last executing test programs: 6.93589746s ago: executing program 2 (id=712): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) (async) r0 = memfd_create(&(0x7f0000000880)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x5) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2000007, 0x2012, r0, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000232000/0x2000)=nil, 0x2000}}) io_submit(0x0, 0x1, &(0x7f0000000740)=[0x0]) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000040)=0x101, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000001000"/20, @ANYRES32=0x0, @ANYBLOB="001600"/12], 0x24}}, 0x0) (async) r3 = syz_io_uring_setup(0x370d, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x3, @fd, 0x0, 0x0}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (async) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000240)=0xc, 0x4) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) (async) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0) 6.150154294s ago: executing program 3 (id=718): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010"], 0x50}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) close(0xffffffffffffffff) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x7fff}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) socket$inet6(0xa, 0x200000000003, 0x87) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bde49a", 0x3}], 0x1}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r3], 0x24}}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x3, 0xc0, [0x2, 0x7, 0x7, 0xffffffffffffffff, 0x648, 0x5], 0x1, &(0x7f0000000000)=[{}], &(0x7f00000002c0)=""/192}, &(0x7f0000000380)=0x78) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, 0x0, 0x48) 5.809430004s ago: executing program 2 (id=721): rt_sigtimedwait(&(0x7f0000000000)={[0x3ff]}, &(0x7f0000000040), &(0x7f00000000c0)={0x77359400}, 0x8) clock_gettime(0x0, &(0x7f0000003ac0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000100), 0x80, &(0x7f0000003640)=[{&(0x7f0000000180)=""/137, 0x89}, {&(0x7f0000000240)=""/33, 0x21}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/157, 0x9d}, {&(0x7f0000001340)=""/234, 0xea}, {&(0x7f0000001440)=""/133, 0x85}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/248, 0xf8}, {&(0x7f0000003600)=""/34, 0x22}], 0xa, &(0x7f0000003700)=""/121, 0x79}, 0x2}, {{&(0x7f0000003780)=@generic, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003800)=""/175, 0xaf}, {&(0x7f00000038c0)=""/225, 0xe1}, {&(0x7f00000039c0)=""/30, 0x1e}], 0x3}, 0x3}], 0x2, 0x40002040, &(0x7f0000003b00)={r0, r1+60000000}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000003c80)={@vsock={0x28, 0x0, 0x2711, @local}, {&(0x7f0000003b40)=""/239, 0xef}, &(0x7f0000003c40), 0x10}, 0xa0) r3 = dup2(r2, r2) listen(r2, 0x6) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000003d40)=0x400) r4 = accept4$tipc(r2, &(0x7f0000003d80)=@name, &(0x7f0000003dc0)=0x10, 0x0) r5 = socket(0x29, 0x1, 0x5) openat$sndseq(0xffffff9c, &(0x7f0000003e00), 0x210841) clock_settime(0x4, &(0x7f0000003e40)={0x0, 0x3938700}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000003e80)) syz_emit_ethernet(0xdb, &(0x7f0000003ec0)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@generic={0x9200, "e6b70f67c2079b5046e63a21d6667ed6e4f2999b7ab871ebd83c204da714cf805a6cc78e7f0aef10583e5e2f573e8359571f3cd7f4c21b79c5df93a28d3f5feb9abc97f02228a37471ecc03bcab32ab3f179a228de2efd788020ebafb955da1e25a975fa64922e94f9d4934d4c04ac67ce3e77690af9a65b0744bf5e434c10487aa741d0ee63db116c0353d39741ef021f7776fbd75e8f075b6b349f3dbe7443a2c72083696910a92bb926a16267f9e66eaefd142847c3bc7b5cd60262a072ff92223b201834eaea4c52a71528"}}}, 0x0) bind$alg(r3, &(0x7f0000003fc0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) openat$vimc1(0xffffff9c, &(0x7f0000004040), 0x2, 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000004080), &(0x7f00000040c0)=0x8) sendmsg$alg(r3, &(0x7f0000005340)={0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004100)="11e91fa972d5ad47", 0x8}, {&(0x7f0000004140)="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", 0x1000}, {&(0x7f0000005140)="6960e707316f24c6be84d25b115f8b7f4f17ff0109b58b69aad102", 0x1b}, {&(0x7f0000005180)="d8b805bdfb9760da17be45237cb279abf6fdfb04d20da3f10ac5ee592f4538a1adf57779ef4cc45e37", 0x29}], 0x4, &(0x7f0000005200)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18}, @iv={0xa0, 0x117, 0x2, 0x88, "64a358ec6520817ae70e18bda775a75dbc1bf3c84e4ce31046928cbf012fe9c0692f54a35f916dd2ce7b7f3c860802691e5948260f101337f253ed16386ea52b150175c9f837763b43c1ef3c8859ce925507d6bef0f98b11592073da1e32525fc6a4a82804943d5e9ea042054020c7481442249001963cbb38ca0a4ffbbe869adc93a6b8a1e8f65c"}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x10001}], 0x118, 0x4000000}, 0x8000) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7000009, 0x12, r2, 0x8000000) syz_io_uring_setup(0x9df, &(0x7f0000005380)={0x0, 0x8b39, 0x20, 0x3, 0x17, 0x0, r3}, &(0x7f0000005400), &(0x7f0000005440)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000005540)=@IORING_OP_ACCEPT={0xd, 0x14, 0x0, r2, &(0x7f0000005480)=0x80, &(0x7f00000054c0)=@ieee802154={0x24, @long}, 0x0, 0x0, 0x0, {0x0, r9}}) getsockname$l2tp(r3, &(0x7f0000005580), &(0x7f00000055c0)=0x10) clock_gettime(0x2, &(0x7f0000005600)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000005640)=""/214, &(0x7f0000005740)=0xd6) recvfrom$inet6(r5, &(0x7f0000005780), 0x0, 0x100, &(0x7f00000057c0)={0xa, 0x4e24, 0x5, @private0, 0xffffffff}, 0x1c) r10 = syz_open_dev$vcsu(&(0x7f0000005800), 0x5, 0x4c0002) preadv(r10, &(0x7f0000005980)=[{&(0x7f0000005840)=""/37, 0x25}, {&(0x7f0000005880)=""/67, 0x43}, {&(0x7f0000005900)=""/100, 0x64}], 0x3, 0x0, 0x7) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f00000059c0)={0x2, {{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}}, {{0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) 5.351612698s ago: executing program 3 (id=725): r0 = socket(0x840000000002, 0x0, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x5, @broadcast}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x32, 0x4, 0x6, 0x64, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffff7, 0xde}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000c80)={0x420, 0x3f4, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x420}}, 0x2008004) ppoll(&(0x7f0000000040)=[{r3, 0x8004}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) tee(r5, r6, 0x6, 0x0) sendmsg$kcm(r7, &(0x7f0000000380)={&(0x7f0000000280)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000980)="bc108970fc42f953f1e81c548b26c999c00900cbc270a9b0b48076b9aaf2a8d21bc9c8e14405315356462cad6fe9ffe2685c3ec614671083f03e6373a1f34bcf6ecb0cb3dbb76d1bdf2d7f684ada36eae9ddad7a4583b97bb2e87c3c81ab01262094dc22ea98f78cf4f61ca04ab9dd3cf6c48c562ddda5cafe927d583ad0524afd140d92ed1006378a03965e68d6553a56258780c72b8f9f31eaa9281403bc2481cb356d2d57a8a84dc571f441339601a524e2da928cb1fe5cddcb5abcae3dcb9377284556bc524893301493d36f170eb59000972b7d8d18a641fb536f3b8573698d41048540d581da29916dca59c96811b2cbed4e75c0e27153cc50995c00227652c5c42e23702aad8e019cb7c7365740b67d38efd87b08217becb1f030854575598b20959f379890307db5c51ecaa15ecc2b5866b9801e04e41b7cf821ba0952c9d27cd3da9fa89463e6ba23f63205b4d6e6943c3f7451ab4bdc7b6ee5dc5af759b55e67a5f25b7eccbcecec3e1e7ba3e5b2ef19497ad6d9ab3dd92256868abb617123aef8f48e3b3efe1e55e906496a6a33d903f3f8626fb26508eecb8c1865410ef01cdba66e304897b35c188457743b5574996dbf5c9e5c3c930ab6c9fce86a5aef1475a533839220852cdf9f1c17e6b9800a987adc9850c75d74bd4b565f447e525bff328a34848d31e109982a01d5b8b0d89f988d13697d9e1e544f635e3918341c77e2c965696b7bc75199b301b233fca4f0e834ed2d654a1533fd5d8bc9dead9e2bbc139a6b1535dfac557a748dff117418b015d5ac85e6b44851d43026a90abec01a5d73129528db5869db094d3e372bc5caef8b0c2b827ef2e2ef163e47e3d736936639c89f67a2387e9c64f82477cf1055a6dbf58567de94113a446cc7f6f44a9dd01c0658acc22139eee6f927868abf7ce5cd9eb29f12a0b97415771e0e91710ed88fee1bb0e324b576f513bc5474d6575957ad85195e5d3ea4ec505e3f0d91fab453bbfd864ce8f2bfc174c188cdb940a3c600ea5a557f299c312479a69010d004e02eaf2f33c9f7a17ce6c5457eea9f6475ddaca1349e2e1af63743e6078147e552845dbed2b556f4884013aac1ce763fa630c42829041c2d2b29f889b8f7387c6401c038b92c42b3ed8c61092b2b44625495bf8471641fbe08b5918551499a8a3f6719503f7eb06287fb13f7807fa28cb140622e85db7ae02dcf126d5b9cf0787d8da9e34ab44922a5937636bb523eb5e226799098287ef4f6ef18ba1706a8e5d759aa4b86a93670076fc52db07569a1b5378351cd7d2a8bb8b976fa6129671048b358d59645a66e4bfb0c5b4d05c3ba236c6a8a95bf7fadcfab7124fa6632d625149971587dd9e28a9e4077898767d45f90951fddd273ae2032977080c2487be2c41f3f445cc9940764fe7c9989723fb745379dfbc0e15de38bd6e2212559cfad0d9109bab9f5a2554cacdd54c7dee6428e1767749bb13e5fe23027206602f9d1c7b5f107c9213314e4a9032233d3d1cc2b5f34f50483a1f86bdebc095eb679e6e1c7a08e098f2194c1666a24ead7aef3bc0638a58ee10e9b9f30306f624807f61dbb297f1f8f7c9360ccb75e43d0dda5e3d7be164812d5ec844114627865d920f75c583ceda2f381f5018dd3c81c7e915d405e93d77e6696b07984eecbd2dcb44a605fa9375834d9f7f1a2c02b19f31d7436d6c77834bdac92dfe391e06cfc82c3d30dc3145ce3a5f42340354f0d0ecbab7b78066ab71d4f519534c2265883dbb83d574116c15aa848b9222ffda71519946332e0fdd1de0b25728feea861022dd3f51ac2b037d771a0e04bb8787eb17c3226ef67f85de1f3b48bb96e4e7c31a140156450675b72b2216afde1610ac8f9bb210b70316653588d8b3a13f338b4007c5b93feeda5ff87bdb15da6a8c32c579383fb3ebc238659d7a76eeb6ccf2932517bd8edfb836a4faf4af1ffe5a1ef38ba45e52e9c4cbba58bea84ae96bf35df651c90eb58fc00614d8e6d40a7daba6fdf7bcdbd5cacaba9137b53d66e525ce6abae7fdd43390561aaa8f9039058841d1679e53a24178604eb654c3eb0a49780c657818b119bda5122c99a36d0954f23fc536c35410852d3beaf3b47de34e46776f601213cdabe8c147e46aa2bc80ebb5e090ad56ca27a131e431a4c970ef0c87269f977876b1cda1881c095b163846e985d8bda425e0783e2c4dab2eb4fa4c516a37e6d40dbe780332c1540d523dbc23660f236c3167ba54a91ebbf29dcec8c19fb666839c66db7560a25c38632f0f937195654df4b898b5ea0d28200777039e89d3db4345f79d205b4fb36c95212b84ab8f0749e39e24c7fd66b5801df72b6eeab4dae4fd0609f4f8e0db882688c603f9a11956efaf46b400a98ccf720c19b367f09d64c7d406c0f7e9f3dae1c4618ece3530ebf52d5a591da175c4c984ea1d840f904caa1aae7d0a2c3900f8e497a57846ec99de6875e93372b139caab5467f559059d8348a48d44b8303645cc642a7d589d89fa3716f06996c117d087c581bbdb3412ea07b7105c10346658a2b64ff483172ab4517afb9fb13a002aee54842a5209f362504fca623fa29bff91b4f418ea9e8245e2a381568ee3c9959fe94ff8ea108f81dbec45e6cc0e8673ff681ef4bdc633918d2932ae6f8ce248960c3ef52dc078bb7bc296ba9594b01b1f4a260d804361216532d5ebe234ab2fbf452ceaf0958cf11ec03b77db7cc62c9d92ed8f91b7e15a229ee2b89a200f0366808bcd298ff3a6e81b21d9db1408f2378551f31bec6fad3d718147d690c0cd84f9794c5d14e9229a184ef83d9fdfd3bd008e7be6e9550854635d15550594f446eaf96e870c7c69d48d5ed0078d2ed561994c24c12ec0683de9dc32722f155c04372f027b2cd12a5041b17009cfd6a012593d200f8d858b4a566d651ffb4eafc0bf1bc80d4430d86963a785432e33651d1e19caeda61a889f9c2abe16bd85ea461914542afe6c3e3eb3fb75b121a04a7145c9e0a630dab7231dd0779b958f7570868ebe9c263ce56f3ea14ea7baa31a9f7f8207b2c1e66923b9fee455c449ba6760a46df454511f996865a73fff86e8ebe2ab3c0e5cd6e4bb73695a23de1a94f55f22a3e615545825a80f8504c2833e130a0221327784bc4f9e052ef20b1b8005d61f25ce6f32673a5dccc10b3335f1f909a50843970887575215b5bdbdbdc70f2beb3346cbd66b12596c4df0ed3c1dca4ad4aa87ddec1ba0988df85cc6ff3aff24f14cc235f6a46f0ed1c6264d00e9cd82f554436721fe84a96f62f5de895b8a2fed3cb04c279039c760899e10e43337762762a4a712995e52972a367ce8eeb9851362c08b29633d1cd0e2fe4cf3525e60867cf1b4f893452f1d9246d902281002f1a524b92ae26e4369e0abf1ee222bc07b11c5c6ea8e606ace5278b7d5816f13a9d401a62446a8fe1c3e86f1b3db6f5b798f0c86aa33c32acef48af98516c22beb854c9deeb2c0f15a3558ba420a0d0453d06a29b6e17168566f11e71b193a420f2fe1bb23008ee648aab3b2262ada3bd3af692f80a79a1039af05b662e53725f4959dc098174792c9e13273ea4b59ecab8cfb381608fa0502066dfff0a2ae56180e2a8b84d436c272690c65c926c051181d3931e32415e056b856f71a85e336cf52793c89bc16c3a1ad02c5a2366c189bc41615548c0396dcb59f33152b1e30d4be6f2100f726ad22aea765525a7805a9e49190e3675d194f431203a8f7897d7301a9c2ef48e4f6af27521d7914814d330122aa447548dbb889ebfaa1bed147988865f69f43f217e01180bc1cf2af88ee878a2c3eb3d2d3ac32fc1cdc09f483bfa48d68b4e8e7ce9070262b44066c9c1c81c6274501c0a168e5dae82fc2809bb2f006970f261012a6fe29b4f1ba98cc59b1e1d81456ba8dcaae6f0d6c8d9b7e99d803ba4f2a100fb7699e8c9f4ed7d251f2f264a5438ab0ecfdbf4d18df9a8c8091a25f804bb0f99a16d8f13e03bca0875a75bf37c4623bf1646427e5cf0cdf76d67c7b991d81e2b151fb9ce9039f883f12e971b3d11e2c895f5ab09cb162575be29ffc7076e56fd4dda2db50ef75e2db6c8c5b3cb19fa4a58f6596a0517f69527c2a984552762edf758012fd668a8ed1b668cbc163f2446994f5db7903446e79e35d5a4a7e3ca955569ad02dd92508aa3d2f889fed968932268e699ad677b2fbaf12a39f6bd0a3b6aa8fef6f3a7a7af0b16975fbfa17f550d749285354195e41313ae119b3553a8214e7c90a5b830bbd88b6e1257f80ee752fb5ff4660ce32a06b68161ebd54d6bc519022e8dbe9150d965eadfe0244def4426323a3617ab367ae90d1177644e4f645b7f15715e3fe6cfabb6930f1a40768ac0de41a7845bbc07905a8cfc6aabae6b5268a42cffae07ee0060d13233dbb81b7085e721039841ddcd38188fb63d81dbbd3350bf6ae0de4571ab6056a7bf77642dd937dff459df105e8012f7384020da1e52ecd60a297768bae0dbc6b32cce7266caaa8d0ad59d14ae2e277d83793f16c6aa811e51be0329ff8a1e64e15196ef489b00b3c1a09b7196e307fb69ac927d98be0c402ec21978d3ff61aec751ff6c8ae28e6f8b7ed8c9a8448ced0f0b72ca2f4c24cd4a14c6f73eb8f56528f0db47e0f8977eb931b84137f4635179760fff5ebd2e1e5e9bcca2a9796d9f1810109a86e7c2cdd5fa8b98aff0396d5c0e54f2a7da73a000d87353dc5d5e2e817addac12dd7c3e7a1a6ee6381ca8f51045b058260ff9eb334af6db2411a0f8a44755945c28317ee3e94b872aa45372322f5252043a7ad49f29b87104188c513bc50d5cd08ec1496733eaf86a6ab01b664060e4f340b972aafcce876b52fd591bf757671c9dafdca30197df2f7372b4e4df41ee2b345be3868ec6ccacca6c38604b0f34c2cf759743c77c2d29c6928dbbde9e701dfeaaf812ee5664374aae21f6b30489d703c32337c3e9dc2158548811b448586ebab9f617799a3e55645bcb1256a5c128e7dc581432b2fbcde360d92fbe4545f4e2d62acf44d58a39c1f33cb90c9978e5f76a95998d55bdcde26f2aaa547ab8997dda69758405a22f0eb0daedb21cc9842d0fb436e4ec8702edf893822a9b2b28a383346e35f2f9554a73a103f798abb71a7606ce5d50ac5c86fd7545100d6f968ab5ef0f33c2b072098477bf227478843e719180d5a3a17e1690f0a08a2968dce6ff1f894d0295affe79cb5bdccb20c335e73ece67035fe1f84e6805c963a9d0c1c9ae8aabf0974001a6a5909cfab27313565e7cc76c9404c55a2376e226cc68128ee078210ceed8891d394c3243cb4954de9e51f1feb5e54a41e661168d23dcc3d9cd4dae2ca4bcfd1e08b4e027ae221847c3cbb58e496d7de2de44516c6c6caa052e17185bb286ec48412ac6ad8ee1f59697ca6ab56b6d41bc5ce94c8a3236f1389858b30629bd2e91377ba9c1059b27ec66e84d4eade7bcfcbfe65f7d4b15a9fb59c8fcdc2b3ff85321845e727c23bf213c6626762aeeb89cec1812f7f668e639d5a19b00f925c925168555ab935659588be99bcc72a1ac76e18614141b53f7df7169f3287fffdd45126b7d363b465924793af7343bb157f38a100b34f130bc201b88c442277182f0f2b05b5dbfd2013fad97d6331a3b9373d8d5e2eeffedede8f587343970ac911695e8843ff75a295cf613631a775989a48479ac17370c03c7889a20786a07e2a35cddb97eaac18ba07ccfe48e5c182eb102e7f6ce53e37dfccd5292823a13d9b5432954", 0x1000}, {&(0x7f0000000300)="e24248f59445847918790320c836ca8c8beda88521cfedb61c62b20fedd66135f915705c4190278112b7a3ecc4012fbf541e04df838ca41242870e", 0x3b}], 0x2}, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009050a0000000000000905031300000000000727010300000009050f"], 0x0) 5.049476229s ago: executing program 0 (id=727): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000000000010941220130100000000010902240001000103000000092100000001220800092581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) unshare(0x2a060400) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x4e20, @remote}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x0, 0x7fff}, 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) write$binfmt_script(r3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) connect$netlink(r1, &(0x7f0000000140)=@unspec, 0xc) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0xa, "cace"}, @global=@item_4={0x3, 0x1, 0xb, "192ccbb6"}]}}, 0x0}, 0x0) 4.840817373s ago: executing program 2 (id=728): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) syz_clone3(&(0x7f00000002c0)={0x22000000, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r2, r2], 0x2}, 0x58) getrusage(0x1, &(0x7f0000000dc0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x26040800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x10) shutdown(r3, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) sendmmsg$sock(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{}, {&(0x7f00000000c0)="452034bb71b7f690773cb8f9f9d547dfb0075531fb5faa9161186a7e36edfa993184f0b0214f9c20dcc28a623c04adb16b0a93635c3409d294de25a482f1ccabbd5b09562fc653d820e3a130b6cae6243d91ce3cd9ac2a6e63c66cec7eb64173a4394879a612115c10e9faecb452a92c848ad50ba8a80873cb44f81cd747c46f465705f9d7f63fd2f43adb67feabdc40d456764451dc39e4d2e47614f53baa2ef5722e4f2b23b95d5baab3fd091327fb0adb39d8c69357f4d4a38145f06ddb84bae7431ce1f7f8", 0xc7}, {&(0x7f0000000280)="f0a1922e131bd84a95493c7941b411a2e8065319d1b25a3cb8787aceb483f66d16b11fef2f02d50b76d4bccfb66957886479328b3d5fc2bf3036b00e8ded8c60a5a3cbb0210050f9b0c4420338ef09513a90eed3fc55ec298551dd885bdbcf4e8d9564a14ef69d64fbb3281ee2b82bb5a7479d99c783234d9b167244205cdeda586139cd5a11adfcac7e3aac3db2687e4cb40c49ed69b55f90c909cdd4ce009180eb08d9e27cc7cd4449e3f21c25fae25e96265974df0e99786ed056f76358b3ef641ff65f2c30335f21ce13465decf180ab6bcbe340d2f0550c24f35db6b2565e4291be37cbf7d7eb9225e6de01b210184efcd2e499", 0xf6}, {&(0x7f0000001340)="eff9e80efcd68b139e95c2c220ee728a87ac03d0b5275b8ea6739b856fe48d55f2a01e07543534a3c1eb9b90da6487ae9e82ea7d63759364eb68dd1d6db376de396a5a2304f5c275f736015612489c268d5ce7bc8d9439cb42379454de3028d9580cf386a82abb573c27f3c430205b9a38f44627c3707b0b3d689460ec0f9bfe1f144268c1f773e4f62a9d2314a0ae9a996e67bc1494fd5959472794a032e1b71e36313db4ef2177468a53299e700a918b29b45e35e76b0fb7d802721301b87e66987f12f8e885449b9bd40ae0e9a1fcd5a3da298c427d587256eba11c883a8a8fe721ec66418e22377551f021d2a12c2fb84e61c07d1f42dcf8d331dc05405191a43743eeebacfccda1a5ff68232cae9198025cd941cea8ebe659310978f46c627debd5c4f002c28c5250db59c65bd1a6cfd903d938ab4899fd95c9864d93d6d9c23b48d80d29906efe90d92748ec4ea4ccc24ff7a876076664118611fa8cb80784546f5e8485da5e714ab02c29c57215d24da7974a12c1ab55f8a51e6cd9d41406a9ca1e30872d2a2d989636f7856fbaefcbacc0495cec168167fde6d4d0e44ba7fb5449753aa124096827e499e3a5fa226e20470529b1661986a815c7f65c6f13848f2e837501745926f81078fc6ca7847b383ead90cce23463572e2d84b86f1ac33607679bdf913fb0fd4e1835b8c43c24d454e58d432e8063baa580626b35fd8c1d6251fd0a4bb5db50f9aa49893484c15c3dd14a43232616850d029b9b7fe88f66b48c3132c7e14586613dd7153a76c349c2b670ad2e583691ae4a1b67f59a2c90b52f97eeda573561c15e3825fcc0a03dfae926788d41e22930c932dc488ddabf2583bb149d28273275848513650a540a96b9122b4efaf7ba95b97eb81234d9a2dccbeed4ad46e6d30aa61a7856ff840c3fb1957295084a054aacd6bed91513cfa282bf542218d87a4582fb5e40326488e882417cd8b95e47580d733bb2eda8174a025d65d85adeb7c971612e50b53b4700a98fb26a08ba1307ab761c81e9ed3c30b19286f7805777f8dcc81e26d6d7d8ca05c0f526b9d3502f30d053eff679d9c3755cd3cd81a9012bb012ee94ea5bc104ce61b5e24e28ee51b228af22b496b945c315e5dff730f66faffe713e59111ca832e5a489b283620f9cc767fc5c622a8b50d9a8237f49576350764b1f44fced0ed47273e7ad89116701afcaca33038f29a7e5f31a33404b4d5c77c3744ae9b400f42ba7faf65a31aa69f0e79051df19fb997c9f7e9fd55180f08b2587ec37b2db881487d142106c219d7df43a92475c1a6942037126e1714e36fb7b8b9b640a78188a25b9349fe974d13b02e295a2c30d6e5da0ed23698a701e7f890d00943f625dc409bbd1fffc23a3457635f97f597887d7badf029ff00a8c1b300c4c96ad868c9ea8085f7d3e4cc9c013c6212b204e05a6e4ff8fe1b7ea12d6cb755d16c1deec26c3ed542abfc9210c8102197989457ad0d50e084639664e1ecf349decd567d690f819424f5e24f4676e8b02901883441277e339afd27b44548ba32130b70f19930728863aeed8c6bbac48ac615f3e0cdebe29c2fe82bbb18be44e8b90416073eb091930b84e4de9f8f6ab04b09d413226f289407dbc6e827e2a5d549ba1d06b46aaf8b430849b9c5780bfb47dece27376eede07a4d1ca59c279b4dad0414540e1cf445350113b80124408665b898e332d274ee066146df9e4a00d379f397c1f99ab9ae4defe44efd692bde7a3710b50317150a1a50aa33e1b9c75b906bf0b0dfa6dc22a08ea9de14bf5451f1c383046e0c1c1e0d9c2c0472701462baa14a38f817f9e5dd739c55d4e89b81d7461c33c52ff1dcb0bf4302a505d363d607933d42c3adec81c4ee5dd6b9fb922da1d87f95c877871ba473bec128d4462db5b1d43393830b68adf034c9744811dfaf32c6ced6189d288669eeab45096a46d662da0c1c10c52b14f35e460ad99e544d6057658ca014a2728fd4c5a3750bd2059d026d6afa50ca38c5836e97b86c07e26f2a9146a2a410b94d411e877c5bba18bc155e75d9c67180bd37a248cadb86af9e92b34fb03859f9d6eb244878ef21a5b7db9da281ea812117d5de175f2ec509bd2f8bf184b6f365eeecf145e7ff49a7ff91fd703b4600dc6a72033562fbd1621284d116b93a49b5720995dd691aa2a9451bb6c99f560ca4e94fb4a0996e8eeb782002f6fa307e7475744e65c8a4d5dd6bf88450dd11dc82f9775a18557b697d9010a8e0c3d7eb927db000d77ec50cf61a925a165e7f6af0610fc00d9af6f822960c42838c8116e74f1da170da198ded9e0532fdab6b4915187ab6cb669102db2e0fe75cfca538b189e53b4954b86bbabac956e720d50a94b1c64bbe63ae0d5a49de29dbae955df1ed0adc18c9db6778d4086b13cf16430e35b90be3023271ae098a013101f9aead4bc5e5e73173dfaca6cd4354e2cbcd3ed8667a9ef8b3f8f5c8ea4ab63699c648193fc883fc98d8e210719a2b7cc7cf4d1fa464fd312fde17df26f0eb60a5932d8206a99e831ffff5b62091d56bee3b6d6d733dd653cec34b8c87ee3ba7a5c743748799c574136226ad71cacca5481062b362ed7a3432ebf6927f0fa95af77276b6eb312163f5d75a3e7fb7851374568570827f55396088800a78ae76345c0b9704d37fd46045a8426b9e143c6969f4a33d14063cf2b16faa21633534da6c1a8c17cd808a3f4ca8a61870d395498e6a271f509f36db726a342a4091de7e4c797e4382ff2ff48153bf3e7d71bcd717334e26a68f143aa98aaa4fa2de73a0f7acbcece0fe054d4918d488059611f63d0ea1fb81d0cf8585c14ff40c59f369853e4d13ae09ef9acac985f82655451700c28bdb77c780f0047b480cb1b84ccf8d711c9e3e2be158fb389a2d2d9ccaa1e2364055344f746a19bf9e887960520dc5e8024891cba6c575748b171a3a602638d6df29529ee8e4491d1f5639634f7398adff5fa4b8c5797ddadb888fef4aff6bd3ecf8ba10941d3557f9df0f8660bf5d29c88f065fd86fdc19ddabc1324ddc3100e4d6c9741942ff3120626e950e6ce7de7a278b89cee1d88edba2b5c40256b6ef140371d5e60598ca38b6b151a76d2520d7d710280dfbd87874d68466e04de93cda8e03808a26fcb3f9bb71010e3dfdfe726bc827593dc88728af82a089deea0cb537a3bc64a6502446d47f6292b73efe888736cb3577e1307c095af37ac86419f0136f5c6d8d98250364120203ea64f2bf96a790915c577d5f4077c57753128bb6c59a113e23caa932142e6eaec4408f72164b2b80e849b6566bcbce432ddaf4b078c320b46abe7b3d6561d070f9ec80f00ef1e69b81cd2b3d80e064d00742e5bda3c4a1e9e54785aa02896b4ff0828955e39258a3a40d2b1e1a70d4f25efaba974bccecb3a72317965589fce9e39384857c708ef82cb515eea22d3b3a468d4a91ed1505be01cdcf114ab25f2f09c92da5ff349349dbece2f8b87e46651bb3aa916a4675517e846882fd74fa9b4c597031be0de7e0dfcf3f1f97cfbd7a6832a13b9662051a0a9d72b88bd4b77ae5f9762482b83deba14ef63cb7b804ac1111560dd9166da6b7d2256acc9b2971b731e26d83028f50fee1576380e5cee91b1da3196615bbdb3ae6f1cd021eeb666effcf78a7c3af6e874c9f2147aa4064ebc2e28b03f70aa116b989ba62b5cf37d86c18186e72a2cb8f34447363cab6e771cc785c67d672d69ffd0537ef492d346d885f73ebdfa60ae52de1b2d7af541d2226d2ee9a3306c2bd63abb3977ad2e2b8470d03290773b2392bae3eb08ffa1322ca72bdd81b59733149c46c18056cbed2e48c9a4695da7f3beca957a139fd4e8adda626601fd8a07f33d6c1f83edef5c2357c39a7ca2ee53d885204443fb2c6dc4d3e470b32172ad000ffa18e3cde2a5246acc8c71030e6f29979156e4fe71e21d51d7996589e33847b87acfe195f61d141f93d2e0124698f3056fbef337b675af41c6071038ca64da2db02e491e40cd719901ee18d7ee9a3c20fa14fa298ca507bb5072c642855bebb837390aa4d0793da5b69b1df2c729247359305663087abf26c2b77bae03063b447b89575ce914c747c0ef40867df3e1d5c55afb4b08056f94f151e0d1dd9c58e5ff5e1465e185db1a8e939b5b3ff1c73ba078f65cdf0bdbd0775c649cbee60b46913a08100f3ffa3ba81afbea6eb406c87555c8ce573f1c8a2205ef87fbfb6c196abd11c79fdd1143399b8b8b38cbdaa41e132dd313df07cccc806947dd618452ea79e4119a65a60c2bab78a2a43dff5ef91cec97724a7ace889ddccde32b4b1bac3c7cd6ee0e75f7b1cbe39927a106764302b348e6b258bd35383a362a2edf7b34470d9dec7b0cb35da7e58f46c758cc272d2920c5c3f78452680e6a78987167a8b76072d8ec3d69037bf5a4fd9a4b4e84b2ba5466e28e9d834802f75d454b7b1f22e2ed7f7b98e5fef3df71bdf11bb17d89e545ee9beff9dd224bfd3a2b63fda5e749b2b2f802671f6d8cd7b951664bfa7a021ab39eb403cbce04456caa8a62e2cbd4e9d966cd5c565f879154b12b527dcee577872b068002258129546d85594669e89b1530c413c9e0004f364ed98846e5b3529ac14a3f2cdcccf8b70e0595dd96c05bfe974fd8fe5cf7a46b6f1c683df3788543c60dd1eaac6110d6b9da46207a73b784a1924373f1fb83c0a1f5e195bfdc51bf9ce8d85eb2c96ea11bdf7296c7f0a3a40a0a1b58b1da288902b300c07742390ab04ff12310c8573d46d652e50afa0bc6e92ec411c46b1dd9a12f02be8db6d154f53e14036905d9dd4452c51e6548b0727a012270635b4890514aba39125a99622ebd5fec0e2baad6981fcbdfc6a726135f34f0e7f5fa3997764b5d11a011d657b9b352d9e5b01133a40a9d84041ed394f0446b9fe8c0cc6e911ee393382fdc63988c9013d20d8b9790f6a6dbd42bcf8b4f72c77042acfe1c35434ab442b5f0a184c4b665a9b1ddec8e34d9e65b4a94d876dcd9d3c7380ce97e4aa50dd3f2a067d967c63563f8b58b77b6ada2450387c53e02b5ebe696cfc4dc81509be848cbf7a12bb5496279f77f2dba609ea7877b2ed0df2274e93e01397cbffd86c39b0382acd6d69cc1f9b88a0e549e79a489dd9fb0bd7a9d9cb36d953ca5cf6fd1a16c5640b8b762ed914f4825bcdc3f3b64a4dfcaedefe0e6032d7be4ba96c8d2ae2e63ca37365aaa9985766fcc7e0147af46156fe21a06d19d72712e6546f808e76dea0ae48758f65f72d109def4157112e9c39423b7cecf8aadab7ef38e503f5984b5238ec7b4a1e01e11b90c3d067625ae58fc7e8a83f343cb7cb241732fc119196b7b4850e9bb40e62a7f33e931fef468e8a3ece323f2816b2f52d92e53e975fd338d7aa7a7d70ca5b773e12c71e2bdcc063435be26bcf54d66b6ca337c88bc8bb2ccbf04da6d0feb3d4936c8ba83845efbbcb5f5954ab2b04558b5014651fa223d78100bff40e2f60f3f129d94471f999bd284d53293666527a6769292f129cda4ad82a726feac8a267082c549e389260ee8842ba95d7052f03e06529b1b8c2440c8a24ca2a954a4485a57505eb87652386de690e834d323882a6f8df64480baf76460052bcf29dab847814b51f314ad5618cff54cc4133914010c9d81cb4366df01a92620d3a867f1fe4412f498efcbfeb645fe2b0fe9706f5b744650600f88dc155b6a99af9d19649c7e203ad7e82d79a06c2f45e4f4d85d75dc448942d54c219cf5c5c9d304b4103a", 0x1000}, {&(0x7f0000000040)="72bc0aed77f8199067a37b37d5577565a0be206593c4499034478cdd5d5ca507a75848da25932f47876b2b208194eb0a6f74", 0x32}], 0x5, &(0x7f0000000380)=[@txtime={{0x18, 0x1, 0x3d, 0x383a}}], 0x18}}, {{&(0x7f00000003c0)=@phonet={0x23, 0x4, 0x1, 0x1}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000440)="99b939", 0x3}, {&(0x7f0000000480)="dcdd5419d79579ef0ba6626d8ebdce7166a7c01eae92ae81c73a9dce8e2354ef7fab9fa5fa2396baf420ea1635e0ab8e210858dd14f9bcf9fe0f438252e1ec5d31ddc8e9317f21206bb5dffda2df3cbf175d17f11df2606aed0ecf31e2dd135c5ed1dd4bd8e6702231cdf08a0d2301244bac950ce5a2c7529536ed9fa8c59560e03cda768d00a725f7bf30623c37210e48cae377292244d2375d27c526a556c6e13c69f1b69b2c98e04553c4955381b03203c8419d8bf6712d7b3facbb7086b53544135deb8b4e171ce31e483cd4ffc43f1fd08c6721c0c3c423757dea876d95ab536ac6e9fed75cc9cfa4960d20b258f1", 0xf1}, {&(0x7f0000000580)="85d28d1a6012c1f8bbe0dd043f568656022e53eebba9c2bf762e78afa7a610d0a294212cbbcaab3dda9da80cbb9d707aa132f0aa3d7c2f331840d3994835ade5f6f545d332052cea5718d7bbcd33a5ed24349357cb83e47515b8461403a86f5ada5b4cc6cded5d06fc4f69632f9a2360d4a6186e53723a788e5330049b64247967640ab1eb", 0x85}], 0x3, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x25, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xe}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0xf0}}, {{&(0x7f0000000780)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)="a98a63befb132b2d784eb7f7d9ed6461", 0x10}, {&(0x7f0000000840)="644f4e39633053bb61df5f", 0xb}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000000880)="be190a40ba7f166255d6492ea714f5435360f5e1897968a6bbfe9ebdb21d68bace6ef9691337c77ad7e14a8670aac10156487d68975920a812c4c1cf96e6fccb868564a0b183878232a9172df2014db3e4245f77deabe798b9b7f16223671a7f4bac5e4d9c87c540092faf37944b1ca078e98dd06bb937045444bc60b9cfd0313c8fb1b414ff30d939fd0d30d08cb90f8c21a175a48b88e06274a9f6bea85cf19327c7df8c35c7bedcfda9653e109934c3e5226529af9b849cd6843fd3e23e179793813a4fbfb6ae4ddb1fc99a022eb6dbfcf28a34323d9d9281fc3890cc55a5f498581cf58ea379fbd4", 0xea}, {&(0x7f0000000980)="e05214d84d25fe98588a7dff6f2f812801859483b947e7590740505344bbf754ba2d3f735b911b6c3710410216595ec8d97fd1cbf479117113959c028dfa5333580f829133d481feac985ad83149360f29efcc09b1c3ebeab6cec6780cd29c2b9e6758e2a77fd2178c96950dfda739ff57e02b0f70d490498e3dd21bfc5d750e1d0533672132f0e006b8", 0x8a}], 0x5, &(0x7f0000000ac0)=[@txtime={{0x18, 0x1, 0x3d, 0x8001}}], 0x18}}, {{&(0x7f0000000b00)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x3, 0x2, {0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b80)="bb50dcf80a7b53b1ddb9df0ae47b36d605dc3de234e6b65865af3bee7b624e404c2a4769554986aadd2412bc32f595bc1ad56fefa81497fe2a5b9bda96535f611eee", 0x42}, {&(0x7f0000000c00)="5134a216f7e7fa09a028775fa5f0988c209cffab64be14e4cea179b70ce82ec4cad37c68d36ccdb4cd0e7de5b9f7fd987b172839b18f3985e820df89de87392ca51fa76c6e1501d2caf50a1056476f1e", 0x50}, {&(0x7f0000000c80)="0a4fad444b45d23057dc9f57327d2d882571ece739512eeeec6c562c4f4ef59a348c05515e0ab235f8d1b9ba109276d7d4a2618b4528a88090e7fdfb1e7df9fb3bc92a166d31f971fbf8746243567deee3e3cace47be2f0fd7450123806d2e38d3471adfe28c6f19cc733645444af1cfd6e8826e2a798b", 0x77}, {&(0x7f0000000d00)="00138d5698f329c747af759eb23b2a4a989e9c04b7e894f461ef027b93277a4937773ae1039637fec68761be7d751f8f7e66ae5071889252237a67cb1b1e3d1c98375f60eb6865fb1a4c24b83bad14352a306c6f5eb4963fe6f864a3844fc7922bb1c9c6f88a5765c6f701e60aab0f66b6308d65d0bd1cd20aab2e148b99db5e1b85c30df83380b99414992a5472097f85c9971f2587fbc496959d528523849c9897acecaa6cfc8102085471616ff102c5b4f428cdc766290616c372a04e3886cc0ded69a2f8690777e289f2c00258c131330a486cc505ec8d150124ffc0ea07ca108de2bdd5d08b629de6", 0xeb}], 0x4, &(0x7f0000000e40)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x99e}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x78}}, {{&(0x7f0000000ec0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000f40)="116fd7a358bfd025519f02a70fe2d139ba02b0613dfddaacacb2e01540130dd66f1a14a3b3b312c8214406ffc75a8f", 0x2f}, {&(0x7f0000000f80)="185e1723c7c463d22d625bb2e4d17a0efc80fb5071d5af6a21f8ec97a325807f565e442463fb18b8ada0ff8e76aa88ad7f6bd6f7af0e2b67b49db4c2a2b417f91811e9341fd1ebbad97a633ecc3d2f6cca", 0x51}, {&(0x7f0000001000)="691340684eb7d562ee4729e9ff5e300c500779f6628cfee452292dbfbff8b30c100e677f0949ad7efcd0589f304fd3fdbf7714b330d85ad354579d8a5ffd8eba6be347bd739bef14c2423174003b89187282e74d967ab5daa6c213ef83e13ec93924c79782609bf6b0c2799bbbb651468275e2caef0a5082b082de621f3a5e", 0x7f}, {&(0x7f0000001080)="f81992d15bc8a0f6741293581187f8a46d6b7ee5347efc9eacf148f5ac2eccb0942e210a8fccfe59c1702ea1f94ba63c8f68f47b9d7a95ba8c22f0b463ce0b5cb9c5c22fdd", 0x45}], 0x4, &(0x7f0000001140)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x310}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xe549}}], 0x78}}, {{&(0x7f00000011c0)=@phonet={0x23, 0x2, 0xd0, 0x6}, 0x80, &(0x7f00000045c0)=[{&(0x7f0000001240)="d2b23d1de88e93d05b1e93245a0ac078", 0x10}, {&(0x7f0000003340)="9de00efdaedf198dc300c96dd984a191a08a7d2d8848458205ab4091c8fb93a37402f10550de69c86ff884bb3cab48ce2be0f6d9f336210bea392767644ac5c70c5084b444f728f56457dfd9aced635a", 0x50}, {&(0x7f00000033c0)="de49dffc704ae0c2a22c3e7a0b525bf90983aacfc6febe0b886270e0f02f50439a8aa973ad1c1c727e", 0x29}, {&(0x7f0000003400)="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", 0x1000}, {&(0x7f0000004400)="5eaa9943fb592a4fcac714b2e1a74846bb7a25190db7b36b57fa7282651def8514116fc6fe20dc63171a1c9890bb0c040deec0e8e203944444a00a91d9c1cf32489c154df9f6ce736d4000ee6989be134b0626ede4b45e97027acf08e8abe97bf5fa8aceaf1fcb9cb5850fdf90c298323bad9b069c8832026520c57524d98545ccadec09f3ece240331ac43bcb0f1520c10455eb8f7482d68ceea2ee7a4cc77f8579f67e8affd533dc119bb9b6a1037cc49e8d08fe5b257ffe56692921f8e6a406dbcb60879ed514ceb2cf9f645243683078e6893de94f2ea16fe88996e6b5d741570d610c87b035891e1709edb37ad4789d", 0xf2}, {&(0x7f0000004500)="0f9e9f00e653584033d6cac92ae798fbe34068361b146336bb0c845056a32722b6e52845a6067c83599ed5db847c3f993f06b04d8a49ac12be27308a6bb623ca74f752a9c9b65659ac347ba9f95182e188b6df985b256403f7980b480eee8c05667d332fb1a33aaa78d419b86764c8b873048d16e4d9efcd73c8", 0x7a}, {&(0x7f0000004580)="f66d6c7e81877d6964bffe44c001631a69e91c7602774d9c394c723f496485f698ef6772da06572ef02a4188da05886a3c9083926cc6042790129486090000cb", 0x40}], 0x7, &(0x7f0000004640)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x401}}], 0x48}}, {{&(0x7f00000046c0)=@ax25={{0x3, @null, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @default, @null]}, 0x80, &(0x7f0000004780)=[{&(0x7f0000004740)="8f2de3b7c1587d670922", 0xa}], 0x1}}, {{&(0x7f00000047c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010101}}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)="344e30a26ba006c0c4037fc513edf1c26caae9ce181c96554ca4155231d7eba15a13d8a621bf2003759c8cb7f0c73f7ca46cb87745fa8681eca89f6c1dc91de67e6fff673e786ba65ce39c86df83f2a3e9f6b5e152e9e630b548fb436385e2f2be8f93de8171806cdf5b8788673f0dbdf8ddf6ee06f48e48e198a19902f57b0b49ceef23024cedb1bb4717582d130d427292019b4492e536e54847581d5ab3009b250caf582144e2296e40d42f79bd7e02fefa8a9a7b06a0054f9c377d1eb56c2677d0826b838d7c7d10f83e78c79a6e16a852956880", 0xd6}, {&(0x7f0000004940)="1667047c976369b4d5e2e5159904b0b943b0fa6be155eade469680a01a6568a9639b07d92b6cf6a918e50bc85e2ae3a4e67d3ec99dfd777a3b2afc02f23fdbd592b54f64783f342a9d22d0575605e583ed14fddcc7bda0789b6ae5072d47d038febaa4c0de7ab9501c09f59cc00a2520ed8ff2c55efcf4b04899e6ff3a5cab0f92ffb0ea153eff27394d5809749fcb58fbef01c0e7de80c89a140f1d1ab0861d2ce5d03479fd34ee8249ad11d169869b8b", 0xb1}], 0x2, &(0x7f0000004a40)}}], 0x8, 0x4884) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r4, 0x1, 0x4, &(0x7f0000000240)=0x8, 0x4) recvmmsg(r4, &(0x7f00000076c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/131, 0x83}}], 0x1, 0x0, 0x0) 4.670410869s ago: executing program 1 (id=730): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "ba26ed3a254f2e162e16204c68a7ac3e51d4b466bfb6f37ca21381cc99fcd670", 0xa8d, 0x6, 0xffffff1b, 0x2}, 0x3c) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.544861385s ago: executing program 1 (id=731): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000300)='1\x00', 0xffffff4a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1300000065ffff0d7800007874395032303030"], 0x13) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_io_uring_setup(0x238, &(0x7f0000000100)={0x0, 0x0, 0x10100, 0xffffffff, 0x1d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) setregid(0xffffffffffffffff, 0x0) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast2}, 0x3}}, 0x2e) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) socket$nl_generic(0x10, 0x3, 0x10) 4.427528548s ago: executing program 2 (id=733): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x44, 0xe2, 0x20, 0x8, 0x13d3, 0x3224, 0xcb0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0x20, 0x1, 0xd6}}]}}]}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x1, "1c"}, @local=@item_4={0x3, 0x2, 0x0, "b7e31a19"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000f00)={0x34, &(0x7f0000000400)={0x20, 0x30, 0xc, "9ce58eecf102db5f04c8eb7e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.766479916s ago: executing program 3 (id=736): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) unshare(0x0) signalfd4(r0, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) 3.405502027s ago: executing program 1 (id=737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r4, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000000100)=""/4096, 0x1000}], 0x2) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000180)=0xffffffff) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x44, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@timestamp_addr={0x44, 0x4, 0xfa, 0x1, 0x6}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback, {[@timestamp={0x44, 0x10, 0x89, 0x0, 0x3, [0xffffffff, 0x5, 0x5]}]}}}}}, 0x52) 3.251372261s ago: executing program 0 (id=739): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x8dffffff) 2.933621218s ago: executing program 0 (id=741): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa94, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000240)="d64ec7320ef8454e21d317e04c29271a58dd4bdbdb7dcad952f37af966b28aa2f32d790f5b2d708721d25e3e54c08fc267702193ecdc9d221f36454ebfdf9f1ddaf329a1ea2822bb0acf4bf439b6bfe0836b0447a5b86d44aef02ecf374a7d3a620e552a198888d75e7f7ae6d8e55fc7d2da2b3be565fa366749633cef997b4903cf3d52927bc2f60c65f1d65678113f7f43b1978ef07ab50eaceb07949d344c66291da32db667dee84e0786c0253100fd023b30d979d1be2bd5daea6cf2afd37cd65c43257a18e37e6a72ff051711fd690e1f29641f457d63db8df0fbb0", &(0x7f0000000340)=""/192}, 0x20) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0x9, 0x3, "7acc6338a9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}]}], {0x14}}, 0x94}}, 0x4) 2.91090143s ago: executing program 1 (id=742): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r2, r1, 0x2e, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000000c0)="1800000039000517d25a80648c63940d0324fc600b003540", 0x18}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0) 2.81206051s ago: executing program 4 (id=743): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="540000001400b595000a00000000000002000000", @ANYRES32=r1, @ANYBLOB="140001001440000000000000000000000000000014000200fe"], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r4) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x8) add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$get_persistent(0x16, 0x0, r5) read$watch_queue(r6, &(0x7f0000000200)=""/88, 0x58) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.811740105s ago: executing program 3 (id=744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902120001000000000904"], 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0x0, 0x25, 0x148, 0x0, 0x60, 0x298, 0x2a8, 0x2a8, 0x298, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'hsr0\x00', 'ip6erspan0\x00'}, 0x0, 0xf0, 0x150, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x200000, 0xffffffff, 0x1, 0x48}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x4, 0x0, 0x5, 0x1, 0x3], 0x5, 0x6}, {0xffffffffffffffff, [0x0, 0x7, 0x0, 0x1, 0x0, 0xb], 0x5, 0x1}}}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "e316"}}, @common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0xffffffffffffffff}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0xe0, 0xf40, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x390) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000030a01010000000000000000010000000900010073797a30000000000900030073797a31000000001c0008800c00024000000000000000000c000140000000000000000014000480080001"], 0xa4}}, 0x4840) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000440), &(0x7f0000000480)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) close(r3) r4 = syz_io_uring_setup(0x57e5, &(0x7f0000000100)={0x0, 0xea47, 0x800, 0x0, 0x361}, &(0x7f0000000180), &(0x7f00000001c0)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000400)={0x0, 0xb}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000200)}, 0x2e) 2.536286274s ago: executing program 1 (id=745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x74, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x9, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) (fail_nth: 14) 2.459144447s ago: executing program 2 (id=746): r0 = socket(0x840000000002, 0x0, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x5, @broadcast}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x32, 0x4, 0x6, 0x64, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffff7, 0xde}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000c80)={0x420, 0x3f4, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x420}}, 0x2008004) ppoll(&(0x7f0000000040)=[{r3, 0x8004}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) tee(r5, r6, 0x6, 0x0) sendmsg$kcm(r7, &(0x7f0000000380)={&(0x7f0000000280)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000300)="e24248f59445847918790320c836ca8c8beda88521cfedb61c62b20fedd66135f915705c4190278112b7a3ecc4012fbf541e04df838ca41242870e", 0x3b}], 0x2}, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009050a0000000000000905031300000000000727010300000009050f"], 0x0) 2.299997659s ago: executing program 4 (id=747): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @local, @local}}}], 0x20}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xd}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r6, 0x0, &(0x7f0000236000/0x800000)=nil, 0x800000, 0x400000000000000}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800800030004000000050006"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x240080e4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000010000000f8ffffff0f00000000000fce8b904665c08dd53d721b9452fb208d8e7f1d8a681baecc8ab0f899aad5028e2487f21c9d4b", @ANYRES32=r7, @ANYBLOB="0400"/18, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaa732182b300440000000000069078ac6a5f1afb1414aa00004c2200"/41, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="cc02000090780000050e00007fff0000000b00000007080a0000000600000005fe04f989"], 0x0) socket(0x2, 0x3, 0x100000001) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1}}, {{@in, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xfe}}, 0xe8) 1.819444406s ago: executing program 0 (id=748): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010"], 0x50}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) close(0xffffffffffffffff) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x7fff}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) socket$inet6(0xa, 0x200000000003, 0x87) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bde49a", 0x3}], 0x1}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r3], 0x24}}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x3, 0xc0, [0x2, 0x7, 0x7, 0xffffffffffffffff, 0x648, 0x5], 0x1, &(0x7f0000000000)=[{}], &(0x7f00000002c0)=""/192}, &(0x7f0000000380)=0x78) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, 0x0, 0x48) 1.652876254s ago: executing program 1 (id=749): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x11) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000900)={0x2c, &(0x7f00000007c0)={0x20, 0xf, 0xf0, {0xf0, 0x22, "14769d5dadf823f8fee524865655f44323803864797504ba247fb18c0bbcdccdc936824aff6304a1c4843f29161d921cd07e04847758ad831087ac8411c45d0ef47f4bc7c70ff3b12b8a3bf8872c27d1cae6302c879f1fb9c937a0ba71920b62c8106021272d070b840f64363c99e1c53a2968a98b8933a8c10fee091b638e2adeb2a72c20594bb55126b37d65ba2e0bd5ece1529fb79dcb20817ec8628428481442d00b850bb320c71aa8eaaf2cc30c9044df76fcf69cbd48256a72dc80c6989def1339cc31839b93e9f06fec697d06b6dfe655f32f85d1eae7cc3409ba1760b06b82a5020c343b41a0fa946226"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.135798164s ago: executing program 4 (id=750): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) sendmsg$can_raw(r2, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r1}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0) 1.00087913s ago: executing program 4 (id=751): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffec, &(0x7f00000001c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x24004404) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept(r1, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x0) bind$alg(r1, &(0x7f0000001200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-simd\x00'}, 0x58) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="69906effd6915238bddc2115d1bd428682f110437a9af68b5147ff7c97a3eea0f22b9cc27d", 0x25}], 0x1}, 0x100080c0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe6}], 0x1}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80101) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000400)=0xc5c, 0x4) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0', [{0x20, '\t\v\xaf\xe2\x8cd0\x99\xa1U\xcc\x9c\xce\xef%\xf2\b\xe9Ow\x98\xa7\xac\xccM\x85\xbf\x11\xb8\xe0 M\xb1:\\TD\x89\x91N\xa6h\xd8\xb1>\xa3`\x99\xc9\xbe\xb9+\xf3`\xdb\x96\x1c\tA\x1bff\xdaD\xe9_\x1b_\xdcO\xe0/\xd6\x93H\x01L-i\xc0\xd6\xec\xeb\xa1W2Ne;X\xba\xd6\x17m\x1e\xcc\xc0\x94\b'}]}, 0x6f) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000140)='*^!\xd0\x00', &(0x7f0000000180)='./file0\x00', r4) 708.971997ms ago: executing program 3 (id=752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r3 = fsopen(&(0x7f0000000300)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYBLOB="010100000000000000001000000020000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r4, @ANYBLOB="712f6d98992c42c3b7d94d61d5257ed4c8675633fe2c9007930bc53c8a4a78635823e2b4b6"], 0x34}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = accept(r5, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f00000004c0)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e05003e20"], 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) memfd_secret(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x145c, 0x0, &(0x7f0000000240), 0x0) r8 = io_uring_setup(0x63d6, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r8, 0x15, &(0x7f0000002dc0)=[{0x4, 0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) sendto$isdn(r6, &(0x7f00000005c0)={0x7, 0x8, "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"}, 0x1008, 0x48800, &(0x7f0000000180)={0x22, 0x6d, 0x5, 0xf0}, 0x6) ioctl$SIOCSIFMTU(r5, 0x8948, &(0x7f0000000580)={'bond0\x00', 0x10001}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r9, 0x0) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000200)={0x2, {0x2, 0x6, 0x23eb, 0x100, 0xffff, 0x1}}) 613.776678ms ago: executing program 0 (id=753): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}, 0x1, 0xfd, 0x0, 0x8000}, 0x4008040) 504.374636ms ago: executing program 4 (id=754): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x64000004) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000b00)=@delqdisc={0xec, 0x25, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x1, 0xe}, {0x6}, {0xd, 0x3}}, [@TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x3, 0x6, 0x760, 0x2, 0xc, 0x6, 0x6}}, {0x10, 0x2, [0x1, 0x8, 0xc, 0x9, 0x3, 0x1ff]}}, {{0x1c, 0x1, {0xb, 0x5, 0xd, 0x8, 0x0, 0x7d, 0xffff, 0x9}}, {0x16, 0x2, [0x7ff, 0x3, 0x6, 0x400, 0xbdfd, 0x400, 0x6, 0xf5dc, 0x7]}}, {{0x1c, 0x1, {0x8, 0x4, 0x1, 0xb, 0x2, 0x8, 0x1, 0x7}}, {0x12, 0x2, [0x0, 0x10, 0x0, 0xac, 0x80, 0x200, 0x4]}}, {{0x1c, 0x1, {0x2, 0x5, 0x1, 0x38f7, 0x1, 0x8, 0x75c, 0xa}}, {0x18, 0x2, [0x4, 0x4, 0x8, 0x6, 0x6, 0x80, 0x9, 0x5, 0x3700, 0x3]}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4040}, 0x100) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) sendmsg$kcm(r0, &(0x7f0000000880)={&(0x7f0000000300)=@caif=@rfm={0x25, 0x5, "82f058008ab16afae3bbc91fb5fa5b12"}, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)="c017f72c8446f316f4496ffce28edecc7f9577f89aabc5ff0bf0da4e0d9053e7e1bd539f8432d6edf65250df3372e7aa7e244a3b6921c327b3c56a8109e29d329619319d1398339b6ebf570ab3f724e1e5d8d148593f1c618b21f4010a795f08584cd1822caa7034ab6803b81a3b0cc6d09588de56a28928e27db7444bf46b7acd9ec866bb4d1532abe563c640885bb268", 0x91}, {&(0x7f0000000480)="0f0b421a1598e7fbf911db84caab8664dfcb7ced4a092006d395a63439a321e7a037ede559d262765e22bf203f41f1eaae56c9ba576e37c08b94ca593d0e52d8011c49039d16349ff941e538351bf4698c53b915", 0x54}, {&(0x7f0000000180)="4e252444ae820b78967f63d898a718", 0xf}, {&(0x7f0000000500)="4c39f5aafc27bdf9d2239beeaa1eee7da364516eb814e7026be4424ec150a4950201937bcfe7a4808099b82c5d9d12d5ea41f1a7d230a92add821373031797e9e38c0c8a7f748f06fa1201c6a578bfad", 0x50}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="a1eb840c9100bac88302ae137e72ec2f509050dc5c", 0x15}, {&(0x7f0000000600)="bbf44339770f5e660c2090b9f31f9e10e6c50ba93ab163266d8ee80d36c1807137e208404d5648f9f2b21c3ba56c8611bb846d1d63cb627272c10f8a2d2c34", 0x3f}, {&(0x7f0000000640)="ddafb3cb85709c54dfa3730dc33c51f6a06a73b004f7ca64ae9007a5ff2cb300b1cfe778c8279aed12916b14cb770f6ac933a1beec4610072142f31b867a85c379f6eb15ac1fd31cf9cc4c94c46011441cb5b75dec1898ace6cae69b51b044344685b2fb8495d1c1b306e2734c028117e6d82cf2aac620857dcd03d5e18a446e441e90068676cc68c7869154df047c0254d381dd78bbf7f0e35639b84a8607f0ea6e3d7785632f5926af0c5cd9642aaa5bd40918e7639ae7df9a01da6fb7ab11e17a9314eae5cafb5650e84d9e", 0xcd}], 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/559], 0x90}, 0x11) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000140)={0x10, 0x0, r8}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000001f80)=r9, 0x4) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)='\\\x00', 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0x8, 0x0, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x68, 0x0, 0x5, 0x29, 0x0, @remote, @broadcast, {[@end, @rr={0x7, 0x1f, 0x3b, [@dev={0xac, 0x14, 0x14, 0x34}, @remote, @multicast1, @multicast2, @multicast2, @remote, @loopback]}, @noop, @generic={0x88, 0x2}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x4, 0x2433, 0x8, 0xd8, 0x1, 0x408, '\x00', r12, r10, 0x0, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) 391.859563ms ago: executing program 3 (id=755): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000001c0)={{0xffffffffffffffff, 0x1, 0x4, 0x3, 0x9}}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) pread64(r0, &(0x7f0000000f40)=""/102390, 0x18ff6, 0x100009) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r9 = accept4$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x80800) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r11 = gettid() r12 = getpid() process_vm_readv(r12, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) rt_sigqueueinfo(r11, 0xb, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffd}) syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32, @ANYBLOB="0000000a0100000064869b10b2a442439e62703d4d95c5180012000800"], 0x38}}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000077879605618e2f0cef917de361c82000001ac1414bb00005b8a429362107ca0f4fac308eb393b17927439b213834f4ddb46bbff56b7e1d94b93d7363b7bc8fe83189596130c884b3f357d484c0bf36730cf971c77c85cb3ab0c923ce8fdfb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/112], 0xb8}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100039042abd7000eaffffff000003e4", @ANYRES32=r10, @ANYBLOB="03000000c31006003000128008000100736974002400028008000300ac1414bb080014000909000006000d000080000006000e0008000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 199.623589ms ago: executing program 0 (id=756): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r1, 0x3, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x3, 0x6, @remote}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010700000000000000000500000008003e01"], 0x1c}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 132.005373ms ago: executing program 4 (id=757): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000240), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES8=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000003"], 0x38}, 0x300}, 0x0) 0s ago: executing program 2 (id=758): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa94, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000240)="d64ec7320ef8454e21d317e04c29271a58dd4bdbdb7dcad952f37af966b28aa2f32d790f5b2d708721d25e3e54c08fc267702193ecdc9d221f36454ebfdf9f1ddaf329a1ea2822bb0acf4bf439b6bfe0836b0447a5b86d44aef02ecf374a7d3a620e552a198888d75e7f7ae6d8e55fc7d2da2b3be565fa366749633cef997b4903cf3d52927bc2f60c65f1d65678113f7f43b1978ef07ab50eaceb07949d344c66291da32db667dee84e0786c0253100fd023b30d979d1be2bd5daea6cf2afd37cd65c43257a18e37e6a72ff051711fd690e1f29641f457d63db8df0fbb0", &(0x7f0000000340)=""/192}, 0x20) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0x9, 0x3, "7acc6338a9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}]}], {0x14}}, 0x94}}, 0x4) kernel console output (not intermixed with test programs): 46] R13: 0000000000000000 R14: 00007f5768935f80 R15: 00007f5768a5fa28 [ 179.393559][ T7546] [ 179.431057][ T63] veth0_vlan: left promiscuous mode [ 179.454315][ T7548] netlink: 84 bytes leftover after parsing attributes in process `syz.3.510'. [ 179.473214][ T5241] Bluetooth: hci2: command tx timeout [ 179.860823][ T63] pimreg (unregistering): left allmulticast mode [ 180.312996][ T5279] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 180.546154][ T7585] netlink: 'syz.3.520': attribute type 9 has an invalid length. [ 180.554053][ T7585] netlink: 134640 bytes leftover after parsing attributes in process `syz.3.520'. [ 180.621527][ T7586] sg_write: process 139 (syz.0.519) changed security contexts after opening file descriptor, this is not allowed. [ 181.064624][ T63] team0 (unregistering): Port device team_slave_1 removed [ 181.141078][ T63] team0 (unregistering): Port device team_slave_0 removed [ 181.490888][ T5241] Bluetooth: hci2: command tx timeout [ 182.050874][ T7481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.103767][ T7556] netlink: 'syz.2.513': attribute type 10 has an invalid length. [ 182.111800][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.134294][ T7573] netlink: 'syz.1.517': attribute type 1 has an invalid length. [ 182.141967][ T7573] netlink: 'syz.1.517': attribute type 2 has an invalid length. [ 182.356561][ T7481] team0: Port device team_slave_0 added [ 182.409612][ T7481] team0: Port device team_slave_1 added [ 182.441846][ T7481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.448975][ T7481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.481155][ T7481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.494810][ T7481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.498461][ T7600] FAULT_INJECTION: forcing a failure. [ 182.498461][ T7600] name failslab, interval 1, probability 0, space 0, times 0 [ 182.515033][ T7481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.515065][ T7481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.603116][ T7600] CPU: 0 UID: 0 PID: 7600 Comm: syz.1.523 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 182.613760][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 182.623841][ T7600] Call Trace: [ 182.627122][ T7600] [ 182.630055][ T7600] dump_stack_lvl+0x241/0x360 [ 182.634757][ T7600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.639956][ T7600] ? __pfx__printk+0x10/0x10 [ 182.644561][ T7600] ? __kmalloc_noprof+0xb0/0x400 [ 182.649496][ T7600] ? __pfx___might_resched+0x10/0x10 [ 182.654876][ T7600] should_fail_ex+0x3b0/0x4e0 [ 182.659573][ T7600] ? sock_kmalloc+0xd7/0x160 [ 182.664167][ T7600] should_failslab+0xac/0x100 [ 182.668844][ T7600] ? sock_kmalloc+0xd7/0x160 [ 182.673610][ T7600] __kmalloc_noprof+0xd8/0x400 [ 182.678391][ T7600] sock_kmalloc+0xd7/0x160 [ 182.682821][ T7600] af_alg_alloc_areq+0x90/0x260 [ 182.687681][ T7600] skcipher_recvmsg+0x382/0x1230 [ 182.692627][ T7600] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 182.697993][ T7600] ? aa_sock_msg_perm+0x91/0x160 [ 182.702929][ T7600] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 182.708315][ T7600] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 182.713697][ T7600] sock_recvmsg+0x22f/0x280 [ 182.718225][ T7600] __sys_recvfrom+0x246/0x3d0 [ 182.722913][ T7600] ? __pfx___sys_recvfrom+0x10/0x10 [ 182.728131][ T7600] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 182.734124][ T7600] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.740461][ T7600] __x64_sys_recvfrom+0xde/0x100 [ 182.745401][ T7600] do_syscall_64+0xf3/0x230 [ 182.749904][ T7600] ? clear_bhb_loop+0x35/0x90 [ 182.754577][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.760478][ T7600] RIP: 0033:0x7f73d2b7fdc4 [ 182.764911][ T7600] Code: 89 4c 24 1c e8 ed 5a 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 5b 02 00 48 8b 04 [ 182.784511][ T7600] RSP: 002b:00007f73d39e7ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 182.792921][ T7600] RAX: ffffffffffffffda RBX: 00007f73d39e7fc0 RCX: 00007f73d2b7fdc4 [ 182.800886][ T7600] RDX: 0000000000001000 RSI: 00007f73d39e8010 RDI: 0000000000000004 [ 182.808862][ T7600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.816840][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 182.824804][ T7600] R13: 00007f73d39e7f68 R14: 00007f73d39e8010 R15: 0000000000000000 [ 182.832787][ T7600] [ 182.886083][ T5290] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 183.006210][ T7481] hsr_slave_0: entered promiscuous mode [ 183.036470][ T7481] hsr_slave_1: entered promiscuous mode [ 183.099795][ T5290] usb 4-1: config index 0 descriptor too short (expected 38436, got 36) [ 183.118530][ T5290] usb 4-1: config 219 has an invalid descriptor of length 173, skipping remainder of the config [ 183.157308][ T5290] usb 4-1: config 219 has 0 interfaces, different from the descriptor's value: 20 [ 183.182993][ T5290] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 183.226654][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.368759][ T7629] netlink: 'syz.0.530': attribute type 9 has an invalid length. [ 183.417714][ T7629] netlink: 134640 bytes leftover after parsing attributes in process `syz.0.530'. [ 183.485034][ T7599] loop0: detected capacity change from 0 to 7 [ 183.501141][ T7599] Dev loop0: unable to read RDB block 7 [ 183.520626][ T7599] loop0: unable to read partition table [ 183.526945][ T7599] loop0: partition table beyond EOD, truncated [ 183.533446][ T7599] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 183.533446][ T7599] ) failed (rc=-5) [ 183.558423][ T5290] usb 4-1: string descriptor 0 read error: -71 [ 183.565710][ T5241] Bluetooth: hci2: command tx timeout [ 183.611974][ T5290] usb 4-1: USB disconnect, device number 20 [ 184.431461][ T7648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.534'. [ 184.600181][ T7659] FAULT_INJECTION: forcing a failure. [ 184.600181][ T7659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.668119][ T7659] CPU: 0 UID: 0 PID: 7659 Comm: syz.3.536 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 184.679029][ T7659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 184.689113][ T7659] Call Trace: [ 184.692409][ T7659] [ 184.695360][ T7659] dump_stack_lvl+0x241/0x360 [ 184.700073][ T7659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.705299][ T7659] ? __pfx__printk+0x10/0x10 [ 184.709927][ T7659] ? __pfx_lock_release+0x10/0x10 [ 184.714992][ T7659] should_fail_ex+0x3b0/0x4e0 [ 184.719711][ T7659] _copy_from_iter+0x1ed/0x1d60 [ 184.724675][ T7659] ? _copy_from_iter+0x257/0x1d60 [ 184.729748][ T7659] ? __virt_addr_valid+0x183/0x530 [ 184.734883][ T7659] ? skb_set_owner_w+0x238/0x3e0 [ 184.739848][ T7659] ? __pfx_lock_release+0x10/0x10 [ 184.744904][ T7659] ? __pfx__copy_from_iter+0x10/0x10 [ 184.750209][ T7659] ? __pfx__copy_from_iter+0x10/0x10 [ 184.755523][ T7659] ? page_copy_sane+0x154/0x260 [ 184.760399][ T7659] copy_page_from_iter+0x7a/0x100 [ 184.765455][ T7659] skb_copy_datagram_from_iter+0x2d9/0x6a0 [ 184.771279][ T7659] unix_dgram_sendmsg+0x7a7/0x1f80 [ 184.776404][ T7659] ? aa_sk_perm+0x96d/0xab0 [ 184.780915][ T7659] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 184.786476][ T7659] ? __pfx_lock_release+0x10/0x10 [ 184.791508][ T7659] ? aa_sock_msg_perm+0x91/0x160 [ 184.796447][ T7659] ? unix_seqpacket_sendmsg+0x110/0x1e0 [ 184.801997][ T7659] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 184.807892][ T7659] __sock_sendmsg+0x221/0x270 [ 184.812580][ T7659] ____sys_sendmsg+0x52a/0x7e0 [ 184.817347][ T7659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.822654][ T7659] __sys_sendmsg+0x292/0x380 [ 184.827239][ T7659] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.832349][ T7659] ? __pfx_vfs_write+0x10/0x10 [ 184.837125][ T7659] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 184.843458][ T7659] ? do_syscall_64+0x100/0x230 [ 184.848223][ T7659] ? do_syscall_64+0xb6/0x230 [ 184.852919][ T7659] do_syscall_64+0xf3/0x230 [ 184.857423][ T7659] ? clear_bhb_loop+0x35/0x90 [ 184.862093][ T7659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.867984][ T7659] RIP: 0033:0x7fb182b7dff9 [ 184.872394][ T7659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.891991][ T7659] RSP: 002b:00007fb183934038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.900399][ T7659] RAX: ffffffffffffffda RBX: 00007fb182d35f80 RCX: 00007fb182b7dff9 [ 184.908362][ T7659] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 184.916325][ T7659] RBP: 00007fb183934090 R08: 0000000000000000 R09: 0000000000000000 [ 184.924286][ T7659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.932246][ T7659] R13: 0000000000000000 R14: 00007fb182d35f80 R15: 00007fb182e5fa28 [ 184.940221][ T7659] [ 184.943340][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.962627][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.539'. [ 185.006044][ T81] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 185.059528][ T7481] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.115411][ T7481] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.168165][ T7671] netlink: 'syz.3.541': attribute type 9 has an invalid length. [ 185.172642][ T7481] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.188718][ T7671] netlink: 134640 bytes leftover after parsing attributes in process `syz.3.541'. [ 185.221470][ T7673] macsec1: entered promiscuous mode [ 185.241075][ T7677] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.261316][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 185.261334][ T29] audit: type=1326 audit(1728287903.806:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.2.540" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f487157dff9 code=0x0 [ 185.336575][ T7481] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.344390][ T81] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.361081][ T81] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 185.372802][ T81] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 185.382341][ T81] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.392278][ T81] usb 2-1: config 0 descriptor?? [ 185.398950][ T7660] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 185.418689][ T7681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.428688][ T81] hub 2-1:0.0: USB hub found [ 185.618083][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.638681][ T7688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.685456][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.706596][ T7688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.726889][ T81] hub 2-1:0.0: 2 ports detected [ 185.805479][ T7481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.838441][ T7481] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.880628][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.887851][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.898833][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.906015][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.930929][ T7688] binder: BINDER_SET_CONTEXT_MGR already set [ 185.970651][ T7481] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.984815][ T7688] binder: 7657:7688 ioctl 4018620d 20000100 returned -16 [ 185.992942][ T5290] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 186.003333][ T7481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.096675][ T7481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.167365][ T5290] usb 4-1: Using ep0 maxpacket: 16 [ 186.186422][ T5290] usb 4-1: unable to get BOS descriptor or descriptor too short [ 186.208326][ T5290] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 59 [ 186.228607][ T81] usb 2-1: USB disconnect, device number 32 [ 186.234382][ T5290] usb 4-1: can't read configurations, error -22 [ 186.238216][ T7481] veth0_vlan: entered promiscuous mode [ 186.247122][ T7698] FAULT_INJECTION: forcing a failure. [ 186.247122][ T7698] name failslab, interval 1, probability 0, space 0, times 0 [ 186.262617][ T7698] CPU: 0 UID: 0 PID: 7698 Comm: syz.2.548 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 186.273325][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.283396][ T7698] Call Trace: [ 186.286690][ T7698] [ 186.289646][ T7698] dump_stack_lvl+0x241/0x360 [ 186.294351][ T7698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.299575][ T7698] ? __pfx__printk+0x10/0x10 [ 186.304199][ T7698] ? __kmalloc_noprof+0xb0/0x400 [ 186.309167][ T7698] ? __pfx___might_resched+0x10/0x10 [ 186.314479][ T7698] should_fail_ex+0x3b0/0x4e0 [ 186.319275][ T7698] ? sock_kmalloc+0xd7/0x160 [ 186.323893][ T7698] should_failslab+0xac/0x100 [ 186.328596][ T7698] ? sock_kmalloc+0xd7/0x160 [ 186.333203][ T7698] __kmalloc_noprof+0xd8/0x400 [ 186.337991][ T7698] sock_kmalloc+0xd7/0x160 [ 186.342434][ T7698] skcipher_recvmsg+0x5ff/0x1230 [ 186.347413][ T7698] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 186.352814][ T7698] ? aa_sock_msg_perm+0x91/0x160 [ 186.357777][ T7698] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 186.363091][ T7698] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 186.368491][ T7698] sock_recvmsg+0x22f/0x280 [ 186.373029][ T7698] __sys_recvfrom+0x246/0x3d0 [ 186.377817][ T7698] ? __pfx___sys_recvfrom+0x10/0x10 [ 186.383030][ T7698] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 186.389046][ T7698] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.395389][ T7698] __x64_sys_recvfrom+0xde/0x100 [ 186.400328][ T7698] do_syscall_64+0xf3/0x230 [ 186.404832][ T7698] ? clear_bhb_loop+0x35/0x90 [ 186.409511][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.415410][ T7698] RIP: 0033:0x7f487157fdc4 [ 186.419825][ T7698] Code: 89 4c 24 1c e8 ed 5a 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 5b 02 00 48 8b 04 [ 186.439427][ T7698] RSP: 002b:00007f48723aded0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 186.447843][ T7698] RAX: ffffffffffffffda RBX: 00007f48723adfc0 RCX: 00007f487157fdc4 [ 186.455898][ T7698] RDX: 0000000000001000 RSI: 00007f48723ae010 RDI: 0000000000000004 [ 186.463864][ T7698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.471913][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 186.479879][ T7698] R13: 00007f48723adf68 R14: 00007f48723ae010 R15: 0000000000000000 [ 186.487856][ T7698] [ 186.490946][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.553828][ T5290] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 186.666780][ T7481] veth1_vlan: entered promiscuous mode [ 186.689457][ T7481] veth0_macvtap: entered promiscuous mode [ 186.701654][ T7481] veth1_macvtap: entered promiscuous mode [ 186.718347][ T7708] FAULT_INJECTION: forcing a failure. [ 186.718347][ T7708] name failslab, interval 1, probability 0, space 0, times 0 [ 186.730603][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.746444][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.756444][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.767352][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.773251][ T5290] usb 4-1: Using ep0 maxpacket: 16 [ 186.777681][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.792861][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.803903][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.807743][ T5290] usb 4-1: unable to get BOS descriptor or descriptor too short [ 186.820168][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.824871][ T5290] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 59 [ 186.832006][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.851325][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.862648][ T7481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.873181][ T7708] CPU: 0 UID: 0 PID: 7708 Comm: syz.0.549 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 186.883807][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.893968][ T7708] Call Trace: [ 186.897266][ T7708] [ 186.900218][ T7708] dump_stack_lvl+0x241/0x360 [ 186.904923][ T7708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.910148][ T7708] ? __pfx__printk+0x10/0x10 [ 186.914838][ T7708] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 186.920848][ T7708] ? __pfx___might_resched+0x10/0x10 [ 186.926166][ T7708] should_fail_ex+0x3b0/0x4e0 [ 186.930873][ T7708] should_failslab+0xac/0x100 [ 186.935576][ T7708] ? __alloc_skb+0x1c3/0x440 [ 186.940188][ T7708] kmem_cache_alloc_node_noprof+0x71/0x320 [ 186.946029][ T7708] __alloc_skb+0x1c3/0x440 [ 186.950473][ T7708] ? __pfx___alloc_skb+0x10/0x10 [ 186.955518][ T7708] ? netlink_ack_tlv_len+0x6e/0x200 [ 186.960723][ T7708] netlink_ack+0x13f/0xa30 [ 186.965139][ T7708] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.970613][ T7708] netlink_rcv_skb+0x262/0x430 [ 186.975380][ T7708] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.980837][ T7708] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.986138][ T7708] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.991340][ T7708] netlink_unicast+0x7f6/0x990 [ 186.996108][ T7708] ? __pfx_netlink_unicast+0x10/0x10 [ 187.001398][ T7708] ? __virt_addr_valid+0x183/0x530 [ 187.006510][ T7708] ? __check_object_size+0x48e/0x900 [ 187.011799][ T7708] netlink_sendmsg+0x8e4/0xcb0 [ 187.016575][ T7708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.021857][ T7708] ? aa_sock_msg_perm+0x91/0x160 [ 187.026794][ T7708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.032068][ T7708] __sock_sendmsg+0x221/0x270 [ 187.036744][ T7708] ____sys_sendmsg+0x52a/0x7e0 [ 187.041507][ T7708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.046803][ T7708] __sys_sendmmsg+0x3ab/0x730 [ 187.051480][ T7708] ? __pfx___sys_sendmmsg+0x10/0x10 [ 187.056682][ T7708] ? __pfx_lock_release+0x10/0x10 [ 187.061724][ T7708] ? kstrtouint_from_user+0x128/0x190 [ 187.067103][ T7708] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 187.072998][ T7708] ? ksys_write+0x229/0x2b0 [ 187.077495][ T7708] ? __pfx_lock_release+0x10/0x10 [ 187.082525][ T7708] ? vfs_write+0x7bf/0xc90 [ 187.086939][ T7708] ? kmem_cache_free+0x1a2/0x420 [ 187.091883][ T7708] ? __mutex_unlock_slowpath+0x21d/0x750 [ 187.097517][ T7708] ? __fget_files+0x3f3/0x470 [ 187.102196][ T7708] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 187.108181][ T7708] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 187.114514][ T7708] ? do_syscall_64+0x100/0x230 [ 187.119276][ T7708] __x64_sys_sendmmsg+0xa0/0xb0 [ 187.124125][ T7708] do_syscall_64+0xf3/0x230 [ 187.128623][ T7708] ? clear_bhb_loop+0x35/0x90 [ 187.133294][ T7708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.139186][ T7708] RIP: 0033:0x7f576877dff9 [ 187.143595][ T7708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.163193][ T7708] RSP: 002b:00007f57695e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 187.171606][ T7708] RAX: ffffffffffffffda RBX: 00007f5768935f80 RCX: 00007f576877dff9 [ 187.179573][ T7708] RDX: 0000000004924b68 RSI: 0000000020000140 RDI: 0000000000000003 [ 187.187537][ T7708] RBP: 00007f57695e8090 R08: 0000000000000000 R09: 0000000000000000 [ 187.195501][ T7708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.203464][ T7708] R13: 0000000000000000 R14: 00007f5768935f80 R15: 00007f5768a5fa28 [ 187.211437][ T7708] [ 187.214491][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.232284][ T5290] usb 4-1: can't read configurations, error -22 [ 187.253365][ T5290] usb usb4-port1: attempt power cycle [ 187.254722][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.269289][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.279713][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.290456][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.300865][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.317251][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.327431][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.337992][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.347916][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.358524][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.369703][ T7481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.383771][ T7481] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.392502][ T7481] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.401355][ T7481] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.410985][ T7481] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.550543][ T7722] netlink: 'syz.0.553': attribute type 9 has an invalid length. [ 187.575946][ T7722] netlink: 134640 bytes leftover after parsing attributes in process `syz.0.553'. [ 187.633384][ T5290] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 187.669288][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.685148][ T5290] usb 4-1: Using ep0 maxpacket: 16 [ 187.687810][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.692502][ T5290] usb 4-1: unable to get BOS descriptor or descriptor too short [ 187.723403][ T81] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 187.731906][ T5290] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 59 [ 187.749357][ T5290] usb 4-1: can't read configurations, error -22 [ 187.798393][ T935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.837474][ T935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.933198][ T81] usb 3-1: Using ep0 maxpacket: 8 [ 187.968766][ T81] usb 3-1: config 1 has an invalid interface number: 60 but max is 1 [ 187.982967][ T5290] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 187.985808][ T81] usb 3-1: config 1 has an invalid interface number: 33 but max is 1 [ 188.006707][ T81] usb 3-1: config 1 has an invalid interface number: 39 but max is 1 [ 188.011661][ T5290] usb 4-1: Using ep0 maxpacket: 16 [ 188.014906][ T81] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 188.014930][ T81] usb 3-1: config 1 has no interface number 0 [ 188.014947][ T81] usb 3-1: config 1 has no interface number 1 [ 188.014964][ T81] usb 3-1: config 1 has no interface number 2 [ 188.015004][ T81] usb 3-1: config 1 interface 60 altsetting 192 endpoint 0x4 has invalid wMaxPacketSize 0 [ 188.015026][ T81] usb 3-1: config 1 interface 60 altsetting 192 endpoint 0xA has invalid wMaxPacketSize 0 [ 188.015047][ T81] usb 3-1: config 1 interface 60 altsetting 192 endpoint 0xE has invalid wMaxPacketSize 0 [ 188.015069][ T81] usb 3-1: config 1 interface 60 altsetting 192 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 188.015096][ T81] usb 3-1: config 1 interface 60 altsetting 192 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 188.041920][ T5290] usb 4-1: unable to get BOS descriptor or descriptor too short [ 188.042061][ T81] usb 3-1: config 1 interface 60 altsetting 192 has a duplicate endpoint with address 0xA, skipping [ 188.048478][ T5283] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 188.050364][ T5290] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 59 [ 188.060724][ T81] usb 3-1: config 1 interface 60 altsetting 192 has an invalid descriptor for endpoint zero, skipping [ 188.102648][ T5290] usb 4-1: can't read configurations, error -22 [ 188.110068][ T81] usb 3-1: config 1 interface 60 altsetting 192 has a duplicate endpoint with address 0xC, skipping [ 188.110095][ T81] usb 3-1: config 1 interface 60 altsetting 192 has a duplicate endpoint with address 0x7, skipping [ 188.110117][ T81] usb 3-1: config 1 interface 60 altsetting 192 has a duplicate endpoint with address 0xE, skipping [ 188.110139][ T81] usb 3-1: config 1 interface 60 altsetting 192 bulk endpoint 0x8 has invalid maxpacket 8 [ 188.110162][ T81] usb 3-1: config 1 interface 60 altsetting 192 has a duplicate endpoint with address 0x2, skipping [ 188.110190][ T81] usb 3-1: config 1 interface 33 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 188.110217][ T81] usb 3-1: too many endpoints for config 1 interface 39 altsetting 227: 124, using maximum allowed: 30 [ 188.162331][ T5290] usb usb4-port1: unable to enumerate USB device [ 188.168020][ T81] usb 3-1: config 1 interface 39 altsetting 227 has a duplicate endpoint with address 0x7, skipping [ 188.219192][ T5283] usb 1-1: Using ep0 maxpacket: 32 [ 188.224080][ T81] usb 3-1: config 1 interface 39 altsetting 227 has a duplicate endpoint with address 0xC, skipping [ 188.224113][ T81] usb 3-1: config 1 interface 39 altsetting 227 has an invalid descriptor for endpoint zero, skipping [ 188.224135][ T81] usb 3-1: config 1 interface 39 altsetting 227 has a duplicate endpoint with address 0x2, skipping [ 188.224159][ T81] usb 3-1: config 1 interface 39 altsetting 227 has a duplicate endpoint with address 0xB, skipping [ 188.224182][ T81] usb 3-1: config 1 interface 39 altsetting 227 has 6 endpoint descriptors, different from the interface descriptor's value: 124 [ 188.224210][ T81] usb 3-1: config 1 interface 60 has no altsetting 0 [ 188.224228][ T81] usb 3-1: config 1 interface 33 has no altsetting 0 [ 188.257949][ T5283] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 188.259136][ T81] usb 3-1: config 1 interface 39 has no altsetting 0 [ 188.307550][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.382424][ T81] usb 3-1: New USB device found, idVendor=04f2, idProduct=b5eb, bcdDevice=c4.89 [ 188.410122][ T81] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.421310][ T81] usb 3-1: Product: â° [ 188.435134][ T81] usb 3-1: Manufacturer: ÑŽ [ 188.439689][ T81] usb 3-1: SerialNumber: 碣äªì™‚âꖖ췒镎窓焛ì¥à»­êƒžä¥©ê»¶ã¡³ë²–풲錓厓穱⥑ã¸à±½ì«„旂䵠䳱ɜ㶷Ꮍ൤귀꥚è¢æ¿¹ì°¿æ³¬á¥œê™ˆí„¾å¸Œç–¾ä˜žæ‹€å¦¸è¿­âŠ˜í„…뿜ꬩ춯䜪áºêŠ¬ì­ æ‡¹ã„¦è¾œá®‰Ì™ï•¯ê®á…ä„ഠⱥ造冇åŽí“麡꺸ä£ï¦œÌ³ã‹…㚽ꔀ줡敢ᬯáŸë»à¬ºç£²ì·à¸§å³¶ã¥©æ–‡á“‘㿶鬌뺦⛉望锼æ—ç¹æ‡šá“ [ 188.451473][ T5283] usb 1-1: config 0 descriptor?? [ 188.531164][ T7718] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.536810][ T5283] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 188.552116][ T7718] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.738324][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.758085][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.793009][ T5290] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 188.809465][ T81] usb 3-1: Found UVC 0.00 device â° (04f2:b5eb) [ 188.831048][ T81] usb 3-1: No valid video chain found. [ 188.883087][ T81] usb 3-1: USB disconnect, device number 25 [ 188.980340][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 188.997556][ T5290] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 189.032816][ T5290] usb 2-1: New USB device found, idVendor=5032, idProduct=0bc7, bcdDevice=9c.bb [ 189.041917][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.175064][ T5290] usb 2-1: config 0 descriptor?? [ 189.216690][ T5290] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in warm state. [ 189.225335][ T5290] dvb-usb: bulk message failed: -90 (3/0) [ 189.246294][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.257364][ T5290] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.268143][ T5290] dvbdev: DVB: registering new adapter (GRAND - USB2.0 DVB-T adapter) [ 189.276551][ T5290] usb 2-1: media controller created [ 189.299253][ T5290] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.325406][ T5290] dvb-usb: bulk message failed: -90 (6/0) [ 189.331805][ T5290] dvb-usb: bulk message failed: -90 (6/0) [ 189.337838][ T5290] dvb-usb: no frontend was attached by 'GRAND - USB2.0 DVB-T adapter' [ 189.369371][ T5290] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 189.382693][ T5290] dvb-usb: schedule remote query interval to 150 msecs. [ 189.389787][ T5290] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully initialized and connected. [ 189.417689][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.474589][ T5290] usb 2-1: USB disconnect, device number 33 [ 189.483598][ T5283] gspca_nw80x: reg_w err -110 [ 189.500331][ T5283] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 189.522949][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.561'. [ 189.557204][ T5283] usb 1-1: USB disconnect, device number 30 [ 189.585920][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.587166][ T5290] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully deinitialized and disconnected. [ 189.593451][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.886849][ T7787] netlink: 'syz.4.564': attribute type 9 has an invalid length. [ 189.895565][ T7787] netlink: 134640 bytes leftover after parsing attributes in process `syz.4.564'. [ 189.949945][ T5282] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 190.037634][ T7793] netlink: 'syz.4.565': attribute type 6 has an invalid length. [ 190.128763][ T5282] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 190.148052][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.220046][ T5282] usb 3-1: config 0 descriptor?? [ 190.278958][ T5282] cp210x 3-1:0.0: cp210x converter detected [ 190.316226][ T7806] FAULT_INJECTION: forcing a failure. [ 190.316226][ T7806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.359245][ T7806] CPU: 0 UID: 0 PID: 7806 Comm: syz.4.569 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 190.369888][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 190.379959][ T7806] Call Trace: [ 190.383254][ T7806] [ 190.386182][ T7806] dump_stack_lvl+0x241/0x360 [ 190.390881][ T7806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.396087][ T7806] ? __pfx__printk+0x10/0x10 [ 190.400687][ T7806] ? snprintf+0xda/0x120 [ 190.404934][ T7806] should_fail_ex+0x3b0/0x4e0 [ 190.409650][ T7806] _copy_to_user+0x2f/0xb0 [ 190.414088][ T7806] simple_read_from_buffer+0xca/0x150 [ 190.419504][ T7806] proc_fail_nth_read+0x1e9/0x250 [ 190.424543][ T7806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.430099][ T7806] ? rw_verify_area+0x55e/0x6f0 [ 190.434954][ T7806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.440510][ T7806] vfs_read+0x201/0xbc0 [ 190.444672][ T7806] ? __pfx_lock_release+0x10/0x10 [ 190.449709][ T7806] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 190.455278][ T7806] ? __pfx_vfs_read+0x10/0x10 [ 190.459966][ T7806] ? __fget_files+0x3f3/0x470 [ 190.464647][ T7806] ? fdget_pos+0x24e/0x320 [ 190.469063][ T7806] ksys_read+0x183/0x2b0 [ 190.473314][ T7806] ? __pfx_ksys_read+0x10/0x10 [ 190.478086][ T7806] ? do_syscall_64+0x100/0x230 [ 190.482854][ T7806] ? do_syscall_64+0xb6/0x230 [ 190.487528][ T7806] do_syscall_64+0xf3/0x230 [ 190.492028][ T7806] ? clear_bhb_loop+0x35/0x90 [ 190.496707][ T7806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.502607][ T7806] RIP: 0033:0x7ff5b8f7ca3c [ 190.507024][ T7806] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 190.526630][ T7806] RSP: 002b:00007ff5b9d75030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.535044][ T7806] RAX: ffffffffffffffda RBX: 00007ff5b9135f80 RCX: 00007ff5b8f7ca3c [ 190.543019][ T7806] RDX: 000000000000000f RSI: 00007ff5b9d750a0 RDI: 0000000000000004 [ 190.550987][ T7806] RBP: 00007ff5b9d75090 R08: 0000000000000000 R09: 0000000000000000 [ 190.558962][ T7806] R10: 0000000000000fc4 R11: 0000000000000246 R12: 0000000000000001 [ 190.566931][ T7806] R13: 0000000000000000 R14: 00007ff5b9135f80 R15: 00007ff5b925fa28 [ 190.574911][ T7806] [ 190.578055][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.741645][ T29] audit: type=1326 audit(1728287909.306:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb182b7dff9 code=0x7ffc0000 [ 190.772943][ T5278] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 190.789375][ T5282] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 190.806668][ T5282] usb 3-1: cp210x converter now attached to ttyUSB0 [ 190.816406][ T29] audit: type=1326 audit(1728287909.346:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb182b7dff9 code=0x7ffc0000 [ 190.841990][ T29] audit: type=1326 audit(1728287909.356:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb182b7dff9 code=0x7ffc0000 [ 190.873342][ T29] audit: type=1326 audit(1728287909.356:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb182b7dff9 code=0x7ffc0000 [ 190.953244][ T29] audit: type=1326 audit(1728287909.356:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb182b7dff9 code=0x7ffc0000 [ 190.962955][ T5229] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 191.002958][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 191.013283][ T5278] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.047989][ T5278] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.051454][ T7779] vcan1: entered allmulticast mode [ 191.062010][ T5278] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.103040][ T29] audit: type=1326 audit(1728287909.386:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb182b7c990 code=0x7ffc0000 [ 191.108984][ T5278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 191.152869][ T5229] usb 1-1: device descriptor read/64, error -71 [ 191.183942][ T5278] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 191.196837][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.198442][ T29] audit: type=1326 audit(1728287909.386:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb182b7dff9 code=0x7ffc0000 [ 191.220521][ T5278] usb 2-1: config 0 descriptor?? [ 191.237526][ T5282] usb 3-1: USB disconnect, device number 26 [ 191.283611][ T5282] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 191.364716][ T5282] cp210x 3-1:0.0: device disconnected [ 191.378184][ T29] audit: type=1326 audit(1728287909.386:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb182b7dff9 code=0x7ffc0000 [ 191.422958][ T5229] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 191.492324][ T29] audit: type=1326 audit(1728287909.386:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fb182b7dff9 code=0x7ffc0000 [ 191.580152][ T29] audit: type=1326 audit(1728287909.386:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb182b7dff9 code=0x7ffc0000 [ 191.604783][ T5229] usb 1-1: device descriptor read/64, error -71 [ 191.679966][ T5278] hid-generic 0003:045E:05DA.0006: ignoring exceeding usage max [ 191.729055][ T5278] hid-generic 0003:045E:05DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.1-1/input0 [ 191.742883][ T5229] usb usb1-port1: attempt power cycle [ 191.894886][ T5282] usb 2-1: USB disconnect, device number 34 [ 191.939099][ T7840] fuse: Invalid uid '00000000000000000000003' [ 192.094960][ T5229] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 192.155267][ T5229] usb 1-1: device descriptor read/8, error -71 [ 192.379657][ T7857] netlink: 'syz.4.575': attribute type 9 has an invalid length. [ 192.389753][ T7857] netlink: 134640 bytes leftover after parsing attributes in process `syz.4.575'. [ 192.432914][ T5229] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 192.523826][ T5229] usb 1-1: device descriptor read/8, error -71 [ 192.713697][ T5229] usb usb1-port1: unable to enumerate USB device [ 193.261615][ T7883] usb usb8: usbfs: process 7883 (syz.3.583) did not claim interface 0 before use [ 193.276041][ T7884] usb usb8: usbfs: process 7884 (syz.3.583) did not claim interface 0 before use [ 193.292070][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.583'. [ 193.301583][ T7883] netlink: 'syz.3.583': attribute type 7 has an invalid length. [ 193.322879][ T7883] netlink: 'syz.3.583': attribute type 8 has an invalid length. [ 193.331018][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'. [ 193.449922][ T7890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.457851][ T7883] ip6gretap0: entered promiscuous mode [ 193.506457][ T7883] batadv_slave_1: entered promiscuous mode [ 193.541970][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.583'. [ 193.556693][ T7882] netlink: 'syz.3.583': attribute type 7 has an invalid length. [ 193.565674][ T7882] netlink: 'syz.3.583': attribute type 8 has an invalid length. [ 193.574797][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'. [ 193.862960][ T5229] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 194.012815][ T5278] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 194.034928][ T5229] usb 5-1: unable to get BOS descriptor or descriptor too short [ 194.054277][ T5229] usb 5-1: not running at top speed; connect to a high speed hub [ 194.073839][ T5229] usb 5-1: config 1 has an invalid interface number: 163 but max is 0 [ 194.082069][ T5229] usb 5-1: config 1 has no interface number 0 [ 194.096264][ T7914] netlink: 'syz.2.592': attribute type 1 has an invalid length. [ 194.102923][ T5229] usb 5-1: config 1 interface 163 has no altsetting 0 [ 194.107282][ T7914] netlink: 'syz.2.592': attribute type 2 has an invalid length. [ 194.112834][ T5229] usb 5-1: New USB device found, idVendor=257a, idProduct=260c, bcdDevice=41.4f [ 194.136690][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.144897][ T5229] usb 5-1: Product: syz [ 194.149086][ T5229] usb 5-1: Manufacturer: syz [ 194.154067][ T5229] usb 5-1: SerialNumber: syz [ 194.185660][ T5278] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 194.192828][ T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 194.224091][ T5278] usb 2-1: config 0 has no interface number 0 [ 194.230240][ T5278] usb 2-1: config 0 interface 79 has no altsetting 0 [ 194.267557][ T5278] usb 2-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=fc.92 [ 194.292262][ T7921] FAULT_INJECTION: forcing a failure. [ 194.292262][ T7921] name failslab, interval 1, probability 0, space 0, times 0 [ 194.302844][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.312197][ T7921] CPU: 1 UID: 0 PID: 7921 Comm: syz.2.594 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 194.322744][ T5278] usb 2-1: Product: syz [ 194.323423][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 194.323440][ T7921] Call Trace: [ 194.323448][ T7921] [ 194.323457][ T7921] dump_stack_lvl+0x241/0x360 [ 194.327613][ T5278] usb 2-1: Manufacturer: syz [ 194.337629][ T7921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.337658][ T7921] ? __pfx__printk+0x10/0x10 [ 194.337685][ T7921] ? __kmalloc_noprof+0xb0/0x400 [ 194.341433][ T5278] usb 2-1: SerialNumber: syz [ 194.343885][ T7921] ? __pfx___might_resched+0x10/0x10 [ 194.343919][ T7921] should_fail_ex+0x3b0/0x4e0 [ 194.343949][ T7921] ? nla_strdup+0x9c/0x140 [ 194.363425][ T5278] usb 2-1: config 0 descriptor?? [ 194.367849][ T7921] should_failslab+0xac/0x100 [ 194.367883][ T7921] ? nla_strdup+0x9c/0x140 [ 194.401054][ T7921] __kmalloc_noprof+0xd8/0x400 [ 194.405859][ T7921] ? __kmalloc_node_noprof+0x247/0x440 [ 194.411351][ T7921] ? __kvmalloc_node_noprof+0x72/0x190 [ 194.415414][ T5278] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 194.416820][ T7921] nla_strdup+0x9c/0x140 [ 194.416854][ T7921] nf_tables_newset+0x17b2/0x2ee0 [ 194.426750][ T5278] dvb-usb: bulk message failed: -22 (2/0) [ 194.430791][ T7921] ? __pfx_nf_tables_newset+0x10/0x10 [ 194.435879][ T5278] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 194.441509][ T7921] ? __pfx_lock_release+0x10/0x10 [ 194.450064][ T5278] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 194.455281][ T7921] ? __nla_parse+0x40/0x60 [ 194.455314][ T7921] nfnetlink_rcv+0x14dc/0x2ab0 [ 194.462079][ T5278] usb 2-1: media controller created [ 194.470473][ T7921] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 194.470540][ T7921] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.470563][ T7921] ? skb_clone+0x240/0x390 [ 194.470582][ T7921] ? __pfx_lock_release+0x10/0x10 [ 194.470619][ T7921] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.470648][ T7921] netlink_unicast+0x7f6/0x990 [ 194.470678][ T7921] ? __pfx_netlink_unicast+0x10/0x10 [ 194.470698][ T7921] ? __virt_addr_valid+0x183/0x530 [ 194.470721][ T7921] ? __check_object_size+0x48e/0x900 [ 194.470746][ T7921] netlink_sendmsg+0x8e4/0xcb0 [ 194.470775][ T7921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.470795][ T7921] ? aa_sock_msg_perm+0x91/0x160 [ 194.470822][ T7921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.470839][ T7921] __sock_sendmsg+0x221/0x270 [ 194.470867][ T7921] ____sys_sendmsg+0x52a/0x7e0 [ 194.470896][ T7921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.470932][ T7921] __sys_sendmsg+0x292/0x380 [ 194.470955][ T7921] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.470987][ T7921] ? __pfx_vfs_write+0x10/0x10 [ 194.471031][ T7921] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 194.471060][ T7921] ? do_syscall_64+0x100/0x230 [ 194.471082][ T7921] ? do_syscall_64+0xb6/0x230 [ 194.471104][ T7921] do_syscall_64+0xf3/0x230 [ 194.471123][ T7921] ? clear_bhb_loop+0x35/0x90 [ 194.471143][ T7921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.471169][ T7921] RIP: 0033:0x7f487157dff9 [ 194.471194][ T7921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.471211][ T7921] RSP: 002b:00007f48723af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.471233][ T7921] RAX: ffffffffffffffda RBX: 00007f4871735f80 RCX: 00007f487157dff9 [ 194.471248][ T7921] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 194.471262][ T7921] RBP: 00007f48723af090 R08: 0000000000000000 R09: 0000000000000000 [ 194.471275][ T7921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.471289][ T7921] R13: 0000000000000000 R14: 00007f4871735f80 R15: 00007f487185fa28 [ 194.471318][ T7921] [ 194.499838][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.505543][ T5278] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.519739][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.533443][ T5278] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 194.663190][ T25] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 194.920103][ T5278] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 194.930391][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.978910][ T25] usb 4-1: config 0 descriptor?? [ 195.186458][ T25] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 195.768688][ T7912] tipc: Started in network mode [ 195.794554][ T7912] tipc: Node identity 7f000001, cluster identity 4711 [ 195.864006][ T7912] tipc: Enabled bearer , priority 10 [ 195.912886][ T5278] rc_core: IR keymap rc-dtt200u not found [ 195.919235][ T5278] Registered IR keymap rc-empty [ 195.925685][ T5278] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 195.943193][ T5278] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input23 [ 195.956624][ T5278] dvb-usb: schedule remote query interval to 300 msecs. [ 195.963723][ T5278] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 195.984599][ T5278] usb 2-1: USB disconnect, device number 35 [ 196.011898][ T5282] usb 4-1: USB disconnect, device number 25 [ 196.139940][ T7942] netlink: 'syz.0.597': attribute type 21 has an invalid length. [ 196.173421][ T5278] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 196.327761][ T7943] loop7: detected capacity change from 0 to 16384 [ 196.425658][ T5229] hub 5-1:1.163: bad descriptor, ignoring hub [ 196.439883][ T5229] hub 5-1:1.163: probe with driver hub failed with error -5 [ 196.468079][ T5229] option 5-1:1.163: GSM modem (1-port) converter detected [ 196.536584][ T5229] usb 5-1: USB disconnect, device number 20 [ 196.565582][ T5229] option 5-1:1.163: device disconnected [ 196.681034][ T7959] FAULT_INJECTION: forcing a failure. [ 196.681034][ T7959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.698920][ T7959] CPU: 0 UID: 0 PID: 7959 Comm: syz.4.601 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 196.709538][ T7959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 196.719589][ T7959] Call Trace: [ 196.722870][ T7959] [ 196.725794][ T7959] dump_stack_lvl+0x241/0x360 [ 196.730464][ T7959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.735671][ T7959] ? __pfx__printk+0x10/0x10 [ 196.740289][ T7959] ? snprintf+0xda/0x120 [ 196.744547][ T7959] should_fail_ex+0x3b0/0x4e0 [ 196.749224][ T7959] _copy_to_user+0x2f/0xb0 [ 196.753645][ T7959] simple_read_from_buffer+0xca/0x150 [ 196.759017][ T7959] proc_fail_nth_read+0x1e9/0x250 [ 196.764042][ T7959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.769585][ T7959] ? rw_verify_area+0x55e/0x6f0 [ 196.774430][ T7959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.779971][ T7959] vfs_read+0x201/0xbc0 [ 196.784134][ T7959] ? __pfx_lock_release+0x10/0x10 [ 196.789184][ T7959] ? __pfx_vfs_read+0x10/0x10 [ 196.793857][ T7959] ? __fget_files+0x3f3/0x470 [ 196.798539][ T7959] ? fdget_pos+0x24e/0x320 [ 196.802966][ T7959] ksys_read+0x183/0x2b0 [ 196.807206][ T7959] ? __pfx_ksys_read+0x10/0x10 [ 196.811962][ T7959] ? do_syscall_64+0x100/0x230 [ 196.816718][ T7959] ? do_syscall_64+0xb6/0x230 [ 196.821420][ T7959] do_syscall_64+0xf3/0x230 [ 196.825921][ T7959] ? clear_bhb_loop+0x35/0x90 [ 196.830598][ T7959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.836505][ T7959] RIP: 0033:0x7ff5b8f7ca3c [ 196.840913][ T7959] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 196.860520][ T7959] RSP: 002b:00007ff5b9d75030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.868933][ T7959] RAX: ffffffffffffffda RBX: 00007ff5b9135f80 RCX: 00007ff5b8f7ca3c [ 196.876911][ T7959] RDX: 000000000000000f RSI: 00007ff5b9d750a0 RDI: 0000000000000004 [ 196.884886][ T7959] RBP: 00007ff5b9d75090 R08: 0000000000000000 R09: 0000000000000000 [ 196.892855][ T7959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.900831][ T7959] R13: 0000000000000000 R14: 00007ff5b9135f80 R15: 00007ff5b925fa28 [ 196.908806][ T7959] [ 196.984792][ T5282] tipc: Node number set to 2130706433 [ 197.300285][ T7972] binder: 7971:7972 ioctl c0306201 20000240 returned -14 [ 197.339929][ T7973] FAULT_INJECTION: forcing a failure. [ 197.339929][ T7973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.353916][ T7973] CPU: 1 UID: 0 PID: 7973 Comm: syz.1.606 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 197.364540][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 197.374610][ T7973] Call Trace: [ 197.377875][ T7973] [ 197.380793][ T7973] dump_stack_lvl+0x241/0x360 [ 197.385480][ T7973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.390665][ T7973] ? __pfx__printk+0x10/0x10 [ 197.395248][ T7973] ? __pfx_lock_release+0x10/0x10 [ 197.400263][ T7973] should_fail_ex+0x3b0/0x4e0 [ 197.404935][ T7973] _copy_from_user+0x2f/0xe0 [ 197.409516][ T7973] copy_msghdr_from_user+0xae/0x680 [ 197.414705][ T7973] ? __pfx___might_resched+0x10/0x10 [ 197.419979][ T7973] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 197.425774][ T7973] ? rcu_is_watching+0x15/0xb0 [ 197.430525][ T7973] ? __might_fault+0xaa/0x120 [ 197.435187][ T7973] __sys_sendmmsg+0x36d/0x730 [ 197.439872][ T7973] ? __pfx___sys_sendmmsg+0x10/0x10 [ 197.445076][ T7973] ? __pfx_lock_release+0x10/0x10 [ 197.450088][ T7973] ? kstrtouint_from_user+0x128/0x190 [ 197.455464][ T7973] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 197.461350][ T7973] ? ksys_write+0x229/0x2b0 [ 197.465862][ T7973] ? __pfx_lock_release+0x10/0x10 [ 197.470880][ T7973] ? vfs_write+0x7bf/0xc90 [ 197.475278][ T7973] ? kmem_cache_free+0x1a2/0x420 [ 197.480203][ T7973] ? __mutex_unlock_slowpath+0x21d/0x750 [ 197.485822][ T7973] ? __fget_files+0x3f3/0x470 [ 197.490488][ T7973] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 197.496456][ T7973] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.502769][ T7973] ? do_syscall_64+0x100/0x230 [ 197.507515][ T7973] __x64_sys_sendmmsg+0xa0/0xb0 [ 197.512351][ T7973] do_syscall_64+0xf3/0x230 [ 197.516840][ T7973] ? clear_bhb_loop+0x35/0x90 [ 197.521506][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.527388][ T7973] RIP: 0033:0x7f73d2b7dff9 [ 197.531788][ T7973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.551378][ T7973] RSP: 002b:00007f73d39c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 197.559783][ T7973] RAX: ffffffffffffffda RBX: 00007f73d2d36058 RCX: 00007f73d2b7dff9 [ 197.567746][ T7973] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000003 [ 197.575704][ T7973] RBP: 00007f73d39c8090 R08: 0000000000000000 R09: 0000000000000000 [ 197.583749][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.591724][ T7973] R13: 0000000000000001 R14: 00007f73d2d36058 R15: 00007f73d2e5fa28 [ 197.599793][ T7973] [ 198.105053][ T7986] netlink: 'syz.0.613': attribute type 1 has an invalid length. [ 198.148592][ T7986] netlink: 'syz.0.613': attribute type 2 has an invalid length. [ 198.252366][ T7992] netlink: 'syz.0.613': attribute type 1 has an invalid length. [ 198.260581][ T7979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.611'. [ 198.481192][ T8009] FAULT_INJECTION: forcing a failure. [ 198.481192][ T8009] name failslab, interval 1, probability 0, space 0, times 0 [ 198.505549][ T8009] CPU: 1 UID: 0 PID: 8009 Comm: syz.4.617 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 198.516203][ T8009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 198.526294][ T8009] Call Trace: [ 198.529600][ T8009] [ 198.532552][ T8009] dump_stack_lvl+0x241/0x360 [ 198.537357][ T8009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.542593][ T8009] ? __pfx__printk+0x10/0x10 [ 198.547220][ T8009] ? __kmalloc_noprof+0xb0/0x400 [ 198.552192][ T8009] ? __pfx___might_resched+0x10/0x10 [ 198.557506][ T8009] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 198.563532][ T8009] should_fail_ex+0x3b0/0x4e0 [ 198.568251][ T8009] ? sock_kmalloc+0xd7/0x160 [ 198.572862][ T8009] should_failslab+0xac/0x100 [ 198.577550][ T8009] ? sock_kmalloc+0xd7/0x160 [ 198.582158][ T8009] __kmalloc_noprof+0xd8/0x400 [ 198.586935][ T8009] sock_kmalloc+0xd7/0x160 [ 198.591380][ T8009] af_alg_alloc_areq+0x90/0x260 [ 198.596262][ T8009] skcipher_recvmsg+0x382/0x1230 [ 198.601238][ T8009] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 198.606728][ T8009] ? aa_sock_msg_perm+0x91/0x160 [ 198.611696][ T8009] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 198.617013][ T8009] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 198.622408][ T8009] sock_recvmsg+0x22f/0x280 [ 198.626945][ T8009] __sys_recvfrom+0x246/0x3d0 [ 198.631638][ T8009] ? __pfx___sys_recvfrom+0x10/0x10 [ 198.636904][ T8009] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 198.642944][ T8009] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 198.649304][ T8009] __x64_sys_recvfrom+0xde/0x100 [ 198.654257][ T8009] do_syscall_64+0xf3/0x230 [ 198.658749][ T8009] ? clear_bhb_loop+0x35/0x90 [ 198.663442][ T8009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.663602][ T5283] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 198.669341][ T8009] RIP: 0033:0x7ff5b8f7fdc4 [ 198.681417][ T8009] Code: 89 4c 24 1c e8 ed 5a 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 5b 02 00 48 8b 04 [ 198.701052][ T8009] RSP: 002b:00007ff5b9d73ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 198.709509][ T8009] RAX: ffffffffffffffda RBX: 00007ff5b9d73fc0 RCX: 00007ff5b8f7fdc4 [ 198.717488][ T8009] RDX: 0000000000001000 RSI: 00007ff5b9d74010 RDI: 0000000000000004 [ 198.725467][ T8009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.733444][ T8009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 198.741432][ T8009] R13: 00007ff5b9d73f68 R14: 00007ff5b9d74010 R15: 0000000000000000 [ 198.749418][ T8009] [ 198.754745][ T5229] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 198.872357][ T8013] validate_nla: 1 callbacks suppressed [ 198.872371][ T8013] netlink: 'syz.3.619': attribute type 9 has an invalid length. [ 198.886989][ T8013] netlink: 134640 bytes leftover after parsing attributes in process `syz.3.619'. [ 198.974540][ T5283] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 198.983186][ T5283] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 198.992177][ T5283] usb 3-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config [ 199.008799][ T5283] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 199.018576][ T5283] usb 3-1: config 0 has no interface number 0 [ 199.026898][ T5283] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 199.043137][ T5229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.053577][ T5229] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 199.069220][ T5283] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 199.080448][ T5229] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 199.098594][ T5283] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 199.108781][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.117893][ T5283] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid maxpacket 35088, setting to 64 [ 199.129979][ T5229] usb 1-1: config 0 descriptor?? [ 199.135807][ T5283] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 199.145222][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.156263][ T5283] usb 3-1: config 0 descriptor?? [ 199.172540][ T5283] gspca_main: spca561-2.14.0 probing abcd:cdee [ 199.235083][ T1054] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.273722][ T5278] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 199.358389][ T1054] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.374307][ T5283] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 199.408565][ T5283] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.419254][ T5283] usb 3-1: MIDIStreaming interface descriptor not found [ 199.432788][ T5278] usb 4-1: Using ep0 maxpacket: 8 [ 199.452566][ T5278] usb 4-1: config 0 has no interfaces? [ 199.483658][ T5278] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.520393][ T5283] usb 3-1: USB disconnect, device number 27 [ 199.527182][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.558860][ T5278] usb 4-1: Product: syz [ 199.571408][ T1054] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.584405][ T5278] usb 4-1: Manufacturer: syz [ 199.589047][ T5278] usb 4-1: SerialNumber: syz [ 199.605900][ T5278] usb 4-1: config 0 descriptor?? [ 199.662581][ T1054] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.720292][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.735966][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.747443][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.757859][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.765890][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 199.776252][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 200.008596][ T1054] team0: left allmulticast mode [ 200.023660][ T1054] team_slave_0: left allmulticast mode [ 200.049716][ T1054] team_slave_1: left allmulticast mode [ 200.072884][ T1054] team0: left promiscuous mode [ 200.078013][ T1054] team_slave_0: left promiscuous mode [ 200.089545][ T1054] team_slave_1: left promiscuous mode [ 200.100621][ T1054] bridge0: port 3(team0) entered disabled state [ 200.146490][ T1054] bridge_slave_1: left allmulticast mode [ 200.233935][ T1054] bridge_slave_1: left promiscuous mode [ 200.254133][ T1054] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.272975][ T81] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 200.296612][ T1054] bridge_slave_0: left allmulticast mode [ 200.325290][ T1054] bridge_slave_0: left promiscuous mode [ 200.350799][ T1054] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.443320][ T81] usb 5-1: Using ep0 maxpacket: 16 [ 200.459041][ T81] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 200.489472][ T81] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 200.549155][ T81] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 200.595076][ T81] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.639580][ T81] usb 5-1: Product: syz [ 200.659568][ T81] usb 5-1: Manufacturer: syz [ 200.691354][ T81] usb 5-1: SerialNumber: syz [ 200.734762][ T81] usb 5-1: config 0 descriptor?? [ 201.011364][ T5279] usb 4-1: USB disconnect, device number 26 [ 201.027178][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 201.027193][ T29] audit: type=1326 audit(1728287919.596:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b8f7dff9 code=0x7ffc0000 [ 201.137795][ T29] audit: type=1326 audit(1728287919.626:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff5b8f7dff9 code=0x7ffc0000 [ 201.201881][ T5238] Bluetooth: hci0: unexpected subevent 0x0a length: 16 < 30 [ 201.272918][ T29] audit: type=1326 audit(1728287919.626:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5b8f7e033 code=0x7ffc0000 [ 201.294938][ T81] usb 5-1: Cannot retrieve CPort count: -110 [ 201.294977][ T81] usb 5-1: Cannot retrieve CPort count: -110 [ 201.295006][ T81] es2_ap_driver 5-1:0.0: probe with driver es2_ap_driver failed with error -110 [ 201.341682][ T29] audit: type=1326 audit(1728287919.626:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5b8f7e033 code=0x7ffc0000 [ 201.380053][ T29] audit: type=1326 audit(1728287919.626:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b8f7dff9 code=0x7ffc0000 [ 201.421929][ T5281] usb 1-1: USB disconnect, device number 35 [ 201.435788][ T29] audit: type=1326 audit(1728287919.646:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff5b8f7dff9 code=0x7ffc0000 [ 201.466557][ T29] audit: type=1326 audit(1728287919.646:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b8f7dff9 code=0x7ffc0000 [ 201.496647][ T29] audit: type=1326 audit(1728287919.646:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff5b8f7dff9 code=0x7ffc0000 [ 201.599903][ T29] audit: type=1326 audit(1728287919.646:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b8f7dff9 code=0x7ffc0000 [ 201.632430][ T29] audit: type=1326 audit(1728287919.646:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7ff5b8f7dff9 code=0x7ffc0000 [ 201.695034][ T8066] netlink: 'syz.0.631': attribute type 9 has an invalid length. [ 201.703067][ T8066] netlink: 134640 bytes leftover after parsing attributes in process `syz.0.631'. [ 201.801144][ T1054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.809973][ T5238] Bluetooth: hci4: command tx timeout [ 201.818696][ T1054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.830032][ T1054] bond0 (unregistering): Released all slaves [ 201.865370][ T8056] netlink: 'syz.3.629': attribute type 12 has an invalid length. [ 202.288885][ T1054] hsr_slave_0: left promiscuous mode [ 202.308162][ T1054] hsr_slave_1: left promiscuous mode [ 202.333444][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.342823][ T25] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 202.360658][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.397027][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.421750][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.464129][ T1054] veth1_macvtap: left promiscuous mode [ 202.470088][ T1054] veth0_macvtap: left promiscuous mode [ 202.477578][ T1054] veth1_vlan: left promiscuous mode [ 202.483322][ T1054] veth0_vlan: left promiscuous mode [ 202.507569][ T25] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 202.530641][ T25] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 202.560653][ T25] usb 4-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config [ 202.586909][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 202.619647][ T25] usb 4-1: config 0 has no interface number 0 [ 202.639736][ T25] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 202.661152][ T25] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 202.685527][ T25] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 202.698844][ T25] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid maxpacket 35088, setting to 64 [ 202.712411][ T25] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 202.765237][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.781609][ T25] usb 4-1: config 0 descriptor?? [ 202.796768][ T25] gspca_main: spca561-2.14.0 probing abcd:cdee [ 203.030697][ T25] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 203.165964][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 203.210304][ T5281] usb 5-1: USB disconnect, device number 21 [ 203.235625][ T25] usb 4-1: MIDIStreaming interface descriptor not found [ 203.357237][ T25] usb 4-1: USB disconnect, device number 27 [ 203.561239][ T8113] netlink: 24 bytes leftover after parsing attributes in process `syz.4.639'. [ 203.828708][ T1054] team0 (unregistering): Port device team_slave_1 removed [ 203.880527][ T1054] team0 (unregistering): Port device team_slave_0 removed [ 203.887875][ T5238] Bluetooth: hci4: command tx timeout [ 203.895230][ T8114] netlink: 80 bytes leftover after parsing attributes in process `syz.4.639'. [ 203.982931][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 203.990624][ T5282] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 204.156772][ T5282] usb 4-1: Using ep0 maxpacket: 16 [ 204.165856][ T5282] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 204.179732][ T5282] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.196525][ T5282] usb 4-1: config 0 interface 0 has no altsetting 0 [ 204.207915][ T5282] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 204.220916][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.240752][ T5282] usb 4-1: config 0 descriptor?? [ 204.665399][ T5282] elecom 0003:056E:011C.0007: item fetching failed at offset 0/5 [ 204.679840][ T5282] elecom 0003:056E:011C.0007: probe with driver elecom failed with error -22 [ 204.831599][ T8023] chnl_net:caif_netlink_parms(): no params data found [ 204.880218][ T5282] usb 4-1: USB disconnect, device number 28 [ 205.239707][ T8023] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.313467][ T8023] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.320732][ T8023] bridge_slave_0: entered allmulticast mode [ 205.376480][ T8023] bridge_slave_0: entered promiscuous mode [ 205.493172][ T8023] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.500365][ T8023] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.583058][ T8023] bridge_slave_1: entered allmulticast mode [ 205.590696][ T8023] bridge_slave_1: entered promiscuous mode [ 205.916071][ T8023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.974449][ T5238] Bluetooth: hci4: command tx timeout [ 206.029221][ T8023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.307868][ T8023] team0: Port device team_slave_0 added [ 206.339836][ T8023] team0: Port device team_slave_1 added [ 206.467456][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.480074][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.493060][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.519051][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.556780][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 206.568313][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.733469][ T1054] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.791005][ T8023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.798900][ T8023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.828066][ T8023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.853123][ T8023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.870388][ T8023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.911161][ T8023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.970467][ T1054] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.981899][ T5278] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 206.999439][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.009628][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.023045][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.031462][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.041080][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.043835][ T8166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.650'. [ 207.050231][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.135949][ T1054] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.189761][ T5278] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 207.202748][ T5278] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 207.210929][ T5278] usb 4-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config [ 207.254623][ T5278] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 207.275497][ T5278] usb 4-1: config 0 has no interface number 0 [ 207.281726][ T5278] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 207.299745][ T5278] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 207.321768][ T1054] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.328565][ T5278] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 207.367210][ T8023] hsr_slave_0: entered promiscuous mode [ 207.369352][ T5278] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid maxpacket 35088, setting to 64 [ 207.384535][ T8023] hsr_slave_1: entered promiscuous mode [ 207.393638][ T8023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.401400][ T8023] Cannot create hsr debugfs directory [ 207.433687][ T5278] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 207.453443][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.477165][ T5278] usb 4-1: config 0 descriptor?? [ 207.501691][ T5278] gspca_main: spca561-2.14.0 probing abcd:cdee [ 207.706114][ T5278] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 207.729334][ T5278] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.736845][ T5278] usb 4-1: MIDIStreaming interface descriptor not found [ 207.794147][ T5278] usb 4-1: USB disconnect, device number 29 [ 207.823910][ T8187] netlink: 'syz.4.651': attribute type 9 has an invalid length. [ 207.859200][ T8187] netlink: 134640 bytes leftover after parsing attributes in process `syz.4.651'. [ 207.957268][ T1054] erspan0: left allmulticast mode [ 207.962319][ T1054] erspan0: left promiscuous mode [ 207.972170][ T1054] bridge0: port 3(erspan0) entered disabled state [ 208.001619][ T1054] bridge_slave_1: left allmulticast mode [ 208.008421][ T1054] bridge_slave_1: left promiscuous mode [ 208.014699][ T1054] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.029762][ T1054] bridge_slave_0: left allmulticast mode [ 208.035556][ T1054] bridge_slave_0: left promiscuous mode [ 208.041189][ T1054] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.048695][ T5241] Bluetooth: hci4: command tx timeout [ 208.435676][ T1054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.444506][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 208.444522][ T29] audit: type=1326 audit(1728287927.006:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8194 comm="syz.3.653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb182b7dff9 code=0x0 [ 208.488648][ T1054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.503620][ T1054] bond0 (unregistering): Released all slaves [ 208.520838][ T1054] bond1 (unregistering): Released all slaves [ 208.603413][ T5241] Bluetooth: hci1: command tx timeout [ 208.893645][ T8159] chnl_net:caif_netlink_parms(): no params data found [ 209.088058][ T5241] Bluetooth: hci0: command tx timeout [ 209.138959][ T8215] netlink: 'syz.4.659': attribute type 9 has an invalid length. [ 209.154935][ T8215] netlink: 134640 bytes leftover after parsing attributes in process `syz.4.659'. [ 209.269412][ T8170] chnl_net:caif_netlink_parms(): no params data found [ 209.290893][ T8217] macvlan0: entered allmulticast mode [ 209.296465][ T8217] veth1_vlan: entered allmulticast mode [ 209.318461][ T8221] pim6reg: entered allmulticast mode [ 209.401354][ T8226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.563198][ T5229] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 209.607788][ T1054] hsr_slave_0: left promiscuous mode [ 209.622561][ T1054] hsr_slave_1: left promiscuous mode [ 209.630918][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.644033][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.660854][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.670039][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.725221][ T1054] veth1_macvtap: left promiscuous mode [ 209.730761][ T1054] veth0_macvtap: left promiscuous mode [ 209.736987][ T5229] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 209.737008][ T1054] veth1_vlan: left promiscuous mode [ 209.751790][ T1054] veth0_vlan: left promiscuous mode [ 209.753868][ T5229] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 209.765618][ T5229] usb 5-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config [ 209.776078][ T5229] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 209.785145][ T5229] usb 5-1: config 0 has no interface number 0 [ 209.791388][ T5229] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 209.801312][ T5229] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 209.822748][ T5229] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 209.842819][ T5229] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid maxpacket 35088, setting to 64 [ 209.859012][ T5229] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 209.874254][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.895314][ T5229] usb 5-1: config 0 descriptor?? [ 209.915115][ T5229] gspca_main: spca561-2.14.0 probing abcd:cdee [ 210.113159][ T5229] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 210.126241][ T5229] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.133841][ T5229] usb 5-1: MIDIStreaming interface descriptor not found [ 210.213364][ T5229] usb 5-1: USB disconnect, device number 23 [ 210.405973][ T1054] team0 (unregistering): Port device team_slave_1 removed [ 210.447690][ T1054] team0 (unregistering): Port device team_slave_0 removed [ 210.683066][ T5241] Bluetooth: hci1: command tx timeout [ 210.888220][ T8159] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.899424][ T8159] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.907147][ T8159] bridge_slave_0: entered allmulticast mode [ 210.918223][ T8159] bridge_slave_0: entered promiscuous mode [ 210.957837][ T8159] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.972899][ T8159] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.981423][ T8159] bridge_slave_1: entered allmulticast mode [ 210.988839][ T8159] bridge_slave_1: entered promiscuous mode [ 211.082065][ T8159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.095894][ T8245] binder: 8244:8245 ioctl 894b 20000c00 returned -22 [ 211.122965][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.130379][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.143172][ T8170] bridge_slave_0: entered allmulticast mode [ 211.157249][ T8170] bridge_slave_0: entered promiscuous mode [ 211.163051][ T5241] Bluetooth: hci0: command tx timeout [ 211.182140][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.190288][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.197964][ T8170] bridge_slave_1: entered allmulticast mode [ 211.205620][ T8170] bridge_slave_1: entered promiscuous mode [ 211.233113][ T8247] netlink: 'syz.3.667': attribute type 9 has an invalid length. [ 211.240777][ T8247] netlink: 134640 bytes leftover after parsing attributes in process `syz.3.667'. [ 211.286679][ T8159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.320372][ T8023] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.348731][ T8023] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.416058][ T8159] team0: Port device team_slave_0 added [ 211.438149][ T8023] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.455873][ T8159] team0: Port device team_slave_1 added [ 211.471475][ T8170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.484667][ T8170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.494728][ T8023] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.609649][ T8170] team0: Port device team_slave_0 added [ 211.618909][ T8170] team0: Port device team_slave_1 added [ 211.634346][ T8159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.649948][ T8159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.688438][ T8159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.709371][ T8159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.718677][ T8159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.756383][ T8159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.901245][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.908918][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.977666][ T8170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.033881][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.040858][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.086197][ T8170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.177695][ T8159] hsr_slave_0: entered promiscuous mode [ 212.194115][ T8159] hsr_slave_1: entered promiscuous mode [ 212.210171][ T8159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.242395][ T8159] Cannot create hsr debugfs directory [ 212.341444][ T8170] hsr_slave_0: entered promiscuous mode [ 212.359339][ T8170] hsr_slave_1: entered promiscuous mode [ 212.384668][ T8170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.430854][ T8170] Cannot create hsr debugfs directory [ 212.652880][ T5229] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 212.763709][ T5241] Bluetooth: hci1: command tx timeout [ 212.792064][ T8023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.835771][ T5229] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 212.862082][ T8023] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.870180][ T5229] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 212.881096][ T5229] usb 4-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config [ 212.892181][ T5229] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 212.919119][ T5229] usb 4-1: config 0 has no interface number 0 [ 212.943985][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.951111][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.963561][ T5229] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 212.982150][ T5229] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 212.995507][ T5229] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 213.016543][ T5229] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid maxpacket 35088, setting to 64 [ 213.043590][ T5229] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 213.071345][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.078494][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.079528][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.107898][ T5229] usb 4-1: config 0 descriptor?? [ 213.161307][ T8023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.163586][ T5229] gspca_main: spca561-2.14.0 probing abcd:cdee [ 213.188807][ T8023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.244125][ T5241] Bluetooth: hci0: command tx timeout [ 213.291357][ T8283] netlink: 'syz.4.675': attribute type 9 has an invalid length. [ 213.299176][ T8283] netlink: 134640 bytes leftover after parsing attributes in process `syz.4.675'. [ 213.301437][ T8023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.380831][ T5229] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 213.401822][ T5229] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.418374][ T5229] usb 4-1: MIDIStreaming interface descriptor not found [ 213.460020][ T8159] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.524510][ T5229] usb 4-1: USB disconnect, device number 30 [ 213.630740][ T8170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.679615][ T8159] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.697720][ T8159] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.735554][ T8159] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.794936][ T8170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.841544][ T8023] veth0_vlan: entered promiscuous mode [ 213.887818][ T8023] veth1_vlan: entered promiscuous mode [ 213.935856][ T8170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.046954][ T8170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.080604][ T8023] veth0_macvtap: entered promiscuous mode [ 214.098952][ T8023] veth1_macvtap: entered promiscuous mode [ 214.231046][ T8023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.243605][ T25] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 214.253820][ T8023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.272950][ T8023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.298709][ T8023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.329500][ T8023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.340292][ T8023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.356779][ T8023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.367911][ T8023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.380581][ T8023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.410122][ T8023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.421974][ T8023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.432447][ T8023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.449774][ T8023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.453315][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 214.461092][ T8023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.496805][ T25] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 214.500650][ T8023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.507276][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.545059][ T8023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.563050][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 214.580780][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.584721][ T8023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.596991][ T25] usb 4-1: config 0 descriptor?? [ 214.608362][ T8023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.630806][ T8159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.710641][ T8023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.733157][ T8023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.741893][ T8023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.767950][ T8023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.853057][ T5241] Bluetooth: hci1: command tx timeout [ 214.869739][ T8322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.874374][ T8159] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.893179][ T8322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.908209][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.915353][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.947872][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.956199][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.968433][ T25] usb 4-1: string descriptor 0 read error: -71 [ 214.980437][ T8170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.984072][ T25] hub 4-1:0.0: bad descriptor, ignoring hub [ 215.012770][ T25] hub 4-1:0.0: probe with driver hub failed with error -5 [ 215.058664][ T8170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.075158][ T8170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.077431][ T25] usb 4-1: USB disconnect, device number 31 [ 215.122835][ T8170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.333109][ T5241] Bluetooth: hci0: command tx timeout [ 215.368239][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.418142][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.435578][ T8159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.717981][ T8170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.734723][ T8170] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.747168][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.754334][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.768189][ T935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.785183][ T935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.809357][ T8159] veth0_vlan: entered promiscuous mode [ 215.837851][ T8159] veth1_vlan: entered promiscuous mode [ 215.890366][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.897544][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.981750][ T8159] veth0_macvtap: entered promiscuous mode [ 216.139307][ T8159] veth1_macvtap: entered promiscuous mode [ 216.240809][ T8159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.261065][ T8159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.266547][ T8363] netlink: 'syz.3.683': attribute type 9 has an invalid length. [ 216.271704][ T8159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.294777][ T8363] netlink: 134640 bytes leftover after parsing attributes in process `syz.3.683'. [ 216.306379][ T8159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.322312][ T8159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.323138][ T8366] binder: 8358:8366 ioctl c0306201 0 returned -14 [ 216.352187][ T8159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.378623][ T8159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.425165][ T8159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.446784][ T8159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.466176][ T8159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.495940][ T8159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.530106][ T8360] netlink: 88 bytes leftover after parsing attributes in process `syz.1.623'. [ 216.596919][ T8159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.628950][ T8159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.675865][ T8159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.694102][ T8159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.731255][ T8159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.751256][ T8159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.761669][ T8159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.773652][ T25] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 216.790665][ T8159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.811034][ T8159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.816735][ T8386] FAULT_INJECTION: forcing a failure. [ 216.816735][ T8386] name failslab, interval 1, probability 0, space 0, times 0 [ 216.822330][ T8159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.854325][ T8386] CPU: 1 UID: 0 PID: 8386 Comm: syz.4.686 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 216.864950][ T8386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.875023][ T8386] Call Trace: [ 216.878317][ T8386] [ 216.881258][ T8386] dump_stack_lvl+0x241/0x360 [ 216.885955][ T8386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.887165][ T8159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.891148][ T8386] ? __pfx__printk+0x10/0x10 [ 216.902942][ T8386] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 216.908497][ T8386] ? __pfx___might_resched+0x10/0x10 [ 216.913786][ T8386] should_fail_ex+0x3b0/0x4e0 [ 216.918469][ T8386] ? skb_clone+0x20c/0x390 [ 216.922887][ T8386] should_failslab+0xac/0x100 [ 216.927561][ T8386] ? skb_clone+0x20c/0x390 [ 216.931969][ T8386] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 216.937339][ T8386] skb_clone+0x20c/0x390 [ 216.941580][ T8386] netlink_trim+0x14a/0x220 [ 216.946084][ T8386] netlink_broadcast_filtered+0x76/0x12a0 [ 216.951801][ T8386] ? __pfx_lock_release+0x10/0x10 [ 216.956833][ T8386] nlmsg_notify+0xfb/0x1c0 [ 216.961250][ T8386] nf_tables_commit+0x7c59/0x91e0 [ 216.966294][ T8386] ? __pfx_nf_tables_commit+0x10/0x10 [ 216.971659][ T8386] ? free_large_kmalloc+0x105/0x1c0 [ 216.976856][ T8386] ? nf_tables_newrule+0x23cc/0x2980 [ 216.982135][ T8386] ? kfree+0x21c/0x440 [ 216.986200][ T8386] ? nft_trans_rule_add+0x30f/0x430 [ 216.991402][ T8386] ? nf_tables_newrule+0x2461/0x2980 [ 216.996691][ T8386] ? __pfx_nf_tables_newrule+0x10/0x10 [ 217.002158][ T8386] ? __nla_parse+0x40/0x60 [ 217.006571][ T8386] nfnetlink_rcv+0xc77/0x2ab0 [ 217.011270][ T8386] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 217.016407][ T8386] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.021600][ T8386] ? skb_clone+0x240/0x390 [ 217.026011][ T8386] ? __pfx_lock_release+0x10/0x10 [ 217.031041][ T8386] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.036240][ T8386] netlink_unicast+0x7f6/0x990 [ 217.041005][ T8386] ? __pfx_netlink_unicast+0x10/0x10 [ 217.046285][ T8386] ? __virt_addr_valid+0x183/0x530 [ 217.051391][ T8386] ? __check_object_size+0x48e/0x900 [ 217.056678][ T8386] netlink_sendmsg+0x8e4/0xcb0 [ 217.061440][ T8386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.066719][ T8386] ? aa_sock_msg_perm+0x91/0x160 [ 217.071660][ T8386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.076940][ T8386] __sock_sendmsg+0x221/0x270 [ 217.081615][ T8386] ____sys_sendmsg+0x52a/0x7e0 [ 217.086381][ T8386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.091671][ T8386] __sys_sendmsg+0x292/0x380 [ 217.096255][ T8386] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.101366][ T8386] ? __pfx_vfs_write+0x10/0x10 [ 217.106147][ T8386] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.112479][ T8386] ? do_syscall_64+0x100/0x230 [ 217.117239][ T8386] ? do_syscall_64+0xb6/0x230 [ 217.121914][ T8386] do_syscall_64+0xf3/0x230 [ 217.126409][ T8386] ? clear_bhb_loop+0x35/0x90 [ 217.131078][ T8386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.136967][ T8386] RIP: 0033:0x7ff5b8f7dff9 [ 217.141459][ T8386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.161060][ T8386] RSP: 002b:00007ff5b9d75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.169472][ T8386] RAX: ffffffffffffffda RBX: 00007ff5b9135f80 RCX: 00007ff5b8f7dff9 [ 217.177439][ T8386] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 217.185403][ T8386] RBP: 00007ff5b9d75090 R08: 0000000000000000 R09: 0000000000000000 [ 217.193365][ T8386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.201325][ T8386] R13: 0000000000000000 R14: 00007ff5b9135f80 R15: 00007ff5b925fa28 [ 217.209297][ T8386] [ 217.236837][ T8170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.269850][ T8170] veth0_vlan: entered promiscuous mode [ 217.343905][ T25] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 217.363692][ T25] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 217.366017][ T8159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.382648][ T25] usb 4-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config [ 217.389456][ T8159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.400421][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 217.401654][ T8159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.420626][ T8159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.471656][ T25] usb 4-1: config 0 has no interface number 0 [ 217.488799][ T25] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 217.502284][ T8170] veth1_vlan: entered promiscuous mode [ 217.525310][ T25] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 217.576510][ T25] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 217.610281][ T25] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid maxpacket 35088, setting to 64 [ 217.644792][ T8170] veth0_macvtap: entered promiscuous mode [ 217.665908][ T8170] veth1_macvtap: entered promiscuous mode [ 217.676581][ T25] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 217.707771][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.747754][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.767007][ T25] usb 4-1: config 0 descriptor?? [ 217.775402][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.786350][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.815631][ T25] gspca_main: spca561-2.14.0 probing abcd:cdee [ 217.823165][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.849377][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.878073][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.891542][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.905207][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.923494][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.948466][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.973933][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.998352][ T25] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 218.018774][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.035279][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.073590][ T25] usb 4-1: MIDIStreaming interface descriptor not found [ 218.092823][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.173750][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.227719][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.259425][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.300200][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.317743][ T25] usb 4-1: USB disconnect, device number 32 [ 218.322970][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.339271][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.371756][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.412812][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.441796][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.479495][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.492891][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.532434][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.552765][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.572767][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.582829][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.604238][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.628774][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.651423][ T8170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.671284][ T8170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.693343][ T8170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.702261][ T8170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.121268][ T8450] netlink: 'syz.0.692': attribute type 9 has an invalid length. [ 219.160432][ T8450] netlink: 134640 bytes leftover after parsing attributes in process `syz.0.692'. [ 219.191381][ T8443] input: syz0 as /devices/virtual/input/input24 [ 219.289922][ T8451] syzkaller0: entered promiscuous mode [ 219.306508][ T8451] syzkaller0: entered allmulticast mode [ 219.355193][ T8459] netlink: 'syz.0.694': attribute type 10 has an invalid length. [ 219.376548][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.384064][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.414467][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.421982][ T8459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.430943][ T8459] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.438258][ T8459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.473834][ T8459] team0: Port device bridge0 added [ 219.746558][ T8476] FAULT_INJECTION: forcing a failure. [ 219.746558][ T8476] name failslab, interval 1, probability 0, space 0, times 0 [ 219.784092][ T8476] CPU: 0 UID: 0 PID: 8476 Comm: syz.0.695 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 219.794720][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 219.804774][ T8476] Call Trace: [ 219.808042][ T8476] [ 219.810965][ T8476] dump_stack_lvl+0x241/0x360 [ 219.815640][ T8476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.820830][ T8476] ? __pfx__printk+0x10/0x10 [ 219.825423][ T8476] ? __kmalloc_noprof+0xb0/0x400 [ 219.830355][ T8476] ? __pfx___might_resched+0x10/0x10 [ 219.835644][ T8476] should_fail_ex+0x3b0/0x4e0 [ 219.840327][ T8476] ? skcipher_next_slow+0x117/0x480 [ 219.845516][ T8476] should_failslab+0xac/0x100 [ 219.850188][ T8476] ? skcipher_next_slow+0x117/0x480 [ 219.855381][ T8476] __kmalloc_noprof+0xd8/0x400 [ 219.860140][ T8476] ? __pfx___might_resched+0x10/0x10 [ 219.865421][ T8476] skcipher_next_slow+0x117/0x480 [ 219.870440][ T8476] skcipher_walk_next+0x634/0xba0 [ 219.875468][ T8476] ecb_encrypt+0x2c4/0x390 [ 219.879889][ T8476] ? __pfx_ecb_encrypt+0x10/0x10 [ 219.885188][ T8476] ? rcu_is_watching+0x15/0xb0 [ 219.889949][ T8476] ? sock_kzfree_s+0x28/0x60 [ 219.894539][ T8476] ? simd_skcipher_encrypt+0x55/0x130 [ 219.899914][ T8476] ? irq_fpu_usable+0x87/0xa0 [ 219.904581][ T8476] ? cryptd_skcipher_child+0xd/0x40 [ 219.909775][ T8476] skcipher_recvmsg+0xbdd/0x1230 [ 219.914714][ T8476] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 219.920076][ T8476] ? aa_sock_msg_perm+0x91/0x160 [ 219.925007][ T8476] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 219.930288][ T8476] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 219.935652][ T8476] sock_recvmsg+0x22f/0x280 [ 219.940156][ T8476] __sys_recvfrom+0x246/0x3d0 [ 219.944827][ T8476] ? __pfx___sys_recvfrom+0x10/0x10 [ 219.950036][ T8476] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 219.956013][ T8476] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.962340][ T8476] __x64_sys_recvfrom+0xde/0x100 [ 219.967270][ T8476] do_syscall_64+0xf3/0x230 [ 219.971763][ T8476] ? clear_bhb_loop+0x35/0x90 [ 219.976434][ T8476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.982326][ T8476] RIP: 0033:0x7f143697fdc4 [ 219.986738][ T8476] Code: 89 4c 24 1c e8 ed 5a 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 5b 02 00 48 8b 04 [ 220.006338][ T8476] RSP: 002b:00007f143785fed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 220.014746][ T8476] RAX: ffffffffffffffda RBX: 00007f143785ffc0 RCX: 00007f143697fdc4 [ 220.022715][ T8476] RDX: 0000000000001000 RSI: 00007f1437860010 RDI: 0000000000000004 [ 220.030677][ T8476] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.038638][ T8476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 220.046604][ T8476] R13: 00007f143785ff68 R14: 00007f1437860010 R15: 0000000000000000 [ 220.054581][ T8476] [ 220.474969][ T8482] kvm: kvm [8481]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xaf35000000eb [ 220.484715][ T8482] kvm: kvm [8481]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xaf350000082a [ 220.499431][ T8482] kvm: kvm [8481]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xaf350000082a [ 220.515670][ T8482] kvm: kvm [8481]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xaf35000008a3 [ 220.525506][ T8482] kvm: kvm [8481]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xaf3500000078 [ 220.562838][ T25] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 220.733632][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 220.746514][ T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 220.755103][ T25] usb 5-1: config 0 has no interface number 0 [ 220.761227][ T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.780316][ T25] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 220.805822][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.820722][ T25] usb 5-1: config 0 descriptor?? [ 220.850033][ T25] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 221.218060][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 221.227212][ T5229] usb 5-1: USB disconnect, device number 24 [ 221.236778][ T8491] iowarrior 5-1:0.1: Error -19 while submitting URB [ 221.264691][ T5229] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 222.464002][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.497707][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.612123][ T935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.649004][ T935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.659504][ T8509] netlink: 'syz.4.703': attribute type 9 has an invalid length. [ 222.661980][ T8511] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 222.678643][ T8511] netlink: 'syz.3.704': attribute type 2 has an invalid length. [ 222.686890][ T8509] netlink: 134640 bytes leftover after parsing attributes in process `syz.4.703'. [ 222.922463][ T8516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.003078][ T8516] netlink: 44 bytes leftover after parsing attributes in process `syz.3.705'. [ 223.147758][ T8532] pimreg: entered allmulticast mode [ 223.192906][ T938] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 223.200571][ T5278] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 223.225549][ T8533] netlink: 'syz.2.709': attribute type 10 has an invalid length. [ 223.260205][ T8533] team0: Port device netdevsim0 added [ 223.289521][ T8531] pimreg: left allmulticast mode [ 223.364813][ T5278] usb 5-1: unable to get BOS descriptor or descriptor too short [ 223.374263][ T5278] usb 5-1: config 3 has an invalid interface number: 137 but max is 0 [ 223.382795][ T938] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 223.409163][ T5278] usb 5-1: config 3 has no interface number 0 [ 223.419542][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.429260][ T5278] usb 5-1: config 3 interface 137 has no altsetting 0 [ 223.436198][ T938] usb 1-1: Product: syz [ 223.453094][ T938] usb 1-1: Manufacturer: syz [ 223.458305][ T938] usb 1-1: SerialNumber: syz [ 223.464699][ T5278] usb 5-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=78.12 [ 223.477632][ T938] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 223.495917][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.511278][ T5278] usb 5-1: Product: syz [ 223.515961][ T5278] usb 5-1: Manufacturer: syz [ 223.527327][ T5229] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 223.541032][ T5278] usb 5-1: SerialNumber: syz [ 223.741500][ T8515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.765708][ T8515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.795348][ T8537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.827931][ T5278] ldusb 5-1:3.137: Interrupt in endpoint not found [ 223.836267][ T5278] usb 5-1: USB disconnect, device number 25 [ 224.055603][ T8542] netlink: 'syz.1.713': attribute type 10 has an invalid length. [ 224.071430][ T8542] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.713'. [ 224.163261][ T5278] usb 1-1: USB disconnect, device number 36 [ 224.609666][ T5229] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 224.637328][ T5229] ath9k_htc: Failed to initialize the device [ 224.665308][ T5278] usb 1-1: ath9k_htc: USB layer deinitialized [ 225.079479][ T8567] vcan1: entered promiscuous mode [ 225.091775][ T8567] vcan1: entered allmulticast mode [ 225.283704][ T8574] vcan1: entered promiscuous mode [ 225.292645][ T8574] vcan1: entered allmulticast mode [ 225.783649][ T5229] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 226.046127][ T5229] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 226.076763][ T5229] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 226.086467][ T5229] usb 4-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config [ 226.096937][ T5229] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 226.106040][ T5229] usb 4-1: config 0 has no interface number 0 [ 226.118838][ T5229] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 226.129281][ T5229] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 226.140767][ T5229] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 226.150661][ T5229] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid maxpacket 35088, setting to 64 [ 226.161797][ T5229] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 226.171036][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.192093][ T5229] usb 4-1: config 0 descriptor?? [ 226.204498][ T5229] gspca_main: spca561-2.14.0 probing abcd:cdee [ 226.217471][ T8596] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 226.335935][ T8600] vlan1: entered promiscuous mode [ 226.347501][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 226.359351][ T938] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 226.368823][ T8598] vlan1: left promiscuous mode [ 226.412081][ T5229] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 226.423995][ T5229] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 226.434151][ T5229] usb 4-1: MIDIStreaming interface descriptor not found [ 226.493057][ T5229] usb 4-1: USB disconnect, device number 33 [ 226.533014][ T938] usb 1-1: Using ep0 maxpacket: 16 [ 226.547767][ T938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.590838][ T938] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 226.628045][ T938] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.01 [ 226.639359][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.649565][ T938] usb 1-1: config 0 descriptor?? [ 226.812955][ T5290] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 226.921841][ T938] usb 1-1: string descriptor 0 read error: -71 [ 226.932978][ T938] usb 1-1: USB disconnect, device number 37 [ 226.964345][ T5290] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 226.972923][ T5290] usb 3-1: config 4 has no interface number 0 [ 226.980966][ T5290] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 226.990610][ T5290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.003103][ T5290] usb 3-1: Product: syz [ 227.007303][ T5290] usb 3-1: Manufacturer: syz [ 227.022231][ T5290] usb 3-1: SerialNumber: syz [ 227.061198][ T5290] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 227.246912][ T8603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.277977][ T8603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.516239][ T5290] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 227.552885][ T5290] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 227.609159][ T8622] syzkaller1: entered promiscuous mode [ 227.645983][ T8622] syzkaller1: entered allmulticast mode [ 227.764434][ T5290] usb 3-1: USB disconnect, device number 28 [ 228.036966][ T8641] netlink: 'syz.4.743': attribute type 1 has an invalid length. [ 228.104573][ T8641] netlink: 'syz.4.743': attribute type 2 has an invalid length. [ 228.116130][ T8641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.743'. [ 228.383310][ T81] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 228.482969][ T8645] FAULT_INJECTION: forcing a failure. [ 228.482969][ T8645] name failslab, interval 1, probability 0, space 0, times 0 [ 228.510101][ T8645] CPU: 1 UID: 0 PID: 8645 Comm: syz.1.745 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 228.520804][ T8645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 228.530850][ T8645] Call Trace: [ 228.534294][ T8645] [ 228.537216][ T8645] dump_stack_lvl+0x241/0x360 [ 228.541882][ T8645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.547071][ T8645] ? __pfx__printk+0x10/0x10 [ 228.551654][ T8645] ? __kmalloc_node_noprof+0xb7/0x440 [ 228.557035][ T8645] ? __pfx___might_resched+0x10/0x10 [ 228.562323][ T8645] ? __asan_memset+0x23/0x50 [ 228.566914][ T8645] should_fail_ex+0x3b0/0x4e0 [ 228.571590][ T8645] should_failslab+0xac/0x100 [ 228.576265][ T8645] __kmalloc_node_noprof+0xdf/0x440 [ 228.581489][ T8645] ? __kvmalloc_node_noprof+0x72/0x190 [ 228.587058][ T8645] __kvmalloc_node_noprof+0x72/0x190 [ 228.592342][ T8645] rhashtable_init_noprof+0x534/0xa60 [ 228.597723][ T8645] nft_rhash_init+0x138/0x430 [ 228.602424][ T8645] ? __pfx_nft_rhash_init+0x10/0x10 [ 228.607620][ T8645] ? lockdep_hardirqs_on+0x99/0x150 [ 228.612833][ T8645] ? __pfx_nft_rhash_key+0x10/0x10 [ 228.617962][ T8645] ? __pfx_nft_rhash_obj+0x10/0x10 [ 228.623068][ T8645] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 228.628173][ T8645] ? nf_tables_newset+0x17de/0x2ee0 [ 228.633363][ T8645] ? kfree+0x1a0/0x440 [ 228.637419][ T8645] ? nf_tables_newset+0x17de/0x2ee0 [ 228.642702][ T8645] nf_tables_newset+0x2218/0x2ee0 [ 228.647743][ T8645] ? __pfx_nf_tables_newset+0x10/0x10 [ 228.653109][ T8645] ? __pfx_lock_release+0x10/0x10 [ 228.658141][ T8645] ? __nla_parse+0x40/0x60 [ 228.662550][ T8645] nfnetlink_rcv+0x14dc/0x2ab0 [ 228.667322][ T8645] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 228.672443][ T8645] ? netlink_deliver_tap+0x2e/0x1b0 [ 228.677638][ T8645] ? skb_clone+0x240/0x390 [ 228.682037][ T8645] ? __pfx_lock_release+0x10/0x10 [ 228.687067][ T8645] ? netlink_deliver_tap+0x2e/0x1b0 [ 228.692262][ T8645] netlink_unicast+0x7f6/0x990 [ 228.697019][ T8645] ? __pfx_netlink_unicast+0x10/0x10 [ 228.702293][ T8645] ? __virt_addr_valid+0x183/0x530 [ 228.707413][ T8645] ? __check_object_size+0x48e/0x900 [ 228.712690][ T8645] netlink_sendmsg+0x8e4/0xcb0 [ 228.717483][ T8645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.722765][ T8645] ? aa_sock_msg_perm+0x91/0x160 [ 228.727731][ T8645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.733004][ T8645] __sock_sendmsg+0x221/0x270 [ 228.737678][ T8645] ____sys_sendmsg+0x52a/0x7e0 [ 228.742520][ T8645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.747823][ T8645] __sys_sendmsg+0x292/0x380 [ 228.752399][ T8645] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.757501][ T8645] ? __pfx_vfs_write+0x10/0x10 [ 228.762280][ T8645] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 228.768598][ T8645] ? do_syscall_64+0x100/0x230 [ 228.773352][ T8645] ? do_syscall_64+0xb6/0x230 [ 228.778016][ T8645] do_syscall_64+0xf3/0x230 [ 228.782504][ T8645] ? clear_bhb_loop+0x35/0x90 [ 228.787184][ T8645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.793093][ T8645] RIP: 0033:0x7fbec6b7dff9 [ 228.797494][ T8645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.817202][ T8645] RSP: 002b:00007fbec7935038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.825604][ T8645] RAX: ffffffffffffffda RBX: 00007fbec6d35f80 RCX: 00007fbec6b7dff9 [ 228.833564][ T8645] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 228.841523][ T8645] RBP: 00007fbec7935090 R08: 0000000000000000 R09: 0000000000000000 [ 228.849480][ T8645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.857436][ T8645] R13: 0000000000000000 R14: 00007fbec6d35f80 R15: 00007fbec6e5fa28 [ 228.865402][ T8645] [ 228.868532][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.914033][ T81] usb 4-1: Using ep0 maxpacket: 16 [ 228.941550][ T81] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 228.951816][ T81] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.011452][ T8650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.028326][ T8650] netlink: 44 bytes leftover after parsing attributes in process `syz.4.747'. [ 229.048091][ T81] usb 4-1: Product: syz [ 229.068371][ T81] usb 4-1: Manufacturer: syz [ 229.078519][ T81] usb 4-1: SerialNumber: syz [ 229.103590][ T81] usb 4-1: config 0 descriptor?? [ 229.115206][ T81] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 229.132572][ T81] usb 4-1: Detected FT232B [ 229.352989][ T5284] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 229.411617][ T8640] xt_hashlimit: max too large, truncated to 1048576 [ 229.430400][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 229.472477][ T81] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 229.472889][ T5290] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 229.482921][ T81] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 229.513798][ T81] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 229.534428][ T5284] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 229.543350][ T5284] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 229.551575][ T5284] usb 3-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config [ 229.564736][ T81] usb 4-1: USB disconnect, device number 34 [ 229.593839][ T81] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 229.610065][ T81] ftdi_sio 4-1:0.0: device disconnected [ 229.625475][ T5284] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 229.654294][ T5284] usb 3-1: config 0 has no interface number 0 [ 229.670982][ T5284] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 229.697822][ T5290] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 229.714460][ T5284] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 229.723483][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.743235][ T5284] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 229.770426][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.772852][ T5284] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid maxpacket 35088, setting to 64 [ 229.808943][ T5290] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 229.809606][ T5284] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 229.858880][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.878401][ T5284] usb 3-1: config 0 descriptor?? [ 229.893565][ T5290] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 229.900617][ T5284] gspca_main: spca561-2.14.0 probing abcd:cdee [ 229.902628][ T5290] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 229.992778][ T5290] usb 2-1: Manufacturer: syz [ 230.070058][ T5290] usb 2-1: config 0 descriptor?? [ 230.100875][ T5284] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 230.141705][ T5284] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 230.165423][ T5284] usb 3-1: MIDIStreaming interface descriptor not found [ 230.299835][ T5284] usb 3-1: USB disconnect, device number 29 [ 230.327830][ T5241] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 230.509490][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 230.537473][ T8680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.620657][ T5290] appleir 0003:05AC:8243.0008: item fetching failed at offset 0/1 [ 230.655121][ T5290] appleir 0003:05AC:8243.0008: parse failed [ 230.661317][ T5290] appleir 0003:05AC:8243.0008: probe with driver appleir failed with error -22 [ 230.695141][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 230.803299][ T8684] sctp: [Deprecated]: syz.4.757 (pid 8684) Use of int in max_burst socket option deprecated. [ 230.803299][ T8684] Use struct sctp_assoc_value instead [ 230.821736][ T8685] ------------[ cut here ]------------ [ 230.828517][ T8685] WARNING: CPU: 1 PID: 8685 at mm/huge_memory.c:1602 copy_huge_pmd+0x102c/0x1c60 [ 230.838861][ T8685] Modules linked in: [ 230.843686][ T8685] CPU: 1 UID: 0 PID: 8685 Comm: syz.3.755 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 230.854431][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 230.864735][ T8685] RIP: 0010:copy_huge_pmd+0x102c/0x1c60 [ 230.870324][ T8685] Code: ff 90 0f 0b 90 e9 2e f5 ff ff e8 2f a4 92 ff 48 ff cb e9 0f f7 ff ff e8 22 a4 92 ff 48 ff cb e9 8a f7 ff ff e8 15 a4 92 ff 90 <0f> 0b 90 e9 11 fd ff ff 4c 8d ac 24 00 01 00 00 48 b8 06 fe ff ff [ 230.890232][ T8685] RSP: 0018:ffffc90003ad7160 EFLAGS: 00010283 [ 230.896420][ T8685] RAX: ffffffff8202425b RBX: ffff88804c9c8210 RCX: 0000000000040000 [ 230.904496][ T8685] RDX: ffffc9000a647000 RSI: 00000000000086c3 RDI: 00000000000086c4 [ 230.912524][ T8685] RBP: ffffc90003ad72e8 R08: ffffffff82024126 R09: fffff5200075ae1c [ 230.920710][ T8685] R10: dffffc0000000000 R11: fffff5200075ae1c R12: ffff88802d6e5360 [ 230.929390][ T8685] R13: d7ffe7fff0d7fe02 R14: 0000000000000020 R15: ffff88802d465540 [ 230.938512][ T8685] FS: 00007fb1838f26c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 230.948494][ T8685] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.955189][ T8685] CR2: 00007f143783ff98 CR3: 000000006e17e000 CR4: 00000000003526f0 [ 230.963277][ T8685] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 230.971273][ T8685] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 230.979314][ T8685] Call Trace: [ 230.982594][ T8685] [ 230.985596][ T8685] ? __warn+0x168/0x4e0 [ 230.989753][ T8685] ? copy_huge_pmd+0x102c/0x1c60 [ 230.994728][ T8685] ? report_bug+0x2b3/0x500 [ 230.999238][ T8685] ? copy_huge_pmd+0x102c/0x1c60 [ 231.004643][ T8685] ? handle_bug+0x60/0x90 [ 231.008967][ T8685] ? exc_invalid_op+0x1a/0x50 [ 231.013837][ T8685] ? asm_exc_invalid_op+0x1a/0x20 [ 231.018879][ T8685] ? copy_huge_pmd+0xef6/0x1c60 [ 231.023753][ T8685] ? copy_huge_pmd+0x102b/0x1c60 [ 231.028698][ T8685] ? copy_huge_pmd+0x102c/0x1c60 [ 231.033786][ T8685] ? __pfx_copy_huge_pmd+0x10/0x10 [ 231.038889][ T8685] ? copy_pmd_range+0x7b35/0x85f0 [ 231.044401][ T8685] ? __pfx___might_resched+0x10/0x10 [ 231.050128][ T8685] ? __page_table_check_ptes_set+0x30f/0x410 [ 231.056160][ T8685] ? do_raw_spin_unlock+0x13c/0x8b0 [ 231.061355][ T8685] copy_pmd_range+0x425/0x85f0 [ 231.066172][ T8685] ? __pfx_validate_chain+0x10/0x10 [ 231.071392][ T8685] ? mas_destroy+0x197c/0x1fe0 [ 231.076225][ T8685] ? __pfx_copy_pmd_range+0x10/0x10 [ 231.081452][ T8685] ? mark_lock+0x9a/0x360 [ 231.085900][ T8685] ? __lock_acquire+0x1384/0x2050 [ 231.091031][ T8685] ? mas_wr_store_type+0xda8/0x1bc0 [ 231.096284][ T8685] copy_page_range+0x99f/0xe90 [ 231.101050][ T8685] ? __pfx_copy_page_range+0x10/0x10 [ 231.106456][ T8685] ? __pfx_up_write+0x10/0x10 [ 231.111131][ T8685] copy_mm+0x11fb/0x1f40 [ 231.115430][ T8685] ? __pfx_copy_mm+0x10/0x10 [ 231.120018][ T8685] ? __init_rwsem+0x122/0x160 [ 231.124720][ T8685] ? copy_signal+0x52a/0x650 [ 231.129321][ T8685] copy_process+0x1845/0x3d50 [ 231.134042][ T8685] ? copy_process+0x9fa/0x3d50 [ 231.138824][ T8685] ? __pfx_copy_process+0x10/0x10 [ 231.144340][ T8685] ? futex_wait+0x285/0x360 [ 231.149266][ T8685] kernel_clone+0x226/0x8f0 [ 231.153812][ T8685] ? __pfx_kernel_clone+0x10/0x10 [ 231.158846][ T8685] __x64_sys_clone+0x258/0x2a0 [ 231.163723][ T8685] ? __pfx___x64_sys_clone+0x10/0x10 [ 231.169073][ T8685] ? do_syscall_64+0x100/0x230 [ 231.173882][ T8685] ? do_syscall_64+0xb6/0x230 [ 231.178585][ T8685] do_syscall_64+0xf3/0x230 [ 231.183181][ T8685] ? clear_bhb_loop+0x35/0x90 [ 231.187865][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.193808][ T8685] RIP: 0033:0x7fb182b7dff9 [ 231.198239][ T8685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.217941][ T8685] RSP: 002b:00007fb1838f1fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 231.226480][ T8685] RAX: ffffffffffffffda RBX: 00007fb182d36130 RCX: 00007fb182b7dff9 [ 231.234488][ T8685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000082020000 [ 231.242465][ T8685] RBP: 00007fb182bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 231.251019][ T8685] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 231.259454][ T8685] R13: 0000000000000000 R14: 00007fb182d36130 R15: 00007fb182e5fa28 [ 231.267484][ T8685] [ 231.270505][ T8685] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 231.277782][ T8685] CPU: 1 UID: 0 PID: 8685 Comm: syz.3.755 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 231.288437][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 231.298474][ T8685] Call Trace: [ 231.301747][ T8685] [ 231.304665][ T8685] dump_stack_lvl+0x241/0x360 [ 231.309333][ T8685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.314516][ T8685] ? __pfx__printk+0x10/0x10 [ 231.319100][ T8685] ? vscnprintf+0x5d/0x90 [ 231.323420][ T8685] panic+0x349/0x880 [ 231.327311][ T8685] ? __warn+0x177/0x4e0 [ 231.331466][ T8685] ? __pfx_panic+0x10/0x10 [ 231.335969][ T8685] __warn+0x34b/0x4e0 [ 231.339937][ T8685] ? copy_huge_pmd+0x102c/0x1c60 [ 231.344862][ T8685] report_bug+0x2b3/0x500 [ 231.349182][ T8685] ? copy_huge_pmd+0x102c/0x1c60 [ 231.354113][ T8685] handle_bug+0x60/0x90 [ 231.358339][ T8685] exc_invalid_op+0x1a/0x50 [ 231.362869][ T8685] asm_exc_invalid_op+0x1a/0x20 [ 231.367759][ T8685] RIP: 0010:copy_huge_pmd+0x102c/0x1c60 [ 231.373302][ T8685] Code: ff 90 0f 0b 90 e9 2e f5 ff ff e8 2f a4 92 ff 48 ff cb e9 0f f7 ff ff e8 22 a4 92 ff 48 ff cb e9 8a f7 ff ff e8 15 a4 92 ff 90 <0f> 0b 90 e9 11 fd ff ff 4c 8d ac 24 00 01 00 00 48 b8 06 fe ff ff [ 231.392922][ T8685] RSP: 0018:ffffc90003ad7160 EFLAGS: 00010283 [ 231.399008][ T8685] RAX: ffffffff8202425b RBX: ffff88804c9c8210 RCX: 0000000000040000 [ 231.406968][ T8685] RDX: ffffc9000a647000 RSI: 00000000000086c3 RDI: 00000000000086c4 [ 231.414928][ T8685] RBP: ffffc90003ad72e8 R08: ffffffff82024126 R09: fffff5200075ae1c [ 231.422889][ T8685] R10: dffffc0000000000 R11: fffff5200075ae1c R12: ffff88802d6e5360 [ 231.430848][ T8685] R13: d7ffe7fff0d7fe02 R14: 0000000000000020 R15: ffff88802d465540 [ 231.438829][ T8685] ? copy_huge_pmd+0xef6/0x1c60 [ 231.443678][ T8685] ? copy_huge_pmd+0x102b/0x1c60 [ 231.448639][ T8685] ? __pfx_copy_huge_pmd+0x10/0x10 [ 231.453768][ T8685] ? copy_pmd_range+0x7b35/0x85f0 [ 231.458791][ T8685] ? __pfx___might_resched+0x10/0x10 [ 231.464072][ T8685] ? __page_table_check_ptes_set+0x30f/0x410 [ 231.470047][ T8685] ? do_raw_spin_unlock+0x13c/0x8b0 [ 231.475238][ T8685] copy_pmd_range+0x425/0x85f0 [ 231.479992][ T8685] ? __pfx_validate_chain+0x10/0x10 [ 231.485190][ T8685] ? mas_destroy+0x197c/0x1fe0 [ 231.489942][ T8685] ? __pfx_copy_pmd_range+0x10/0x10 [ 231.495122][ T8685] ? mark_lock+0x9a/0x360 [ 231.499535][ T8685] ? __lock_acquire+0x1384/0x2050 [ 231.504575][ T8685] ? mas_wr_store_type+0xda8/0x1bc0 [ 231.509795][ T8685] copy_page_range+0x99f/0xe90 [ 231.514584][ T8685] ? __pfx_copy_page_range+0x10/0x10 [ 231.519873][ T8685] ? __pfx_up_write+0x10/0x10 [ 231.524561][ T8685] copy_mm+0x11fb/0x1f40 [ 231.528819][ T8685] ? __pfx_copy_mm+0x10/0x10 [ 231.533906][ T8685] ? __init_rwsem+0x122/0x160 [ 231.538588][ T8685] ? copy_signal+0x52a/0x650 [ 231.543177][ T8685] copy_process+0x1845/0x3d50 [ 231.547864][ T8685] ? copy_process+0x9fa/0x3d50 [ 231.552630][ T8685] ? __pfx_copy_process+0x10/0x10 [ 231.557656][ T8685] ? futex_wait+0x285/0x360 [ 231.562159][ T8685] kernel_clone+0x226/0x8f0 [ 231.566675][ T8685] ? __pfx_kernel_clone+0x10/0x10 [ 231.571708][ T8685] __x64_sys_clone+0x258/0x2a0 [ 231.576467][ T8685] ? __pfx___x64_sys_clone+0x10/0x10 [ 231.581763][ T8685] ? do_syscall_64+0x100/0x230 [ 231.586519][ T8685] ? do_syscall_64+0xb6/0x230 [ 231.591186][ T8685] do_syscall_64+0xf3/0x230 [ 231.595768][ T8685] ? clear_bhb_loop+0x35/0x90 [ 231.600431][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.606318][ T8685] RIP: 0033:0x7fb182b7dff9 [ 231.610734][ T8685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.630358][ T8685] RSP: 002b:00007fb1838f1fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 231.638766][ T8685] RAX: ffffffffffffffda RBX: 00007fb182d36130 RCX: 00007fb182b7dff9 [ 231.646732][ T8685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000082020000 [ 231.654696][ T8685] RBP: 00007fb182bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 231.662654][ T8685] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 231.670634][ T8685] R13: 0000000000000000 R14: 00007fb182d36130 R15: 00007fb182e5fa28 [ 231.678609][ T8685] [ 231.682056][ T8685] Kernel Offset: disabled [ 231.686799][ T8685] Rebooting in 86400 seconds..