last executing test programs: 4m29.472731978s ago: executing program 1 (id=2141): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40282, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5839, 0x0) 4m28.800331217s ago: executing program 1 (id=2142): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x6000}, &(0x7f00000001c0)=0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e283557d24880000000000009f3000000000", @ANYRES16=r5, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="080026006c0900000800a1000000000008002700000000000500180127000000"], 0x3c}}, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000300)={{0x3, 0x0, 0x80, {0x8080000, 0x80a0000}}, "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", "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"}) unshare(0x8000480) r8 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) fcntl$getflags(r8, 0x401) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r9, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r10, 0x1}}, 0x18) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008004"]) 4m27.501806355s ago: executing program 1 (id=2145): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mlock2(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180), &(0x7f00000001c0)) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x40}, {r3, 0x80}, {}], 0x35, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x9) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) iopl(0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588d0000000109022d00010000000009040000030b08000009058d67c87d2a00000905050200000000000905"], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000840)={{0x400007b, 0x4, 0x4, 0x4, 'syz0\x00', 0x6}, 0x1, 0x20000000, 0x6, r5, 0x0, 0x4, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000ac0)={0x6, 0x1, 0x9, 0x10, '\x00', 0x35}) 4m23.298494796s ago: executing program 1 (id=2155): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 4m23.152937131s ago: executing program 1 (id=2156): io_setup(0x5, &(0x7f0000000500)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40282, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08cf10"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0x4a) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$FS_IOC_RESVSP(r1, 0x402c5839, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x400}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, r4, &(0x7f0000000200)="91", 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1, 0x800, r4, 0x0, 0x0, 0x4}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m22.942674354s ago: executing program 1 (id=2157): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32315258}}) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="4dfb04f0d556f1327da4b2dd", 0xc}, 0x1, 0x0, 0x0, 0x20040040}, 0xee) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, r6, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x998f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000010) close(r3) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 4m22.072238962s ago: executing program 32 (id=2157): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32315258}}) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="4dfb04f0d556f1327da4b2dd", 0xc}, 0x1, 0x0, 0x0, 0x20040040}, 0xee) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, r6, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x998f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000010) close(r3) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 27.388473721s ago: executing program 0 (id=2965): r0 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x43, 0xd3, 0x78}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000380)=0x3) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x24}, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0x6, 0x0, 0x1, 0x81, @time={0xffff, 0x80000001}, {0x8, 0x30}, {0x2}, @time=@tick=0x1}], 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x1428, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000040), 0xffff5567, 0x200) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 16.397587261s ago: executing program 2 (id=2995): madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x65) sigaltstack(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = openat$uinput(0xffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) openat$dir(0xffffffffffffff9c, 0x0, 0x2000000, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}, {&(0x7f0000000180)=' E', 0x2}], 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000140)={r5, 0x1, r2, 0x6, 0x80000}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r6}) keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r7, 0x0) add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r8, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 11.698401213s ago: executing program 2 (id=3002): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={0x0, 0x9}, 0x8) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) openat$nci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) 9.672734952s ago: executing program 4 (id=3004): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000003c0)) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x5) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0xa, 0xa}) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000380), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000500)={r3, r5, r4, 0x0, 0x0, 0x0, 0x0}) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x10) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000200)={r3, r7, r8, 0x0, 0x80000003, 0x80000003, 0x0, 0x0, 0x5, 0xe, 0xc, 0x31e}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "5c888596a7776a389ac2ea21d00764a17a73a27a4525d641a8f00302bede855f", "f4ed38bb9511e8c874b4607d81a785604182f7466d190929c3af91b0895c76ef", "b03008606461cc0d6e0bbd73506cdd5b87733deb86d4a6ad26ed7777789bb5c0", "6e17e0e332771caff828fb7bdc2a3f20ad0d986e623ec04440432a4f9f14b32c", "90f26a2be402aa371e6b6fb7ed5d133a1676f722dbb6eae047fd008a86abd598", "8611e083ed2bcfa5a00b8bee", 0x2, 0xa6e9, 0x6, 0x5, 0xfffffffa}}) 9.304144919s ago: executing program 3 (id=3007): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000003c0)) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x5) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0xa, 0xa}) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000380), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000500)={r3, r5, r4, 0x0, 0x0, 0x0, 0x0}) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x10) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000200)={r3, r7, r8, 0x0, 0x80000003, 0x80000003, 0x0, 0x0, 0x5, 0xe, 0xc, 0x31e}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "5c888596a7776a389ac2ea21d00764a17a73a27a4525d641a8f00302bede855f", "f4ed38bb9511e8c874b4607d81a785604182f7466d190929c3af91b0895c76ef", "b03008606461cc0d6e0bbd73506cdd5b87733deb86d4a6ad26ed7777789bb5c0", "6e17e0e332771caff828fb7bdc2a3f20ad0d986e623ec04440432a4f9f14b32c", "90f26a2be402aa371e6b6fb7ed5d133a1676f722dbb6eae047fd008a86abd598", "8611e083ed2bcfa5a00b8bee", 0x2, 0xa6e9, 0x6, 0x5, 0xfffffffa}}) 9.302917343s ago: executing program 4 (id=3008): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e26, @local}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, 0x0, 0x43) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xe042, 0x0) accept4(r0, &(0x7f0000000240)=@sco={0x1f, @fixed}, &(0x7f00000002c0)=0x80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000008387821d1000010000000015000000000108000a20000000000a0104e3ffffff00000000010080030900010073797a3e0000001a2c000800030a01010001c600000000000000010000000900010073798796000000000900030073797a320000000094000000160a010400000000000000000100000008000b40000800206c000480340001800b000100657874686472000024000280080001400000000c08000340000000000800044000ebff210500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000001208000640000000030900010073797a3000000000140000001100010000000000000000000700000ab8b98d47edc42641f7692909a2b61e8be527e92209c8ca411425ec706cc6d332b6fdcd317c14fe578853818ddaf64abc577e63b07b2b41f0843192f12704288a076ec1d420befccf2315f6112a1707f068a5aea87019b9e66f2344a22d3c0fac9c221a40d4a58563aec66e2e048d6ace0d155fc860"], 0x108}}, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) connect$unix(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7, r7}, 0x38) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, &(0x7f0000000040)=""/4092, 0xffc) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"]) r9 = socket$inet(0x2, 0x6, 0x2c) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) socket$inet_udp(0x2, 0x2, 0x0) 9.100888305s ago: executing program 2 (id=3009): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) accept4(r2, 0x0, 0x0, 0x80000) r6 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0xf9) keyctl$revoke(0x3, r6) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40) recvmmsg(r1, &(0x7f0000000d80), 0x0, 0x2000, 0x0) recvmmsg(r8, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xdf8}, {{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0xe8d7340}], 0x4, 0x100, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000080)) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, '\x00', "a5fdeb69a751e94df53ad7e900de4c164e071a0000000000007b443803cf578f", '\x00', "066580001e00"}, 0x38) sendto$inet6(r0, &(0x7f0000000240)="8b", 0x1, 0x4040, 0x0, 0x0) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r10, 0x29, 0xc8, &(0x7f0000000340), 0x4) 8.964898577s ago: executing program 3 (id=3010): mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) r3 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000280)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x2b}, @srh={0x0, 0x3, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x0, 0x20000000000000a1}, @dstopts]}}}}}}}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 7.449312578s ago: executing program 2 (id=3011): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x200) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) (async) syz_fuse_handle_req(r2, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={@empty, 0x1}}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0xfffffe28, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001e7a2d7587f0000000080"], 0x24}}, 0x8d0) (async) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) (async) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000140)=0x10, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x1, "60fee7dd"}, @local=@item_4={0x3, 0x2, 0x0, "be4280ef"}, @main=@item_012={0x1, 0x0, 0xb, "a4"}, @global=@item_012={0x1, 0x1, 0x8, 'c'}, @local=@item_4={0x3, 0x2, 0x0, "14d3f7aa"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @main=@item_4={0x3, 0x0, 0xb, "910907e0"}, @main=@item_4={0x3, 0x0, 0x8, "4638b036"}]}}, 0x0}, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c}}], 0x1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 6.18693766s ago: executing program 0 (id=2971): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="391600001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 5.595050259s ago: executing program 2 (id=3013): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, [], [], [0x1000], [0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) 5.558891629s ago: executing program 4 (id=3014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs$namespace(0x0, 0x0) r2 = syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, &(0x7f0000000240)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc044560f, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000280)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x80, &(0x7f0000000140)}, 0x24000040) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x20000000) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') openat$nvram(0xffffff9c, &(0x7f0000000200), 0x4000, 0x0) semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000008000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) r9 = openat$vcsu(0xffffff9c, &(0x7f000000a140), 0x101002, 0x0) sendmmsg$unix(r3, &(0x7f000000a280)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380), 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r7, r3]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5, r8]}}], 0x60, 0x10}}, {{&(0x7f0000000540)=@file={0x1}, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000005c0)="ea8c71f647fac5a9936014fea4a757dfb23f8119af461519b38adb67090e9d69d537830d413ad004d4ba12497d13c443fcd2c72bd5cace09443ec0c4c5150c210df5900837c15a63d0803cc10bbef52190b016983580967f95e2ccfc3ffbb8baaad6789b4d0b87fd19208940d04511bdaaec2891441f3038f9d2b25dc29e6036ed2be035512a43058f9353a0ad938bc07b77027dc04bb01b85b5ddff76a5cb4f5d451d40b26c6432818c5097cdc94fa65264212269deb40f8a2671c3756509db835c03afa1292e40a2efab24b000e5c250f09db9c73220232f5e0efae8a28f2741e6cb046e86b6a650c6ed", 0xeb}, {&(0x7f0000000400)="caf67698b5fa20792bb6a6cf323e784e802905848545891a6381", 0x1a}, {&(0x7f0000000700)="206f8f41b62450cc0e6361c5e0a04b092f50626e945ad05fe0641ab3cfc0c9bdc064540592fbd60a19bc6e21539a76e0c9f549e71ece8f7b9efa188fbb4aab48df60ac3bde3f9443ae7eed802927d431754b350fd7aaadd68c644334790c2a17ad7b259068850a68886999e24140905fdebf57721893ed06a8fe41dfbf42d2b5a5874fb8127f", 0x86}, {&(0x7f00000007c0)="524afba00a8f9c3d904d2b397f2085fd6bc1cff00cac15b20b54ecda5d627b79dd9c16845291d06a6fae54fab540f01a27b639a1eb82e105645fc08691e6c75b9106c2f059d9526b40a8880261fe096f24c82034238ccbb80ab9f4d8372a7eb3a536e3952bb1a9b61110ae44c74aadc8bb503740e4e538f00ea94fc8ab8226d8459d40146950867b55d1fdf0db2a86191c2032fdbd2fc357e403", 0x9a}, {&(0x7f0000000880)="4c72b6e32823cb4a30a4536f595983f41facc2bea384ddc230b5426174d520c10d0304ec139a81cbf1395f980d98266bb08b8aa9449613893bd3d51da214c2172cc785d37a5ce803e79220bb188f66a00918a9c33a9db7fb52dadc", 0x5b}, {&(0x7f0000000900)="6eeb5b19dc73cc4a24fe03967bba9370c60710d52c5cadaecb214751a7fb866fbce996b9bb7d014165d3d9a954adc40e97b0d6fdc98465992fa5dcd2a1b0806cfee6ded2343a58ee32739de0a3a4c496adb1711c1986d50b5283ad79fffecc690479647cc9bad5e3a6e9018b425dd608521e546a301f0a6964227b48778060b700a8e86d16a76f5fc26655a8ae551785d225af31c70174dee204", 0x9a}, {&(0x7f00000009c0)="7b3b944ee178e44d4b3d44615ccc2aabf9742bfb4f2650e13c9ace739237c22e6e394fcf1ca91acd3ce9592aadf46e2d90e19edaa547", 0x36}], 0x7, &(0x7f0000004c00)=ANY=[@ANYBLOB="200000000100000001000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="18000009c69e849f13154056", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0], 0x50, 0x814}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000004c80)="41b560f0910891b41c224b31526e23c0c209a74f7187e3b6f78846778aa87850e1b3ad6184646fc4dc5d037bba37e40f129ef6eec475ac0611bec0936ab665860e7d4b9a249d78b80ef9bc4e7d3c8fb8a75052180073934356e4bc60d705414ac0c1473c0c782694724e79d240889453b9", 0x71}, {&(0x7f0000004d00)="aea317c7cc4c02b29b081531426814eaf516a5e40afbb59a83e08d29a54398ad31c17cbe49646ac378ea676b5b8c803155c9429e5d35abec28be52cb020288662ca30fbb48029fc59521082dda2a2885403b613bdf5bec338fd17953ce5f3d664591ccf0e5f6160a257e3c01595ba37252f8d4cb4e19f4d76bbbb37dfc3e6b75d4531a5783d29f8cb1837c930ef159eccc1e9f273134428c9d0fdd64bc55ffa33d665fe14d760ec27cf3d03f34fc87f848c9713bacf2e4f7097a0266245202b9ab0866590dd7f4c9ce3cf0d3aec2b7db7763b47a9800f02b77492eedb77a95d2b48dec59dac17403b57efc1e51b93d7bc86cfbcd29f5b737816c5f259791abd5ee61335624b523108077a11c98662fb2df03430a629b6a30ba0b1a20106cbe0d6086013453258f59107dd0f1e57b8c4831ce004ef23e0216d1cb676401ad12eb9e734cbe0f77c2ce153cc3503ed73a99c804f765e2ab4640d65a13a163e6f2ba6975767039aeb98026d014c7b76d37a672afee7e7df8ee64ebcc0268ba9e9aa0d8d03e5c44514c6ef2071048ea2281976a45c7838501608e1acce3bde78247d37db0e394c737fed7a905daf82b3ac2b5da547c711c2e766e1dc27bf742bd41e414057373f7ab55788c6fb6d5de6c0bc4e1af3d260f0c21a07369f930ec217671e53f0d30b0435c0f3fbabb6fa3186a26da4542087c26f3c771d83ebf27f908ae03ac22f3556f6c42e0fabd41d945f22f395d260fb32831dd486586b3bb8f54f4278b0954c9222fd5e72092289e5b07e2aad93e0f2e0f740d96a036784238938dbbc5125732af9ed91c1315272549ea1f64c507bf0c89490357aa907c0e1303e93de0cbc3b1e55ee148eb8b560a78d0e7d10f59806cef493c61b4f9b90a4f1a6968ef6d38e3e8bc664f52375ef53bd0f06a1b6f9b91f03e742c44d2124b7389ad3b7a000f8525c6f5af23f9bde71007880edfecc2efb46a8da92259a85869a10747a644626733389bed5ac3d553e62f94dde9d0c28deb83c0333fedb31449e2e018fb07c1f8af98d223effc0721460d439084673e64f2cffa1e1d1e78c5a2bba78d3a27907e8be86fbb411873bbaef1517874e7cee53a6776bce260e194dcff9d379fb734e7a8f1ff1938393575726acb58dc06a255ba4ea61e150d4aa2332ebc70973218d0a212298c93be88327fb45cf9b7923c4ceae620467c38adb8d01ed881981b2c742f9aca7af8c728e23ec6e2ec81ea2e5f1c1518ed630c9cc3c886316ed244aca6fc495aba32a5df3597974b38683d6076e5ff8e32b6b6390b08266e64b7da7e1254be53b0f09511ea850d51b132dfe3bacb659c4fc3c55da3daca70fd854f2570a935915ebdea10158f0f14b73625c25b55972368efc37e73ed8608641b451513d95a75c74487d8d595e14c25df7e8dc3583db39e07ace48969198bf473192e7663ca7800f91549b3875896fc0aab44bef4f9063137395a30fd930556ebe8df7a3ab2f3e573b73e4ea0a0e04d75c6c7400948646912692657ece34f0b650cb6e5b2ca8d60d984b0620d5a0901b29faf3fc46a8302ca52e6813b2eb7091caae8abb92cc71a03bd12f2ab005736a8a8ce54a60de22f01ab82b73733ee6df5d6b4518ef1fd387f8caaf8caab310aade272bb1a09dffbf1abe717c92453104bbf701015be1ca148dedc82f6278a346c76e6085c5715fe406ca325ed6e4b317df591c818adae88db19cfd674c29b805706bc15bae696455777f55f2ff97703246e09ab17bce776a04db8b944def124d4b7d705524e87ba9a56d34c5e431dc626ee04b2894dedd698c594f490f1286ae03508e2e1f1739a59a16db2548ea03c416c1377f690e661f50c8c415f9171ee27ae75cafdfae533d326cc883080b9db5537be76d8db6c5366198b6c643074d472a471a8b4ace9aa7e5149531eb5e74329431d3a273325c51a3d0e94728ca62cf0eb8f22132fe8a97ae551eef24937f7eddc8f7646a6261b683621f522038bca74982b6e9f340f1246c92fde26861bc83dc6b315ce449573ba79dd67cb261e0aa3870c5af7350598daf697ada0cea9224f98eb16a226d20dc5694fe2ebcf5bcc1cab55adde319a129477dc985ca6306ec403acb85e15a0c9eb36ac8cf77b31e04185e5eeaaa6ef9d2dd959c0dfb342a8fe52ca2bc4a6ff774fab415859b0f54fa609a9d018269db09bf6696ebf01eeaeba06a6b117724f30846ab6fdc16845d66203c7690f1af8d62474807ac768f68c333cc24f2573c229baabfb616a7da6985ae2fa17b38c7a73004aa3f485f024e7eda11ad4722cade2c0c804d1acb4b1f1ef6d0112342e655cfe756d0b2878e29214cf66cad407155c60b933f18fd297acbdb41c98bfaa0f39858e8d0ed9720ef0d62a7ede382c94e997f62c3c392f88cd68ed05777f524660c5a0fa1895832f3ab48c33c687be4f0856ede943adf80451ca1ded91248456d3b948218715d93d51a2d1fce39edb69199e3f70a7438eb1dd5037bfc7c23e109175d24e76b14a8c7ca0b196faadc748377c095c4fe86ae7af1fe55b2683daa440e4f3d12ec7a5e2724538d2c17dc7af78ca6bccde305b8145b4761b6197aeb8a7a879c9e6f6396c6a456baedf26f6909824dd2dc558b98dca440b42149eac2e5d808ef759a58744cc875f958465a0621239953f33e5ae5b051df683fbc5e5c707832d7b595f4cf1f25d03e5f8a21b8f5b698bb6cd9c996609408a9a63c4ba3ae9822d41637249aeece37c2af5742bfe755310faf23e4d47809448d2328b22d7133be1494af12073b11186272daaa417609dd3356da53cb0202544ae46f67067caeda8dcdb8ce4f0f12d5a9433374aa0be0ada3d438aa0a3b1e9ce3f9b17aeeeafe3cd1e962e5e56efa3034c8d0b57b1ca0b523a1a9ccf542f03ac0c8d30b25f222d14b7fc1d918d36470afcfd4d55e86aa933d5bcfe2271fe1e9ae5b1f217d944f0a704298561ca4649612f79763878a3de5506c1612719adf02a5959851594bd727d9d0d789b628b1d0e3606ba9d247e08c1e7510a9ad6ead6302fadab0251fe08a203ff35d45c150bc4a89b6e14164c713a2b3cc2a52353f6256cf4129bf1b4cfea057e3692269a4602dabfd787e4f5957d8face118e109cedd93de81ee9fffc0f60580e363353522ae1c455f380497dc40b2f5ffa312621f12985c5b0f0116d50bdf5de588cec5f08b0e834e0bccc883219a6bae2491ada64af353dd4784254d98e816b698917adc67ac78c8ac9886a6100a57c6b62cbedca97acce052b8766b056bcf9ecc0a09bb3673934b7fbbb510165764f522e25854349c2082a329a1b2cbbaeb963c7414cf1b7d848c5c317883604e47b7363f1a7d0929f1b786caed762ccbb70beda4b95f86250721cd4d11c7cecd86785f4a81717835bae15fdd0871daf0aef6ec0d1c22a9f2ac755a7b1b69d581345bb71a108c27253f4a27bcbec53b2021762e1068bfa50493eba2341591fdaf5e37c35d6aa58817786c05e465838dd7343325e469686361f97fe401d894002aeb2e3e68522ba6aae12b273f88c5579a1242f0957065040a3a77eb6a6aa18cd97cf64c910f4f8aefd33e89f44ef5c5850cb55c10752ad140677fdcbdd735488a2763fd1925c2af9a389ba0c0d467f05afc7739673d4404d62571f7b2554aa072110c4eec304d6a7d6903b34aa85eecf2e449e51410b3e867d46b2262347cf00f458c39ee5de30fb795337b0c1546a1f77ca60d26e31eca9735486951d540b1476887601da7666c1355b980f07a257fcbeb170695928c6e768310c9c9873c4796efd168eb2bb6085ae5c44f9e6cc26dfe069525fe6472bba19b78c2cb9a14ccfc824990dc009319fe89a97f60a6932f0b27f9994f7a79dc8fd2159083ed276adee2ce0a10bb9997110dfcd0e2097b980060bf8b537316d34119f64273b0c2f1945cb765448c95d2f91cd6699f3a54a60a0f0f1de6d812294ac75b237e89cc847166249766de53beafc1561edb7dcd3ac96e8a99323bd4dff4fa709f389c1419e65a9f8a9c8650dd603235720d886129fd5899db13dcbc5cedcc75d07bcdcaf858a008db93ba5ba63c451cef47b0cc6406c5dd1db4cac58f887f42cc01b32550f9be32d3cc028c9997778700dfbcdaac81e5349269d9ded9ff5fd5753600917de3c00dfa5ee9c7298ff8273a6a7c52f7332c2b457cba46338de741f5c722cd11b5b53cd5407b6d9bac582242af42c7df840770ed493c87b9202057f690287560b58486441ac1f3af977031f399f5c71819d5cedb2633648c44876778ec4cdffccc5c17da9be09a3c138b41b30139ece3120a8bc7ce03319a66e4bf0a7f3137030541d36c878c6129a1b7cc40880217a4b8a58b0900ce42b5b72fa657f7707ef826f7acf2eb5ee17fc12021b027fef3af2b284b35fa028b5a18d81da0ddaf143aa6f4a42bea6267ac302c556a1e71924f040dfd1950bd8c9b0ebc22d9c77df9578c6ac3f742777a5fc8242002a068a3804d71f89a11110763be086e3956295c4dbd8d3321c2b7435c4303121f1e94ec83622da6210b11d22ffdfa1a8a6ee76c623cbf661aa360cafdc9c0624e0b0dc3c58e5cc363b85f4604d0f5c27317eff30e470b678e95b0a89a0fdaa04771b6a7404ccd8a1cd7a72f6932a73afb7ad53d5e07eb3eb907dd3bbf7108d606e4afb9dd026282153e0e9b3bd88b4e0c4d1505e8665c9a68c8611c30230f631fb01361432bfeda23e70169f1fcb748502daf6df58687b09bc59a6654c2b3ff896172087e58e683ff6602312398b8629561eaef870be38e8fc190d58477ee41bdda32561f4ab5118b03fd8cb2738c4fd4f4ebf604b528a463f8a37b3c5d65dafe5795b8c2c51603f63317576f5a38c3589eb58289daedfb952162ee6895f47b7cc2b8535aa5566846fe7f143128b8d38eede88c44236a0839dc66b80f7519ea623a3a4c73271adc1be568f0537d0b8c6401305ebc83c12f906644f8dd7c57f5a12ff29c74f37c9dd167748aa8fae44fd74703338b0159c8e8059ed0be615ae1a578cdcd708a3331bb744d10c8a6b3fe9d28b2c06f933f37c291aca94794facdfd4e15f489f0d649e4a44f1b3d507a06f448257317c7b143f5e4dab101622daae146f5c786cb5463d6ce2926abdb292bebd5406fd5da70c01edf013f44afd96b64ce4dcd029296ab5c93f32a3b6836f8c1ef12365b601e21991865262e6940ccd7d60b8fafa94132a4323a58336b03bcd26ed58ddeba7109ef541496188f7be9ea579264adb22522f697acbc0740b394582cd7f3f94f4a8152a9662b455d7e23f2ff80379151208358f66801c7cb97f2b1df3391d8ddeb111f935fc8b8779d0e2dcca4b0ac2d7c5b41a26da7b7e6ea914ccb8c405901279e6088abd0cdab0c046d6c338695b8a87bd4fad8cdceb97ce4508ce42f092ff14dd41b3f4bda89080209abec774ecb57a2ef22d8b17a3c566ee5ed41233c955764df944dea2a17f1c177aaef66c0e451cd1a9c1443e3a89c2925b78353cf71090d6ab30ae998b3b22f109b8f1e71385d86ff2d7b3d17d0fde6b879d336335e2cff73beb0234e4bcc56a8d45055615a3b41099b815622e5b191f9874401163659ddf73f998f1ae76a8c1d447654e6c43d716ff286382fd0f2104bd4461a6f9140b5e4866d3134f582706e8b82f63daf60d5854f36189ed1ad5217ddf584edbaf6847bfc72a45e2ca695494797f556eee1e14436eace23f13bf6ade24f2e8b9929117da391d53dac616754041fe6e6b06a6e9cdf", 0x1000}, {&(0x7f0000005d00)="867f9af255f978aa00c0e1573bb2e742e7a4de1e8ad85757240b0c323d0b92c9e5166d033a0aa9fb10fbe808341bb52dd232f89ed889b616b93329cc541ef5e40e67c8097add7b6819ad3ad3b96dd3a53e8a41a1f384f3dd02a2c482b8c4d38f4cb24f57c25bfeb2b1702017acd6c2d1129efb34cd6e5d260aa810a3c3d9ed73c951c09fce48671d129d3026e34c82b8509093d7ee4fcacc6b9a30ac2166446b441356625eb44c2f56855c517031cbe7083b57df98a248ac063c9d48d7b1a9996bed435f80c1dd575cd1faedea766582de9d8529226da42e2eec9bb6b654a60f62e878031fd476afc8f7d03659cd025e9eda264d3f46fde0b1", 0xf9}, {&(0x7f0000005e00)="2a609815f040ba932bf819353032bd17020ae13a78a9719a728d8acacb8419d8bf3c7ab2dada55be521cb03542352b9f9206c30a66f34339a8ebb6d7776c3c8a76dcd39c18637fc42a18e3b83e5793b17725eca1f113d4343c01723310948234ac873b8c2122dacd86228e23ce4f77e0c1049f5c984ebcfb433aaaca09546042f05d51ff288084e876f1abf27e6f87a5f1ae0305648bc96a8f35084c6ee0b8cd3a27302b547ab64a5a", 0xa9}], 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="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", @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="300000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="300000000100000001000000", @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32], 0xb0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000008140), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="100000000100000001000000", @ANYRES32, @ANYBLOB="180000000100000028d6ae12", @ANYRES32=r2, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="100000000100000001000000", @ANYRES32=r0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES64=r2, @ANYRES32], 0x50, 0x20000000}}, {{&(0x7f00000082c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009440)=[{&(0x7f0000008340)="92c39241bc24e094b593f03ee7ffd1dd", 0x10}, {&(0x7f0000008380)="079ce7770a4227be9fa62d5c4d64f8e412cd83f61f1d62b26850be3fa29cd3c3d07b0b93cfc8722ffd3a0e374e4de6748f89c04a820a0aa8cd54ab89527488b2975caf132d68", 0x46}, {&(0x7f0000008400)="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", 0x1000}, {&(0x7f0000009400)="83fe86c4e1a61c4f", 0x8}], 0x4, &(0x7f00000094c0)=ANY=[@ANYBLOB="1c0000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r8, @ANYRES32=r1, @ANYBLOB="2800f5ff00000000010000a5", @ANYRES32=r8, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0], 0x5c, 0x4}}, {{&(0x7f0000009540)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000009600)=[{&(0x7f00000095c0)="f529d2c0497006d643c826630cad9941a6ed967f1ea2984795ca777ea911ac7a64d1c4e993c28908dd79a2eb85", 0x2d}], 0x1, &(0x7f00000098c0)=[@cred={{0x18, 0x1, 0x2, {r2}}}, @cred={{0x18}}], 0x30, 0x4000080}}, {{&(0x7f0000009900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009b80)=[{&(0x7f0000009980)="33279275656d4438f3cafabc3f91fb928540169d62f412c327e0d15fb090804411f8a62a555c8412cb01b1ccde5842ff4958b5b5d41004f9a0c59a46f6240ae5051ab911fb62b0db23073f47bb4bff0968f5df8d7d8bb32bc35ed76f", 0x5c}, {&(0x7f0000009a00)="486e146cee91788128a7634b592139721666b0a046953a869bb016ebeb9d8b8103779f67cb10b2daf79aafe985932faa413ad7bff8fb6f053ca67f2d3ddd830a492430ff36227522706dfd1102ec35ad64010bd9579e1945bf5b62a65d19fdc04f48e7a620cae507475ae442838be9ca4074e1ab666ac158d70cfe9aa67433fed603102d4ceab77d1b872bdb9124294c22e769a814b1070e9af2f62ab687233f3235f2ecc9de6d4d7a267613f5441a7a7cd3f28f134d8c9f3fe4ed5d8ad47cc3627b07762e9bea28e9bd6aefc1089920cf51998760180d1e4cbe97b52652ec61defa8373e2ad04e8ef78f6d296ca007424d0740daf8d033702f09dc9a015", 0xfe}, {&(0x7f0000009b00)="78736ccfd3fc5d32ac8d26f47e5acd44ad97f6551aae414bfdf87fbd6b5fc104d3023d1d82ab36d77bf431c7c770d216448b98e5de3e99d1c66e9c49209e1a2a092ab94c8e9e20358eff8c07864dec112df43fdec1d6bab7984a0fe95f52fad619b958f16faa2da9b9cff28e26e9acd19e01d98c46739480b2ed3170dc8b1a", 0x7f}], 0x3, 0x0, 0x0, 0x8111}}, {{0x0, 0x0, &(0x7f0000009f40), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0c00000001000000010000002c0000000100000001000000", @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=r3, @ANYRESOCT=r2, @ANYRES32=r5, @ANYBLOB="2c0000000100000001000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r1], 0xcc, 0x1}}], 0x8, 0x4000000) 5.018970484s ago: executing program 0 (id=3015): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 4.812643273s ago: executing program 3 (id=3016): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x0, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) userfaultfd(0x80001) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x100}, &(0x7f0000000040)=0x8) 4.742051391s ago: executing program 0 (id=3017): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000003c0)) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x5) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0xa, 0xa}) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000380), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000500)={r3, r5, r4, 0x0, 0x0, 0x0, 0x0}) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x10) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000200)={r3, r7, r8, 0x0, 0x80000003, 0x80000003, 0x0, 0x0, 0x5, 0xe, 0xc, 0x31e}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "5c888596a7776a389ac2ea21d00764a17a73a27a4525d641a8f00302bede855f", "f4ed38bb9511e8c874b4607d81a785604182f7466d190929c3af91b0895c76ef", "b03008606461cc0d6e0bbd73506cdd5b87733deb86d4a6ad26ed7777789bb5c0", "6e17e0e332771caff828fb7bdc2a3f20ad0d986e623ec04440432a4f9f14b32c", "90f26a2be402aa371e6b6fb7ed5d133a1676f722dbb6eae047fd008a86abd598", "8611e083ed2bcfa5a00b8bee", 0x2, 0xa6e9, 0x6, 0x5, 0xfffffffa}}) 4.249582535s ago: executing program 0 (id=3018): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={0x0, 0x9}, 0x8) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) openat$nci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) 3.910628021s ago: executing program 5 (id=3020): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000840)={@void, @val={0x5, 0x0, 0xf27, 0x200, 0x3, 0x5}, @mpls={[], @ipv6=@generic={0x3, 0x6, "95f042", 0xcf, 0x2f, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @remote}, {[@fragment={0x2c, 0x0, 0x5, 0x1, 0x0, 0x8, 0x64}, @routing={0x16, 0x0, 0x2, 0x36}, @hopopts={0x5c}, @hopopts={0x5e, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @generic={0x1, 0x4c, "4e7a1e239856705edfb97df3ca910e717cfe69faf8845fc044abe55157e88803b505cd65adece6d848e167dd44113833387b28bd6b35fb203535a27a23b18baaa3f9911a5c67483517d7fd9f"}]}], "066dcdc3f8bf5e0ff9f469ce4c8d93777bbf44238371b17e47b06a81f58eaace969621b53666165bbb53df75e551b4e91aaab3223cb2dc19f54ab96a52a5c22260e6807127b10eec3b164a576becd6b936fb4d0207a56f"}}}}, 0x101) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xffffffff}, &(0x7f0000000100)=0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e20, 0x3000004, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='veth0_to_team\x00', 0x10) write(r2, &(0x7f00000000c0)="832a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 3.804526543s ago: executing program 3 (id=3021): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) pidfd_send_signal(0xffffffffffffffff, 0x15, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite6\x00') pread64(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x6) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x300, 0x0, 0x4000045}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000010c0)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@remote}}, &(0x7f00000011c0)=0xe4) sendmsg$nl_route(r1, &(0x7f0000001300)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)=@can_newroute={0x88, 0x18, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0xf}, @CGW_MOD_UID={0x8, 0xe, r2}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "12ff1b8183dc11dd"}, 0xea152ce1493a8abe}}, @CGW_FILTER={0xc, 0xb, {{0x2, 0x0, 0x1}, {0x0, 0x1, 0x1}}}, @CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "7d89ca2b526e5cf0"}, 0x4}}, @CGW_LIM_HOPS={0x5}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x0, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "f518ea6746708dc0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xffffffffffffffff, 0x3, 0x4, 0x7}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r9, 0x8b27, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r7, 0x83625fc5352ba305, 0xfffffffd, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x20000000) mmap(&(0x7f00005bd000/0x2000)=nil, 0x2000, 0xb, 0x13, r4, 0x2000) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8000, &(0x7f0000000200)={0x74, 0x80, 0x60000, {r4}}, 0x20) r10 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x101101) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000140)={"000000ac", 0xb4b4, 0x6, 0x3, 0x14625b, 0x8000003, "000000ff00070000000900", '\x00', "05030400", "008000", ["9ef806070000007eff7d7f00", "0000000000000000008000", "0c000404dd372a9000", "00000003090000009dd89722"]}) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 3.361065315s ago: executing program 5 (id=3022): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @l2tp={0x2, 0x0, @multicast1, 0x6}, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x40}, @tipc=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x1000009, 0x43}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x101000, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f}}, 0x50) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000640)={0x0, 0x2, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r3, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x8906, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000000)=0xd, 0x4) 3.356240089s ago: executing program 3 (id=3023): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000004, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="832a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (fail_nth: 2) 2.480244064s ago: executing program 3 (id=3024): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e26, @local}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, 0x0, 0x43) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xe042, 0x0) accept4(r0, &(0x7f0000000240)=@sco={0x1f, @fixed}, &(0x7f00000002c0)=0x80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) connect$unix(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7, r7}, 0x38) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, &(0x7f0000000040)=""/4092, 0xffc) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"]) r9 = socket$inet(0x2, 0x6, 0x2c) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) socket$inet_udp(0x2, 0x2, 0x0) 2.477232862s ago: executing program 4 (id=3025): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x4) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x411, 0x8, 0x10000, 0xb998, 0x12, "194f2f83c21698a958ddc8819512a100"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000340)={0x7a95, 0xf, 0x0, 0x2, 0x2, "3cb9ca378c903b2debfcd347f571bf6deecbd1", 0x3, 0x10000}) 2.458796133s ago: executing program 5 (id=3026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 2.128893952s ago: executing program 5 (id=3027): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 2.023669085s ago: executing program 0 (id=3028): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r4 = openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x22, 0x5, 0x4) pidfd_send_signal(r4, 0xfffffffe, &(0x7f0000000700)={0xfffffffe, 0x0, 0xfffffffe}, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x19, 0x79, 0x2e, 0x20, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xbd, 0x0, 0x2, 0x34, 0x67, 0xc3, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) preadv2(r8, 0x0, 0x0, 0x2, 0x5, 0x10) r9 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x20400) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r12, 0x29, 0x2a, &(0x7f0000034000)={0x2, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r12, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x61, 0x0, r10, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', r10, 0x1400, 0x1, {0x0, r13}}) io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 1.913341949s ago: executing program 5 (id=3029): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000003c0)) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x5) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0xa, 0xa}) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000380), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000500)={r3, r5, r4, 0x0, 0x0, 0x0, 0x0}) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x10) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000200)={r3, r7, r8, 0x0, 0x80000003, 0x80000003, 0x0, 0x0, 0x5, 0xe, 0xc, 0x31e}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "5c888596a7776a389ac2ea21d00764a17a73a27a4525d641a8f00302bede855f", "f4ed38bb9511e8c874b4607d81a785604182f7466d190929c3af91b0895c76ef", "b03008606461cc0d6e0bbd73506cdd5b87733deb86d4a6ad26ed7777789bb5c0", "6e17e0e332771caff828fb7bdc2a3f20ad0d986e623ec04440432a4f9f14b32c", "90f26a2be402aa371e6b6fb7ed5d133a1676f722dbb6eae047fd008a86abd598", "8611e083ed2bcfa5a00b8bee", 0x2, 0xa6e9, 0x6, 0x5, 0xfffffffa}}) 1.590122401s ago: executing program 5 (id=3030): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x28, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x4, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0x30, 0xb, 0x4, 0x2, 0x0, 0x48, 0xc, 0x6c, 0xb, 0x18, 0x3, 0x3]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x8, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xfccec56568d504f5}, 0x840) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) 1.209728885s ago: executing program 4 (id=3031): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x0, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) userfaultfd(0x80001) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x100}, &(0x7f0000000040)=0x8) 1.126975664s ago: executing program 2 (id=3032): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) syz_open_dev$vim2m(0x0, 0x40, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) add_key(0x0, 0x0, &(0x7f0000000040)="100c0608", 0x4, 0xfffffffffffffffc) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000010c0)=0x15) readv(r8, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1) 0s ago: executing program 4 (id=3033): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x7, 0x4) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x38, r4, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xe}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000427bd70003b0000000800020089b20bc0780300c17982a78d1240000000080003"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x5, 0x89}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) recvfrom$l2tp6(r7, &(0x7f0000000140)=""/80, 0x50, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x20], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) kernel console output (not intermixed with test programs): 66] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 969.206890][T16966] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 969.206905][T16966] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 969.206919][T16966] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 969.206941][T16966] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 969.206954][T16966] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 969.206986][T16966] [ 969.587052][ T7193] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 969.737006][ T7193] usb 5-1: Using ep0 maxpacket: 32 [ 969.744186][ T7193] usb 5-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.755832][ T7193] usb 5-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid maxpacket 41728, setting to 1024 [ 969.767730][ T7193] usb 5-1: config 0 interface 0 has no altsetting 0 [ 969.774446][ T7193] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 969.783897][ T7193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.795430][ T7193] usb 5-1: config 0 descriptor?? [ 969.875737][T16973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2851'. [ 970.179489][T16984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2854'. [ 970.293914][ T7193] petalynx 0003:18B1:0037.0091: item fetching failed at offset 2/3 [ 970.303890][ T7193] petalynx 0003:18B1:0037.0091: parse failed [ 970.314679][ T7193] petalynx 0003:18B1:0037.0091: probe with driver petalynx failed with error -22 [ 970.792408][ T24] usb 5-1: USB disconnect, device number 81 [ 971.191939][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 971.191955][ T30] audit: type=1326 audit(1747173612.279:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 971.307085][ T30] audit: type=1326 audit(1747173612.279:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 971.329503][ T30] audit: type=1326 audit(1747173612.329:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 971.362603][ T30] audit: type=1326 audit(1747173612.329:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 971.546002][ T30] audit: type=1326 audit(1747173612.329:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 971.715323][ T30] audit: type=1326 audit(1747173612.329:6651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 971.853754][ T30] audit: type=1326 audit(1747173612.339:6652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 971.937165][ T30] audit: type=1326 audit(1747173612.339:6653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 971.959896][ T30] audit: type=1326 audit(1747173612.339:6654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 972.003514][ T30] audit: type=1326 audit(1747173612.349:6655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 972.142244][T16999] macvlan0: entered promiscuous mode [ 972.188675][T16999] macvlan0: entered allmulticast mode [ 972.433996][T17009] FAULT_INJECTION: forcing a failure. [ 972.433996][T17009] name failslab, interval 1, probability 0, space 0, times 0 [ 972.487210][T17009] CPU: 0 UID: 0 PID: 17009 Comm: syz.5.2860 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 972.487244][T17009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 972.487258][T17009] Call Trace: [ 972.487267][T17009] [ 972.487278][T17009] dump_stack_lvl+0x189/0x250 [ 972.487319][T17009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 972.487351][T17009] ? __pfx__printk+0x10/0x10 [ 972.487381][T17009] ? __pfx___might_resched+0x10/0x10 [ 972.487408][T17009] should_fail_ex+0x414/0x560 [ 972.487435][T17009] should_failslab+0xa8/0x100 [ 972.487468][T17009] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 972.487498][T17009] ? mptcp_pm_nl_add_addr_doit+0x37c/0x1460 [ 972.487533][T17009] kmemdup_noprof+0x2b/0x70 [ 972.487559][T17009] mptcp_pm_nl_add_addr_doit+0x37c/0x1460 [ 972.487588][T17009] ? __nla_validate_parse+0x2400/0x2d40 [ 972.487614][T17009] ? __sock_sendmsg+0x21c/0x270 [ 972.487635][T17009] ? ____sys_sendmsg+0x505/0x830 [ 972.487673][T17009] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 972.487710][T17009] ? __pfx___nla_validate_parse+0x10/0x10 [ 972.487780][T17009] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 972.487825][T17009] genl_family_rcv_msg_doit+0x212/0x300 [ 972.487867][T17009] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 972.487911][T17009] ? bpf_lsm_capable+0x9/0x20 [ 972.487943][T17009] ? security_capable+0x7e/0x2e0 [ 972.487974][T17009] genl_rcv_msg+0x60e/0x790 [ 972.488012][T17009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 972.488043][T17009] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 972.488081][T17009] ? ref_tracker_free+0x63a/0x7d0 [ 972.488105][T17009] ? __copy_skb_header+0xa7/0x550 [ 972.488145][T17009] netlink_rcv_skb+0x21c/0x490 [ 972.488172][T17009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 972.488205][T17009] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 972.488259][T17009] ? down_read+0x1ad/0x2e0 [ 972.488293][T17009] genl_rcv+0x28/0x40 [ 972.488321][T17009] netlink_unicast+0x758/0x8d0 [ 972.488352][T17009] netlink_sendmsg+0x805/0xb30 [ 972.488384][T17009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.488410][T17009] ? __import_iovec+0x5d4/0x7f0 [ 972.488436][T17009] ? aa_sock_msg_perm+0x94/0x160 [ 972.488460][T17009] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 972.488482][T17009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.488506][T17009] __sock_sendmsg+0x21c/0x270 [ 972.488529][T17009] ____sys_sendmsg+0x505/0x830 [ 972.488562][T17009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 972.488604][T17009] ___sys_sendmsg+0x21f/0x2a0 [ 972.488633][T17009] ? __pfx____sys_sendmsg+0x10/0x10 [ 972.488695][T17009] ? __fget_files+0x2a/0x420 [ 972.488720][T17009] ? __fget_files+0x3a0/0x420 [ 972.488756][T17009] __sys_sendmsg+0x164/0x220 [ 972.488785][T17009] ? __pfx___sys_sendmsg+0x10/0x10 [ 972.488827][T17009] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 972.488853][T17009] ? lockdep_hardirqs_on+0x9c/0x150 [ 972.488879][T17009] __do_fast_syscall_32+0xb4/0x110 [ 972.488910][T17009] ? lockdep_hardirqs_on+0x9c/0x150 [ 972.488943][T17009] do_fast_syscall_32+0x34/0x80 [ 972.488973][T17009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 972.488999][T17009] RIP: 0023:0xf7f52539 [ 972.489017][T17009] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 972.489035][T17009] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 972.489068][T17009] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000400 [ 972.489083][T17009] RDX: 0000000002000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 972.489097][T17009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 972.489109][T17009] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 972.489122][T17009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 972.489153][T17009] [ 972.797107][ T7193] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 972.816148][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.881321][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.887308][ C0] hrtimer: interrupt took 390560705 ns [ 972.987372][ C0] vkms_vblank_simulate: vblank timer overrun [ 973.227202][ T7193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.267442][ T7193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.300931][ T7193] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 973.369141][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 973.523770][T17034] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 973.547792][ T7193] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 973.557141][ T7193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.566960][ T7183] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 973.577927][ T7193] usb 4-1: config 0 descriptor?? [ 973.707178][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 973.726574][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.789259][ T7183] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 973.808202][ T24] usb 6-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00 [ 973.817765][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.833553][ T24] usb 6-1: config 0 descriptor?? [ 974.059971][T17018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.070429][ T7183] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 974.082399][ T7183] usb 5-1: config 0 interface 0 altsetting 191 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 974.094215][ T7183] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 974.105633][ T7183] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x8F has invalid wMaxPacketSize 0 [ 974.127219][T17018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.141258][ T7183] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 974.159002][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 974.165820][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 974.174776][ T7183] usb 5-1: config 0 interface 0 has no altsetting 0 [ 974.218323][ T7183] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 974.226333][ T24] usb 6-1: USB disconnect, device number 34 [ 974.228502][ T7183] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 974.258855][ T7183] usb 5-1: Product: syz [ 974.263125][ T7183] usb 5-1: Manufacturer: syz [ 974.269245][ T7183] usb 5-1: SerialNumber: syz [ 974.295968][ T7183] usb 5-1: config 0 descriptor?? [ 974.313438][ T7183] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 974.364826][ T7183] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 974.488939][T17041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2866'. [ 974.562911][ T9352] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 974.591037][ T5887] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 974.599620][ T9352] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 974.601630][T17024] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 974.889231][ T5887] usb 5-1: USB disconnect, device number 82 [ 974.949532][ T5887] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 975.077257][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 975.593348][T17057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2871'. [ 975.603295][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 975.656932][ T5887] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 975.890721][ T7193] usbhid 4-1:0.0: can't add hid device: -71 [ 975.926981][ T5887] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 975.936529][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2872'. [ 975.983484][ T7193] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 975.996983][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.019902][ T7193] usb 4-1: USB disconnect, device number 67 [ 976.029361][ T5887] usb 6-1: Product: syz [ 976.041725][ T5887] usb 6-1: Manufacturer: syz [ 976.049435][T17068] FAULT_INJECTION: forcing a failure. [ 976.049435][T17068] name failslab, interval 1, probability 0, space 0, times 0 [ 976.074772][ T5887] usb 6-1: SerialNumber: syz [ 976.091134][T17068] CPU: 1 UID: 0 PID: 17068 Comm: syz.2.2873 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 976.091164][T17068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 976.091178][T17068] Call Trace: [ 976.091186][T17068] [ 976.091196][T17068] dump_stack_lvl+0x189/0x250 [ 976.091236][T17068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 976.091267][T17068] ? __pfx__printk+0x10/0x10 [ 976.091299][T17068] ? __pfx___might_resched+0x10/0x10 [ 976.091327][T17068] should_fail_ex+0x414/0x560 [ 976.091357][T17068] ? seq_read_iter+0x1fd/0xe10 [ 976.091374][T17068] should_failslab+0xa8/0x100 [ 976.091397][T17068] __kvmalloc_node_noprof+0x168/0x5e0 [ 976.091419][T17068] ? seq_read_iter+0x1fd/0xe10 [ 976.091439][T17068] seq_read_iter+0x1fd/0xe10 [ 976.091456][T17068] ? aa_file_perm+0x11f/0xed0 [ 976.091481][T17068] ? __asan_memset+0x22/0x50 [ 976.091501][T17068] seq_read+0x2e2/0x3d0 [ 976.091523][T17068] ? __pfx_seq_read+0x10/0x10 [ 976.091537][T17068] ? __mutex_trylock_common+0x153/0x260 [ 976.091571][T17068] ? __pfx_seq_read+0x10/0x10 [ 976.091585][T17068] proc_reg_read+0x1e9/0x2e0 [ 976.091600][T17068] ? __pfx_proc_reg_read+0x10/0x10 [ 976.091616][T17068] vfs_read+0x200/0x980 [ 976.091639][T17068] ? __pfx___mutex_lock+0x10/0x10 [ 976.091660][T17068] ? __pfx_vfs_read+0x10/0x10 [ 976.091679][T17068] ? __fget_files+0x2a/0x420 [ 976.091703][T17068] ? __fget_files+0x3a0/0x420 [ 976.091722][T17068] ? __fget_files+0x2a/0x420 [ 976.091750][T17068] ksys_read+0x145/0x250 [ 976.091769][T17068] ? __pfx_ksys_read+0x10/0x10 [ 976.091788][T17068] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 976.091824][T17068] ? lockdep_hardirqs_on+0x9c/0x150 [ 976.091845][T17068] __do_fast_syscall_32+0xb4/0x110 [ 976.091867][T17068] ? lockdep_hardirqs_on+0x9c/0x150 [ 976.091889][T17068] do_fast_syscall_32+0x34/0x80 [ 976.091910][T17068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 976.091929][T17068] RIP: 0023:0xf70ce539 [ 976.091943][T17068] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 976.091956][T17068] RSP: 002b:00000000f50be55c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 976.091972][T17068] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 976.091983][T17068] RDX: 0000000000002024 RSI: 0000000000000000 RDI: 0000000000000000 [ 976.091993][T17068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 976.092002][T17068] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 976.092010][T17068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 976.092032][T17068] [ 976.397313][ T5887] r8152-cfgselector 6-1: Unknown version 0x0000 [ 976.403680][ T5887] r8152-cfgselector 6-1: config 0 descriptor?? [ 976.915135][T17080] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 977.236857][ T5887] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 977.417036][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 977.443524][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.460119][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.508618][ T5887] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 977.546693][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.664020][ T5887] usb 4-1: config 0 descriptor?? [ 977.947195][ T7193] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 977.991855][T17091] netlink: 632 bytes leftover after parsing attributes in process `syz.2.2879'. [ 978.073141][ T24] r8152-cfgselector 6-1: USB disconnect, device number 35 [ 978.239111][ T7193] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 978.293276][ T7193] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 978.346908][ T7195] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 978.369794][ T7193] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 978.430595][ T7193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.512085][ T7195] usb 1-1: New USB device found, idVendor=09c0, idProduct=6301, bcdDevice=30.29 [ 978.561646][ T7195] usb 1-1: New USB device strings: Mfr=244, Product=2, SerialNumber=3 [ 978.626273][ T7193] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 978.684077][ T7195] usb 1-1: Product: syz [ 978.697433][ T7195] usb 1-1: Manufacturer: syz [ 978.748739][ T7195] usb 1-1: SerialNumber: syz [ 978.821050][T17085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.844048][ T7195] usb 1-1: config 0 descriptor?? [ 978.857031][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 978.866146][ T7193] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 978.897436][T17085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.093476][T17085] binder: 17082:17085 ioctl 4018620d 0 returned -22 [ 979.101301][T17085] binder: 17082:17085 ioctl c0306201 0 returned -14 [ 979.109034][T17085] binder: BINDER_SET_CONTEXT_MGR already set [ 979.115304][T17085] binder: 17082:17085 ioctl 4018620d 80000200 returned -16 [ 980.212428][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 980.212444][ T30] audit: type=1326 audit(1747173621.299:6784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.2.2883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 980.335369][ T5887] usbhid 4-1:0.0: can't add hid device: -71 [ 980.359708][ T5887] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 980.402595][ T5887] usb 4-1: USB disconnect, device number 68 [ 980.416470][ T30] audit: type=1326 audit(1747173621.339:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.2.2883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 980.558149][ T30] audit: type=1326 audit(1747173621.359:6786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.2.2883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 980.682945][ T30] audit: type=1326 audit(1747173621.359:6787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.2.2883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 980.709407][ T7193] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 980.752931][ T30] audit: type=1326 audit(1747173621.359:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.2.2883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 980.864781][ T7195] usb 1-1: USB disconnect, device number 110 [ 980.882098][ T7193] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 980.917364][ T7183] usb 5-1: USB disconnect, device number 83 [ 980.928323][ T7193] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 980.991960][ T30] audit: type=1326 audit(1747173621.369:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.2.2883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 981.003022][ T7193] usb 6-1: config 0 interface 0 altsetting 191 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 981.014085][ C0] vkms_vblank_simulate: vblank timer overrun [ 981.113147][ T30] audit: type=1326 audit(1747173621.369:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.2.2883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 981.167099][ T7193] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 981.196854][ T30] audit: type=1326 audit(1747173621.369:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.2.2883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 981.206349][ T7193] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x8F has invalid wMaxPacketSize 0 [ 981.265953][ T5844] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 981.294352][ T7193] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 981.317141][ T7193] usb 6-1: config 0 interface 0 has no altsetting 0 [ 981.327192][ T7193] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 981.336464][ T7193] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 981.346367][ T7193] usb 6-1: Product: syz [ 981.356845][ T7193] usb 6-1: Manufacturer: syz [ 981.366910][ T30] audit: type=1326 audit(1747173621.369:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.2.2883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 981.367315][ T7193] usb 6-1: SerialNumber: syz [ 981.418205][ T7193] usb 6-1: config 0 descriptor?? [ 981.462080][ T7193] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 981.484954][ T30] audit: type=1326 audit(1747173621.379:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.2.2883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 981.513435][ T7193] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 981.882846][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 981.893792][T17102] ldusb 6-1:0.0: Couldn't submit interrupt_in_urb -90 [ 981.904380][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 981.918098][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 981.927823][T17130] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 981.947459][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 981.968105][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 982.522378][ T5925] usb 6-1: USB disconnect, device number 36 [ 982.550147][ T5925] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 982.565099][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.585462][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 982.652477][T17138] syzkaller1: entered promiscuous mode [ 982.666932][T17138] syzkaller1: entered allmulticast mode [ 982.736303][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.747620][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 982.866948][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.877969][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 982.907344][ T7193] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 982.972169][T17146] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2893'. [ 983.003467][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.014289][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 983.078045][ T7193] usb 5-1: Using ep0 maxpacket: 32 [ 983.104113][ T7193] usb 5-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.116432][ T7193] usb 5-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid maxpacket 41728, setting to 1024 [ 983.162577][ T7193] usb 5-1: config 0 interface 0 has no altsetting 0 [ 983.189020][T17133] chnl_net:caif_netlink_parms(): no params data found [ 983.195949][ T7193] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 983.226857][ T7193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.256660][ T7193] usb 5-1: config 0 descriptor?? [ 983.286319][T17153] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2895'. [ 983.481520][T17153] vlan2: entered promiscuous mode [ 983.490296][T17133] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.498354][T17133] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.505823][T17133] bridge_slave_0: entered allmulticast mode [ 983.515123][T17133] bridge_slave_0: entered promiscuous mode [ 983.547061][T17133] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.556380][T17133] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.565748][T17133] bridge_slave_1: entered allmulticast mode [ 983.575018][T17133] bridge_slave_1: entered promiscuous mode [ 983.703231][ T7193] petalynx 0003:18B1:0037.0092: item fetching failed at offset 2/3 [ 983.718135][ T7193] petalynx 0003:18B1:0037.0092: parse failed [ 983.724820][ T7193] petalynx 0003:18B1:0037.0092: probe with driver petalynx failed with error -22 [ 983.936196][ T7183] usb 5-1: USB disconnect, device number 84 [ 984.064940][ T5850] Bluetooth: hci1: command tx timeout [ 984.380179][ T7195] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 984.390248][ T53] bond0 (unregistering): Released all slaves [ 984.409777][T17133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.422542][T17133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.566973][ T7195] usb 1-1: Using ep0 maxpacket: 32 [ 984.576861][ T7195] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 984.587758][ T7195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.595917][ T7195] usb 1-1: Product: syz [ 984.600424][ T7195] usb 1-1: Manufacturer: syz [ 984.608138][ T7195] usb 1-1: SerialNumber: syz [ 984.625055][ T7195] usb 1-1: config 0 descriptor?? [ 984.674450][T17133] team0: Port device team_slave_0 added [ 984.838111][T17133] team0: Port device team_slave_1 added [ 985.142342][T17133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.163882][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.220329][T17133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.245030][T17133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.262450][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.298483][T17133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.327956][ T7195] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 985.350660][ T7195] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 985.385848][ T53] hsr_slave_0: left promiscuous mode [ 985.402851][ T53] hsr_slave_1: left promiscuous mode [ 985.480000][ T53] veth1_macvtap: left promiscuous mode [ 985.508354][ T53] veth0_macvtap: left promiscuous mode [ 986.147355][ T5850] Bluetooth: hci1: command tx timeout [ 987.257029][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 987.818789][ T7195] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 987.854778][ T7195] usb 1-1: USB disconnect, device number 111 [ 987.888193][T17133] hsr_slave_0: entered promiscuous mode [ 987.906204][T17133] hsr_slave_1: entered promiscuous mode [ 988.187018][ T7195] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 988.217001][ T5850] Bluetooth: hci1: command tx timeout [ 988.354856][ T7195] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 988.405116][ T7195] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 988.432177][T17212] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2906'. [ 988.436584][ T7195] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 988.505786][ T7195] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 988.570433][ T7195] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 988.587895][ T30] kauditd_printk_skb: 173 callbacks suppressed [ 988.587915][ T30] audit: type=1326 audit(1747173629.679:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 988.630744][ T7195] usb 1-1: config 0 interface 0 has no altsetting 0 [ 988.672050][ T7195] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 988.682535][ T30] audit: type=1326 audit(1747173629.709:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 988.696969][ T7195] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 988.712471][T17218] erspan0: entered promiscuous mode [ 988.731246][T17218] vlan0: entered promiscuous mode [ 988.767979][ T7195] usb 1-1: Product: syz [ 988.772857][ T7195] usb 1-1: Manufacturer: syz [ 988.786300][ T7195] usb 1-1: SerialNumber: syz [ 988.792874][ T30] audit: type=1326 audit(1747173629.749:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 988.812237][ T7195] usb 1-1: config 0 descriptor?? [ 988.848886][T17198] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 988.863699][ T30] audit: type=1326 audit(1747173629.749:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 988.888759][ T30] audit: type=1326 audit(1747173629.749:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 988.900966][ T7195] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 988.910875][ C0] vkms_vblank_simulate: vblank timer overrun [ 988.940015][ T30] audit: type=1326 audit(1747173629.759:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 988.943857][ T7195] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 988.962185][ C0] vkms_vblank_simulate: vblank timer overrun [ 988.962868][ T5925] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 989.073141][ T7195] usb 1-1: USB disconnect, device number 112 [ 989.078115][ T30] audit: type=1326 audit(1747173629.759:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 989.087712][ T7195] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 989.190053][ T30] audit: type=1326 audit(1747173629.759:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 989.212169][ C0] vkms_vblank_simulate: vblank timer overrun [ 989.220603][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 989.267899][ T5925] usb 6-1: config 1 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 989.287191][ T5925] usb 6-1: config 1 interface 0 altsetting 238 endpoint 0x81 has invalid maxpacket 1471, setting to 1024 [ 989.310728][ T5925] usb 6-1: config 1 interface 0 altsetting 238 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 989.342914][ T30] audit: type=1326 audit(1747173629.759:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 989.370821][ T5925] usb 6-1: config 1 interface 0 has no altsetting 0 [ 989.377912][ T30] audit: type=1326 audit(1747173629.759:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 989.446965][ T5925] usb 6-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.40 [ 989.456089][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.476935][ T5925] usb 6-1: Product: ʄᡟ☰Ḽ猼ٖ᝭ [ 989.482565][ T5925] usb 6-1: Manufacturer: ꯎ휾碑샴꫺꣞⹽聈蜇④㣻隫䪐௥酘䑢鷄枦䯏妔먙㽙㿜岙蒧嚍썽嶟ؗ艷黷ꛫ鍣和﫾訇傍ས꿈框✑곿᥇л䲇ꐰ韂늰贓됷㇉茡࿈サ쯱퀰꺯擣㫬ᯢⳈ潌먩銵መᱥ졶޾ឆﲷ롗鄟ሎ洭뭑坹쐭쾑䨂떆샏祗锣륰蘎䠃뗲 [ 989.512266][ C0] vkms_vblank_simulate: vblank timer overrun [ 989.657116][ T5925] usb 6-1: SerialNumber: syz [ 989.699192][T17223] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 989.775046][T17244] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.795583][T17244] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.815960][T17244] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.844700][T17244] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.929045][T17133] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 989.976294][ T5925] usbhid 6-1:1.0: can't add hid device: -71 [ 989.999585][ T5925] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 990.097700][T17133] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 990.122564][ T5925] usb 6-1: USB disconnect, device number 37 [ 990.195261][T17133] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 990.275791][T17133] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 990.297282][ T5850] Bluetooth: hci1: command tx timeout [ 991.038217][ T7184] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 991.196234][T17133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.214524][ T7184] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 991.235276][ T7184] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.285626][ T7184] usb 6-1: config 0 descriptor?? [ 991.329760][T17133] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.344799][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.352023][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.370574][T17265] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 991.478035][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.485331][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.852121][T17133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.927029][ T7195] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 992.101791][T17133] veth0_vlan: entered promiscuous mode [ 992.117851][ T7195] usb 3-1: Using ep0 maxpacket: 8 [ 992.138153][ T7195] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 992.176466][ T7195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.176607][T17133] veth1_vlan: entered promiscuous mode [ 992.214326][ T7195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.236717][ T7195] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 992.285683][ T7195] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 992.306706][T17133] veth0_macvtap: entered promiscuous mode [ 992.321028][ T7195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.349975][T17133] veth1_macvtap: entered promiscuous mode [ 992.354873][ T7195] usb 3-1: config 0 descriptor?? [ 992.414819][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.425553][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.441295][T17133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.460005][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.470769][ T5925] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 992.482559][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.494612][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.525693][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.543448][T17133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.583231][T17133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.604903][T17262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.626998][T17133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.635820][T17133] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.646613][T17262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.667028][ T5925] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 992.675362][ T5925] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 992.688318][T17133] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.698052][ T7184] usb 6-1: Cannot set autoneg [ 992.711062][ T7184] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 992.725095][ T5925] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 992.752817][ T7184] usb 6-1: USB disconnect, device number 38 [ 992.775216][ T5925] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 992.805695][ T7195] redragon 0003:0C45:760B.0093: Fixing Redragon ASURA report descriptor. [ 992.825092][ T5925] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 992.845646][ T7195] redragon 0003:0C45:760B.0093: unknown main item tag 0x6 [ 992.873627][ T7195] redragon 0003:0C45:760B.0093: item fetching failed at offset 7/133 [ 992.913161][ T5925] usb 5-1: config 0 interface 0 has no altsetting 0 [ 992.919051][ T7195] redragon 0003:0C45:760B.0093: probe with driver redragon failed with error -22 [ 992.945289][ T5925] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 992.957992][ T5925] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 992.984367][ T5925] usb 5-1: Product: syz [ 992.989924][ T5925] usb 5-1: Manufacturer: syz [ 992.994616][ T5925] usb 5-1: SerialNumber: syz [ 993.007565][ T5925] usb 5-1: config 0 descriptor?? [ 993.012996][ T7195] usb 3-1: USB disconnect, device number 78 [ 993.024231][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.030928][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.041962][T13193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.045819][T17278] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 993.072693][ T5925] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 993.099600][T13193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.109129][ T5925] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 993.204381][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.212640][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.271723][T17292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2922'. [ 994.128909][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2923'. [ 994.263256][ T7195] usb 5-1: USB disconnect, device number 85 [ 994.281026][ T7195] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 994.607228][ T7185] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 994.920724][ T7185] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.984897][ T7185] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.041916][ T7185] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 995.095454][ T7185] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 995.165744][ T7185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.195393][ T7185] usb 4-1: config 0 descriptor?? [ 995.195839][T17327] bridge_slave_0: left allmulticast mode [ 995.227114][T17327] bridge_slave_0: left promiscuous mode [ 995.308118][T17327] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.336182][T17327] bridge_slave_1: left promiscuous mode [ 995.349859][T17327] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.472885][T17327] bond0: (slave bond_slave_0): Releasing backup interface [ 995.482378][T17327] bond_slave_0: left promiscuous mode [ 995.494747][T17327] bond0: (slave bond_slave_1): Releasing backup interface [ 995.508770][T17327] bond_slave_1: left promiscuous mode [ 995.522878][T17327] team0: Failed to send options change via netlink (err -105) [ 995.540392][T17327] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 995.554410][T17327] team0: Port device team_slave_0 removed [ 995.565456][T17327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.599383][T17327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.664385][T17327] bond1: (slave batadv1): Releasing active interface [ 995.672046][T17327] bond1: (slave batadv1): the permanent HWaddr of slave - 3e:4f:e6:21:40:64 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 995.721444][T17327] bond1: (slave batadv2): making interface the new active one [ 995.744728][T17327] bond1: (slave batadv2): Releasing active interface [ 996.467523][T17347] FAULT_INJECTION: forcing a failure. [ 996.467523][T17347] name failslab, interval 1, probability 0, space 0, times 0 [ 996.525243][T17347] CPU: 0 UID: 0 PID: 17347 Comm: syz.2.2929 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 996.525274][T17347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 996.525286][T17347] Call Trace: [ 996.525295][T17347] [ 996.525307][T17347] dump_stack_lvl+0x189/0x250 [ 996.525338][T17347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 996.525361][T17347] ? __pfx__printk+0x10/0x10 [ 996.525379][T17347] ? __pfx___might_resched+0x10/0x10 [ 996.525394][T17347] ? fs_reclaim_acquire+0x7d/0x100 [ 996.525422][T17347] should_fail_ex+0x414/0x560 [ 996.525449][T17347] should_failslab+0xa8/0x100 [ 996.525471][T17347] __kmalloc_noprof+0xcb/0x4f0 [ 996.525491][T17347] ? tomoyo_encode+0x28b/0x550 [ 996.525514][T17347] tomoyo_encode+0x28b/0x550 [ 996.525538][T17347] tomoyo_realpath_from_path+0x58d/0x5d0 [ 996.525566][T17347] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 996.525583][T17347] tomoyo_path_number_perm+0x1e8/0x5a0 [ 996.525601][T17347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 996.525647][T17347] ? __fget_files+0x2a/0x420 [ 996.525672][T17347] ? __fget_files+0x3a0/0x420 [ 996.525692][T17347] ? __fget_files+0x2a/0x420 [ 996.525715][T17347] security_file_ioctl_compat+0xcb/0x2d0 [ 996.525743][T17347] __ia32_compat_sys_ioctl+0x128/0x840 [ 996.525763][T17347] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 996.525781][T17347] ? __fget_files+0x3a0/0x420 [ 996.525807][T17347] ? fput+0xa0/0xd0 [ 996.525831][T17347] ? ksys_write+0x1f0/0x250 [ 996.525855][T17347] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 996.525877][T17347] ? lockdep_hardirqs_on+0x9c/0x150 [ 996.525898][T17347] __do_fast_syscall_32+0xb4/0x110 [ 996.525920][T17347] ? lockdep_hardirqs_on+0x9c/0x150 [ 996.525941][T17347] do_fast_syscall_32+0x34/0x80 [ 996.525962][T17347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 996.525981][T17347] RIP: 0023:0xf70ce539 [ 996.525995][T17347] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 996.526009][T17347] RSP: 002b:00000000f50be55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 996.526026][T17347] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c0a [ 996.526036][T17347] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 996.526046][T17347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 996.526055][T17347] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 996.526064][T17347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 996.526085][T17347] [ 996.781800][T17347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 996.800821][T17347] loop8: detected capacity change from 0 to 8 [ 996.845413][ T7184] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 996.858840][T17347] Dev loop8: unable to read RDB block 8 [ 996.864567][T17347] loop8: unable to read partition table [ 996.877583][T17347] loop8: partition table beyond EOD, truncated [ 996.885279][T17347] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 997.066821][ T7184] usb 5-1: Using ep0 maxpacket: 16 [ 997.074128][ T7184] usb 5-1: config 7 has an invalid interface number: 16 but max is 0 [ 997.082444][ T7184] usb 5-1: config 7 has no interface number 0 [ 997.100630][ T7184] usb 5-1: New USB device found, idVendor=054c, idProduct=0144, bcdDevice=40.64 [ 997.126960][ T7184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.151580][ T7184] usb 5-1: Product: syz [ 997.160219][ T7184] usb 5-1: Manufacturer: syz [ 997.205640][ T7184] usb 5-1: SerialNumber: syz [ 997.469323][ T7184] usb 5-1: active config #7 != 1 ?? [ 997.494067][ T7184] usb 5-1: USB disconnect, device number 86 [ 997.718254][ T5925] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 997.752662][ T7185] usbhid 4-1:0.0: can't add hid device: -71 [ 997.758766][ T7185] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 997.771087][ T7185] usb 4-1: USB disconnect, device number 69 [ 997.880683][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 997.931158][ T5925] usb 6-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 997.994529][ T5925] usb 6-1: config 0 has no interfaces? [ 998.014956][ T5925] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 998.068872][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.109870][ T5925] usb 6-1: config 0 descriptor?? [ 998.336692][T17354] netlink: 'syz.5.2931': attribute type 7 has an invalid length. [ 998.609697][ T7193] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 998.757091][ T7193] usb 3-1: device descriptor read/64, error -71 [ 998.956887][ T7184] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 998.967053][ T7185] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 999.017019][ T7193] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 999.127030][ T7184] usb 4-1: Using ep0 maxpacket: 32 [ 999.147220][ T7185] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 999.155528][ T7185] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 999.167113][ T7193] usb 3-1: device descriptor read/64, error -71 [ 999.196794][ T7184] usb 4-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.225198][ T7184] usb 4-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid maxpacket 41728, setting to 1024 [ 999.244705][ T7185] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 999.276984][ T7184] usb 4-1: config 0 interface 0 has no altsetting 0 [ 999.283729][ T7184] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 999.291738][ T7193] usb usb3-port1: attempt power cycle [ 999.303708][ T7185] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 999.328350][ T7185] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 999.346913][ T7184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.359835][ T7185] usb 1-1: config 0 interface 0 has no altsetting 0 [ 999.367902][ T7184] usb 4-1: config 0 descriptor?? [ 999.376835][ T7185] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 999.398138][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 999.400729][ T7185] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 999.416595][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 999.425958][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 999.426347][ T7185] usb 1-1: Product: syz [ 999.433960][ T7185] usb 1-1: Manufacturer: syz [ 999.443035][ T7185] usb 1-1: SerialNumber: syz [ 999.450816][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 999.465923][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 999.468822][ T7185] usb 1-1: config 0 descriptor?? [ 999.488987][T17380] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 999.523081][ T7185] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 999.571266][ T7185] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 999.617612][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.646876][ T7193] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 999.677574][ T7193] usb 3-1: device descriptor read/8, error -71 [ 999.721970][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.872569][ T7184] petalynx 0003:18B1:0037.0094: item fetching failed at offset 2/3 [ 999.914079][ T7184] petalynx 0003:18B1:0037.0094: parse failed [ 999.917008][ T7193] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 999.957802][ T7193] usb 3-1: device descriptor read/8, error -71 [ 999.990728][ T7184] petalynx 0003:18B1:0037.0094: probe with driver petalynx failed with error -22 [ 1000.062379][ T5925] usb 6-1: string descriptor 0 read error: -71 [ 1000.068833][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.079261][ T7193] usb usb3-port1: unable to enumerate USB device [ 1000.115199][ T5925] usb 6-1: USB disconnect, device number 39 [ 1000.127002][ T7184] usb 4-1: USB disconnect, device number 70 [ 1000.172948][T17287] usb 1-1: USB disconnect, device number 113 [ 1000.219149][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.232665][T17287] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1000.449189][T17383] chnl_net:caif_netlink_parms(): no params data found [ 1000.476306][ T53] bridge_slave_1: left allmulticast mode [ 1000.482701][ T53] bridge_slave_1: left promiscuous mode [ 1000.490051][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.500894][ T53] bridge_slave_0: left allmulticast mode [ 1000.506589][ T53] bridge_slave_0: left promiscuous mode [ 1000.512489][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.521621][ T5925] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1000.661476][ T5925] usb 6-1: device descriptor read/64, error -71 [ 1000.926938][ T5925] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1001.050310][ T24] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1001.067176][ T5925] usb 6-1: device descriptor read/64, error -71 [ 1001.159848][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.171086][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.183382][ T53] bond0 (unregistering): Released all slaves [ 1001.204920][ T5925] usb usb6-port1: attempt power cycle [ 1001.243556][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.254805][T17394] bridge0: port 3(erspan0) entered blocking state [ 1001.266723][T17394] bridge0: port 3(erspan0) entered disabled state [ 1001.274077][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.284493][T17394] erspan0: entered allmulticast mode [ 1001.293598][T17394] erspan0: entered promiscuous mode [ 1001.299471][ T24] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1001.311433][T17394] bridge0: port 3(erspan0) entered blocking state [ 1001.318123][T17394] bridge0: port 3(erspan0) entered forwarding state [ 1001.325386][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.336541][ T24] usb 1-1: config 0 descriptor?? [ 1001.497025][ T5844] Bluetooth: hci2: command tx timeout [ 1001.556914][ T5925] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1001.612757][ T5925] usb 6-1: device descriptor read/8, error -71 [ 1001.704018][T17383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.728285][T17383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.745990][T17383] bridge_slave_0: entered allmulticast mode [ 1001.795447][T17383] bridge_slave_0: entered promiscuous mode [ 1001.844586][T17383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.872136][T17383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.886960][ T5925] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1001.905241][T17383] bridge_slave_1: entered allmulticast mode [ 1001.916438][T17383] bridge_slave_1: entered promiscuous mode [ 1001.927826][ T5925] usb 6-1: device descriptor read/8, error -71 [ 1001.971232][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 1001.985351][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1002.007706][ T7195] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1002.029716][ T24] usb 1-1: USB disconnect, device number 114 [ 1002.054501][ T5925] usb usb6-port1: unable to enumerate USB device [ 1002.130255][T17383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.161445][T17383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.193542][ T7195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.226351][ T7195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.247603][ T7195] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1002.262333][ T7195] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1002.294785][ T7195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.315650][ T7195] usb 3-1: config 0 descriptor?? [ 1002.339202][T17383] team0: Port device team_slave_0 added [ 1002.365741][T17383] team0: Port device team_slave_1 added [ 1002.414680][ T53] hsr_slave_0: left promiscuous mode [ 1002.426022][ T53] hsr_slave_1: left promiscuous mode [ 1002.439742][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.447414][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.455815][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.470588][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.540428][ T53] veth1_macvtap: left promiscuous mode [ 1002.546055][ T53] veth0_macvtap: left promiscuous mode [ 1002.787638][T17426] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1003.079888][T17287] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1003.366824][T17287] usb 4-1: Using ep0 maxpacket: 8 [ 1003.377447][T17287] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1003.386642][T17287] usb 4-1: config 8 has an invalid interface number: 255 but max is 0 [ 1003.448130][T17287] usb 4-1: config 8 has no interface number 0 [ 1003.454311][T17287] usb 4-1: config 8 interface 255 has no altsetting 0 [ 1003.472845][T17287] usb 4-1: string descriptor 0 read error: -22 [ 1003.479209][T17287] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1003.488445][T17287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.577042][ T5844] Bluetooth: hci2: command tx timeout [ 1003.739619][T17430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.772890][T17430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.046148][T17287] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.3-1, 00:00:00:00:00:00. [ 1004.171249][ T53] team0 (unregistering): Port device team_slave_1 removed [ 1004.248905][ T53] team0 (unregistering): Port device team_slave_0 removed [ 1004.538593][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1004.873701][ T7195] usbhid 3-1:0.0: can't add hid device: -71 [ 1004.927087][T17443] binder: 17441:17443 ioctl c0306201 0 returned -14 [ 1004.934282][ T7195] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1004.955529][ T7195] usb 3-1: USB disconnect, device number 83 [ 1005.073002][T17448] FAULT_INJECTION: forcing a failure. [ 1005.073002][T17448] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.119827][T17448] CPU: 0 UID: 0 PID: 17448 Comm: syz.5.2952 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1005.119860][T17448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1005.119889][T17448] Call Trace: [ 1005.119898][T17448] [ 1005.119908][T17448] dump_stack_lvl+0x189/0x250 [ 1005.119949][T17448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1005.119980][T17448] ? __pfx__printk+0x10/0x10 [ 1005.120007][T17448] ? __pfx___might_resched+0x10/0x10 [ 1005.120035][T17448] should_fail_ex+0x414/0x560 [ 1005.120062][T17448] should_failslab+0xa8/0x100 [ 1005.120093][T17448] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1005.120123][T17448] ? __alloc_skb+0x112/0x2d0 [ 1005.120155][T17448] __alloc_skb+0x112/0x2d0 [ 1005.120187][T17448] netlink_dump+0x245/0xe70 [ 1005.120213][T17448] ? aa_get_newest_label+0xf7/0x5d0 [ 1005.120241][T17448] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1005.120270][T17448] ? __pfx_netlink_dump+0x10/0x10 [ 1005.120291][T17448] ? rcu_is_watching+0x15/0xb0 [ 1005.120328][T17448] ? ns_capable+0x8a/0xf0 [ 1005.120351][T17448] ? __inet_diag_dump_start+0x89a/0xa10 [ 1005.120394][T17448] __netlink_dump_start+0x5cb/0x7e0 [ 1005.120443][T17448] inet_diag_rcv_msg_compat+0x1ea/0x3d0 [ 1005.120482][T17448] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 1005.120526][T17448] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 1005.120558][T17448] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 1005.120589][T17448] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 1005.120628][T17448] ? sock_diag_rcv_msg+0xd0/0x610 [ 1005.120657][T17448] sock_diag_rcv_msg+0x3d4/0x610 [ 1005.120687][T17448] netlink_rcv_skb+0x21c/0x490 [ 1005.120714][T17448] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1005.120739][T17448] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1005.120785][T17448] ? netlink_deliver_tap+0x2e/0x1b0 [ 1005.120810][T17448] ? netlink_deliver_tap+0x2e/0x1b0 [ 1005.120839][T17448] netlink_unicast+0x758/0x8d0 [ 1005.120867][T17448] netlink_sendmsg+0x805/0xb30 [ 1005.120907][T17448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.120927][T17448] ? __import_iovec+0x5d4/0x7f0 [ 1005.120949][T17448] ? aa_sock_msg_perm+0x94/0x160 [ 1005.120968][T17448] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1005.120987][T17448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.121006][T17448] __sock_sendmsg+0x21c/0x270 [ 1005.121025][T17448] ____sys_sendmsg+0x505/0x830 [ 1005.121051][T17448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1005.121086][T17448] ___sys_sendmsg+0x21f/0x2a0 [ 1005.121109][T17448] ? __pfx____sys_sendmsg+0x10/0x10 [ 1005.121158][T17448] ? __fget_files+0x2a/0x420 [ 1005.121178][T17448] ? __fget_files+0x3a0/0x420 [ 1005.121207][T17448] __sys_sendmsg+0x164/0x220 [ 1005.121230][T17448] ? __pfx___sys_sendmsg+0x10/0x10 [ 1005.121262][T17448] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1005.121291][T17448] ? lockdep_hardirqs_on+0x9c/0x150 [ 1005.121319][T17448] __do_fast_syscall_32+0xb4/0x110 [ 1005.121346][T17448] ? lockdep_hardirqs_on+0x9c/0x150 [ 1005.121368][T17448] do_fast_syscall_32+0x34/0x80 [ 1005.121389][T17448] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1005.121409][T17448] RIP: 0023:0xf7f52539 [ 1005.121423][T17448] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1005.121436][T17448] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1005.121453][T17448] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 1005.121464][T17448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1005.121473][T17448] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1005.121482][T17448] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1005.121492][T17448] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1005.121513][T17448] [ 1005.659632][ T5844] Bluetooth: hci2: command tx timeout [ 1005.893234][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2955'. [ 1005.904137][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2955'. [ 1005.917068][ T7195] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1006.078582][ T7195] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1006.087250][ T7195] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1006.099500][ T7195] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1006.110887][ T7195] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1006.122104][ T7195] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1006.136149][ T7195] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1006.145587][ T7195] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1006.154765][ T7195] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1006.165934][ T7195] usb 3-1: Product: syz [ 1006.184814][ T7195] usb 3-1: Manufacturer: syz [ 1006.192546][ T7195] usb 3-1: SerialNumber: syz [ 1006.208895][ T7195] usb 3-1: config 0 descriptor?? [ 1006.224732][T17439] netlink: 'syz.0.2949': attribute type 10 has an invalid length. [ 1006.228604][T17454] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1006.235553][T17287] usb 4-1: USB disconnect, device number 71 [ 1006.247819][T17439] netlink: 'syz.0.2949': attribute type 12 has an invalid length. [ 1006.255732][T17439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2949'. [ 1006.265416][ T5827] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1006.279978][ T7195] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1006.293782][ T7195] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1006.308393][T17383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.325761][T17383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.374345][T17383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.417106][ T5827] usb 6-1: device descriptor read/64, error -71 [ 1006.477760][T17383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.492586][T17383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.538527][T17465] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1006.616894][T17383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.787810][ T5827] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1006.865829][T17383] hsr_slave_0: entered promiscuous mode [ 1006.884934][T17383] hsr_slave_1: entered promiscuous mode [ 1006.891672][T17383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1006.899404][T17383] Cannot create hsr debugfs directory [ 1006.936954][ T5827] usb 6-1: device descriptor read/64, error -71 [ 1007.034775][T17287] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1007.047371][ T5827] usb usb6-port1: attempt power cycle [ 1007.257039][T17287] usb 4-1: Using ep0 maxpacket: 16 [ 1007.275038][T17287] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1007.338004][T17287] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1007.384565][T17287] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1007.397052][ T5827] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 1007.439099][ T5827] usb 6-1: device descriptor read/8, error -71 [ 1007.448811][T17287] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1007.483445][T17287] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1007.578413][T17287] usb 4-1: config 0 has no interface number 0 [ 1007.584608][T17287] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1007.638596][T17287] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1007.651000][T17476] FAULT_INJECTION: forcing a failure. [ 1007.651000][T17476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1007.660997][T17287] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1007.675299][T17476] CPU: 0 UID: 0 PID: 17476 Comm: syz.0.2958 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1007.675334][T17476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1007.675349][T17476] Call Trace: [ 1007.675359][T17476] [ 1007.675369][T17476] dump_stack_lvl+0x189/0x250 [ 1007.675413][T17476] ? __lock_acquire+0xaac/0xd20 [ 1007.675446][T17476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1007.675478][T17476] ? __pfx__printk+0x10/0x10 [ 1007.675500][T17476] ? __might_fault+0xb0/0x130 [ 1007.675544][T17476] should_fail_ex+0x414/0x560 [ 1007.675574][T17476] _copy_from_user+0x2d/0xb0 [ 1007.675608][T17476] get_compat_msghdr+0xad/0x4a0 [ 1007.675644][T17476] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1007.675685][T17476] ___sys_recvmsg+0x17f/0x510 [ 1007.675724][T17476] ? __pfx____sys_recvmsg+0x10/0x10 [ 1007.675785][T17476] ? __fget_files+0x3a0/0x420 [ 1007.675828][T17476] do_recvmmsg+0x36a/0x760 [ 1007.675869][T17476] ? __pfx_do_recvmmsg+0x10/0x10 [ 1007.675903][T17476] ? rcu_is_watching+0x15/0xb0 [ 1007.675947][T17476] ? handle_softirqs+0x717/0x870 [ 1007.675978][T17476] __sys_recvmmsg+0x19d/0x280 [ 1007.676012][T17476] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1007.676057][T17476] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1007.676094][T17476] __do_fast_syscall_32+0xb4/0x110 [ 1007.676134][T17476] do_fast_syscall_32+0x34/0x80 [ 1007.676164][T17476] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1007.676192][T17476] RIP: 0023:0xf7f71539 [ 1007.676212][T17476] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1007.676232][T17476] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1007.676256][T17476] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080003700 [ 1007.676272][T17476] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 1007.676285][T17476] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1007.676298][T17476] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1007.676312][T17476] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1007.676344][T17476] [ 1007.687156][ T5827] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1007.716304][T17287] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1007.751345][ T5844] Bluetooth: hci2: command tx timeout [ 1007.947859][ T5827] usb 6-1: device descriptor read/8, error -71 [ 1007.985059][T17287] usb 4-1: config 0 interface 125 has no altsetting 0 [ 1008.014202][T17287] usb 4-1: config 0 interface 125 has no altsetting 2 [ 1008.057550][ T5827] usb usb6-port1: unable to enumerate USB device [ 1008.059955][T17287] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1008.089288][T17287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.156346][T17287] usb 4-1: Product: syz [ 1008.165708][T17287] usb 4-1: Manufacturer: syz [ 1008.202959][T17287] usb 4-1: SerialNumber: syz [ 1008.246319][T17287] usb 4-1: config 0 descriptor?? [ 1008.283332][T17287] usb 4-1: selecting invalid altsetting 2 [ 1008.325768][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1008.325789][ T30] audit: type=1326 audit(1747173649.409:7034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.0.2959" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x0 [ 1008.522438][ T30] audit: type=1326 audit(1747173649.609:7035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.3.2953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1008.584899][ T30] audit: type=1326 audit(1747173649.609:7036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.3.2953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1008.702018][ T30] audit: type=1326 audit(1747173649.609:7037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.3.2953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1008.765699][ T30] audit: type=1326 audit(1747173649.609:7038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.3.2953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1008.776871][ T5887] usb 3-1: USB disconnect, device number 84 [ 1008.862456][ T5887] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1008.886948][ T30] audit: type=1326 audit(1747173649.669:7039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.3.2953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1008.945805][ C0] usb 4-1: async_complete: urb error -71 [ 1008.951603][ C0] usb 4-1: async_complete: urb error -71 [ 1008.957343][ C0] usb 4-1: async_complete: urb error -71 [ 1008.972992][T17287] get_1284_register: usb error -71 [ 1008.998198][T17287] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 1009.023827][ T30] audit: type=1326 audit(1747173649.669:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.3.2953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1009.066525][T17287] usb 4-1: USB disconnect, device number 72 [ 1009.078024][ T30] audit: type=1326 audit(1747173649.719:7041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.3.2953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1009.121409][ T30] audit: type=1326 audit(1747173649.719:7042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.3.2953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1009.254880][ T30] audit: type=1326 audit(1747173649.719:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.3.2953" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1009.426909][ T5887] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1009.494967][T17383] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1009.526569][T17383] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1009.550695][T17383] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1009.594006][T17383] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1009.626170][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.684030][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.706601][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1009.770434][ T5887] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1009.844530][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.864035][ T5887] usb 3-1: config 0 descriptor?? [ 1009.870051][ T5827] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1010.016930][ T24] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1010.041197][ T5827] usb 1-1: config 0 has an invalid interface number: 74 but max is 0 [ 1010.079485][ T5827] usb 1-1: config 0 has no interface number 0 [ 1010.082448][T17383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.102121][ T5827] usb 1-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=83.4e [ 1010.126625][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.153533][ T5827] usb 1-1: Product: syz [ 1010.175888][ T5827] usb 1-1: Manufacturer: syz [ 1010.188488][ T5827] usb 1-1: SerialNumber: syz [ 1010.196072][T17383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.210190][ T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1010.225450][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.234871][ T5827] usb 1-1: config 0 descriptor?? [ 1010.262618][T13203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.269815][T13203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.288363][ T24] usb 4-1: config 0 descriptor?? [ 1010.303367][ T24] cp210x 4-1:0.0: cp210x converter detected [ 1010.354131][T13203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.361413][T13203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.459763][ T7193] usb 1-1: USB disconnect, device number 115 [ 1010.518020][T17506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.560809][T17506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.606918][ T24] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1010.646887][ T24] cp210x 4-1:0.0: querying part number failed [ 1010.649425][T17383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1010.694658][ T24] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1010.822060][T17383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.013488][T17383] veth0_vlan: entered promiscuous mode [ 1011.060621][T17383] veth1_vlan: entered promiscuous mode [ 1011.166379][T17383] veth0_macvtap: entered promiscuous mode [ 1011.193084][T17383] veth1_macvtap: entered promiscuous mode [ 1011.226372][T17383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.242590][T17383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.255149][T17383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.282951][T17383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.311744][T17383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.322111][ T5925] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1011.338468][T17383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.353432][T17383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.365719][T17383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.393286][T17383] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.402393][ T7185] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1011.426532][T17383] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.439697][T17383] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.451247][T17383] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.503613][ T5925] usb 6-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1011.533837][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.567674][ T7185] usb 1-1: Using ep0 maxpacket: 16 [ 1011.593519][ T5925] usb 6-1: config 0 descriptor?? [ 1011.604336][ T7185] usb 1-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 1011.625318][ T7185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.652147][ T7185] usb 1-1: Product: syz [ 1011.666616][ T7185] usb 1-1: Manufacturer: syz [ 1011.683973][ T7185] usb 1-1: SerialNumber: syz [ 1011.714880][ T9352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.723933][ T7185] usb 1-1: config 0 descriptor?? [ 1011.746479][ T9352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.837257][ T9352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.846434][ T9352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.180886][T17530] FAULT_INJECTION: forcing a failure. [ 1012.180886][T17530] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.201844][T17530] CPU: 1 UID: 0 PID: 17530 Comm: syz.4.2938 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1012.201878][T17530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1012.201892][T17530] Call Trace: [ 1012.201902][T17530] [ 1012.201912][T17530] dump_stack_lvl+0x189/0x250 [ 1012.201957][T17530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1012.201989][T17530] ? __pfx__printk+0x10/0x10 [ 1012.202018][T17530] ? __pfx___might_resched+0x10/0x10 [ 1012.202040][T17530] ? fs_reclaim_acquire+0x7d/0x100 [ 1012.202079][T17530] should_fail_ex+0x414/0x560 [ 1012.202107][T17530] should_failslab+0xa8/0x100 [ 1012.202140][T17530] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1012.202168][T17530] ? __alloc_skb+0x112/0x2d0 [ 1012.202191][T17530] __alloc_skb+0x112/0x2d0 [ 1012.202214][T17530] netlink_ack+0x146/0xa50 [ 1012.202231][T17530] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1012.202270][T17530] ? ref_tracker_free+0x63a/0x7d0 [ 1012.202293][T17530] ? __copy_skb_header+0xa7/0x550 [ 1012.202327][T17530] netlink_rcv_skb+0x2a0/0x490 [ 1012.202345][T17530] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1012.202368][T17530] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1012.202420][T17530] ? down_read+0x1ad/0x2e0 [ 1012.202456][T17530] genl_rcv+0x28/0x40 [ 1012.202482][T17530] netlink_unicast+0x758/0x8d0 [ 1012.202507][T17530] netlink_sendmsg+0x805/0xb30 [ 1012.202533][T17530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1012.202557][T17530] ? __import_iovec+0x5d4/0x7f0 [ 1012.202587][T17530] ? aa_sock_msg_perm+0x94/0x160 [ 1012.202614][T17530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1012.202641][T17530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1012.202661][T17530] __sock_sendmsg+0x21c/0x270 [ 1012.202680][T17530] ____sys_sendmsg+0x505/0x830 [ 1012.202710][T17530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1012.202760][T17530] ___sys_sendmsg+0x21f/0x2a0 [ 1012.202792][T17530] ? __pfx____sys_sendmsg+0x10/0x10 [ 1012.202847][T17530] ? __fget_files+0x2a/0x420 [ 1012.202874][T17530] ? __fget_files+0x3a0/0x420 [ 1012.202916][T17530] __sys_sendmsg+0x164/0x220 [ 1012.202948][T17530] ? __pfx___sys_sendmsg+0x10/0x10 [ 1012.202985][T17530] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1012.203006][T17530] ? lockdep_hardirqs_on+0x9c/0x150 [ 1012.203037][T17530] __do_fast_syscall_32+0xb4/0x110 [ 1012.203068][T17530] ? lockdep_hardirqs_on+0x9c/0x150 [ 1012.203098][T17530] do_fast_syscall_32+0x34/0x80 [ 1012.203124][T17530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1012.203145][T17530] RIP: 0023:0xf7f88539 [ 1012.203160][T17530] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1012.203181][T17530] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1012.203206][T17530] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001ac0 [ 1012.203221][T17530] RDX: 00000000000000d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1012.203234][T17530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1012.203246][T17530] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1012.203258][T17530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1012.203290][T17530] [ 1012.437372][T17516] loop8: detected capacity change from 0 to 8 [ 1012.439656][ C1] vkms_vblank_simulate: vblank timer overrun [ 1012.477316][T17516] Dev loop8: unable to read RDB block 8 [ 1012.479689][ C1] vkms_vblank_simulate: vblank timer overrun [ 1012.501673][T17516] loop8: unable to read partition table [ 1012.547673][ T7185] mxuport 1-1:0.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 1012.555402][ T7185] mxuport 1-1:0.0: probe with driver mxuport failed with error -5 [ 1012.603359][T17516] loop8: partition table beyond EOD, truncated [ 1012.688068][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 1012.694183][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1012.709419][ T5887] usb 3-1: USB disconnect, device number 85 [ 1012.794228][T17516] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1012.819893][ T24] usb 1-1: USB disconnect, device number 116 [ 1012.875998][ T7185] usb 4-1: USB disconnect, device number 73 [ 1012.889669][ T5925] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1012.912307][ T7185] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1012.956884][ T5925] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 1012.987544][ T7185] cp210x 4-1:0.0: device disconnected [ 1013.025471][ T5925] asix 6-1:0.0: probe with driver asix failed with error -71 [ 1013.120987][ T5925] usb 6-1: USB disconnect, device number 48 [ 1013.161976][T17551] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2968'. [ 1013.463803][T17545] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1013.609599][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2970'. [ 1014.317159][ T5827] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1014.386906][T17287] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1014.470116][ T5827] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1014.491184][ T5827] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1014.555227][ T5827] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1014.601290][ T5827] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1014.643313][T17287] usb 6-1: Using ep0 maxpacket: 16 [ 1014.643313][ T5827] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1014.643346][ T5827] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1014.697025][T17287] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1014.716271][T17287] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1014.782258][T17287] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1014.782976][ T5827] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1014.839416][T17287] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1014.872297][ T5827] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1014.886540][T17287] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1014.927558][ T5827] usb 4-1: Product: syz [ 1014.931796][ T5827] usb 4-1: Manufacturer: syz [ 1014.946443][T17287] usb 6-1: config 0 has no interface number 0 [ 1014.967391][T17287] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1014.996913][T17287] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1015.009953][ T5827] usb 4-1: SerialNumber: syz [ 1015.030073][ T5827] usb 4-1: config 0 descriptor?? [ 1015.045856][T17563] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1015.057672][ T5827] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1015.074213][ T5827] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1015.106935][T17287] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1015.196917][T17287] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1015.257350][T17287] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1015.264213][T17287] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1015.319603][T17287] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1015.346591][T17287] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.410763][T17287] usb 6-1: Product: syz [ 1015.432158][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1015.433923][T17287] usb 6-1: Manufacturer: syz [ 1015.453954][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1015.465529][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1015.484347][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1015.507269][T17287] usb 6-1: SerialNumber: syz [ 1015.512341][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1015.640639][T17287] usb 6-1: config 0 descriptor?? [ 1015.745101][T17287] usb 6-1: selecting invalid altsetting 2 [ 1015.893842][T13193] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.953572][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1015.953594][ T30] audit: type=1326 audit(1747173657.039:7073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.5.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1015.983199][ T7193] usb 4-1: USB disconnect, device number 74 [ 1016.045577][ T7193] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1016.145322][ T30] audit: type=1326 audit(1747173657.039:7074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.5.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1016.209183][T13193] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.256208][ T30] audit: type=1326 audit(1747173657.039:7075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.5.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1016.334638][ T30] audit: type=1326 audit(1747173657.039:7076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.5.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1016.357255][ C0] usb 6-1: async_complete: urb error -71 [ 1016.357364][ C0] usb 6-1: async_complete: urb error -71 [ 1016.357458][ C0] usb 6-1: async_complete: urb error -71 [ 1016.384682][T13193] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.398249][T17287] get_1284_register: usb error -71 [ 1016.403541][T17287] uss720 6-1:0.125: probe with driver uss720 failed with error -71 [ 1016.417007][ T30] audit: type=1326 audit(1747173657.039:7077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.5.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1016.447022][T17287] usb 6-1: USB disconnect, device number 49 [ 1016.510403][ T30] audit: type=1326 audit(1747173657.109:7078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.5.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1016.590627][ T30] audit: type=1326 audit(1747173657.109:7079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.5.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1016.678042][ T30] audit: type=1326 audit(1747173657.139:7080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.5.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1016.707983][ T30] audit: type=1326 audit(1747173657.149:7081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.5.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1016.730507][ T30] audit: type=1326 audit(1747173657.149:7082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.5.2972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1016.825278][T13193] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.851097][T17609] xt_connbytes: Forcing CT accounting to be enabled [ 1016.864142][T17609] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1017.167975][ T5887] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1017.443053][ T5887] usb 4-1: config index 0 descriptor too short (expected 36, got 18) [ 1017.538151][T17590] chnl_net:caif_netlink_parms(): no params data found [ 1017.545119][ T5887] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1017.604300][ T5844] Bluetooth: hci3: command tx timeout [ 1017.612329][ T5887] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1017.759168][ T5887] usb 4-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 1017.845667][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.865451][ T5887] usb 4-1: config 0 descriptor?? [ 1018.093505][ T5887] usb 4-1: string descriptor 0 read error: -71 [ 1018.106208][ T5887] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1018.115820][ T5887] usb 4-1: USB disconnect, device number 75 [ 1018.374976][T17590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.409951][T17590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.462133][T17590] bridge_slave_0: entered allmulticast mode [ 1018.474961][T17590] bridge_slave_0: entered promiscuous mode [ 1018.512644][T17590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.548725][T17590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.567193][T17590] bridge_slave_1: entered allmulticast mode [ 1018.605298][T17590] bridge_slave_1: entered promiscuous mode [ 1018.758036][T13193] bridge_slave_1: left allmulticast mode [ 1018.787075][T13193] bridge_slave_1: left promiscuous mode [ 1018.800861][T13193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.863508][T13193] bridge_slave_0: left allmulticast mode [ 1018.882526][T13193] bridge_slave_0: left promiscuous mode [ 1018.888625][T13193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.297375][ T7185] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1019.463289][ T7185] usb 3-1: Using ep0 maxpacket: 16 [ 1019.488253][ T7185] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1019.510830][ T7185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.532269][ T7185] usb 3-1: Product: syz [ 1019.536510][ T7185] usb 3-1: Manufacturer: syz [ 1019.559443][ T7185] usb 3-1: SerialNumber: syz [ 1019.574796][ T7185] usb 3-1: config 0 descriptor?? [ 1019.625005][ T7185] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1019.670818][ T5844] Bluetooth: hci3: command tx timeout [ 1019.817126][ T7185] gp8psk: usb in 128 operation failed. [ 1019.824446][ T7185] gp8psk: usb in 137 operation failed. [ 1019.830824][ T7185] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1019.841224][ T7185] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1019.863189][ T7185] usb 3-1: media controller created [ 1019.913264][ T7185] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1019.959418][ T7185] gp8psk_fe: Frontend revision 1 attached [ 1019.989729][ T7185] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1020.005662][ T7185] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1020.388739][ T7185] gp8psk: usb in 137 operation failed. [ 1020.395784][ T7185] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1020.489984][ T7185] gp8psk: found Genpix USB device pID = 201 (hex) [ 1020.588911][ T7185] usb 3-1: USB disconnect, device number 86 [ 1020.794490][ T7185] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1020.836621][T13193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.852956][T13193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.864283][T13193] bond0 (unregistering): Released all slaves [ 1021.130160][T13193] bond1 (unregistering): Released all slaves [ 1021.150103][T17590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.169642][T17590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.179932][ T5925] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1021.227788][ T7185] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1021.347999][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 1021.370646][ T5925] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1021.386865][ T5925] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1021.397773][ T7185] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1021.412773][ T5925] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1021.422518][ T7185] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1021.441161][ T5925] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1021.448254][T17590] team0: Port device team_slave_0 added [ 1021.459690][ T7185] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1021.477075][T17675] sctp: [Deprecated]: syz.2.2992 (pid 17675) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1021.477075][T17675] Use struct sctp_sack_info instead [ 1021.496598][T17590] team0: Port device team_slave_1 added [ 1021.499810][ T5925] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1021.525349][ T7185] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1021.546988][ T5925] usb 5-1: config 0 has no interface number 0 [ 1021.553185][ T5925] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1021.571592][ T7185] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1021.585863][ T5925] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1021.599985][ T7185] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1021.621874][ T5925] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1021.642108][ T7185] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1021.654226][ T5925] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1021.669067][ T7185] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1021.679641][ T7185] usb 4-1: Product: syz [ 1021.706856][ T7185] usb 4-1: Manufacturer: syz [ 1021.711659][ T5925] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1021.730148][ T7185] usb 4-1: SerialNumber: syz [ 1021.737170][ T5844] Bluetooth: hci3: command tx timeout [ 1021.742965][ T5925] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1021.754544][ T7185] usb 4-1: config 0 descriptor?? [ 1021.769506][ T5925] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1021.780153][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.788947][T17665] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1021.799537][ T7185] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1021.809455][ T5925] usb 5-1: Product: syz [ 1021.813740][ T5925] usb 5-1: Manufacturer: syz [ 1021.823126][ T7185] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1021.832484][ T5925] usb 5-1: SerialNumber: syz [ 1021.859394][ T5925] usb 5-1: config 0 descriptor?? [ 1021.902145][ T5925] usb 5-1: selecting invalid altsetting 2 [ 1021.915829][T17590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.935811][T17590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.981034][T17590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.054342][T17590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.101007][T17590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.134588][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1022.134607][ T30] audit: type=1326 audit(1747173663.189:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17663 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1022.166180][T17590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.178961][ T30] audit: type=1326 audit(1747173663.189:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17663 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1022.333929][ T30] audit: type=1326 audit(1747173663.219:7116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17663 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1022.443864][ T30] audit: type=1326 audit(1747173663.219:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17663 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1022.552126][ T30] audit: type=1326 audit(1747173663.219:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17663 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1022.589599][ C0] usb 5-1: async_complete: urb error -71 [ 1022.595408][ C0] usb 5-1: async_complete: urb error -71 [ 1022.601185][ C0] usb 5-1: async_complete: urb error -71 [ 1022.616824][ T5925] get_1284_register: usb error -71 [ 1022.623897][ T5925] uss720 5-1:0.125: probe with driver uss720 failed with error -71 [ 1022.679964][ T5925] usb 5-1: USB disconnect, device number 88 [ 1022.686923][ T30] audit: type=1326 audit(1747173663.299:7119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17663 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1022.779780][ T30] audit: type=1326 audit(1747173663.299:7120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17663 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1022.831592][ T30] audit: type=1326 audit(1747173663.299:7121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17663 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1022.855738][ T30] audit: type=1326 audit(1747173663.299:7122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17663 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1022.896360][ T30] audit: type=1326 audit(1747173663.299:7123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17663 comm="syz.4.2989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88539 code=0x7ffc0000 [ 1022.966603][ T5827] usb 4-1: USB disconnect, device number 76 [ 1023.049943][ T5827] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1023.148064][T13193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.181761][T13193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.205128][T13193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.472998][T13193] veth1_macvtap: left promiscuous mode [ 1023.485700][T13193] veth0_macvtap: left promiscuous mode [ 1023.834504][ T5844] Bluetooth: hci3: command tx timeout [ 1024.066011][T17721] fuse: Bad value for 'fd' [ 1024.070801][ T5827] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1024.303343][ T5827] usb 6-1: Using ep0 maxpacket: 8 [ 1024.324965][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.348773][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.451138][ T5827] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1024.503859][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.535029][ T5827] usb 6-1: config 0 descriptor?? [ 1025.004995][T17727] binder: 17712:17727 ioctl c0306201 80000540 returned -22 [ 1025.064466][T17728] binder: 17712:17728 ioctl c0306201 80000640 returned -22 [ 1025.279921][ T5827] logitech 0003:046D:C24F.0095: unknown main item tag 0x7 [ 1025.293299][ T5827] logitech 0003:046D:C24F.0095: unbalanced collection at end of report description [ 1025.324799][ T5827] logitech 0003:046D:C24F.0095: parse failed [ 1025.360846][ T5827] logitech 0003:046D:C24F.0095: probe with driver logitech failed with error -22 [ 1025.561485][T13193] team0 (unregistering): Port device team_slave_1 removed [ 1025.679609][T13193] team0 (unregistering): Port device team_slave_0 removed [ 1025.810689][ T5827] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1025.972424][ T5827] usb 5-1: Using ep0 maxpacket: 16 [ 1025.979868][ T5827] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 184, changing to 11 [ 1026.007473][ T5827] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1026.029223][ T5827] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1026.505943][T17590] hsr_slave_0: entered promiscuous mode [ 1026.517280][T17590] hsr_slave_1: entered promiscuous mode [ 1026.523687][T17590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1026.535018][T17699] syz.2.2995 (17699): drop_caches: 3 [ 1026.546810][T17590] Cannot create hsr debugfs directory [ 1027.047030][ T5888] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1027.134979][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3002'. [ 1027.269322][ T5888] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1027.296555][ T5888] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.338957][ T5888] usb 4-1: config 220 has no interface number 2 [ 1027.356369][ T5888] usb 4-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x58, changing to 0x8 [ 1027.409104][ T5888] usb 4-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1027.460695][ T5888] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1027.543889][ T5888] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1027.571879][ T5888] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1027.597795][ T5888] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1027.612415][ T5888] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1027.623380][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.632617][ T5888] usb 4-1: Product: syz [ 1027.637341][ T5888] usb 4-1: Manufacturer: syz [ 1027.643122][ T5888] usb 4-1: SerialNumber: syz [ 1027.722563][ T7185] usb 6-1: USB disconnect, device number 50 [ 1028.208563][ T5888] usb 4-1: selecting invalid altsetting 0 [ 1028.216244][ T5888] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1028.236234][ T5888] usb 4-1: No valid video chain found. [ 1028.305947][ T5888] usb 4-1: selecting invalid altsetting 0 [ 1028.386811][ T5888] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1028.414677][T17590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1028.430914][ T5888] usb 4-1: USB disconnect, device number 77 [ 1028.484148][T17590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1028.525064][T17590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1028.554320][T17590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1028.739818][ T5827] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1028.774505][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.813137][ T5827] usb 5-1: can't set config #1, error -71 [ 1028.877345][ T5827] usb 5-1: USB disconnect, device number 89 [ 1029.190904][T17590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.321028][T17590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.361615][T13203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.368851][T13203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.403137][T13203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.410392][T13203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.477005][ T5888] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1029.523221][T17590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1029.626967][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 1029.635642][ T5888] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1029.646054][ T5888] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1029.667612][ T5888] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1029.687691][T17590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.694613][ T5888] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1029.706320][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1029.738249][ T5888] usb 6-1: config 0 has no interface number 0 [ 1029.779787][ T5888] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1029.807781][ T5888] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1029.817052][ T5827] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 1029.871960][ T5888] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1029.892442][T17590] veth0_vlan: entered promiscuous mode [ 1029.896988][ T5888] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1029.932174][ T5888] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1029.948015][ T5888] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1029.974743][ T5888] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1029.985403][T17590] veth1_vlan: entered promiscuous mode [ 1029.985684][ T5827] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1030.002734][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.029441][ T7193] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1030.043638][ T5827] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1030.044370][ T5888] usb 6-1: Product: syz [ 1030.082002][T17590] veth0_macvtap: entered promiscuous mode [ 1030.089011][ T5888] usb 6-1: Manufacturer: syz [ 1030.093998][ T5888] usb 6-1: SerialNumber: syz [ 1030.109880][ T5827] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1030.113387][T17590] veth1_macvtap: entered promiscuous mode [ 1030.146334][ T5888] usb 6-1: config 0 descriptor?? [ 1030.163363][ T5888] usb 6-1: selecting invalid altsetting 2 [ 1030.182404][ T5827] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1030.240413][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.252012][ T5827] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1030.275240][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.286000][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.297347][ T7193] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.304271][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.317501][ T7193] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1030.317553][ T7193] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1030.317578][ T7193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.319335][ T5827] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1030.382561][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1030.382581][ T30] audit: type=1326 audit(1747173671.469:7187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.5.3006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1030.402453][ T5827] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1030.471867][ T30] audit: type=1326 audit(1747173671.469:7188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.5.3006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1030.479001][T17590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.522741][ T5827] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1030.543112][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.563415][T17781] netlink: 'syz.3.3010': attribute type 10 has an invalid length. [ 1030.574210][ T30] audit: type=1326 audit(1747173671.469:7189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.5.3006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1030.579111][ T5827] usb 5-1: Product: syz [ 1030.605984][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.636686][ T30] audit: type=1326 audit(1747173671.469:7190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.5.3006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1030.661675][ C0] usb 6-1: async_complete: urb error -71 [ 1030.689541][ C0] usb 6-1: async_complete: urb error -71 [ 1030.695251][ C0] usb 6-1: async_complete: urb error -71 [ 1030.717128][ T5888] get_1284_register: usb error -71 [ 1030.725628][ T5888] uss720 6-1:0.125: probe with driver uss720 failed with error -71 [ 1030.735591][ T30] audit: type=1326 audit(1747173671.469:7191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.5.3006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1030.749907][ T5827] usb 5-1: Manufacturer: syz [ 1030.766284][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.776186][ T5888] usb 6-1: USB disconnect, device number 51 [ 1030.794803][ T5827] usb 5-1: SerialNumber: syz [ 1030.808391][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.823599][ T30] audit: type=1326 audit(1747173671.529:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.5.3006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1030.852215][T17590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.871863][ T5827] usb 5-1: config 0 descriptor?? [ 1030.891676][T17775] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1030.919238][ T5827] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1030.941044][ T5827] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1030.966407][T17781] team0: Device veth1_macvtap failed to register rx_handler [ 1030.996614][T17590] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.035373][ T30] audit: type=1326 audit(1747173671.529:7193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.5.3006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1031.062499][T17590] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.104378][T17590] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.122665][T17590] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.145259][ T30] audit: type=1326 audit(1747173671.539:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.5.3006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1031.203224][ T30] audit: type=1326 audit(1747173671.539:7195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.5.3006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1031.411303][ T5887] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1031.468656][ T30] audit: type=1326 audit(1747173671.539:7196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.5.3006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 1031.618629][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 1031.661842][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.713242][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.737509][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.752781][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.825420][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1031.885869][ T7184] usb 5-1: USB disconnect, device number 90 [ 1031.907911][ T7184] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1031.914700][ T5887] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1031.946534][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.014889][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.014915][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.037149][ T5887] usb 3-1: config 0 descriptor?? [ 1032.094876][T17802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3012'. [ 1032.850197][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 1032.851241][T17812] netlink: 'syz.0.2971': attribute type 4 has an invalid length. [ 1032.856264][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1033.029200][ T5887] usb 3-1: USB disconnect, device number 87 [ 1033.234483][ T5827] usb 4-1: USB disconnect, device number 78 [ 1033.513914][T17831] input: syz0 as /devices/virtual/input/input132 [ 1033.799165][ T5887] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1034.055626][ T5887] usb 3-1: config 0 has no interfaces? [ 1034.120031][ T5887] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1034.310034][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.357147][ T5887] usb 3-1: Product: syz [ 1034.413665][ T5887] usb 3-1: Manufacturer: syz [ 1034.477295][ T5887] usb 3-1: SerialNumber: syz [ 1034.558948][ T5887] usb 3-1: config 0 descriptor?? [ 1034.738603][T17848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3018'. [ 1035.316620][T17861] FAULT_INJECTION: forcing a failure. [ 1035.316620][T17861] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.350832][T17861] CPU: 0 UID: 0 PID: 17861 Comm: syz.3.3023 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1035.350865][T17861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1035.350879][T17861] Call Trace: [ 1035.350889][T17861] [ 1035.350898][T17861] dump_stack_lvl+0x189/0x250 [ 1035.350946][T17861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1035.350978][T17861] ? __pfx__printk+0x10/0x10 [ 1035.351004][T17861] ? __pfx___might_resched+0x10/0x10 [ 1035.351025][T17861] ? fs_reclaim_acquire+0x7d/0x100 [ 1035.351063][T17861] should_fail_ex+0x414/0x560 [ 1035.351092][T17861] should_failslab+0xa8/0x100 [ 1035.351124][T17861] __kmalloc_cache_noprof+0x70/0x3d0 [ 1035.351153][T17861] ? ip6_setup_cork+0x1de/0x11c0 [ 1035.351185][T17861] ip6_setup_cork+0x1de/0x11c0 [ 1035.351223][T17861] ip6_append_data+0x23d/0x380 [ 1035.351251][T17861] ? __pfx_raw6_getfrag+0x10/0x10 [ 1035.351285][T17861] rawv6_sendmsg+0x1245/0x17f0 [ 1035.351331][T17861] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1035.351359][T17861] ? __lock_acquire+0xaac/0xd20 [ 1035.351417][T17861] ? __pfx_aa_sk_perm+0x10/0x10 [ 1035.351445][T17861] ? sock_rps_record_flow+0x19/0x400 [ 1035.351480][T17861] ? inet_sendmsg+0x2f4/0x370 [ 1035.351510][T17861] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1035.351540][T17861] __sock_sendmsg+0x19c/0x270 [ 1035.351566][T17861] sock_write_iter+0x258/0x330 [ 1035.351603][T17861] ? __pfx_sock_write_iter+0x10/0x10 [ 1035.351649][T17861] ? bpf_lsm_file_permission+0x9/0x20 [ 1035.351677][T17861] ? security_file_permission+0x75/0x290 [ 1035.351721][T17861] vfs_write+0x548/0xa90 [ 1035.351752][T17861] ? __pfx_sock_write_iter+0x10/0x10 [ 1035.351786][T17861] ? __pfx_vfs_write+0x10/0x10 [ 1035.351827][T17861] ? __fget_files+0x2a/0x420 [ 1035.351867][T17861] ksys_write+0x145/0x250 [ 1035.351895][T17861] ? __pfx_ksys_write+0x10/0x10 [ 1035.351930][T17861] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1035.351959][T17861] ? lockdep_hardirqs_on+0x9c/0x150 [ 1035.351988][T17861] __do_fast_syscall_32+0xb4/0x110 [ 1035.352018][T17861] ? lockdep_hardirqs_on+0x9c/0x150 [ 1035.352050][T17861] do_fast_syscall_32+0x34/0x80 [ 1035.352078][T17861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1035.352105][T17861] RIP: 0023:0xf7f03539 [ 1035.352124][T17861] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1035.352143][T17861] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1035.352166][T17861] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1035.352181][T17861] RDX: 00000000000005ac RSI: 0000000000000000 RDI: 0000000000000000 [ 1035.352194][T17861] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1035.352207][T17861] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1035.352220][T17861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1035.352248][T17861] [ 1036.456056][T17879] input: syz0 as /devices/virtual/input/input134 [ 1036.546924][ T7193] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1036.779186][ T7193] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1036.788708][ T7193] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1036.827189][ T7193] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1036.927081][ T7193] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1036.948009][ T5888] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 1036.971230][ T7193] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1037.001380][ T7193] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1037.021209][ T7193] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1037.033807][ T7193] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1037.044101][ T7193] usb 4-1: Product: syz [ 1037.053788][ T7193] usb 4-1: Manufacturer: syz [ 1037.241691][ T7193] usb 4-1: SerialNumber: syz [ 1037.281136][ T5888] usb 1-1: config 0 has an invalid interface number: 189 but max is 0 [ 1037.303539][ T5888] usb 1-1: config 0 has no interface number 0 [ 1037.316127][ T7184] usb 3-1: USB disconnect, device number 88 [ 1037.364833][ T5888] usb 1-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1037.446972][ T7193] usb 4-1: config 0 descriptor?? [ 1037.466549][ T5888] usb 1-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1037.497625][T17875] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1037.514781][ T7193] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1037.575254][ T5888] usb 1-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 1037.591692][ T7193] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1037.653996][ T5888] usb 1-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1037.756882][ T5888] usb 1-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1037.857554][ T5888] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1037.868444][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.877123][ T5888] usb 1-1: Product: syz [ 1037.882098][ T5888] usb 1-1: Manufacturer: syz [ 1037.886993][ T5888] usb 1-1: SerialNumber: syz [ 1038.111507][ T5888] usb 1-1: config 0 descriptor?? [ 1038.168295][T17885] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1038.180573][ T5888] ums-alauda 1-1:0.189: USB Mass Storage device detected [ 1038.298638][ T5888] scsi host1: usb-storage 1-1:0.189 [ 1038.962538][ T5888] usb 4-1: USB disconnect, device number 79 [ 1038.992070][ T5888] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1039.679756][T17915] ================================================================== [ 1039.687899][T17915] BUG: KASAN: slab-use-after-free in fib6_ifdown+0xa2/0x4c0 [ 1039.695245][T17915] Read of size 8 at addr ffff88807cb930b0 by task syz.4.3033/17915 [ 1039.696178][T13198] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 1039.703164][T17915] [ 1039.703180][T17915] CPU: 1 UID: 0 PID: 17915 Comm: syz.4.3033 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1039.703206][T17915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1039.703220][T17915] Call Trace: [ 1039.703230][T17915] [ 1039.703240][T17915] dump_stack_lvl+0x189/0x250 [ 1039.703281][T17915] ? __virt_addr_valid+0x18c/0x540 [ 1039.703309][T17915] ? rcu_is_watching+0x15/0xb0 [ 1039.703329][T17915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1039.703358][T17915] ? rcu_is_watching+0x15/0xb0 [ 1039.703377][T17915] ? lock_release+0x4b/0x3e0 [ 1039.703413][T17915] ? __virt_addr_valid+0x18c/0x540 [ 1039.703445][T17915] ? __virt_addr_valid+0x469/0x540 [ 1039.703478][T17915] print_report+0xb4/0x290 [ 1039.703507][T17915] ? fib6_ifdown+0xa2/0x4c0 [ 1039.703536][T17915] kasan_report+0x118/0x150 [ 1039.703568][T17915] ? fib6_ifdown+0xa2/0x4c0 [ 1039.703601][T17915] fib6_ifdown+0xa2/0x4c0 [ 1039.703631][T17915] ? __pfx_fib6_ifdown+0x10/0x10 [ 1039.703659][T17915] fib6_clean_node+0x24d/0x590 [ 1039.703689][T17915] ? __pfx_fib6_clean_node+0x10/0x10 [ 1039.703721][T17915] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1039.703747][T17915] fib6_walk_continue+0x678/0x910 [ 1039.703782][T17915] fib6_walk+0x149/0x290 [ 1039.703810][T17915] __fib6_clean_all+0x234/0x380 [ 1039.703835][T17915] ? __fib6_clean_all+0x9b/0x380 [ 1039.703861][T17915] ? __pfx_fib6_ifdown+0x10/0x10 [ 1039.703890][T17915] ? __pfx___fib6_clean_all+0x10/0x10 [ 1039.703918][T17915] ? __pfx_fib6_clean_node+0x10/0x10 [ 1039.703946][T17915] ? __pfx_fib6_ifdown+0x10/0x10 [ 1039.703974][T17915] ? __lock_acquire+0xaac/0xd20 [ 1039.704012][T17915] rt6_disable_ip+0x120/0x720 [ 1039.704044][T17915] ? rcu_is_watching+0x15/0xb0 [ 1039.704064][T17915] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1039.704100][T17915] addrconf_ifdown+0x15d/0x1880 [ 1039.704124][T17915] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1039.704157][T17915] ? __pfx___mutex_lock+0x10/0x10 [ 1039.704187][T17915] ? tls_dev_event+0x717/0xec0 [ 1039.704222][T17915] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1039.704253][T17915] addrconf_notify+0x1bc/0x1010 [ 1039.704293][T17915] notifier_call_chain+0x1b3/0x3e0 [ 1039.704321][T17915] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1039.704368][T17915] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1039.704410][T17915] ? irqentry_exit+0x74/0x90 [ 1039.704439][T17915] ? lockdep_hardirqs_on+0x9c/0x150 [ 1039.704476][T17915] unregister_netdevice_queue+0x33c/0x380 [ 1039.704512][T17915] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 1039.704537][T17915] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1039.704571][T17915] ? linkwatch_urgent_event+0x62/0x3a0 [ 1039.704610][T17915] __tun_detach+0xda4/0x1560 [ 1039.704639][T17915] ? __pfx_tun_chr_close+0x10/0x10 [ 1039.704673][T17915] tun_chr_close+0x10a/0x1c0 [ 1039.704706][T17915] __fput+0x449/0xa70 [ 1039.704732][T17915] task_work_run+0x1d4/0x260 [ 1039.704766][T17915] ? __pfx_task_work_run+0x10/0x10 [ 1039.704803][T17915] resume_user_mode_work+0x5e/0x80 [ 1039.704838][T17915] syscall_exit_to_user_mode+0x9a/0x120 [ 1039.704870][T17915] __do_fast_syscall_32+0xc1/0x110 [ 1039.704903][T17915] ? lockdep_hardirqs_on+0x9c/0x150 [ 1039.704933][T17915] do_fast_syscall_32+0x34/0x80 [ 1039.704964][T17915] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1039.704992][T17915] RIP: 0023:0xf7f88539 [ 1039.705014][T17915] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1039.705035][T17915] RSP: 002b:00000000f756fadc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 1039.705061][T17915] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 1039.705076][T17915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1039.705089][T17915] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1039.705103][T17915] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1039.705119][T17915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1039.705142][T17915] [ 1039.705151][T17915] [ 1040.103887][T17915] Allocated by task 2: [ 1040.107963][T17915] kasan_save_track+0x3e/0x80 [ 1040.112654][T17915] __kasan_kmalloc+0x93/0xb0 [ 1040.117279][T17915] __kmalloc_cache_noprof+0x230/0x3d0 [ 1040.122682][T17915] set_kthread_struct+0xbb/0x340 [ 1040.127632][T17915] copy_process+0x10b7/0x3b80 [ 1040.132341][T17915] kernel_clone+0x21e/0x870 [ 1040.136858][T17915] kernel_thread+0x10c/0x160 [ 1040.141464][T17915] kthreadd+0x575/0x770 [ 1040.145632][T17915] ret_from_fork+0x4b/0x80 [ 1040.150061][T17915] ret_from_fork_asm+0x1a/0x30 [ 1040.154840][T17915] [ 1040.157175][T17915] Freed by task 5887: [ 1040.161204][T17915] kasan_save_track+0x3e/0x80 [ 1040.165909][T17915] kasan_save_free_info+0x46/0x50 [ 1040.170948][T17915] __kasan_slab_free+0x62/0x70 [ 1040.175730][T17915] kfree+0x193/0x440 [ 1040.179646][T17915] free_task+0xe7/0x160 [ 1040.183854][T17915] delayed_put_task_struct+0x11f/0x2f0 [ 1040.189360][T17915] rcu_core+0xca5/0x1710 [ 1040.193647][T17915] handle_softirqs+0x283/0x870 [ 1040.198639][T17915] __irq_exit_rcu+0xca/0x1f0 [ 1040.203241][T17915] irq_exit_rcu+0x9/0x30 [ 1040.207539][T17915] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1040.213220][T17915] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1040.219243][T17915] [ 1040.221584][T17915] The buggy address belongs to the object at ffff88807cb93000 [ 1040.221584][T17915] which belongs to the cache kmalloc-512 of size 512 [ 1040.235749][T17915] The buggy address is located 176 bytes inside of [ 1040.235749][T17915] freed 512-byte region [ffff88807cb93000, ffff88807cb93200) [ 1040.249573][T17915] [ 1040.251912][T17915] The buggy address belongs to the physical page: [ 1040.258343][T17915] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cb90 [ 1040.267161][T17915] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1040.275679][T17915] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1040.283768][T17915] page_type: f5(slab) [ 1040.287780][T17915] raw: 00fff00000000040 ffff88801a041c80 0000000000000000 dead000000000001 [ 1040.296384][T17915] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1040.305028][T17915] head: 00fff00000000040 ffff88801a041c80 0000000000000000 dead000000000001 [ 1040.313808][T17915] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1040.322501][T17915] head: 00fff00000000002 ffffea0001f2e401 00000000ffffffff 00000000ffffffff [ 1040.331202][T17915] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1040.339884][T17915] page dumped because: kasan: bad access detected [ 1040.346321][T17915] page_owner tracks the page as allocated [ 1040.352051][T17915] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3479, tgid 3479 (kworker/u8:11), ts 98738762089, free_ts 98704753739 [ 1040.371449][T17915] post_alloc_hook+0x1d8/0x230 [ 1040.376249][T17915] get_page_from_freelist+0x21ce/0x22b0 [ 1040.381827][T17915] __alloc_frozen_pages_noprof+0x181/0x370 [ 1040.387663][T17915] alloc_pages_mpol+0x232/0x4a0 [ 1040.392554][T17915] allocate_slab+0x8a/0x3b0 [ 1040.397081][T17915] ___slab_alloc+0xbfc/0x1480 [ 1040.401786][T17915] __kmalloc_cache_noprof+0x296/0x3d0 [ 1040.407187][T17915] tipc_sub_subscribe+0x118/0x690 [ 1040.412243][T17915] tipc_conn_rcv_sub+0x136/0x350 [ 1040.417216][T17915] tipc_conn_recv_work+0x346/0x470 [ 1040.422366][T17915] process_scheduled_works+0xade/0x17a0 [ 1040.427934][T17915] worker_thread+0x8a0/0xda0 [ 1040.432575][T17915] kthread+0x711/0x8a0 [ 1040.436663][T17915] ret_from_fork+0x4b/0x80 [ 1040.441101][T17915] ret_from_fork_asm+0x1a/0x30 [ 1040.445887][T17915] page last free pid 3479 tgid 3479 stack trace: [ 1040.452225][T17915] __free_frozen_pages+0xb0e/0xcd0 [ 1040.457381][T17915] __put_partials+0x161/0x1c0 [ 1040.462222][T17915] put_cpu_partial+0x17c/0x250 [ 1040.467014][T17915] __slab_free+0x2f7/0x400 [ 1040.471460][T17915] qlist_free_all+0x9a/0x140 [ 1040.476073][T17915] kasan_quarantine_reduce+0x148/0x160 [ 1040.481565][T17915] __kasan_slab_alloc+0x22/0x80 [ 1040.486443][T17915] __kmalloc_cache_noprof+0x1be/0x3d0 [ 1040.491843][T17915] __ipv6_dev_mc_inc+0x420/0xaf0 [ 1040.496806][T17915] addrconf_dad_work+0x3d0/0x14b0 [ 1040.501847][T17915] process_scheduled_works+0xade/0x17a0 [ 1040.507412][T17915] worker_thread+0x8a0/0xda0 [ 1040.512020][T17915] kthread+0x711/0x8a0 [ 1040.516131][T17915] ret_from_fork+0x4b/0x80 [ 1040.520569][T17915] ret_from_fork_asm+0x1a/0x30 [ 1040.525376][T17915] [ 1040.527713][T17915] Memory state around the buggy address: [ 1040.533358][T17915] ffff88807cb92f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1040.541442][T17915] ffff88807cb93000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1040.549523][T17915] >ffff88807cb93080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1040.557607][T17915] ^ [ 1040.563262][T17915] ffff88807cb93100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1040.571446][T17915] ffff88807cb93180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1040.579548][T17915] ================================================================== [ 1040.587786][ C1] vkms_vblank_simulate: vblank timer overrun [ 1040.593846][T17915] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1040.601232][T17915] CPU: 1 UID: 0 PID: 17915 Comm: syz.4.3033 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1040.613319][T17915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1040.623405][T17915] Call Trace: [ 1040.626699][T17915] [ 1040.629641][T17915] dump_stack_lvl+0x99/0x250 [ 1040.634268][T17915] ? __asan_memcpy+0x40/0x70 [ 1040.638873][T17915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1040.644084][T17915] ? __pfx__printk+0x10/0x10 [ 1040.648693][T17915] panic+0x2db/0x790 [ 1040.652614][T17915] ? __pfx_panic+0x10/0x10 [ 1040.657041][T17915] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1040.663093][T17915] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1040.669111][T17915] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1040.675474][T17915] ? print_memory_metadata+0x314/0x400 [ 1040.680977][T17915] ? fib6_ifdown+0xa2/0x4c0 [ 1040.685527][T17915] check_panic_on_warn+0x89/0xb0 [ 1040.690588][T17915] ? fib6_ifdown+0xa2/0x4c0 [ 1040.695115][T17915] end_report+0x78/0x160 [ 1040.699479][T17915] kasan_report+0x129/0x150 [ 1040.704013][T17915] ? fib6_ifdown+0xa2/0x4c0 [ 1040.708533][T17915] fib6_ifdown+0xa2/0x4c0 [ 1040.712884][T17915] ? __pfx_fib6_ifdown+0x10/0x10 [ 1040.717839][T17915] fib6_clean_node+0x24d/0x590 [ 1040.722620][T17915] ? __pfx_fib6_clean_node+0x10/0x10 [ 1040.728013][T17915] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1040.733404][T17915] fib6_walk_continue+0x678/0x910 [ 1040.738464][T17915] fib6_walk+0x149/0x290 [ 1040.742749][T17915] __fib6_clean_all+0x234/0x380 [ 1040.747611][T17915] ? __fib6_clean_all+0x9b/0x380 [ 1040.752556][T17915] ? __pfx_fib6_ifdown+0x10/0x10 [ 1040.757499][T17915] ? __pfx___fib6_clean_all+0x10/0x10 [ 1040.762894][T17915] ? __pfx_fib6_clean_node+0x10/0x10 [ 1040.768249][T17915] ? __pfx_fib6_ifdown+0x10/0x10 [ 1040.773232][T17915] ? __lock_acquire+0xaac/0xd20 [ 1040.778121][T17915] rt6_disable_ip+0x120/0x720 [ 1040.782820][T17915] ? rcu_is_watching+0x15/0xb0 [ 1040.787670][T17915] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1040.792876][T17915] addrconf_ifdown+0x15d/0x1880 [ 1040.797728][T17915] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1040.803370][T17915] ? __pfx___mutex_lock+0x10/0x10 [ 1040.808481][T17915] ? tls_dev_event+0x717/0xec0 [ 1040.813315][T17915] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1040.818619][T17915] addrconf_notify+0x1bc/0x1010 [ 1040.823480][T17915] notifier_call_chain+0x1b3/0x3e0 [ 1040.828598][T17915] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1040.835029][T17915] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1040.841839][T17915] ? irqentry_exit+0x74/0x90 [ 1040.846435][T17915] ? lockdep_hardirqs_on+0x9c/0x150 [ 1040.851678][T17915] unregister_netdevice_queue+0x33c/0x380 [ 1040.857414][T17915] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 1040.863233][T17915] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1040.869493][T17915] ? linkwatch_urgent_event+0x62/0x3a0 [ 1040.874979][T17915] __tun_detach+0xda4/0x1560 [ 1040.879586][T17915] ? __pfx_tun_chr_close+0x10/0x10 [ 1040.884707][T17915] tun_chr_close+0x10a/0x1c0 [ 1040.889310][T17915] __fput+0x449/0xa70 [ 1040.893332][T17915] task_work_run+0x1d4/0x260 [ 1040.898024][T17915] ? __pfx_task_work_run+0x10/0x10 [ 1040.903244][T17915] resume_user_mode_work+0x5e/0x80 [ 1040.908374][T17915] syscall_exit_to_user_mode+0x9a/0x120 [ 1040.913925][T17915] __do_fast_syscall_32+0xc1/0x110 [ 1040.919057][T17915] ? lockdep_hardirqs_on+0x9c/0x150 [ 1040.924279][T17915] do_fast_syscall_32+0x34/0x80 [ 1040.929164][T17915] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1040.935502][T17915] RIP: 0023:0xf7f88539 [ 1040.939591][T17915] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1040.959223][T17915] RSP: 002b:00000000f756fadc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 1040.967642][T17915] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 1040.975619][T17915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1040.983595][T17915] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1040.991658][T17915] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1040.999633][T17915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1041.007615][T17915] [ 1041.010794][T17915] Kernel Offset: disabled [ 1041.015120][T17915] Rebooting in 86400 seconds..