __fget_files+0x2a/0x420 [ 191.355733][ T7071] ? __fget_files+0x2a/0x420 [ 191.355755][ T7071] ? __fget_files+0x2a/0x420 [ 191.355780][ T7071] security_file_ioctl_compat+0xc6/0x2a0 [ 191.355808][ T7071] __se_compat_sys_ioctl+0xd8/0xc30 [ 191.355834][ T7071] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 191.355862][ T7071] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 191.355889][ T7071] ? __fget_files+0x2a/0x420 [ 191.355913][ T7071] ? fput+0x9b/0xd0 [ 191.355932][ T7071] ? ksys_write+0x275/0x2d0 [ 191.356024][ T7071] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 191.356063][ T7071] ? lockdep_hardirqs_on+0x9d/0x150 [ 191.356094][ T7071] __do_fast_syscall_32+0xb4/0x110 [ 191.356121][ T7071] ? exc_page_fault+0x5f8/0x920 [ 191.356148][ T7071] do_fast_syscall_32+0x34/0x80 [ 191.356175][ T7071] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.356201][ T7071] RIP: 0023:0xf7f21579 [ 191.356218][ T7071] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 191.356237][ T7071] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 191.356260][ T7071] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004068aea3 [ 191.356274][ T7071] RDX: 0000000080000680 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.356287][ T7071] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.356298][ T7071] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 191.356311][ T7071] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.356342][ T7071] [ 191.356351][ T7071] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.673794][ T5891] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.683706][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.780157][ T5891] usb 5-1: Product: ࠠ [ 191.882827][ T5891] usb 5-1: Manufacturer: Ј [ 192.141823][ T5891] usb 5-1: can't set config #1, error -71 [ 192.149685][ T5891] usb 5-1: USB disconnect, device number 19 [ 192.179116][ T7090] FAULT_INJECTION: forcing a failure. [ 192.179116][ T7090] name failslab, interval 1, probability 0, space 0, times 0 [ 192.192873][ T7092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.283'. [ 192.197209][ T7090] CPU: 1 UID: 0 PID: 7090 Comm: syz.3.285 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 192.197242][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.197256][ T7090] Call Trace: [ 192.197266][ T7090] [ 192.197275][ T7090] dump_stack_lvl+0x241/0x360 [ 192.197314][ T7090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.197347][ T7090] ? __pfx__printk+0x10/0x10 [ 192.197382][ T7090] ? __pfx___might_resched+0x10/0x10 [ 192.197415][ T7090] should_fail_ex+0x424/0x570 [ 192.197444][ T7090] should_failslab+0xac/0x100 [ 192.197476][ T7090] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 192.197508][ T7090] ? __alloc_skb+0x1c2/0x480 [ 192.197533][ T7090] __alloc_skb+0x1c2/0x480 [ 192.197561][ T7090] ? __pfx___alloc_skb+0x10/0x10 [ 192.197584][ T7090] ? netlink_autobind+0xd6/0x2f0 [ 192.197615][ T7090] ? netlink_autobind+0x2b0/0x2f0 [ 192.197657][ T7090] netlink_sendmsg+0x638/0xcd0 [ 192.197720][ T7090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.197757][ T7090] ? __import_iovec+0x585/0x830 [ 192.197788][ T7090] ? aa_sock_msg_perm+0x91/0x160 [ 192.197827][ T7090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.197858][ T7090] __sock_sendmsg+0x221/0x270 [ 192.197893][ T7090] ____sys_sendmsg+0x523/0x860 [ 192.197928][ T7090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.197971][ T7090] __sys_sendmsg+0x271/0x360 [ 192.198001][ T7090] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.198090][ T7090] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 192.198120][ T7090] ? lockdep_hardirqs_on+0x9d/0x150 [ 192.198151][ T7090] __do_fast_syscall_32+0xb4/0x110 [ 192.198185][ T7090] ? exc_page_fault+0x5f8/0x920 [ 192.198218][ T7090] do_fast_syscall_32+0x34/0x80 [ 192.198247][ T7090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.198275][ T7090] RIP: 0023:0xf7f21579 [ 192.198294][ T7090] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 192.198313][ T7090] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 192.198338][ T7090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 192.198354][ T7090] RDX: 0000000000008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.198367][ T7090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.198380][ T7090] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 192.198394][ T7090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.198426][ T7090] [ 192.322839][ T7064] syzkaller1: entered promiscuous mode [ 192.468309][ T7064] syzkaller1: entered allmulticast mode [ 192.648870][ T5891] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 192.949799][ T5891] usb 5-1: config 0 has no interfaces? [ 192.976554][ T5891] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 193.008000][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.075223][ T7111] trusted_key: encrypted_key: insufficient parameters specified [ 193.572913][ T5891] usb 5-1: Product: syz [ 193.853293][ T5891] usb 5-1: Manufacturer: syz [ 193.888651][ T5891] usb 5-1: SerialNumber: syz [ 193.924937][ T5891] usb 5-1: config 0 descriptor?? [ 195.480540][ T5891] usb 5-1: USB disconnect, device number 20 [ 195.665247][ T7136] FAULT_INJECTION: forcing a failure. [ 195.665247][ T7136] name failslab, interval 1, probability 0, space 0, times 0 [ 195.678074][ T7136] CPU: 1 UID: 0 PID: 7136 Comm: syz.4.290 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 195.678103][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.678116][ T7136] Call Trace: [ 195.678123][ T7136] [ 195.678132][ T7136] dump_stack_lvl+0x241/0x360 [ 195.678169][ T7136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.678200][ T7136] ? __pfx__printk+0x10/0x10 [ 195.678234][ T7136] ? __pfx___might_resched+0x10/0x10 [ 195.678266][ T7136] should_fail_ex+0x424/0x570 [ 195.678293][ T7136] should_failslab+0xac/0x100 [ 195.678325][ T7136] kmem_cache_alloc_noprof+0x78/0x390 [ 195.678353][ T7136] ? fcntl_setlk+0xae/0x10f0 [ 195.678383][ T7136] fcntl_setlk+0xae/0x10f0 [ 195.678411][ T7136] ? __lock_acquire+0xad5/0xd80 [ 195.678447][ T7136] ? __pfx_fcntl_setlk+0x10/0x10 [ 195.678491][ T7136] do_compat_fcntl64+0x8c0/0xdc0 [ 195.678522][ T7136] ? __pfx_do_compat_fcntl64+0x10/0x10 [ 195.678547][ T7136] ? __fget_files+0x2a/0x420 [ 195.678573][ T7136] ? fput+0x9b/0xd0 [ 195.678591][ T7136] ? ksys_write+0x275/0x2d0 [ 195.678634][ T7136] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 195.678661][ T7136] ? lockdep_hardirqs_on+0x9d/0x150 [ 195.678690][ T7136] __do_fast_syscall_32+0xb4/0x110 [ 195.678716][ T7136] ? exc_page_fault+0x5f8/0x920 [ 195.678746][ T7136] do_fast_syscall_32+0x34/0x80 [ 195.678772][ T7136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.678798][ T7136] RIP: 0023:0xf7ff4579 [ 195.678816][ T7136] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 195.678833][ T7136] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000037 [ 195.678855][ T7136] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000007 [ 195.678869][ T7136] RDX: 0000000080002200 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.678881][ T7136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.678893][ T7136] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.678905][ T7136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.678934][ T7136] [ 196.011796][ T7138] netlink: 116 bytes leftover after parsing attributes in process `syz.4.290'. [ 196.520497][ T919] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 196.681491][ T919] usb 5-1: config 0 has no interfaces? [ 196.693256][ T919] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 196.703014][ T919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.711468][ T919] usb 5-1: Product: syz [ 196.715727][ T919] usb 5-1: Manufacturer: syz [ 196.720489][ T919] usb 5-1: SerialNumber: syz [ 196.738498][ T919] usb 5-1: config 0 descriptor?? [ 196.972125][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.983130][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.005020][ T919] IPVS: starting estimator thread 0... [ 197.009080][ T5891] usb 5-1: USB disconnect, device number 21 [ 197.100028][ T7146] IPVS: using max 26 ests per chain, 62400 per kthread [ 197.192232][ T7112] : entered promiscuous mode [ 198.298729][ T49] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 198.379038][ T5895] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 198.578871][ T49] usb 5-1: config 13 has an invalid interface number: 65 but max is 3 [ 198.596559][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 198.607802][ T49] usb 5-1: config 13 contains an unexpected descriptor of type 0x1, skipping [ 198.669515][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.688792][ T49] usb 5-1: config 13 has an invalid interface number: 94 but max is 3 [ 198.708413][ T5895] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 198.728487][ T49] usb 5-1: config 13 contains an unexpected descriptor of type 0x1, skipping [ 198.775689][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.862020][ T49] usb 5-1: config 13 has an invalid interface number: 86 but max is 3 [ 198.870910][ T5895] usb 1-1: Product: syz [ 198.888934][ T5895] usb 1-1: Manufacturer: syz [ 198.893682][ T5895] usb 1-1: SerialNumber: syz [ 198.903103][ T49] usb 5-1: config 13 has an invalid interface number: 132 but max is 3 [ 198.933841][ T49] usb 5-1: config 13 has no interface number 0 [ 198.962385][ T49] usb 5-1: config 13 has no interface number 1 [ 198.989350][ T49] usb 5-1: config 13 has no interface number 2 [ 199.011606][ T49] usb 5-1: config 13 has no interface number 3 [ 199.018493][ T49] usb 5-1: config 13 interface 65 altsetting 4 endpoint 0xB has an invalid bInterval 129, changing to 7 [ 199.036777][ T49] usb 5-1: config 13 interface 65 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 199.047725][ T5895] usb 1-1: config 0 descriptor?? [ 199.069049][ T5895] gs_usb 1-1:0.0: Required endpoints not found [ 199.079259][ T49] usb 5-1: config 13 interface 65 altsetting 4 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 199.088770][ T5894] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 199.091597][ T49] usb 5-1: config 13 interface 65 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 199.120141][ T49] usb 5-1: config 13 interface 65 altsetting 4 has an endpoint descriptor with address 0x57, changing to 0x7 [ 199.138614][ T49] usb 5-1: config 13 interface 65 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 199.160028][ T49] usb 5-1: config 13 interface 65 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 199.176361][ T49] usb 5-1: config 13 interface 65 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 199.187310][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 199.201823][ T49] usb 5-1: config 13 interface 65 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 199.228609][ T49] usb 5-1: config 13 interface 65 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 199.239921][ T49] usb 5-1: config 13 interface 65 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 199.250743][ T49] usb 5-1: config 13 interface 65 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 199.265291][ T49] usb 5-1: config 13 interface 65 altsetting 4 has an endpoint descriptor with address 0x4A, changing to 0xA [ 199.278667][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 199.297504][ T5894] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 199.298616][ T49] usb 5-1: config 13 interface 65 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 199.327172][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.337025][ T5894] usb 4-1: Product: syz [ 199.347352][ T5894] usb 4-1: Manufacturer: syz [ 199.348644][ T49] usb 5-1: config 13 interface 65 altsetting 4 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 199.365777][ T49] usb 5-1: config 13 interface 94 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 199.376916][ T49] usb 5-1: config 13 interface 94 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 199.387673][ T5894] usb 4-1: SerialNumber: syz [ 199.392441][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 199.398938][ T49] usb 5-1: config 13 interface 94 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 199.399200][ T5894] usb 4-1: config 0 descriptor?? [ 199.410512][ T49] usb 5-1: config 13 interface 94 altsetting 7 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 199.427166][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.438310][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 199.447594][ T49] usb 5-1: config 13 interface 94 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 199.458686][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.469920][ T24] usb 2-1: config 0 descriptor?? [ 199.475133][ T49] usb 5-1: config 13 interface 94 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 199.490876][ T49] usb 5-1: config 13 interface 86 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 199.502122][ T49] usb 5-1: config 13 interface 132 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 199.513721][ T49] usb 5-1: config 13 interface 132 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 199.536058][ T49] usb 5-1: config 13 interface 132 altsetting 6 bulk endpoint 0x8 has invalid maxpacket 1023 [ 199.547243][ T49] usb 5-1: config 13 interface 132 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 199.563876][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.570819][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.579569][ T49] usb 5-1: config 13 interface 132 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 199.593196][ T49] usb 5-1: config 13 interface 132 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 199.604839][ T49] usb 5-1: config 13 interface 132 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 199.617150][ T49] usb 5-1: config 13 interface 132 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 199.628752][ T49] usb 5-1: config 13 interface 132 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 199.640360][ T49] usb 5-1: config 13 interface 132 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 199.651995][ T49] usb 5-1: config 13 interface 65 has no altsetting 0 [ 199.658923][ T49] usb 5-1: config 13 interface 94 has no altsetting 0 [ 199.666021][ T49] usb 5-1: config 13 interface 132 has no altsetting 0 [ 199.677812][ T49] usb 5-1: New USB device found, idVendor=2040, idProduct=b757, bcdDevice=69.54 [ 199.687421][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.698269][ T49] usb 5-1: Product: syz [ 199.702636][ T49] usb 5-1: Manufacturer: syz [ 199.707170][ T5894] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 199.707277][ T49] usb 5-1: SerialNumber: syz [ 199.728055][ T7159] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 199.736775][ T7159] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 199.905044][ T24] mcp2221 0003:04D8:00DD.0003: item fetching failed at offset 0/5 [ 199.919076][ T7183] bridge0: entered promiscuous mode [ 199.919830][ T24] mcp2221 0003:04D8:00DD.0003: can't parse reports [ 199.942707][ T24] mcp2221 0003:04D8:00DD.0003: probe with driver mcp2221 failed with error -22 [ 200.113230][ T49] usb 5-1: USB disconnect, device number 22 [ 200.191865][ T5891] usb 2-1: USB disconnect, device number 9 [ 200.342642][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 200.354986][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 200.364558][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 200.378016][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 200.387397][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 201.429292][ T7200] usb usb8: usbfs: process 7200 (syz.1.310) did not claim interface 0 before use [ 201.711328][ T49] usb 1-1: USB disconnect, device number 6 [ 201.799364][ T5894] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 201.836010][ T5894] usb 4-1: USB disconnect, device number 16 [ 202.873839][ T7232] vivid-000: disconnect [ 203.388655][ T5894] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 203.542515][ T5895] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 204.268635][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 204.282223][ T5895] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.364347][ T49] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 204.373770][ T5894] usb 4-1: config 0 has no interfaces? [ 204.392479][ T5895] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.454204][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.464546][ T5895] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 204.491338][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.527620][ T5894] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 204.550629][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.564773][ T5894] usb 4-1: Product: syz [ 204.569039][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 204.572484][ T49] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 204.593947][ T5895] usb 1-1: config 0 descriptor?? [ 204.601285][ T5894] usb 4-1: Manufacturer: syz [ 204.605942][ T5894] usb 4-1: SerialNumber: syz [ 204.637702][ T49] usb 2-1: config 0 has no interface number 0 [ 204.657934][ T5894] usb 4-1: config 0 descriptor?? [ 204.723477][ T49] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 204.757183][ T49] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 204.788620][ T49] usb 2-1: config 0 interface 41 has no altsetting 0 [ 204.872075][ T49] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 204.924589][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.940643][ T49] usb 2-1: Product: syz [ 204.953122][ T49] usb 2-1: Manufacturer: syz [ 204.969138][ T49] usb 2-1: SerialNumber: syz [ 204.990434][ T49] usb 2-1: config 0 descriptor?? [ 204.999320][ T7242] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 205.007481][ T7242] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 205.104654][ T5895] saitek 0003:06A3:0621.0004: unknown main item tag 0x2 [ 205.138752][ T5895] saitek 0003:06A3:0621.0004: unbalanced collection at end of report description [ 205.251772][ T7242] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 205.260736][ T5895] saitek 0003:06A3:0621.0004: parse failed [ 205.309761][ T5895] saitek 0003:06A3:0621.0004: probe with driver saitek failed with error -22 [ 205.358914][ T7242] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 205.963458][ T7232] vivid-000: reconnect [ 205.967835][ T49] Error reading MAC address [ 205.974774][ T882] usb 4-1: USB disconnect, device number 17 [ 205.987324][ T7260] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 206.057144][ T7260] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 207.033498][ T7273] kvm: kvm [7267]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 207.046508][ T7273] kvm: kvm [7267]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 207.055253][ T7273] kvm: kvm [7267]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 207.068204][ T7273] kvm_intel: kvm [7267]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 207.510543][ T5891] usb 1-1: USB disconnect, device number 7 [ 207.805545][ T7292] delete_channel: no stack [ 208.914324][ T49] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 209.308042][ T7317] syzkaller1: entered promiscuous mode [ 209.313782][ T7317] syzkaller1: entered allmulticast mode [ 209.314194][ T49] usb 2-1: USB disconnect, device number 10 [ 209.826015][ T7327] trusted_key: encrypted_key: insufficient parameters specified [ 210.693274][ T7338] kvm: kvm [7334]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 210.705269][ T7338] kvm: kvm [7334]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 210.713987][ T7338] kvm: kvm [7334]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 210.724723][ T7338] kvm_intel: kvm [7334]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 211.711540][ T7350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.351'. [ 211.881577][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 211.887668][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 211.894049][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 212.012334][ T7337] : entered promiscuous mode [ 213.021807][ T7376] netlink: 'syz.3.361': attribute type 10 has an invalid length. [ 213.031358][ T7376] netlink: 40 bytes leftover after parsing attributes in process `syz.3.361'. [ 213.087533][ T7376] team0: Port device geneve0 added [ 214.040702][ T7386] kvm: kvm [7384]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 214.053838][ T7386] kvm: kvm [7384]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 214.068810][ T7386] kvm: kvm [7384]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 214.080554][ T7386] kvm_intel: kvm [7384]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 214.274772][ T5894] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 214.552635][ T5894] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 214.580617][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.690161][ T5894] usb 5-1: config 0 descriptor?? [ 214.712616][ T5894] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 214.910051][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.919041][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.939274][ T5894] usb 5-1: USB disconnect, device number 23 [ 215.039106][ T7409] input: syz0 as /devices/virtual/input/input11 [ 215.318849][ T7415] sctp: [Deprecated]: syz.3.374 (pid 7415) Use of int in max_burst socket option deprecated. [ 215.318849][ T7415] Use struct sctp_assoc_value instead [ 215.863037][ T7422] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 215.958702][ T7423] netlink: 6 bytes leftover after parsing attributes in process `syz.4.376'. [ 215.984161][ T7426] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 216.368366][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.378'. [ 216.368767][ T30] audit: type=1326 audit(1744781834.899:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 216.499899][ T30] audit: type=1326 audit(1744781834.899:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 216.529967][ T30] audit: type=1326 audit(1744781834.899:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 216.552706][ T30] audit: type=1326 audit(1744781834.899:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 216.592154][ T30] audit: type=1326 audit(1744781834.899:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 216.613816][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.628876][ T30] audit: type=1326 audit(1744781834.899:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 216.666020][ T30] audit: type=1326 audit(1744781834.899:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 216.754036][ T5891] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 216.795964][ T882] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 216.845776][ T30] audit: type=1326 audit(1744781834.899:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 216.947825][ T7442] netlink: 36 bytes leftover after parsing attributes in process `syz.0.379'. [ 216.988665][ T30] audit: type=1326 audit(1744781834.899:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 217.010486][ T7442] netlink: 36 bytes leftover after parsing attributes in process `syz.0.379'. [ 217.026318][ T30] audit: type=1326 audit(1744781834.899:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 217.039029][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 217.062405][ T882] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.091603][ T882] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 217.107419][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.121267][ T5891] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 217.131251][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.139420][ T882] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 217.158302][ T5891] usb 2-1: Product: syz [ 217.163342][ T882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.175029][ T5891] usb 2-1: Manufacturer: syz [ 217.179862][ T5891] usb 2-1: SerialNumber: syz [ 217.193104][ T7438] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 217.208672][ T5848] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 217.209613][ T5891] usb 2-1: config 0 descriptor?? [ 217.231389][ T882] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 217.247021][ T5891] usb 2-1: bad CDC descriptors [ 217.254203][ T5891] usb 2-1: unsupported MDLM descriptors [ 217.399563][ T5848] usb 4-1: Using ep0 maxpacket: 32 [ 217.433069][ T5848] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 217.445186][ T5848] usb 4-1: config 0 has no interface number 0 [ 217.451966][ T5848] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.465164][ T5848] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 217.474977][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.484533][ T5848] usb 4-1: Product: syz [ 217.489343][ T5848] usb 4-1: Manufacturer: syz [ 217.494676][ T5848] usb 4-1: SerialNumber: syz [ 217.507271][ T5848] usb 4-1: config 0 descriptor?? [ 217.526264][ T5848] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 217.537485][ T5848] em28xx 4-1:0.132: Video interface 132 found: [ 217.572929][ T7424] netlink: 'syz.1.372': attribute type 5 has an invalid length. [ 217.675163][ T882] usb 2-1: USB disconnect, device number 11 [ 217.786346][ T7449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.382'. [ 217.925328][ T5848] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 218.199794][ T882] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 218.352242][ T5848] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 218.384333][ T882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 218.389767][ T5848] em28xx 4-1:0.132: board has no eeprom [ 218.411568][ T882] usb 3-1: not running at top speed; connect to a high speed hub [ 218.433939][ T882] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 218.463535][ T882] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.476968][ T882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.486027][ T882] usb 3-1: Product: syz [ 218.494845][ T882] usb 3-1: Manufacturer: syz [ 218.505004][ T882] usb 3-1: SerialNumber: syz [ 218.628762][ T5848] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 218.641076][ T5848] em28xx 4-1:0.132: analog set to bulk mode. [ 218.647558][ T24] em28xx 4-1:0.132: Registering V4L2 extension [ 218.657444][ T5990] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 218.695207][ T5848] usb 4-1: USB disconnect, device number 18 [ 218.725946][ T5848] em28xx 4-1:0.132: Disconnecting em28xx [ 218.744535][ T7452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.784809][ T7452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.814693][ T882] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 218.830913][ T882] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 218.856576][ T5990] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 218.865393][ T5990] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.869034][ T882] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 218.885450][ T5990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.896806][ T5990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.908401][ T5990] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.922865][ T5990] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.935196][ T882] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 218.938612][ T5990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.955913][ T5990] usb 2-1: config 0 descriptor?? [ 218.956037][ T882] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 218.962308][ T7457] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 219.012947][ T882] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 219.028969][ T5891] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 219.038147][ T24] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 219.054362][ T24] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 219.063335][ T24] em28xx 4-1:0.132: No AC97 audio processor [ 219.067708][ T882] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 219.159174][ T24] usb 4-1: Decoder not found [ 219.179471][ T5846] Bluetooth: hci0: command 0x0405 tx timeout [ 219.193626][ T24] em28xx 4-1:0.132: failed to create media graph [ 219.208974][ T5891] usb 1-1: device descriptor read/64, error -71 [ 219.222787][ T882] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 219.264111][ T24] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 219.288702][ T882] usb 3-1: USB disconnect, device number 11 [ 219.324766][ T24] em28xx 4-1:0.132: Remote control support is not available for this card. [ 219.387330][ T5848] em28xx 4-1:0.132: Closing input extension [ 219.648901][ T5895] usb 5-1: USB disconnect, device number 24 [ 219.939462][ T5891] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 220.035460][ T5990] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 220.074509][ T5990] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 220.109004][ T5891] usb 1-1: device descriptor read/64, error -71 [ 220.179935][ T5990] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 220.236069][ T5990] usb 2-1: USB disconnect, device number 12 [ 220.237728][ T5891] usb usb1-port1: attempt power cycle [ 220.293798][ T6088] udevd[6088]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 220.528855][ T5895] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 220.619144][ T5891] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 220.643208][ T5891] usb 1-1: device descriptor read/8, error -71 [ 220.660106][ T7480] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 220.688685][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 220.733965][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.761347][ T5895] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 220.771181][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.788666][ T5895] usb 5-1: Product: syz [ 220.795667][ T5895] usb 5-1: Manufacturer: syz [ 220.802085][ T5895] usb 5-1: SerialNumber: syz [ 220.817669][ T5895] usb 5-1: config 0 descriptor?? [ 220.861025][ T5895] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 220.892542][ T5891] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 220.942281][ T5891] usb 1-1: device descriptor read/8, error -71 [ 221.082031][ T5891] usb usb1-port1: unable to enumerate USB device [ 221.879427][ T53] usb 5-1: Failed to submit usb control message: -110 [ 221.881426][ T5848] em28xx 4-1:0.132: Freeing device [ 221.904603][ T53] usb 5-1: unable to send the bmi data to the device: -110 [ 221.914425][ T53] usb 5-1: unable to get target info from device [ 221.923717][ T53] usb 5-1: could not get target info (-110) [ 221.933227][ T53] usb 5-1: could not probe fw (-110) [ 222.139587][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 222.139606][ T30] audit: type=1326 audit(1744781840.679:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 222.290977][ T5990] usb 5-1: USB disconnect, device number 25 [ 223.612287][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 223.843892][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'. [ 223.857542][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 225.399756][ T5848] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 225.407530][ T5990] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 225.440539][ T5891] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 225.560061][ T5848] usb 2-1: device descriptor read/64, error -71 [ 225.579218][ T5990] usb 4-1: Using ep0 maxpacket: 16 [ 225.587401][ T5990] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 225.600711][ T5990] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 225.610247][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.621585][ T7566] trusted_key: encrypted_key: insufficient parameters specified [ 225.663256][ T5891] usb 5-1: config 0 has an invalid interface number: 178 but max is 0 [ 225.672124][ T5891] usb 5-1: config 0 has no interface number 0 [ 225.673059][ T5990] usb 4-1: config 0 descriptor?? [ 225.678258][ T5891] usb 5-1: config 0 interface 178 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 225.737129][ T5891] usb 5-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 225.746523][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.871111][ T5891] usb 5-1: config 0 descriptor?? [ 225.872622][ T5990] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 225.889354][ T7562] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 225.920010][ T5848] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 226.067388][ T7557] input: syz0 as /devices/virtual/input/input15 [ 226.079446][ T5848] usb 2-1: device descriptor read/64, error -71 [ 226.117256][ T7562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.127292][ T7562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.193669][ T7570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.209356][ T7570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.209381][ T5895] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 226.398705][ T5848] usb usb2-port1: attempt power cycle [ 226.656165][ T5895] usb 3-1: config 0 has no interfaces? [ 226.663068][ T5895] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 226.875851][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.184184][ T5848] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 227.383814][ T5895] usb 3-1: config 0 descriptor?? [ 227.400885][ T5848] usb 2-1: device descriptor read/8, error -71 [ 227.627147][ T7569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.641056][ T7569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.662030][ T7569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.675800][ T7569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.678791][ T5848] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 227.687464][ T882] usb 3-1: USB disconnect, device number 12 [ 227.732151][ T5848] usb 2-1: device descriptor read/8, error -71 [ 227.859630][ T5848] usb usb2-port1: unable to enumerate USB device [ 228.014457][ T5196] bcm5974 4-1:0.0: could not read from device [ 228.063808][ T5990] usb 4-1: USB disconnect, device number 20 [ 228.070919][ T5196] bcm5974 4-1:0.0: could not read from device [ 228.109321][ T7575] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 228.173809][ T7575] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 228.182886][ T882] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 228.195896][ T7575] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 228.353608][ T882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.384769][ T882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 228.433978][ T5891] usb 5-1: string descriptor 0 read error: -71 [ 228.498941][ T5894] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 228.521836][ T5891] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 228.542970][ T882] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.554811][ T7581] netlink: 104 bytes leftover after parsing attributes in process `syz.0.422'. [ 228.589255][ T5891] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 11 is not bulk. [ 228.599698][ T7581] netlink: 104 bytes leftover after parsing attributes in process `syz.0.422'. [ 228.641063][ T882] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 228.653844][ T882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.663907][ T5891] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 228.679197][ T882] usb 3-1: Product: syz [ 228.685361][ T882] usb 3-1: Manufacturer: syz [ 228.703060][ T5990] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 228.709106][ T5891] usb 5-1: USB disconnect, device number 26 [ 228.716816][ T882] usb 3-1: SerialNumber: syz [ 228.748470][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.761638][ T882] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 228.765555][ T7585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.424'. [ 228.768475][ T882] cdc_ncm 3-1:1.0: bind() failure [ 228.783567][ T7585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.424'. [ 228.788213][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.804114][ T5894] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 228.831337][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.877362][ T5894] usb 2-1: config 0 descriptor?? [ 228.878667][ T5990] usb 4-1: Using ep0 maxpacket: 16 [ 228.892387][ T5990] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 228.908732][ T5990] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 228.926965][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.935635][ T5990] usb 4-1: Product: syz [ 228.939979][ T5990] usb 4-1: Manufacturer: syz [ 228.944609][ T5990] usb 4-1: SerialNumber: syz [ 228.960820][ T5990] usb 4-1: config 0 descriptor?? [ 229.001245][ T5990] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 229.046279][ T5891] usb 3-1: USB disconnect, device number 13 [ 229.188396][ T5990] usb 4-1: USB disconnect, device number 21 [ 229.190442][ T6169] usb 4-1: Failed to submit usb control message: -71 [ 229.215939][ T6169] usb 4-1: unable to send the bmi data to the device: -71 [ 229.224045][ T6169] usb 4-1: unable to get target info from device [ 229.234193][ T6169] usb 4-1: could not get target info (-71) [ 229.245461][ T6169] usb 4-1: could not probe fw (-71) [ 229.327854][ T7593] veth1_macvtap: left promiscuous mode [ 229.335796][ T7593] macsec0: entered promiscuous mode [ 229.352340][ T7593] veth1_macvtap: entered promiscuous mode [ 229.361362][ T7593] macsec0: left promiscuous mode [ 229.432276][ T5894] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 229.459215][ T7585] net_ratelimit: 10 callbacks suppressed [ 229.459236][ T7585] dccp_close: ABORT with 60 bytes unread [ 229.904015][ T7603] x_tables: ip_tables: osf match: only valid for protocol 6 [ 230.122309][ T5894] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 230.290779][ T5894] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 230.447549][ T5894] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -71 [ 230.940216][ T5894] usb 2-1: USB disconnect, device number 17 [ 231.355779][ T7616] trusted_key: syz.2.430 sent an empty control message without MSG_MORE. [ 233.211779][ T7628] batadv_slave_1: entered allmulticast mode [ 233.653255][ T7645] bridge0: port 3(syz_tun) entered blocking state [ 233.661495][ T7645] bridge0: port 3(syz_tun) entered disabled state [ 233.694190][ T7645] syz_tun: entered allmulticast mode [ 233.706865][ T7643] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.716897][ T7643] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 233.739952][ T7643] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 233.746036][ T7643] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 233.755218][ T7643] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 233.761342][ T7643] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 233.770548][ T7645] syz_tun: entered promiscuous mode [ 233.790374][ T7645] bridge0: port 3(syz_tun) entered blocking state [ 233.797231][ T7645] bridge0: port 3(syz_tun) entered forwarding state [ 233.925772][ T7643] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 233.936699][ T7643] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 234.074996][ T7643] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 234.085629][ T7643] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 234.092205][ T7643] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 234.104561][ T7643] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 234.369047][ T5893] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 235.158932][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 235.739202][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 235.801304][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 235.807400][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 235.905360][ T5893] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 235.963146][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 236.125230][ T55] Bluetooth: hci0: command 0x0405 tx timeout [ 236.132228][ T5893] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 236.144649][ T5893] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.155453][ T5893] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.198603][ T5893] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.228145][ T5848] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 236.265581][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.288665][ T5895] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 236.415244][ T5848] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 236.437594][ T5848] usb 2-1: config 0 interface 0 has no altsetting 0 [ 236.444663][ T5895] usb 4-1: device descriptor read/64, error -71 [ 236.456830][ T7677] kvm: kvm [7675]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 236.469089][ T7677] kvm: kvm [7675]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 236.477835][ T7677] kvm: kvm [7675]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 236.489730][ T7677] kvm_intel: kvm [7675]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 236.784378][ T5893] usb 3-1: usb_control_msg returned -71 [ 236.818167][ T5848] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 236.854360][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 236.872725][ T5848] usb 2-1: Product: syz [ 236.906511][ T5893] usbtmc 3-1:16.0: can't read capabilities [ 236.918684][ T5848] usb 2-1: Manufacturer: syz [ 236.943814][ T5848] usb 2-1: SerialNumber: syz [ 236.960741][ T5893] usb 3-1: USB disconnect, device number 14 [ 236.966298][ T5848] usb 2-1: config 0 descriptor?? [ 237.008674][ T5895] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 237.116758][ T5848] usb 2-1: selecting invalid altsetting 0 [ 237.240581][ T5895] usb 4-1: device descriptor read/64, error -71 [ 237.337209][ T5848] usb 2-1: USB disconnect, device number 18 [ 237.368676][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 237.376978][ T5895] usb usb4-port1: attempt power cycle [ 237.552028][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.568021][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.578781][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 237.587866][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.601233][ T24] usb 5-1: SerialNumber: syz [ 237.728881][ T5895] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 237.764073][ T5895] usb 4-1: device descriptor read/8, error -71 [ 237.809073][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 237.878973][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 237.887270][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 238.041398][ T5895] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 238.053247][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 238.122911][ T5895] usb 4-1: device descriptor read/8, error -71 [ 238.199002][ T55] Bluetooth: hci0: command 0x0405 tx timeout [ 238.259095][ T5895] usb usb4-port1: unable to enumerate USB device [ 240.121932][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 240.195495][ T24] usb 5-1: 0:2 : does not exist [ 240.283505][ T55] Bluetooth: hci0: command 0x0405 tx timeout [ 240.305760][ T24] usb 5-1: USB disconnect, device number 27 [ 240.563584][ T6088] udevd[6088]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.083924][ T7733] FAULT_INJECTION: forcing a failure. [ 242.083924][ T7733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.127368][ T7733] CPU: 0 UID: 0 PID: 7733 Comm: syz.3.467 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 242.127399][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.127422][ T7733] Call Trace: [ 242.127431][ T7733] [ 242.127440][ T7733] dump_stack_lvl+0x241/0x360 [ 242.127480][ T7733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.127508][ T7733] ? __pfx__printk+0x10/0x10 [ 242.127550][ T7733] should_fail_ex+0x424/0x570 [ 242.127577][ T7733] _copy_from_user+0x2d/0xb0 [ 242.127608][ T7733] get_compat_msghdr+0xb3/0x730 [ 242.127646][ T7733] ? __pfx_get_compat_msghdr+0x10/0x10 [ 242.127684][ T7733] ? __sys_sendmmsg+0x4d4/0x7b0 [ 242.127712][ T7733] __sys_sendmmsg+0x464/0x7b0 [ 242.127746][ T7733] ? __pfx___sys_sendmmsg+0x10/0x10 [ 242.127775][ T7733] ? __lock_acquire+0xad5/0xd80 [ 242.127838][ T7733] ? vfs_write+0xb29/0xd10 [ 242.127879][ T7733] ? __mutex_unlock_slowpath+0x229/0x800 [ 242.127916][ T7733] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 242.127940][ T7733] ? __fget_files+0x2a/0x420 [ 242.127975][ T7733] ? fput+0x9b/0xd0 [ 242.127993][ T7733] ? ksys_write+0x275/0x2d0 [ 242.128028][ T7733] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 242.128065][ T7733] __do_fast_syscall_32+0xb4/0x110 [ 242.128092][ T7733] ? exc_page_fault+0x5f8/0x920 [ 242.128122][ T7733] do_fast_syscall_32+0x34/0x80 [ 242.128149][ T7733] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.128181][ T7733] RIP: 0023:0xf7f21579 [ 242.128199][ T7733] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 242.128218][ T7733] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 242.128248][ T7733] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080001b00 [ 242.128262][ T7733] RDX: 000000000000003a RSI: 0000000000000000 RDI: 0000000000000000 [ 242.128274][ T7733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.128286][ T7733] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 242.128298][ T7733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.128328][ T7733] [ 242.340461][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.886769][ T30] audit: type=1326 audit(1744781861.359:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 242.993748][ T30] audit: type=1326 audit(1744781861.359:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 243.015658][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.023258][ T30] audit: type=1326 audit(1744781861.389:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 243.049619][ T30] audit: type=1326 audit(1744781861.389:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 243.099519][ T30] audit: type=1326 audit(1744781861.389:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 243.154654][ T30] audit: type=1326 audit(1744781861.399:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 243.177899][ T30] audit: type=1326 audit(1744781861.399:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 243.199654][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.230075][ T30] audit: type=1326 audit(1744781861.399:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 243.251833][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.264488][ T30] audit: type=1326 audit(1744781861.409:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 243.286225][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.534814][ T30] audit: type=1326 audit(1744781861.409:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 243.621973][ T5895] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 244.038852][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 244.079404][ T5895] usb 1-1: config 0 has no interfaces? [ 244.091449][ T5895] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 244.109911][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.118180][ T5895] usb 1-1: Product: syz [ 244.132896][ T5895] usb 1-1: Manufacturer: syz [ 244.273018][ T5895] usb 1-1: SerialNumber: syz [ 244.302369][ T7771] x_tables: duplicate underflow at hook 2 [ 244.393370][ T5895] usb 1-1: config 0 descriptor?? [ 244.601925][ T7750] openvswitch: netlink: Actions may not be safe on all matching packets [ 245.713335][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'. [ 245.889131][ T5893] usb 1-1: USB disconnect, device number 12 [ 246.083234][ T7786] kvm: kvm [7754]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 246.096029][ T7786] kvm: kvm [7754]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 246.105621][ T7786] kvm: kvm [7754]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 246.124568][ T7786] kvm_intel: kvm [7754]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 246.698764][ T49] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 246.869388][ T5893] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 247.119872][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 247.383093][ T49] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 247.391674][ T49] usb 4-1: config 0 has no interface number 0 [ 247.397916][ T49] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 247.409003][ T49] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 247.419293][ T49] usb 4-1: config 0 interface 126 has no altsetting 0 [ 247.429930][ T49] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 247.439670][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.458678][ T49] usb 4-1: Product: syz [ 247.462972][ T49] usb 4-1: Manufacturer: syz [ 247.467861][ T49] usb 4-1: SerialNumber: syz [ 247.494249][ T49] usb 4-1: config 0 descriptor?? [ 247.503421][ T7789] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 247.513310][ T7789] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 247.574810][ T5893] usb 2-1: config 0 has no interfaces? [ 247.585702][ T5893] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 247.594925][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.648588][ T5893] usb 2-1: Product: syz [ 247.657688][ T5893] usb 2-1: Manufacturer: syz [ 247.668111][ T5893] usb 2-1: SerialNumber: syz [ 247.733327][ T5893] usb 2-1: config 0 descriptor?? [ 247.943648][ T49] ir_usb 4-1:0.126: IR Dongle converter detected [ 248.063513][ T7798] veth0_to_bridge: entered promiscuous mode [ 248.074777][ T7798] veth0_to_bridge: left promiscuous mode [ 248.143991][ T49] usb 4-1: IR Dongle converter now attached to ttyUSB0 [ 248.352101][ T7789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.364636][ T7789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.399278][ T5891] usb 4-1: USB disconnect, device number 26 [ 248.442176][ T5893] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 248.472031][ T5891] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 248.759163][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 249.338985][ T5891] ir_usb 4-1:0.126: device disconnected [ 249.351287][ T5893] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 249.419418][ T5893] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 249.429667][ T5893] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.454556][ T5893] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.497084][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.506510][ T5893] usb 5-1: Product: syz [ 249.511249][ T5893] usb 5-1: Manufacturer: syz [ 249.529477][ T49] usb 2-1: USB disconnect, device number 19 [ 249.622930][ T5893] usb 5-1: SerialNumber: syz [ 249.973567][ T7818] netlink: 3 bytes leftover after parsing attributes in process `syz.1.495'. [ 250.076713][ T5893] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 250.454516][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.463503][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.480208][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.490316][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.505443][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.339353][ T7831] kvm: kvm [7828]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 251.352055][ T7831] kvm: kvm [7828]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 251.360691][ T7831] kvm: kvm [7828]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 251.373913][ T7831] kvm_intel: kvm [7828]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 252.189337][ T5893] usb 5-1: 2:1: cannot get freq at ep 0x82 [ 252.249610][ T7835] tipc: Can't bind to reserved service type 2 [ 252.251611][ T7840] FAULT_INJECTION: forcing a failure. [ 252.251611][ T7840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.280382][ T7840] CPU: 1 UID: 0 PID: 7840 Comm: syz.1.499 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 252.280412][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 252.280425][ T7840] Call Trace: [ 252.280433][ T7840] [ 252.280442][ T7840] dump_stack_lvl+0x241/0x360 [ 252.280481][ T7840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.280510][ T7840] ? __pfx__printk+0x10/0x10 [ 252.280551][ T7840] should_fail_ex+0x424/0x570 [ 252.280579][ T7840] _copy_from_user+0x2d/0xb0 [ 252.280610][ T7840] move_addr_to_kernel+0x7f/0x170 [ 252.280640][ T7840] __sys_bind+0x12e/0x290 [ 252.280673][ T7840] ? __pfx___sys_bind+0x10/0x10 [ 252.280726][ T7840] __ia32_sys_bind+0x7a/0x90 [ 252.280758][ T7840] __do_fast_syscall_32+0xb4/0x110 [ 252.280785][ T7840] ? exc_page_fault+0x5f8/0x920 [ 252.280814][ T7840] do_fast_syscall_32+0x34/0x80 [ 252.280841][ T7840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.280866][ T7840] RIP: 0023:0xf7fd2579 [ 252.280884][ T7840] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 252.280901][ T7840] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 252.280923][ T7840] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 252.280937][ T7840] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.280949][ T7840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.280961][ T7840] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 252.280973][ T7840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.281003][ T7840] [ 252.455160][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.625170][ T55] Bluetooth: hci3: command tx timeout [ 253.189219][ T5893] usb 5-1: USB disconnect, device number 28 [ 253.474952][ T6134] udevd[6134]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.297777][ T7865] netlink: 80 bytes leftover after parsing attributes in process `syz.4.505'. [ 254.678703][ T55] Bluetooth: hci3: command tx timeout [ 255.529794][ T7870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.681080][ T7885] kvm: kvm [7880]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 255.747027][ T7885] kvm: kvm [7880]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 255.758613][ T7885] kvm: kvm [7880]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 255.900773][ T7885] kvm_intel: kvm [7880]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 256.687831][ T7826] chnl_net:caif_netlink_parms(): no params data found [ 256.760702][ T55] Bluetooth: hci3: command tx timeout [ 257.794596][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.811638][ T7826] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.830678][ T7826] bridge_slave_0: entered allmulticast mode [ 257.854289][ T7826] bridge_slave_0: entered promiscuous mode [ 257.869187][ T5892] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 257.886701][ T7826] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.947098][ T7826] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.219442][ T7826] bridge_slave_1: entered allmulticast mode [ 258.226808][ T7826] bridge_slave_1: entered promiscuous mode [ 258.243629][ T7912] kvm: kvm [7882]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 258.257117][ T7912] kvm: kvm [7882]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 258.329898][ T5892] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 258.358726][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 258.366463][ T5892] usb 4-1: can't read configurations, error -61 [ 258.509009][ T5892] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 258.688036][ T7912] kvm: kvm [7882]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 258.699281][ T5892] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 258.710956][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 258.721848][ T5892] usb 4-1: can't read configurations, error -61 [ 258.835086][ T7912] kvm_intel: kvm [7882]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 258.838885][ T5892] usb usb4-port1: attempt power cycle [ 258.844448][ T55] Bluetooth: hci3: command tx timeout [ 258.938721][ T5893] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 259.119006][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 259.128282][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.140181][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.187458][ T5893] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 259.199867][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.235252][ T5893] usb 5-1: config 0 descriptor?? [ 259.240553][ T5892] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 259.261997][ T5893] hub 5-1:0.0: USB hub found [ 259.296441][ T5892] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 259.323232][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 259.341852][ T5892] usb 4-1: can't read configurations, error -61 [ 259.462374][ T5893] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 259.488735][ T5892] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 259.590194][ T5892] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 259.610104][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 259.617848][ T5892] usb 4-1: can't read configurations, error -61 [ 259.636242][ T5892] usb usb4-port1: unable to enumerate USB device [ 259.949743][ T5893] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 259.962992][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 260.582333][ T7826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.605632][ T7826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.880789][ T7946] [ 260.883220][ T7946] ====================================================== [ 260.890264][ T7946] WARNING: possible circular locking dependency detected [ 260.897304][ T7946] 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 Not tainted [ 260.904423][ T7946] ------------------------------------------------------ [ 260.911462][ T7946] syz.3.526/7946 is trying to acquire lock: [ 260.917371][ T7946] ffffffff900fd588 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x11ae/0x2ba0 [ 260.926450][ T7946] [ 260.926450][ T7946] but task is already holding lock: [ 260.933815][ T7946] ffff8880550c1628 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0x131/0x400 [ 260.943931][ T7946] [ 260.943931][ T7946] which lock already depends on the new lock. [ 260.943931][ T7946] [ 260.954334][ T7946] [ 260.954334][ T7946] the existing dependency chain (in reverse order) is: [ 260.963382][ T7946] [ 260.963382][ T7946] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 260.971994][ T7946] lock_acquire+0x116/0x2f0 [ 260.977028][ T7946] __mutex_lock+0x1a5/0x10c0 [ 260.982234][ T7946] smc_switch_to_fallback+0x35/0xda0 [ 260.988052][ T7946] smc_sendmsg+0x11f/0x530 [ 260.992995][ T7946] __sock_sendmsg+0x221/0x270 [ 260.998214][ T7946] __sys_sendto+0x365/0x4c0 [ 261.003245][ T7946] __ia32_sys_sendto+0xdd/0x100 [ 261.008652][ T7946] __do_fast_syscall_32+0xb4/0x110 [ 261.014292][ T7946] do_fast_syscall_32+0x34/0x80 [ 261.019688][ T7946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.026554][ T7946] [ 261.026554][ T7946] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 261.034295][ T7946] lock_acquire+0x116/0x2f0 [ 261.039327][ T7946] lock_sock_nested+0x48/0x100 [ 261.044685][ T7946] do_ipv6_setsockopt+0xccd/0x3680 [ 261.050345][ T7946] ipv6_setsockopt+0x5d/0x170 [ 261.055556][ T7946] do_sock_setsockopt+0x3b1/0x710 [ 261.061106][ T7946] __ia32_sys_setsockopt+0x1f2/0x280 [ 261.066917][ T7946] __do_fast_syscall_32+0xb4/0x110 [ 261.072567][ T7946] do_fast_syscall_32+0x34/0x80 [ 261.077959][ T7946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.084818][ T7946] [ 261.084818][ T7946] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 261.092082][ T7946] validate_chain+0xa69/0x24e0 [ 261.097383][ T7946] __lock_acquire+0xad5/0xd80 [ 261.102584][ T7946] lock_acquire+0x116/0x2f0 [ 261.107614][ T7946] __mutex_lock+0x1a5/0x10c0 [ 261.112759][ T7946] do_ip_getsockopt+0x11ae/0x2ba0 [ 261.118313][ T7946] ip_getsockopt+0xef/0x2e0 [ 261.123364][ T7946] tcp_getsockopt+0x16f/0x1d0 [ 261.128570][ T7946] smc_getsockopt+0x1c6/0x400 [ 261.133773][ T7946] do_sock_getsockopt+0x391/0x740 [ 261.139322][ T7946] __ia32_sys_getsockopt+0x2a1/0x370 [ 261.145132][ T7946] __do_fast_syscall_32+0xb4/0x110 [ 261.150771][ T7946] do_fast_syscall_32+0x34/0x80 [ 261.156150][ T7946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.163023][ T7946] [ 261.163023][ T7946] other info that might help us debug this: [ 261.163023][ T7946] [ 261.173266][ T7946] Chain exists of: [ 261.173266][ T7946] rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock [ 261.173266][ T7946] [ 261.186959][ T7946] Possible unsafe locking scenario: [ 261.186959][ T7946] [ 261.194420][ T7946] CPU0 CPU1 [ 261.199820][ T7946] ---- ---- [ 261.205206][ T7946] lock(&smc->clcsock_release_lock); [ 261.210594][ T7946] lock(sk_lock-AF_INET6); [ 261.217643][ T7946] lock(&smc->clcsock_release_lock); [ 261.225555][ T7946] lock(rtnl_mutex); [ 261.229548][ T7946] [ 261.229548][ T7946] *** DEADLOCK *** [ 261.229548][ T7946] [ 261.237710][ T7946] 1 lock held by syz.3.526/7946: [ 261.242673][ T7946] #0: ffff8880550c1628 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0x131/0x400 [ 261.253242][ T7946] [ 261.253242][ T7946] stack backtrace: [ 261.259138][ T7946] CPU: 1 UID: 0 PID: 7946 Comm: syz.3.526 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 261.259161][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 261.259173][ T7946] Call Trace: [ 261.259180][ T7946] [ 261.259187][ T7946] dump_stack_lvl+0x241/0x360 [ 261.259216][ T7946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.259241][ T7946] ? __pfx__printk+0x10/0x10 [ 261.259266][ T7946] ? print_lock+0x171/0x1a0 [ 261.259287][ T7946] print_circular_bug+0x2e1/0x300 [ 261.259310][ T7946] check_noncircular+0x142/0x160 [ 261.259335][ T7946] validate_chain+0xa69/0x24e0 [ 261.259359][ T7946] ? rcu_read_lock_sched_held+0x91/0x140 [ 261.259384][ T7946] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 261.259423][ T7946] __lock_acquire+0xad5/0xd80 [ 261.259443][ T7946] lock_acquire+0x116/0x2f0 [ 261.259464][ T7946] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 261.259490][ T7946] __mutex_lock+0x1a5/0x10c0 [ 261.259511][ T7946] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 261.259531][ T7946] ? __lock_acquire+0xad5/0xd80 [ 261.259550][ T7946] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 261.259571][ T7946] ? __pfx___mutex_lock+0x10/0x10 [ 261.259618][ T7946] do_ip_getsockopt+0x11ae/0x2ba0 [ 261.259642][ T7946] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 261.259666][ T7946] ? schedule+0x163/0x360 [ 261.259685][ T7946] ? look_up_lock_class+0x7b/0x170 [ 261.259707][ T7946] ? register_lock_class+0x54/0x330 [ 261.259726][ T7946] ? __lock_acquire+0xad5/0xd80 [ 261.259744][ T7946] ? __mutex_trylock_common+0x184/0x2e0 [ 261.259769][ T7946] ? __pfx___mutex_trylock_common+0x10/0x10 [ 261.259795][ T7946] ip_getsockopt+0xef/0x2e0 [ 261.259818][ T7946] ? __pfx_ip_getsockopt+0x10/0x10 [ 261.259841][ T7946] ? smc_getsockopt+0x131/0x400 [ 261.259863][ T7946] tcp_getsockopt+0x16f/0x1d0 [ 261.259889][ T7946] ? __pfx_tcp_getsockopt+0x10/0x10 [ 261.259914][ T7946] ? aa_sk_perm+0x96f/0xac0 [ 261.259936][ T7946] ? sock_common_getsockopt+0x2e/0xb0 [ 261.259962][ T7946] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 261.259986][ T7946] smc_getsockopt+0x1c6/0x400 [ 261.260007][ T7946] ? __pfx_smc_getsockopt+0x10/0x10 [ 261.260027][ T7946] ? aa_sock_opt_perm+0x79/0x120 [ 261.260052][ T7946] ? __pfx_smc_getsockopt+0x10/0x10 [ 261.260072][ T7946] do_sock_getsockopt+0x391/0x740 [ 261.260092][ T7946] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 261.260108][ T7946] ? __fget_files+0x2a/0x420 [ 261.260124][ T7946] ? __fget_files+0x39d/0x420 [ 261.260138][ T7946] ? __fget_files+0x2a/0x420 [ 261.260155][ T7946] __ia32_sys_getsockopt+0x2a1/0x370 [ 261.260176][ T7946] ? __pfx___ia32_sys_getsockopt+0x10/0x10 [ 261.260196][ T7946] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 261.260217][ T7946] ? lockdep_hardirqs_on+0x9d/0x150 [ 261.260238][ T7946] __do_fast_syscall_32+0xb4/0x110 [ 261.260261][ T7946] ? asm_sysvec_call_function_single+0x1a/0x20 [ 261.260280][ T7946] ? lockdep_hardirqs_on+0x9d/0x150 [ 261.260300][ T7946] do_fast_syscall_32+0x34/0x80 [ 261.260322][ T7946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.260343][ T7946] RIP: 0023:0xf7f21579 [ 261.260358][ T7946] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 261.260374][ T7946] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 000000000000016d SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 261.260393][ T7946] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 261.260404][ T7946] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 00000000800000c0 [ 261.260415][ T7946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.260425][ T7946] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 261.260436][ T7946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.260458][ T7946] [ 261.656199][ T7826] team0: Port device team_slave_0 added [ 261.664102][ T7826] team0: Port device team_slave_1 added [ 261.672125][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.698575][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.391191][ T5852] bridge0: port 3(syz_tun) entered disabled state [ 262.414286][ T5852] syz_tun (unregistering): left allmulticast mode [ 262.420916][ T5852] syz_tun (unregistering): left promiscuous mode [ 262.427310][ T5852] bridge0: port 3(syz_tun) entered disabled state [ 264.091179][ T5893] usb 5-1: USB disconnect, device number 29