last executing test programs: 8.72815792s ago: executing program 0 (id=417): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r1 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff0, 0xa}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048845}, 0x8c0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@deltfilter={0x24, 0x2d, 0x5, 0x70bd2c, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x5, 0xfff3}, {0xfff2, 0xf}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000018"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000300)) r6 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, &(0x7f00000003c0), 0x40000000, 0x0) 7.753881554s ago: executing program 0 (id=421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=@newtfilter={0x47c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x450, 0x2, [@TCA_FW_POLICE={0x44c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x94af}, @TCA_POLICE_TBF={0x21, 0x1, {0x10004, 0x2, 0x0, 0x9, 0x5, {0x4, 0x2, 0x0, 0x0, 0x9, 0x7}, {0x1, 0x0, 0x4, 0x401, 0x9}, 0x6, 0x0, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x4b, 0x2, 0x9, 0x5, 0xf8, 0x401, 0x400, 0x401, 0x40000000, 0x2, 0x7, 0x8, 0x3, 0x3, 0xfffffffc, 0x8, 0xf252, 0x3, 0xfff, 0x1, 0x8000, 0x0, 0x80, 0x9, 0x0, 0xcf, 0x5, 0x776, 0x0, 0x2, 0x81, 0x2, 0x3, 0x10001, 0x6, 0x3ff, 0x4008, 0x9, 0x3, 0xa460, 0x3, 0x1, 0x7, 0x9, 0x7, 0x2c51, 0x1000, 0x2, 0x5, 0x80000001, 0x2, 0xc, 0x56, 0xffffffe4, 0x1, 0x81, 0x203, 0x5, 0x94dc, 0x3, 0x7, 0x200, 0x6, 0x8, 0xe, 0x200, 0xfff, 0xfffffff9, 0x0, 0x8372, 0x40, 0x800, 0x9, 0x4, 0x2, 0xc7, 0x37fc, 0x8, 0x7, 0x6, 0x93a6, 0x80000000, 0xa01, 0x7ff, 0xffffffc0, 0x84, 0x0, 0x96, 0x3, 0x0, 0x7, 0x2, 0xff, 0x7fffffff, 0x6, 0x40, 0x1, 0x88ad, 0xad, 0x5, 0x8f5, 0x7ff, 0x5c03, 0x7, 0x9, 0x8, 0x800, 0x79c6, 0x1000, 0x4, 0x9, 0x6, 0x5, 0x2, 0xffffffff, 0x7, 0x0, 0x0, 0x1, 0x6, 0x1ff, 0x2, 0x4, 0x9, 0xc, 0x4, 0x7, 0x9, 0x8, 0x7ff, 0x6b3a61c0, 0x1, 0x1, 0x0, 0xfffffffa, 0x80000000, 0x80, 0x9, 0x8, 0x7, 0xa, 0x4, 0x2, 0xae9, 0xfffffff9, 0x2, 0x9, 0x9, 0xfffffff9, 0x0, 0xa185, 0x4, 0xfffffff1, 0x3, 0x3cec, 0x5bc, 0x7f, 0x9, 0x9, 0x1200000, 0xe, 0x8, 0x565, 0x2, 0xfff, 0xb3e, 0x101, 0x5, 0x7ff, 0x69b, 0x7, 0x1, 0x3bd, 0x4, 0x8001, 0x0, 0x2, 0x8, 0x4, 0x3, 0x39, 0xd, 0xfffffffb, 0x181, 0x2f, 0x80d, 0x4, 0xfb, 0x6ba, 0x6, 0x6, 0x8, 0x808, 0x4372, 0xcdfa, 0x40, 0xffffffff, 0x7, 0xba06, 0x2, 0xa3fe, 0x17, 0x0, 0x5, 0x4, 0x6, 0xc, 0x9, 0x800, 0x40, 0x3, 0x401, 0x60000, 0x141, 0x6, 0x7, 0x7ff, 0x3, 0x92, 0x1000, 0x3, 0xfffffff9, 0x7411, 0x8, 0x5db282b9, 0x401, 0x1ff, 0x0, 0x5, 0x4, 0x7, 0xe, 0x3, 0x1, 0xfff, 0x5, 0x1, 0xfffffff7, 0x3, 0x81, 0xc12, 0x47814a1f, 0x7, 0x1, 0xa3d, 0x6, 0x9, 0x9, 0x9, 0x9d2e, 0x5, 0x8, 0xf0, 0x8]}]}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="df4800000000000000000c0000002c0003802800038014000180080001000200000005000200000000001000012bbe0002007369743000000000180001801400020073697430"], 0x58}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b5de1522d3"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac09}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x38}}, 0x40) 7.499651088s ago: executing program 0 (id=426): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x60, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f0000003d40)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="a9db1bb5d6066d614c02f8ea6e408e12b0faf76ba80dcb28892cd62c0e6dccd9dbdbf98a55953ca9", 0x28}, {&(0x7f0000000040)="f553c5064ad2e63c6b08224743e4d02659bbe06e01898926ec8a385491713005e2855c81a8e738d65319f63cf4a187a59fa27e49", 0x34}, {&(0x7f0000000080)="9a26f6f3094fe7c0c044e2b62777263ff5", 0x11}, {&(0x7f00000000c0)="98d75b3ac99b1da643b195f8c7258a2cf416859205096d95e0ccd123618d3006ebaa4d50ca3aa327591a701d34dafc322bd877ce3ae83ecb701249455d6cbdfac85ff1988cb6f3ad8081c3b9e24ba95356b8199c4acecfa8b6581cba388c7c40cb16511a7dbaa6b3ee64b7882d96a9ad4728ad26235cc263ecef9dfc11cd8b06ec840967fdd1d6ec414510d2ba4267676900a645f83ae135b28480f0ae84617d4a25", 0xa2}, {&(0x7f0000000180)="c99fd6865246b8b9f40e45c81d987cb4b3e5137ea4cde288040975eee52c352fac309b86f8", 0x25}], 0x5, &(0x7f0000000200)=[@iv={0x5c, 0x117, 0x2, 0x49, "cbe4632fe54bd8e78534153b261027d8eea652cf4f2e645ec6fe828123d04ba80b3e614b7106cfc14b907a545d11ed161bf0409e75c1fa71fe3d23e22605df7979e048dc1d1f24a2f7"}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0xbc, 0x117, 0x2, 0xaa, "951bfd208d18247cb8ade0d86f905972748715cefc9e6a15d62e7fe0b85fb801d1b91a17f18cb660ee893d5fc168cf8aac0ae8e201a7df9e332682df2b048ac998603332055267b8771d71ec0293d5c2a921472abf4e6f4d948144e07d6f2c290368953a666f9976afa6346b6315f8bb57a71110f2b1e2e12c70df0c370ceec98598d91132f8eb1f938dd6fcf923758dd034b9ac9a3431e733a0ba6221f88858b9402f8be12a30eafde0"}], 0x128, 0x8000}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="d725a8a56fe337c4bb4f660937da08ea1bf10f2e0f30f0fc1795393ba94ab9be6ef27076f87aecccdd16d0946b37787f749c9b276c73dfb2a62abf06c77494c88600bbd1245f4d2f2726bc5eb06f36d90093a3818fa9b93647016f1cc521dfa5e999cd64f08334f265cc4e13fb2cb4717be7c093e7c9a6d7ab6907e891795efaa8b42d862e7e536f6401a7e5e6d483ffa8eb91342ceda86a57f8a04f2a663da09a32348a9a7eff1c087f7f0ffaeb82cde7a78abeb2b61fdcaf9a04a0d2a27d7832e0abc0f404a1295ddd57", 0xcb}], 0x1, 0x0, 0x0, 0x2008000}, {0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)="e222e2a8e1dbae433c4ec562783aef8cdeeab173524e22959fbbcd500bcf3fb005df638c4e45162088f9f2beebdf9a18fe534c4b93b7196ab87829259f2c254f0c4e3015ea1fce768f1fbeb4527a61ba7cf0ce145994f544b62fb16efb12a633681120eb5d92f2406809f478e828950feb3cf621c4640df8f1edcd56da78f20a208d96ba0ec086c7b8bdb6b9e10e36a7c1eb154f4304b0974fe514547f9a700baf5f6c328432c6", 0xa7}, {&(0x7f0000000680)="44da93edc6594886063a596ba7f15069548432e9dde2f0c204f4a8a2a0f11301d7fd5548028ebb4c4af355c517eae26a73ee8f767af30624c9e72037fd7eb83e936e7e94b06bbebaea94092f92cf34fd53c509f9e8896296d2366fe33e658a27c57e303f55fb081654e7fa49942660ae3ac8f54dfc99ad261571c1c19bb717e39c4abf38f943199b1acafce7bbc5c6bd6455d3e39bf1c00f633ffc759945db978461328df5aae8e660630dd53f6103661bb7d8c80831ee359c69498a7b29e47192d366836a5f73989c01168d7cef215969cd267c1d805e65f9c1f9ea0cb268d525911129dffb42", 0xe7}, {&(0x7f0000000780)="d600d0b4d6e8aeb3d0764871510ca5d3be3675268fc9d2e031966a0577e7d7eba720cdeee5afc7f781bdaccd21bc1bcfc159277815b0b784ab58a63c925ff8ddf53b452280bdbb0e4456b71e53dc2cf0ddef927bdb659e65535cc48eef32d93a6208f8906582e46a19e89c99fd3819e43cbe5c19fdb350c32a0ba0cd70371ad2de5b74739278d030d629e0a4266e53f5822c7e1ec1dfad57d075cd0b9499a9e359694c5a69cd0379fa5a3d9915bb1893fcdc927cb9ca5e8eb3b13b49e1f4d867de2eda3d2c2ec33aec9534d7cdcb8e423ebb187cb0c9c894f1c854e71ca0a8eeb76c201ae4b1c29da3a634703fd724eb462dad05e9131754acc0951cd3abb08c791254c42b91fac4bd3779eb4a721081a0a4765fd4949d002d3231c4622020ff67b47b2c564138cdf2d8c9d31697d2347e996136f8d927af1f16cd980917dedf33cf521965e20691fd9e63c6ca281a079e7b02fedf37769c1c7afe780a682c70f58d87e260efba1e00c46873ed5b655e6d29813378aa5c7857e042e5200473724fe3afad83523783ad07ed9090742bc2747e4c88746a752578d8b79cf17162a8ba9a17608834cd3cce4b68d3305d81ca1b56e70598fc3c810dabc6fb54ff4f22c28fabc77a0d9067879b3b9de0b32b484a1c946465f2adf37a41913ded21b3888cd2e2792aeb91bee1ed61010e311269b0532337fe81fc81d69cea4d0b59a120d202f374c24e69eb3748b2552b37eaad021258305caff22d52b3e162d1abd61d57e0067ac5f04c75c8366320f9fe896989e3dd5f9de8159f505d383d6bb399e9c2fb89838f61a64e2c3d972cfd03d9d7c93f82baee8b7418bbdc9aa5c261a9f1076e30d9e68dea471365ec4f84b03ceaa66ab416ab33d0ebb46acadf5bc4470c7f3a1766e340a1de3603ae63a23bd334cc765bc55d3ad6e3db534480f0895121fdb9a1cd453078b97c2ff70b791e6140984c15f3c6279a219992d957060a97e4d313e74c877d66566aaa44c4346ee48be01ea8a97acad1ba722768abd4fa8509a3bf9026dc3622831c5be6b7ab411635b50af0a359d7426233aef9f59ab7146bd3fcad8d0501faf6dc1336000823ec9efd657fad3f20dc1c9d7392934a049ec9dbdc50845f1feadfc3878baf2d60ee14d96f5cb6438e843e3d1c1d7fc1a2ed41d6a9fec2115f86b84585ce7714909ee01670007297a7b5530fc2596ad7ad8f53e91e04ad4ce94f324f35c8e418d2e249957ece056e838e187945294f70a5afa49e21970a58e400c2c37e3ee0772df9c5a6e1710f400bf0c1f4049bb87b801a06041f90c1a863ccd3813e1a0fa90a90f09c00b78004bccc95347aa70274a58e56cd1f2e76e280459ae50106c7b36c68040d544760f6e4f6bd36ac8f64c8a7e1336e90cb2bfbb24e7ec25fb8f92000bcf988ef480590525b9a5cd3f7d7280de9d1d0cd6b79d8271411ad9c822a521b822fc2ba024689428308a1a30f8a005846ae2da92cf9bacf8864b8d8107247754ce9e67041b6760c12652054c479d1e0e87be7bbe986a1d44c662c9f1e2cb1d30c9e94f9e1fd430ee15c5430d2d9d1b6b071e309e4c3c10093ed9cc11885a1c25a9266424e605c3f16a1e531989a90eef039299cf894f5bbf9564edd65234ef90e39877c8134f36d835120fbbbaa941117bbc130640071e6591cfe8b3099bb5557e44686da7e4c1c7b88b01be4dc7052fb985ecdda9e0eef04e0fa21ca2cb3b09035c18236daa9b26cfa05afe1618cfb79e73f25bb2ba098c22dc1e51031a09bdbaeaaca552966d29529d207e0a8827121bab329bc8d35090bd8c954de70f6894d811de5c031a17248ada387f38934eaff5543a90789c3f098eeb2e66743f9e4e326cdd552a7c48c8afb8b2184e56ccd7fefa876961dec99902ec0060b6fbae7169e85d85e435ee43780152595b9e3c53edf9b4286e7ff3d04be708b30dbfdbd54add663b623e49d1d30602e556289408b366fb6c6ad80471fd92870e0c5fa7f03c9a986533b227af936736c5c26c53b3ae5e3863e93947926c8d6ee73d03a33f22d2cc1a3fba8263a68df57f608474aa841024b3327679c4ecabd7800fcaf539c91162cd248229c077e2523703ad163542f56588d8ebea97530784490598f86c120c8b135fb369059b6315d9d8cb2baa1dfcd3a8bfd8c32a61768ed1689b21262beba6baac04a029e40537156521584e01ba14c5ba2b1e70c2eafaa4ea7f59def0daa8b0afe6dbaaecf9b424b2feadb1852b699014e59120b4d5b431aa4e629c608dff07b276f4833ec02b7de337da4b9e66bf152366a72f5e41c9750e8d566f5009a9d8810298345a6627f153033436c8156035c71f36c01d50971a09cd8d52971a6b06c3dba92ac3f2eedeab1a6e3faeb84930df5106fe025d692980ef9d1dacfdec58481a176d67bf9a9c84486eba5d637108464fc3b14d62af7dc98caa2dd0e8451ac90667e3d34fb561291ea9f8cc62d0fc0c8031bf3565b8b47be34e09cdcabd88d80fc41fa952c34ee256ba64182502db1a7e28fad584261f658e10a9fe866a7b9d71a08ba56324cca86dbaeabc08c940ab9af4ee299621d9e0902a6b9a29ed72705551de112dd910cdba26f842f3365b7aa962fe770b4ac74ebcbc689c31c0cc26720ef3bdd543bec9c1607e37a329b7eb0317b20fd40e028d4bdcb26d6cc2b22f3a9b320996b102084d2d5bb39aaa1274c01c271f88ccac30f14176a3957a9ab20fe7d688df78d570d6958c5d2e73dce59d74ac16c46395da499bd8180c3e3d66bd947eff54b6b4b7cd338b1761165ac83bfa63446062985c502db987b39ed346802196c75057f5a65d856d84cc54aff2cd7855766a5dc1c0c10ee68364c814ae342fd5267c2b8b10cfa6fc58062e96c21fa220ad1849f0429585dd36d44f4285acd1df88daf38693ea38a4ba23399ce207369d378cf334979da7840c1ed5fdd2c55b7cd08bcd258706d57d510fa2b65e6aeca4d5a566eeb9b61648f4de06961ed3bf0e618cd513827a66da656fda7094e9ac606a4cb6bc49faf78c69de6dc5cc9b3cfbc736f97333e599ee7c72327ced4dab6e1cf44bab71621c2e365c5b49f9406af910d3bd8faadea2d6921d359f7043209cac3d111313d363060a4c363653ea10a37c424256dda4852a4ec71151a41ddcf2c0c8d9b5320e2c9394b149976d607054c97c51c5ab9096e5def7f955f27d503ef75e6a51b333b02c77ffd3288b9bf84c585548f8dc2ef0ad9edca59765b53232228f95bc6abded53ea445e76b0d98d09d047a4ce48b14fd330b7ec9582595e2f422848cd034e08099cff3df29359eb19dcfcee1c43418673e6ed0ae27e148490d299304908d500a3381e888ac6228a9607a8e45935642a3e6e07a9210437de848287ac4a91a3145550cfeb77f2457551d39f195f1a04d5a385232f0950c1895681e910da136e41240859e4b2d23f2bcc8bf6150955a85a6f116cb7c5f36c4ed2046b9b0c3c57473f0862d95c118f36ee71ffebdae474519ab9240421396bac20877a44cfa2aa66e2970189309c3f4fd69971cae1f25f69d03e3ec3be6779878fed961882b6fd073a8b4992ab65da53d91e6023eb2858b01d4afbccc8b5f0480f10cbfb1332680718a9dd1a0c450a343186d9345d79ae3904b4f0af16a2ab3cd16a42dff12e667ad796df8b2315b3e0257f9a1dff1a98ab8cd5f1af30c01bbf61843abeaeed522819d8aef1b916ade9bb1d0e244118bfc168a966a54aaa684337ae519936eebb416112ad4a3ecde617575f761e4024ca47de889a6cdd8f38d2acdec6c3a0ecc188d1c25b2101cebc3e59d25f1ea7d0e8dba233bb10331dbee40161f2d4cecf6be14f4d1802c699a26aa06ed97f1d769321acaee2e37e35bdffa13b28ac35c5dc00bb7916e9c0bc7667735770fd88b53c98e354c98e767e47ad5cdad52d3c441e7d903c8988cd0ec272a8539b15b36169c3a947b0e902fe866700062f8347be8b5eba59712220b2d6a3b4415312c8c7c78255efcb3ebe1a21fcf4fa509e766b9641ddb5fe980c871300064dcc088b81b55c49df90258da075e2e773e9fbd132dab5238cb91a3adcb85817c6dd338addedffc6f67e46577e48d01c4aa2ba8f0f0603bbacf7dd66242762237f431fd1e83e9e8218ff32dc882c05598fa833218e3cd3e4ddc68cf0277a52af99cce316e273356fcedd4daf16535d10e30298277ce18c13b0cc35d655a844ebaa464c0a32e9aa5f56e639070e7836ed380b2410b09af8827c9a5ae5b3bb1fc3304477c63aab7f85eea8104a8235ccf95c784b10e6f660914d497c50b5aa043942ffee82d4ae8d9efcf45f7c294da47703fea7520aa8a8cc0c211cfa923574d8fff20a67cc002607ee5d926b8c5ef72b3e9622c5733eba195768fbcafd6a089676b53280c5c576700c89acff760ea2ed9c565ecf7898ffe793623b8b57f45f0157a7c52429e2e8002f4971d03b14c768d3c1e075e2d4f6a994008a9b51a27a66f57f00243d480ab8ac4c1e800160f8dc765f444e4853063551a4225880784184f3ada75dba39c9a9d68cf74d1be6dbe6ea486bd0691a9d0e1eb096545d000e6a2f0753b0d74e4a357a6616d04ea8dff33d337d3ac5744abd0c9124f6ed25cf8663564b58eb0869711cd967da1e8657ee9a03f56487b38d41e10fa9ef06c09faf486b202bf9c2a8944c5d7c9a1f99ab662c27beadfeb5fdcaa6ffcaf91e83fe0350730c2df53c5547aeff9f52b881d6a001ac37d033cccb9f1ec82e5ed1f3c25eac2c2ed8021c120ee2e5ef7a029ac6d37ba3f186af4355a3099546abc1f8a70688b209b0293c3247a87c753a11cef46530daef83bf88ad4171417a24a6dec918cbf69aa83d752ae664d2cea4bd5ea774c783f56bca7f15c0b7445895a3116736987edac60394ace5c58721c2de736fb56eef8eda387f5d4662f0b7c40573fea2b41dd349ce68d1838c651804ad3d1c491cd99652b6daf9f72d57cc3af7b0dc5f365d156569640653ac4f6dbd22f27f5f3ea677c985befd3737a9d99f447135f1ab7d1ad7d7bd234c2f2ebeb03253e182b1e0929d0d85d659508233d232648545bc6821f197990544b0d006c9614571260e8493ccb8fdbec1d209d5530dc84506f47962627bb352ba373f12b084aeed2ed6e73d05de72ad5f486f46951406c419c36a26c6352cd2529759017ff9666fbaf520141468c2084e68b567076f96a7f4573b32ab83d5808baf13bcf683ae09f7beeebc1dd6e78e825f609dbc0ec5f51e2a0a04bb2130ff224a5443cea455ff039ce73e535ef38c3048011279c72d74b76d3403a8cd207f8c9fd4c0e2d8ccecd274a483b62eb512759416f079b7279401c81d0dd39ab193a6434bd7dd9bf08d42be7aab5dc87f996807de97ee25647762fce60432034f68c3b43ef6f5762068104a175d73e274cb31fcb5830bc040be009a059169eb47cb50bf6752828b1257c2793992f775d24601d5d5d6f3ef30dbe48c49dd7ec5127ecbab49d3f3e965a6ef0ae9ddfa25f90543c9d11e1971144e2599f71336d87706f9bcc4f9563ebf7cf0318208158c22e7895252422ff3e769c03e015e1940be19a73e08081f993636a9909f0b76685f64af53cd729eea560ca623ddc6ce29f8f671783eeaa056c59970c21b80b40e86e408b7910005c75b5c77c5a6a7679f914b24accd3b2448cb82a5924cb7b3216a71f0ce0a0977c191d5a8c90f4cb13b599b874852bbbdd85e9c5b85bd88c852b0824aea9be17aef033725c19940aef265556eef2", 0x1000}], 0x3, &(0x7f0000001780)=[@iv={0xb0, 0x117, 0x2, 0x9e, "6427bb04cb16085cbb47bf2fc6974d31c3e1d511becc3f8579704ca3038dc99daea20685834d54ee8a87ba25a3367718e2f9e9efc5b7c35f2414392f9e66e801a8af413533dc259b66574d928651f57525c25c1b5b7493524627891506d5296f0162c9410ccaed0677be0a73bbab40539586373afae9177a859592bb365751d7844c1ce0706ff7ffba1036b05e7ee4d3b1302f17739cb19abde667df73dd"}, @op={0x10}, @op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10}, @assoc={0x10, 0x117, 0x4, 0x5}], 0x100, 0x200048c1}, {0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000001880)="d25db999497851d2", 0x8}, {&(0x7f00000018c0)="bfae7e61eca73cd7cc6559a78aa0951d2dc9f3e6a85d0de06c41cffecafa27ea5ad6ff1a368a3d64c871a56247d6d30ed15a0856ecbb9464747b0b1c37fd0ff399c6e977e7167ccee61e7e8040319d88b823480594e4ac0aa2008caec677bf4d43dc0e921b86e5dd18cf09f3616a296960de55c6a5f48cd3f9179b9a9a42a828b31d9f57451912b633105b7967f6887ff8fdede63325e12768e62fb5af", 0x9d}, {&(0x7f0000001980)="34d7e304d1ae4415999b21240931975bb2b3584f7446b9ecd5814f0fd17703f0ed38cec8fff1b7bfd1edaa0a7bc1c47d0f513da1502be241b10eee2fe6de8d86a3bdda3d904e0e5f7345", 0x4a}, {&(0x7f0000001a00)="bbe434f1dbbe2336dd0f18a5078ec4b60aafd5139ee8719fad32271bd625e43471caf3b5429d28675901d3e3ee1e65e8730ed5a8a6daf4421d12d55dc7ab4677c30fd93526aab25ec34267beed3c21955e7df21bb2fa9fd206d9eff10470d730ec97c7681ff2a5546dff428741f60b056b39c13761e160b384171e66bb95979dedcc153c367626f835d884413f8b0dbe78738624a79d848d3d42be96daedac5867822da22369425bd3e3b064d617e0fdb54b770a80b7128a699cf90a61d01f7b665b7e6f481013a3389645be49dd5757e55632c20901ead6c53c2e1297dd6a6b460b553715c1e4cfd51b27c134b7ec1645aecaf5ce5cb15dfc6b36d73746282ad0f5070c39509574e79fe5e3bf6210cf9fb3e3ee01116f81b4c2e3cad637a63752bb4a93fa06c8e47c258161f1e45f3741e64ee0c12fdd13da07f7a0927c3ac3f681a68ac337ea8b058d78efdb635b4910410a17d764f35e0ccf4106cb3cc1da207ddf04636202712fc0723869564312bc8a5676e681de4c9145cca8e0e981ac9a88668b2a4789bdc065845f36ba5f92c5d726ec3b50adb0359aa1f5e7a2d3e4918644e02dfe8a4021a1b63aa2f725a9685b1bf48b9b5158d7a2c9cee35658129a3d039b52854bf636743ffa961096963bb49f5a7ddb2c998915ae15c73c3ec2814eb71017d0a7df63993546ad3178ad136ebe72d66d07fee28c4e381dad1fe39fc5a7c7e2b48fd63e24d31c06edf5c0491a2adff03d2243b9fd398105e46b4166fb6597475185b53aa0976419e6091e3b42a98262c206ba9c3cf66e0cfb6020fbbff69f1e627f08f61bb8068ec26318507d24636501c7389a6401be1f3a93172d4433e5d5fa9bd16e2574499490f2cb8af6917eedd401afa457db495e4e8bb5dcaf4098140ee8384e6429bac645d1f5ba70310d651e89a7cf96c24b0b7d3123a19e0d4d96edaf70f39d588e320837316284a1f7daccd0911a1192bbab7a2712402fc33ae630f0bf581a290bc5ef5cc34b5b74657cb238d00e54dbfa8f2eae846350f0d5d1a4d361720d57eea1d5fbb73507735fae9b5de421222f0f33598ae02f4010e2dc19c8dbe192f0244ffdaad52e17cf277ff53ef973382e35ec26685c1cc88973ef03e15adafebb825e5d3b519899bd6f9931284bf269b22f4284514f299079be444692dcd5c4fd2a26f812a6cfc6b4c4fccfc07c742cf3ef4db7ec340d57895eb4fb76afd87f48c1202f0933cb113335f7457c4f9451ef4a803bc84486d48a8b85b5b87dd425b8cd2ebe86cd9c2a9001c8f122c23f4505bb370009c87660faf54450aa8e3548869dae67c64265abb6e4b18a4cbc3f34a324cbf3e258af42890459dd3e00518d4afc12ef8ce39d96a6a9bbc57d810425c209f4479bf74cb2e79fac066ff93592b412b5efc0735b893d2c267e5409fc14023e9074ba8d3d7ae8a05d39dc7f85d75cd2075802f23b4b349c7d2e72a07daa60d47ba710441231b221adcbec756eb332c44583bca411bb23074e1c9d6a6f881483bf9d1fbc9f50aad53f40118be427b06061bb3264bde703502c4c44746824fc1ad746dcb26b768e96798ba6fea04849f9dd4377364e3736799bd63f2fac11014da58b71702f31a97b867dfab7f02bb60931895a03872f56ec4e8c6f55b9cb94c5c98edf828c92caae6348fa19def74c947e9b1959459bc460f60c8844f33606a5d7427ef48798908cdf4c5bbae1b47d38b4bdbe6d4f40c176d95a8de3582dd6a84a9da56892dd2fbab8a4fdcbe62edf894fc63c56677dbf4dbd36ad3f8ff7dec08fe613611269d7d31ad5ef47a654a33547c8a61c12df71c26d2ecaf7901893084c2e6b4322fe851bcd6eedcbbaa6b526c4d76b5ba087972ed3e69bfac949aec2f3f3071ff40191f4ab227e1077c677b559bb5454c413af58709d2432ad1437e3b9ec9b61a4cecadf69f427250659494c18811b0ac93b9e0e8bb8851937ce7d3620459f93fed8ab267d7c30192e68935faae0dd0a09eca042acafc8ed21a35bf88e82d9839300ee9b32e0684519b7f5bbbddc35ae484056c67d24c46f46d1e7994b6acf27b1cff9795b6dbc60c43bf726d5e0754a05bbcd87d15b9cef0bd1fffe747c024541d9cb462b92d8620811fb0566d16a419322def7acdb663c11ecea178a588fb3b76273039d68c5e28715948c275529780cc84d885d66912f7b49786e282a21555e9be4caa0ab2f1c84da15a5f7d81208d9c9a841e04af0f2f07db0aa6d60cfb80d8726443443e0d08d7e5b63b2b36663a9322db773ff2b7a247a05082a134992ceacb30d924d1caa0a0ae73e3cbcded7acd96a480edc95a5d0672ec4f428c62e3c7b5d4cd9772df3cc6a93c3b9dde9b04f22dff9431ae7a0a242ec53fdc99d7c5ab3c1e082be3aad14d103bdb4c0e6976b97501ae77754d06916d1cd019a8ea125d7d7cf52232264b78fcbc5dcc3a11e5ee748954f9a9c6972c5889cb24750a47bae365405cc138d1bc1db3088ce80897598c51ad29ae7912d9dd6c5934653f6d35dd1423fa6f445345e8068b3a3b2d54f7bc26a1025adb9188dbb6bcea649b0119c542cd5b92072e3f9812d2ce79770951f11bd252d8f874a5b8360429c41a4e5088361e5de16d621d0060071aab63636ccd4e47ae28270c86b3eeb49c51478cc8005488d6346d1cfc8af4cd0d12f5c713f6e213b5d44adc39d13336ca7ff00d632f537b6fba7504c868df29c608466b5d3a931327572f73d7a2c86b6c1fddeb2e1168a1cc12a5e6619f8450e511e61900a0c327da6f0e8c24bb5bda950228b653676ba0f0e9c5a29b263ea4f1ca457dcc3e56387d83d593235c6eb0a7c56a0f6090ec61280b4cad10525337d8f525a911bf0e303cdb9343177ba69b26152148a6333f8fa3ae00148235894a2c9f49b3729244e6603153b161cf7ccd383ca63a449f41ed7cc8672f410b4914c44f04f6bdf24268872a92c44e3f8f5aa2e2cd84a61663d4ffd8f97984660ea31adddd4c7c3ff2f3c4c1a28c30be89159015d6d98a9d0714d40c409865df86640723e20411a0962ae1e92c21a4836d877f2268ef7550a0fcd6a7ac987d8420a0b7eb0d8c97e74d682a6ed98cdfd30fb526b1991eddc17de741246ff7599dedf391c25a611e0988a8a473c4fd86c21235858e4ec0d44189f809a51fbf3a98af2798727cf65d07e8497a5b46cc157765812154be1d2390fbedab4cb09c4c6f880c8f42da6c2d60351e0f920560dbe5922fc1a0cac0e53fc73a13e7bcd0634346f2a99f8beabdb7e1a6f4f0b49171af05a2e306a19730ef976718868cdcbe1e1d48f75a1294bedde44b97336f8387dad66d89de96bfea2332af29bffc4ee1f1380c32ab8a170107c39d8378ebc356f0bf43084a3b13298053fd631924f8644749b340bd6ade95b13e197fbf9dd9741c8c70c8a234fbd9547df1ccf9175bc9c7563c00e62bcae09122f3c5cf2c4240b3885a74c2395e14de05ab4997d0e69d4fda2a609a14f5ec2c192c0f6820e6bb48427a44d95f127162825edd1190c1788b8f2f488b4552c7c6553fcc548149806dcf69a7888fd015a0834803ff500f34f4a12b8967b00b47c6a42334dab0984f04caf41c5d3df87d9611f130b58876f060367741b7b9cb71b867a1a91273d19bbf2debf4c245ef422958e290caa34fb7b044076d28846dd5871804faee29a0291cdec50e615983359b3f1c46e3e08fe5db02af62af77b87ef8537f7abd0303ca889c6e2163e4205a3097773b838d7e08e03aebd2520dada56e76c42eb6ca86c7e10471eff6f7bf6de7aeaae1e6deeee4bd3150bfdda8f2ee2bbcf51c5fbd559b5911f92ede7ad1e1447622dcbf48b0a85f569328521eb58e07d1ca6cfc2411a516556a403773af92f330ed385ff086b631bc59ae26ed60c3179d744809434544e612fe41b16abaa378b32be768ed0ecdb11e8754a50527b75318adb6ed7c2fd234b9c7dd12869ddcc5bdf54794d21a262cf86cb666ce4bf2064eb67505b31f391295bbf580789e1cfba07156b8d1be7a3ae6b66e61b892e72a72d33dd796c8c72d31755c2b35b80ed174c351ab8a660fb1196e17d8cd86e37ab94ebe5c44cc65780ad4502d705ce836226767379d6657118b35fdad4e91d84be78c67e0150f1d0e831de273f93e9d4cd59f5aab8388a4d529fbcc029ba69d522345ee416a56b9bb1acb2f568d831620cae6b518ae9f56c35554a4a8f58bd9a4e1f99bc8829fa167926edd63753845e20544e391f48858eec9a627ab060950c10cb09cc63964a342b274fbe312c6c531095a6d5f651d0cab1213e47d7c5b5bd67c78eb13bb2db2560b93599df31a05ccfe624597d4097fbc6f1a61f21872b9e5f1cd5d788b8d6278a74d4615894fbe84551bd805c72baab831de373ad34054623b7cc5d7f2521c49a48e3eee31de437a7276c28de6cbcd6858baed1c268d8eb2f4a99e1243d97adaa535cb55d14b1cf56bfa0446c3452c9bff4c8c09f8f2155fe7cb89eb19392574fd7008339c80cb312e78571b3fdcbf6105f03676e1ceb5a541c08d745bbc9583aa386d2585c141dc6e7a29ded15031bc6a8d7aa70f0c7b69a045a3c82c6927e32186b898c94fcc611c1d8d29368b7fdc4374b0eb012a96bca633fbae18bc795d60b9ad1f6a63f10f7bfe977ba51e21e4936242a4d600f2823625aa1ab4f0662ea430e25f4f6dafd209493833c4637d18e923f568538121e7876b5e69a9792fd526af51e591ab65fad32a2d4e0f31cf1ec2556423764c574bf8ad151b4b1c11bdb6838fa1f586c9179e22d5a2d6c0033ac109334415f9315c1829544ebdc900773035dd63ba03533ca84c4e702c6a0673376bac89a1d3415bbbd0ffb755fc57b257f4dd04a805fdb5c13e845b9983640c3b5be1c0d683bb3e046c5fedd3f709e0d6621b7c2ee0902a78a37c17ea6b6dbee1b2112aac793c0b1b2cc66e9b36c84c90baaafb03f742add1078d412e838aa3292f34073aa18ba3fd840da228539a02ea35f8aa19ae677c4bf0ef8f26cd91a3592cbc38c5f7c624456a4ff1d26ed93cafc2c8d027ec21bd68eb4e58ba0bb3cb7348e9d7db291281cb9501bac365cb1f77c6876a909973272c6afd52f1f267e98b5e5a57fef27c72ab7ff066b2b2747183ce3886fa3b8d60a665fc7a2847b733c1aaf10bfd516d3580893690c089161ede2a97265e2bb63fce6dc138483d757f819227e5d673f94509f5c4ca0d8ee2bdb07d7125d95057a67783e6c6e2f0b499909f3fb054fc782922870686bdb5cd189a6a4a13af29fe2db4c6ea36b9915f52abb38e4209bda394d416b5bfe1653602e4ad17e265c96ea7f51f6389a3c7d2b7992cb4a3ed19472a796ae2967a540878133152c087f5d2ba2c449f4d7ed7c4aff320bcda68df53b93cd9753b3bcc413bdbb642420a17c4249e6f391142141b33ca1a79c7dca355c2030ca37ab1d1eee5423be1a327a78a2eaf58ce484643321e8428a198853756295b2819160f6b5fc8a3287db4cbeff1e86132eb9574d49717e3d6630e87ecbdb3965080a16a9e666b74b3fa4069ad23667ec8bcfaf44d920f42c382eab780034d9b1cc76ab17802ac1ed377c9814c6ecc7f2743c40bccada50324a0e77220ac50439c9f21d2f4ae7b1d203125471e04065c0829dd46c0e09e11cdae501cd08616571905a7ffba088f88792738456cfa4bd12286d229f7e87d6e8136b9b5b7251a88f4c6c9860b7a2abc66215ca9eadf1858fdb68c29ee6033d3f50239444323d7167c32733478b89b120eacdbcb0", 0x1000}, {&(0x7f0000002a00)="ca8e16fa6997b22fdece0febb3612ef5154ddd4481a50bbee65157dbf2f4136d9804dd1fe3c85180476431c44b34b87b2bcfae6abe0462c547cd2cb46eca3921a3aa74fd3911ea8f55f6133bc82044752b134bdf45e1146eaacb68afaa9aa269ed4a93aad2e59e9b45e8bd5697c2eff0b80838060cf5d19d5da2e23843ab73fb8986fc96d19619dfa793b66bbfdbf1a3c6f8e0686804e31633bab9b22ff8142b63006c7799a3870160e2c3e86a443949f8298fa666cdfbeb8b8f40c8bd300447418415de57", 0xc5}, {&(0x7f0000002b00)="1b05f0dac3ea1f44195fc84610ca598eadfb7001a0d5dacae6fcba9ba3a951ab9ec2676592214019f5f746431e6f6fa9e1e18a1534260d8ae00a2fc0493db545e9050a6996e9dddd30268c2c4ecac6fd005df56b829ee17fec4ee819c2ad1e9d8a318f2970649ca91cc26c83606b498496746db02276d67dc51fa79ce6080494d01573b9a9a95d06b9f75e31c24dcea5f37a16b5b70b692b69bc286c21f81db61547", 0xa2}, {&(0x7f0000002bc0)="07bad23424f6b1c9c03ac259601b37cf3aace47c9c8d9c3a2dde1328772b35ada541257d1be7f34bcd204b6682e0756bde6204d180502eb2da83207d64a2377d0a3179336e17155dff5ad24105e95dbba1ac26d4c8d8d48087c22824ba3bb9c8f20ab614b82f2c5e821486d9979e04a1b0b212b9569f8510eb1b8cd8bc72920b66d91393d81aeae68b5a23afb116d946d386009c93ccb25228518c84c7e3581e958c7e1b3b8a2b61d1363dd75c8a60383ba6f0069e492caad5a1af106bf850ded44671cc58e748d16458e500a0fc2ed761ea2b8484840a6963a889d4b909b1e360e83e41ec", 0xe5}, {&(0x7f0000002cc0)="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", 0x1000}], 0x8, &(0x7f0000003d00), 0x0, 0x40000c4}], 0x4, 0xc090) getsockopt(r1, 0x1, 0x2, &(0x7f00000003c0)=""/165, &(0x7f0000000480)=0xa5) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000003d00), r4) 7.253577575s ago: executing program 0 (id=429): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x19) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000c80)={"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"}) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f0000001040), &(0x7f00000000c0)=0x4) migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x2) 6.577169526s ago: executing program 3 (id=435): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gro\x00p_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r1, &(0x7f0000006380)=""/1024, 0x400) syz_fuse_handle_req(r0, &(0x7f0000006780), 0x2000, &(0x7f0000008780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008800)=ANY=[@ANYBLOB="30000000000000000000000000000000000000000000000000000000000400000000000000232c2c2d00000000"], 0x0, 0x0, 0x0, 0x0}) pipe(0x0) r2 = io_uring_setup(0x7691, &(0x7f0000000140)={0x0, 0x5cfb, 0x10, 0x801, 0x240}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0x101) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000080)=0x80000009, 0x4) connect$inet6(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001980)={'batadv_slave_0\x00'}) sendmmsg$inet6(r3, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000000c0)="55eb8ce977c3196d80c39b277a34fa72e8dea6c0d6ed5662e96da8fee851fa2aa6d4ba16108f716012142b56ba9b13c0969dbb2085249793b99f33f563e254a222fc9292e1638724afada2f311af68ac0d0d84c11d8fda1d256c95c4d75bb231d702d39e95337ad188", 0x69}, {&(0x7f0000000200)="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", 0xfc0}, {&(0x7f0000001200)="4a85d7f268e22ac4570ac52e503f4c820f62ea8fba6f3e251570c555aa89ce35eb92175567ac76410710cc00fa381f28e64f30d272775b514518dffea1e8ad52d14777c37fdc4782dd2a1a4e0b754bd08e38f1c44b5995d8e4f61ea1517d90a9f4d1ee062f2099e6f52aea53c7491c46d3f1b08fa199580db95e234033e4cce6a5537dd5e748a8d86fe9b4b0521bc697dd1e7958ac78d161cf8230cda3", 0x9d}, {&(0x7f00000012c0)}, {&(0x7f0000001380)="d7ba326edee9b0a663f499c6106bddc75153f180bdd3cb7ce54268fc210bd3efecabb351d9f2c723eff0413d97e3b7c8e3ca5b0e025a94412844b09b4b0a11f6c95be82645bca6d93aed1adc6394fcdfa7bb0b48dcf29fa0c6eb58b983f85caa77005c5dbc6024fa646b9add2655b20eff5ac3a9a94bef171829adf1578d72cd6395c1c083447e59dfcdadfc4b5b6a61accceadb65f577d59f0ceb", 0x9b}, {&(0x7f0000001440)="d5ca459d93950a435807e257a4f48fc6d211bb3f2db8e6d662115e959b7702f0f6b90f50f6369acfe5eaf162bbb9b634bf1a741bdb8a555f21376b6cc654c27746ac9b7683c9001b762ba859a8fc6d4aadd62ecb5c3c259a180fae356cbce699f7cc45b77ed553aa801a243e870bc10955b43995e57cc17f3cecce24bba4c4", 0x7f}], 0x6}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000001ec0), 0x0, &(0x7f0000001f40)}}, {{&(0x7f0000001f80)={0xa, 0x4e23, 0x8001, @empty, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="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"], 0x250}}], 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0xfffffffffffffea7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SSP_MODE={{0xfc}, 0x3}}}, 0x7) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002600)={{{@in6=@private0, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000001f40)=0xe4) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002700)={{{@in6=@mcast2, @in6=@private2, 0x4e21, 0x0, 0x4e21, 0x0, 0x2, 0x40, 0x0, 0x3a, 0x0, r6}, {0x6, 0x400, 0x6, 0x9, 0xfff, 0x200, 0xc724, 0x100}, {0x0, 0x7fffffff, 0xffff, 0x7}, 0xc08, 0x6e6bbc, 0x0, 0xe00c965be73302e3, 0x1, 0x3}, {{@in6=@remote, 0x4d4}, 0xa, @in=@loopback, 0x3507, 0x2, 0x2, 0x6, 0x0, 0x3ff, 0x2}}, 0xe4) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.45504154s ago: executing program 3 (id=437): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x9}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfff7ffff}]}}]}, 0x40}}, 0x0) request_key(&(0x7f000000d480)='keyring\x00', &(0x7f000000d4c0)={'syz', 0x3}, &(0x7f000000d500)='\\-\x00', 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) syz_emit_ethernet(0xce, &(0x7f0000000040)={@local, @local, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x16, 0x4, 0x0, 0x37, 0xbc, 0x68, 0x0, 0x6, 0x11, 0x0, @multicast1, @loopback, {[@end, @lsrr={0x83, 0xb, 0xf2, [@multicast1, @rand_addr=0x64010100]}, @cipso={0x86, 0x38, 0x3, [{0x6, 0xf, "fe6e51d127101a47fd997d75a0"}, {0x1, 0xe, "0b5fefa465eba4f12873a49d"}, {0x7, 0x9, "669bd1489bece8"}, {0x6, 0x9, "080bd21953f496"}, {0x7, 0x3, 'V'}]}]}}, {0x4e21, 0x4e24, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "a41344610fec31c4fb964b9ff0cb28284a7fc29e2dc3e2ae235b220eeea9143d", "a69280b097171ef23db2f02739b33ec3", {"846bd67f05cef1d519d43b40f54e459f", "53352cb6cfe8f3d87bca1927d673d77e"}}}}}}}, &(0x7f0000000140)={0x1, 0x3, [0xec5, 0xd25, 0x88e, 0x616]}) openat$null(0xffffff9c, &(0x7f0000000180), 0x14525b8e4d5c3cfc, 0x0) 6.365857716s ago: executing program 2 (id=439): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x90, &(0x7f0000000000), &(0x7f0000000280)=0x4) r1 = io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0x10000000, 0x1, 0x0, 0x1d2}) inotify_init1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000002540)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @ndisc_ra}}}}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1ff, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x40044160, 0x3) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 6.12392343s ago: executing program 2 (id=441): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x100, 0x0) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000300)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd}, 0x10}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f00000003c0)=""/76, 0x4c, 0x101, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000100)={0x5, 0x7, {0x0}, {0xffffffffffffffff}, 0x1}) sched_setattr(r8, &(0x7f0000000240)={0x38, 0x0, 0x1, 0x7fffffff, 0x5, 0xc6, 0x9df, 0x401, 0x4, 0x4cb902ee}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="b125641c1af6d396dbdc2259567486fc13daca979ec03cb24b6716c5fbd4ff3055a17b427ee04b769d1d87d5c5d0617d8d5b90c3def057abc4", 0x39}], 0x1) 6.077484189s ago: executing program 3 (id=442): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x54, r0, 0x101, 0x0, 0x700, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}]}, 0x54}}, 0x800) 5.96026278s ago: executing program 3 (id=444): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x4a1}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) (async) r1 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x59, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x7, 0xff, 0x1, {0x22, 0xda4}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x24, 0x6, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xd2, 0x9, 0x5}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x82, 0xfa, 0x4, 0x20, 0x1}, 0x25, &(0x7f00000001c0)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x8000, 0xff00, 0x7, [0xffc03f, 0xff0000, 0xc0, 0xff00, 0xffc03f]}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x14, &(0x7f0000000280)={0x60, 0x1, 0x36, {0x36, 0x0, "18e0c115354942f182a61d28bd2f4d57bdc34fe81a5a34070051177a840100b3a542cd237a9c4cc7582af33e5d29f2f7535d7766"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f0000000300)={0x0, 0x22, 0x4, {[@global=@item_012={0x1, 0x1, 0x2, 'V'}, @local=@item_012={0x0, 0x2, 0x1}, @global=@item_012={0x0, 0x1, 0x7}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1800, 0x6, 0x1, {0x22, 0x120}}}}, &(0x7f00000005c0)={0x18, &(0x7f0000000480)={0x40, 0xc, 0x1d, "365e91aab8f97787f76248fc78b64fcc3da61f4bfe0363bbe22df2925a"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000540)={0x20, 0x1, 0x18, "df2f0e52532ae16e429b649c003b66cd09843065722afdef"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x7f}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x3, 0x2) (async, rerun: 64) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (rerun: 32) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f00000003c0)={0x8005, r2, 0x1}) 5.892669439s ago: executing program 2 (id=445): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0x5, 0x100000000, 0xffffffffffffffff}) setsockopt(0xffffffffffffffff, 0x9000000, 0x5, &(0x7f0000000180)="b351884e71fc63cc77a64463558cb693556f407e547cd1f3a6b97d1a5c812013f02a46ad45243e613fd5b5c76f7d7bccd64749df5dd74c16366ac7927a0dfaf93ad4eaf742186244ccc2e5a018922c801af2c3509ebef017a64ddfb4106ddb71a47d88380748831900c932f4ecb271be92134e247e4ee56e824e5e96f77178de9c5f8bc1a1357ba9cac0", 0x8a) 5.446808229s ago: executing program 2 (id=446): shmget$private(0x0, 0x3000, 0x100, &(0x7f0000c93000/0x3000)=nil) r0 = shmget(0x0, 0x3000, 0x4, &(0x7f0000fa5000/0x3000)=nil) shmat(r0, &(0x7f0000f66000/0x2000)=nil, 0x6000) shmctl$SHM_LOCK(0x0, 0xb) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000c93000/0x3000)=nil) (async) shmget(0x0, 0x3000, 0x4, &(0x7f0000fa5000/0x3000)=nil) (async) shmat(r0, &(0x7f0000f66000/0x2000)=nil, 0x6000) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) (async) 5.130034687s ago: executing program 2 (id=448): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4008010) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000010550914724000010203010902240001010330050904000801030101020921f700010122b80b09058103100002ba02"], &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x6, 0x8, 0x54, 0x20, 0x2}, 0x5, &(0x7f0000000440)=ANY=[], 0x3, [{0x0, 0x0}, {0xad, &(0x7f0000002640)=ANY=[@ANYBLOB="ad03761d8105564030ed9371ad6395516d43a0f2cf6dc09674b2bfdeb20636158a2653de2423825d73e38eb9724be584afa4815d725749fb1de3631be3c61b956c67362cabfe55ec281e7425f047105a3946521e7fc8c9a03664f51c43c438bbef23f2a787a2be81580e6b7c6de4acbeb718fe91c274c1d1c1b670f21cf9b0ffffffff88f429bb7d9ecc10ba4636aa45bcebf2ba0c011dc90000005d00"/173, @ANYRES32=r0, @ANYRESHEX=r2]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41d}}]}) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) sched_setattr(r3, &(0x7f00000001c0)={0x38, 0x0, 0x20, 0x6000, 0x2, 0x80000000, 0x4, 0x2, 0x6, 0x1310}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000480)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r4, 0x0}]) r6 = memfd_secret(0x0) unshare(0x40000000) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002740)=ANY=[@ANYRESHEX=r7, @ANYBLOB="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", @ANYRES16=r4, @ANYRESHEX=r5, @ANYRES16=r5], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r9 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r9, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) r10 = socket$inet6(0xa, 0x80803, 0x6) getsockopt$inet6_int(r10, 0x29, 0x50, 0x0, &(0x7f0000000340)=0x1c) connect$inet(r9, &(0x7f0000000040)={0x2, 0xfffc, @empty}, 0x10) splice(r6, 0x0, r9, 0x0, 0x7ffe, 0x0) preadv(r8, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x3, 0x138, 0x52) 4.805429831s ago: executing program 0 (id=453): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_io_uring_setup(0x38cb, &(0x7f00000005c0)={0x0, 0x7e16, 0x80, 0x800, 0x250}, &(0x7f00000002c0), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, 0x0, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000014c0)={0xfffffffd, 0xffffffcb, 0x11c02, 0xcce5, 0x1b, "cc33101d3f0000002000"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x2c, 0x800, 0x0) write(r3, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff1100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000280)={0x7e, 0x8001}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x120, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x218, 0x20a, 0x278, 0x218, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'veth1\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@socket2={{0x28}, 0x6}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x365) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000bc12c154f013918b486b11aa5326e6a13b8e69be8a01d8c11828", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$inet(0x2, 0x3, 0x3d132406) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3800c0c5) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000"], 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000480)={0x18, &(0x7f0000000240)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f00000012c0), 0x800) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x4000, 0x0) 4.363884531s ago: executing program 4 (id=455): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102, 0xa1}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x800, 0x800004, 0x10001}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4.193400728s ago: executing program 4 (id=456): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902"], 0x0) socket$vsock_stream(0x28, 0x1, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000180)=0x5, 0x4) dup(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newroute={0x1c, 0x18, 0xaba64f4add525e83, 0x0, 0x0, {0x2, 0x10, 0x10, 0x0, 0x2, 0x0, 0xff, 0x2}}, 0x1c}, 0x1, 0xffffff7f, 0x0, 0x840}, 0x4040000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f8008000240000000050800024000000b8608000340000047510800034000000003080001"], 0xdc}}, 0x0) 4.079597605s ago: executing program 0 (id=457): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) r3 = io_uring_setup(0x7200, &(0x7f0000001040)={0x0, 0x8a8e, 0x20000, 0x1, 0x3bf}) io_uring_enter(r3, 0x12ef, 0x68d7, 0x40, &(0x7f00000010c0)={[0x7, 0xff]}, 0x8) write$vhost_msg_v2(r2, 0x0, 0x0) write$vhost_msg_v2(r2, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f00000004c0)=""/110, 0x6e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) write$vhost_msg_v2(r2, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000640)=""/201, 0xc9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) 2.827154417s ago: executing program 3 (id=460): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/234, 0xea}], 0x1, 0xffff, 0x5dd073cf) 2.593948806s ago: executing program 3 (id=462): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0) 1.873763576s ago: executing program 1 (id=465): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 1.859878821s ago: executing program 2 (id=466): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) (async) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x20, 0x23, 0x2, "f6cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000004040000", 0x58}], 0x1) (async) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000004040000", 0x58}], 0x1) socket$inet(0x2, 0x3, 0x2) (async) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @loopback}, 0xc) socket$inet(0x2, 0x3, 0x2) (async) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) (async) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x4010001, 0x0, 0xfffffffc}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x4010001, 0x0, 0xfffffffc}}}}}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x24) r7 = shmget(0x0, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r7, 0x0) (async) shmctl$IPC_RMID(r7, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001640)={0x84, &(0x7f00000002c0)={0x20, 0x17, 0x2, "78dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.463535667s ago: executing program 1 (id=467): r0 = fsopen(&(0x7f0000000000)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='/d\xa0-N\xe0cs#\x00', &(0x7f0000000040)='/dev\x00', 0x0) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000000, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/204, 0xcc}], 0x1, 0x7, 0xa7a2) socket$inet6(0xa, 0x80000, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r6 = fspick(r5, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x3f, 0x0, 0x0) preadv(r4, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/234, 0xea}], 0x1, 0xffff, 0x5dd073cf) 1.115756595s ago: executing program 4 (id=468): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x8000, 0x4, 0x5, 0x0, 0x3, 0x3, 0xa, 0xb8, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x5, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x0, 0x50, 0x0, 0x70, 0x4, 0x87}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000000, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) pwritev2(r0, 0x0, 0x41, 0x7ffffe, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x47) 777.467296ms ago: executing program 4 (id=469): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x4000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xffeb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x4}, {0x2, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4884) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000000)=0x6, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) (async) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200040c0) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 643.933616ms ago: executing program 1 (id=470): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x31, &(0x7f00000000c0)={0x20001d, 0x8, 0xa61}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000002d00)=0x8, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRES8=r0], 0x0) 607.532686ms ago: executing program 4 (id=471): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000140)='./file0\x00', 0x66af1b4d) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 465.538716ms ago: executing program 1 (id=472): unshare(0x22020400) r0 = epoll_create1(0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000000c0)={0x6}) (fail_nth: 7) 135.650598ms ago: executing program 1 (id=473): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x8, 0x7}, {0x14, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2, 0x3, 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r3, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x20, 0x40e28}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv6_newaddr={0x0, 0x14, 0x200, 0x70bd2b, 0x25dfdbfe, {0xa, 0x78, 0x2, 0xfd, r5}, [@IFA_ADDRESS={0x0, 0x1, @remote}, @IFA_RT_PRIORITY={0x0, 0x9, 0x200}, @IFA_LOCAL={0x0, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFA_LOCAL={0x0, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x3c}}, 0x4008004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280140003"], 0x44}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) 124.167526ms ago: executing program 4 (id=474): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x256f16877c8c0da9, 0x0) rt_sigsuspend(&(0x7f0000000000)={[0x6e, 0x7]}, 0x8) 0s ago: executing program 1 (id=475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffffa}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x0) kernel console output (not intermixed with test programs): mode [ 107.233503][ T6144] bridge0: port 3(netdevsim0) entered blocking state [ 107.246600][ T6147] FAULT_INJECTION: forcing a failure. [ 107.246600][ T6147] name failslab, interval 1, probability 0, space 0, times 1 [ 107.263879][ T6147] CPU: 0 UID: 0 PID: 6147 Comm: syz.2.78 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 107.263908][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.263929][ T6147] Call Trace: [ 107.263937][ T6147] [ 107.263946][ T6147] dump_stack_lvl+0x241/0x360 [ 107.263996][ T6147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.264026][ T6147] ? __pfx__printk+0x10/0x10 [ 107.264060][ T6147] ? __pfx___might_resched+0x10/0x10 [ 107.264091][ T6147] should_fail_ex+0x424/0x570 [ 107.264118][ T6147] should_failslab+0xac/0x100 [ 107.264149][ T6147] kmem_cache_alloc_noprof+0x78/0x390 [ 107.264184][ T6147] ? skb_clone+0x20c/0x390 [ 107.264213][ T6147] skb_clone+0x20c/0x390 [ 107.264239][ T6147] nfnetlink_rcv+0x52b/0x28f0 [ 107.264266][ T6147] ? __dev_queue_xmit+0x2f9/0x3f60 [ 107.264297][ T6147] ? __dev_queue_xmit+0x2f9/0x3f60 [ 107.264321][ T6147] ? __dev_queue_xmit+0x2f9/0x3f60 [ 107.264345][ T6147] ? __dev_queue_xmit+0x1780/0x3f60 [ 107.264366][ T6147] ? kasan_save_track+0x3f/0x80 [ 107.264388][ T6147] ? __kasan_slab_alloc+0x66/0x80 [ 107.264418][ T6147] ? __do_fast_syscall_32+0xb4/0x110 [ 107.264449][ T6147] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 107.264497][ T6147] ? ref_tracker_free+0x63e/0x7e0 [ 107.264520][ T6147] ? __asan_memcpy+0x40/0x70 [ 107.264541][ T6147] ? __pfx_ref_tracker_free+0x10/0x10 [ 107.264562][ T6147] ? __skb_clone+0x5c/0x6d0 [ 107.264602][ T6147] ? skb_clone+0x240/0x390 [ 107.264637][ T6147] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.264671][ T6147] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.264702][ T6147] netlink_unicast+0x7f8/0x9a0 [ 107.264740][ T6147] ? __pfx_netlink_unicast+0x10/0x10 [ 107.264769][ T6147] ? skb_put+0x114/0x1f0 [ 107.264794][ T6147] netlink_sendmsg+0x8c3/0xcd0 [ 107.264838][ T6147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.264872][ T6147] ? __import_iovec+0x585/0x830 [ 107.264900][ T6147] ? aa_sock_msg_perm+0x91/0x160 [ 107.264936][ T6147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.264964][ T6147] __sock_sendmsg+0x221/0x270 [ 107.264996][ T6147] ____sys_sendmsg+0x523/0x860 [ 107.265028][ T6147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.265068][ T6147] __sys_sendmsg+0x271/0x360 [ 107.265095][ T6147] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.265171][ T6147] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 107.265205][ T6147] ? lockdep_hardirqs_on+0x9d/0x150 [ 107.265233][ T6147] __do_fast_syscall_32+0xb4/0x110 [ 107.265259][ T6147] ? exc_page_fault+0x5f8/0x920 [ 107.265288][ T6147] do_fast_syscall_32+0x34/0x80 [ 107.265315][ T6147] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.265346][ T6147] RIP: 0023:0xf742d579 [ 107.265369][ T6147] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 107.265385][ T6147] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 107.265407][ T6147] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000240 [ 107.265421][ T6147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.265432][ T6147] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.265443][ T6147] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 107.265455][ T6147] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.265484][ T6147] [ 107.626250][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 107.635767][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 107.658180][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 107.675571][ T6144] bridge0: port 3(netdevsim0) entered disabled state [ 107.683857][ T6144] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 107.693327][ T6144] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 107.701453][ T6144] bridge0: port 3(netdevsim0) entered blocking state [ 107.708335][ T6144] bridge0: port 3(netdevsim0) entered forwarding state [ 107.725868][ T6151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.79'. [ 107.908877][ T5895] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.993568][ T6157] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.099319][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 108.116956][ T5895] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 108.141026][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.157879][ T5895] usb 5-1: Product: syz [ 108.162647][ T5895] usb 5-1: Manufacturer: syz [ 108.167300][ T5895] usb 5-1: SerialNumber: syz [ 108.189270][ T5895] usb 5-1: config 0 descriptor?? [ 108.230487][ T5895] gspca_main: sq930x-2.14.0 probing 2770:930c [ 108.368854][ T5845] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.432745][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 108.463181][ T5895] gspca_sq930x: reg_r 001f failed -71 [ 108.474840][ T5895] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 108.492955][ T5895] usb 5-1: USB disconnect, device number 5 [ 108.519001][ T5845] usb 4-1: Using ep0 maxpacket: 8 [ 108.531482][ T5845] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.572741][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.611920][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 108.688750][ T5845] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 108.697901][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.758951][ T5845] usb 4-1: Product: syz [ 108.783936][ T5845] usb 4-1: Manufacturer: syz [ 108.802788][ T5845] usb 4-1: SerialNumber: syz [ 108.824401][ T5845] usb 4-1: config 0 descriptor?? [ 108.841469][ T5845] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 108.975126][ T6182] netlink: 'syz.1.92': attribute type 13 has an invalid length. [ 109.051335][ T6182] gretap0: refused to change device tx_queue_len [ 109.057958][ T6182] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 109.066166][ T9] usb 4-1: USB disconnect, device number 5 [ 109.080783][ T5845] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 109.144598][ T6189] tipc: Started in network mode [ 109.168789][ T6189] tipc: Node identity ac1414bb, cluster identity 4711 [ 109.176471][ T6189] tipc: Enabling of bearer rejected, failed to enable media [ 109.592968][ T6203] netlink: 'syz.2.101': attribute type 10 has an invalid length. [ 109.672666][ T6203] syz_tun: entered promiscuous mode [ 109.731795][ T6203] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 110.166770][ T6212] syz.4.104 uses obsolete (PF_INET,SOCK_PACKET) [ 110.308919][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.468777][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 110.487687][ T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 110.511771][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.608038][ T9] usb 3-1: Product: syz [ 110.638056][ T9] usb 3-1: Manufacturer: syz [ 110.682755][ T9] usb 3-1: SerialNumber: syz [ 110.882850][ T9] usb 3-1: config 0 descriptor?? [ 110.913207][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 110.933166][ T9] usb 3-1: setting power ON [ 110.963538][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 111.012662][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.036678][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 111.056640][ T9] usb 3-1: media controller created [ 111.114973][ T6209] dvb-usb: bulk message failed: -22 (3/0) [ 111.125616][ T6209] usb 3-1: gpio_write failed. [ 111.141323][ T6209] cxusb: i2c rd: len=8192 is too big! [ 111.141323][ T6209] [ 111.228815][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.397075][ T9] usb 3-1: selecting invalid altsetting 6 [ 111.434755][ T9] usb 3-1: digital interface selection failed (-22) [ 111.469892][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 111.582610][ T9] usb 3-1: setting power OFF [ 111.644401][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 111.664742][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 111.689014][ T9] (NULL device *): no alternate interface [ 111.859549][ T5897] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.866699][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 111.891312][ T9] usb 3-1: USB disconnect, device number 4 [ 112.088975][ T5897] usb 4-1: device descriptor read/64, error -71 [ 112.358750][ T5897] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.528934][ T5897] usb 4-1: device descriptor read/64, error -71 [ 112.659760][ T5897] usb usb4-port1: attempt power cycle [ 112.698752][ T5892] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.728171][ T6242] program syz.2.115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.880618][ T5892] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 112.958734][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.013056][ T5892] usb 2-1: config 0 descriptor?? [ 113.018778][ T5897] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 113.043483][ T5892] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 113.099776][ T5897] usb 4-1: device descriptor read/8, error -71 [ 113.214460][ T30] audit: type=1326 audit(1744638025.097:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 113.243960][ T30] audit: type=1326 audit(1744638025.107:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 113.272722][ T30] audit: type=1326 audit(1744638025.107:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 113.302795][ T30] audit: type=1326 audit(1744638025.107:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 113.310469][ T5892] gp8psk: usb in 128 operation failed. [ 113.340403][ T30] audit: type=1326 audit(1744638025.107:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 113.357932][ T5892] gp8psk: usb in 137 operation failed. [ 113.368824][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.381835][ T30] audit: type=1326 audit(1744638025.117:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 113.427745][ T5897] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 113.464712][ T5892] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 113.488517][ T5897] usb 4-1: device descriptor read/8, error -71 [ 113.528100][ T5892] usb 2-1: media controller created [ 113.585318][ T30] audit: type=1326 audit(1744638025.117:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 113.613997][ T5897] usb usb4-port1: unable to enumerate USB device [ 113.624784][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.633433][ T30] audit: type=1326 audit(1744638025.117:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 113.677022][ T5892] gp8psk_fe: Frontend attached [ 113.682171][ T30] audit: type=1326 audit(1744638025.117:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 113.704897][ T5892] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 113.714937][ T5892] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 113.727162][ T30] audit: type=1326 audit(1744638025.127:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 113.802387][ T5892] gp8psk: usb in 138 operation failed. [ 113.807972][ T5892] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 113.818793][ T5892] gp8psk: found Genpix USB device pID = 203 (hex) [ 113.835896][ T5892] usb 2-1: USB disconnect, device number 4 [ 114.028790][ T6258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.084637][ T6258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.180604][ T5892] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 114.250042][ T5845] usb 1-1: device descriptor read/64, error -110 [ 115.108799][ T5845] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 115.182510][ T47] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.343039][ T47] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 115.352313][ T47] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 115.368935][ T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.373351][ T5845] usb 1-1: device descriptor read/64, error -32 [ 115.395686][ T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.432418][ T47] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.453805][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.486027][ T47] usb 3-1: Product: syz [ 115.501004][ T47] usb 3-1: Manufacturer: syz [ 115.522012][ T47] usb 3-1: SerialNumber: syz [ 115.720921][ T5845] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 115.748670][ T5889] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.764567][ T5845] usb 1-1: device descriptor read/8, error -32 [ 115.791213][ T6267] Zero length message leads to an empty skb [ 115.938708][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 115.956142][ T5889] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 115.973918][ T5889] usb 2-1: config 0 has no interface number 0 [ 115.994126][ T5889] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 116.013895][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.026285][ T5845] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 116.036588][ T5889] usb 2-1: Product: syz [ 116.046556][ T5889] usb 2-1: Manufacturer: syz [ 116.055139][ T5889] usb 2-1: SerialNumber: syz [ 116.061370][ T5845] usb 1-1: device descriptor read/8, error -32 [ 116.073208][ T5889] usb 2-1: config 0 descriptor?? [ 116.095426][ T5889] smsc95xx v2.0.0 [ 116.191814][ T5845] raw-gadget.0 gadget.0: failed to queue suspend event [ 116.207474][ T10] usb 1-1: USB disconnect, device number 4 [ 116.272328][ T10] raw-gadget.0 gadget.0: failed to queue reset event [ 116.380072][ T10] raw-gadget.0 gadget.0: failed to queue resume event [ 116.458820][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.472817][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 116.481082][ T10] raw-gadget.0 gadget.0: failed to queue reset event [ 116.544348][ T5889] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 116.565597][ T10] raw-gadget.0 gadget.0: failed to queue resume event [ 116.581135][ T5889] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 116.638765][ T10] usb 1-1: device descriptor read/64, error -32 [ 116.748999][ T10] raw-gadget.0 gadget.0: failed to queue suspend event [ 116.773222][ T10] raw-gadget.0 gadget.0: failed to queue reset event [ 116.868728][ T10] raw-gadget.0 gadget.0: failed to queue resume event [ 116.929085][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 116.938483][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 116.946250][ T10] raw-gadget.0 gadget.0: failed to queue reset event [ 117.032490][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.040676][ T10] raw-gadget.0 gadget.0: failed to queue resume event [ 117.054382][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.119235][ T10] usb 1-1: device descriptor read/64, error -32 [ 117.242155][ T10] raw-gadget.0 gadget.0: failed to queue suspend event [ 117.325756][ T10] usb usb1-port1: attempt power cycle [ 117.365109][ T47] usb 3-1: 0:2 : does not exist [ 117.374739][ T10] raw-gadget.0 gadget.0: failed to queue disconnect event [ 117.473654][ T10] raw-gadget.0 gadget.0: failed to queue reset event [ 117.508355][ T47] usb 3-1: USB disconnect, device number 5 [ 117.608769][ T10] raw-gadget.0 gadget.0: failed to queue resume event [ 117.641423][ T10] raw-gadget.0 gadget.0: failed to queue reset event [ 117.734936][ T6327] xt_CT: No such helper "netbios-ns" [ 117.748729][ T5845] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 117.786549][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.858915][ T10] raw-gadget.0 gadget.0: failed to queue resume event [ 118.059546][ T5845] usb 4-1: Using ep0 maxpacket: 16 [ 118.245349][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.351270][ T5889] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 118.370308][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 118.377743][ T10] usb 1-1: device descriptor read/8, error -32 [ 118.384525][ T5889] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 118.423597][ T5889] usb 2-1: USB disconnect, device number 5 [ 118.489163][ T10] raw-gadget.0 gadget.0: failed to queue suspend event [ 118.512477][ T10] raw-gadget.0 gadget.0: failed to queue reset event [ 118.641269][ T10] raw-gadget.0 gadget.0: failed to queue resume event [ 118.718723][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 118.748519][ T6347] fuse: Bad value for 'user_id' [ 118.757899][ T6347] fuse: Bad value for 'user_id' [ 118.809124][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 118.827830][ T10] usb 1-1: device descriptor read/8, error -32 [ 118.923668][ T6349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.952181][ T6349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.965042][ T6349] syz.0.134 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 118.988830][ T10] raw-gadget.0 gadget.0: failed to queue suspend event [ 118.998317][ T10] usb usb1-port1: unable to enumerate USB device [ 119.847309][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.139'. [ 119.887083][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.139'. [ 119.915726][ T6361] netlink: 'syz.4.137': attribute type 1 has an invalid length. [ 120.051247][ T5845] usb 4-1: unable to get BOS descriptor or descriptor too short [ 120.150774][ T5845] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 120.164007][ T6363] veth1_macvtap: left promiscuous mode [ 120.169815][ T6363] macsec0: entered promiscuous mode [ 120.212827][ T5845] usb 4-1: can't read configurations, error -71 [ 120.238886][ T6363] veth1_macvtap: entered promiscuous mode [ 120.269102][ T6363] macsec0: left promiscuous mode [ 120.471807][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 120.515582][ T6363] vlan2: entered allmulticast mode [ 120.545182][ T6363] bond0: entered allmulticast mode [ 120.545884][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 120.589353][ T6363] bond_slave_0: entered allmulticast mode [ 120.595282][ T6363] bond_slave_1: entered allmulticast mode [ 120.601269][ T6363] syz_tun: entered allmulticast mode [ 121.818647][ T10] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 122.015731][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.034054][ T10] usb 4-1: config 0 has no interface number 0 [ 122.064805][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 122.103939][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 122.135997][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 122.145281][ T5889] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.189004][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.210426][ T6407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.231901][ T10] usb 4-1: config 0 descriptor?? [ 122.249078][ T6393] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 122.267127][ T6407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.277654][ T10] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 122.341215][ T5889] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 122.351166][ T5889] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 122.374469][ T5889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 122.392263][ T5889] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 122.392633][ T6412] FAULT_INJECTION: forcing a failure. [ 122.392633][ T6412] name failslab, interval 1, probability 0, space 0, times 0 [ 122.405792][ T5889] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 122.429647][ T6412] CPU: 0 UID: 0 PID: 6412 Comm: syz.2.153 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 122.429676][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.429689][ T6412] Call Trace: [ 122.429697][ T6412] [ 122.429704][ T6412] dump_stack_lvl+0x241/0x360 [ 122.429756][ T6412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.429786][ T6412] ? __pfx__printk+0x10/0x10 [ 122.429820][ T6412] ? __pfx___might_resched+0x10/0x10 [ 122.429853][ T6412] should_fail_ex+0x424/0x570 [ 122.429881][ T6412] should_failslab+0xac/0x100 [ 122.429913][ T6412] kmem_cache_alloc_noprof+0x78/0x390 [ 122.429941][ T6412] ? __kernfs_new_node+0xdf/0x890 [ 122.429968][ T6412] __kernfs_new_node+0xdf/0x890 [ 122.429992][ T6412] ? __lock_acquire+0xad5/0xd80 [ 122.430020][ T6412] ? __pfx___kernfs_new_node+0x10/0x10 [ 122.430054][ T6412] ? kernfs_root+0x1c/0x230 [ 122.430076][ T6412] ? kernfs_root+0x1c/0x230 [ 122.430107][ T6412] kernfs_new_node+0x114/0x220 [ 122.430136][ T6412] __kernfs_create_file+0x49/0x2e0 [ 122.430167][ T6412] sysfs_add_file_mode_ns+0x24a/0x310 [ 122.430207][ T6412] internal_create_group+0x7ea/0x1320 [ 122.430229][ T6412] ? kernfs_add_one+0xf8/0x530 [ 122.430266][ T6412] ? __pfx_internal_create_group+0x10/0x10 [ 122.430301][ T6412] sysfs_create_groups+0x56/0x120 [ 122.430325][ T6412] device_add_attrs+0xef/0x670 [ 122.430355][ T6412] ? __pfx_device_add_attrs+0x10/0x10 [ 122.430391][ T6412] device_add+0x576/0xbf0 [ 122.430417][ T6412] ? device_initialize+0x266/0x460 [ 122.430445][ T6412] netdev_register_kobject+0x157/0x2f0 [ 122.430475][ T6412] register_netdevice+0x12b0/0x1b80 [ 122.430517][ T6412] ? __pfx_register_netdevice+0x10/0x10 [ 122.430538][ T6412] ? alloc_netdev_mqs+0xce7/0x1210 [ 122.430569][ T6412] ? alloc_netdev_mqs+0xe8e/0x1210 [ 122.430594][ T6412] ? __ip_tunnel_create+0x3b5/0x560 [ 122.430624][ T6412] __ip_tunnel_create+0x3f0/0x560 [ 122.430651][ T6412] ? __pfx___ip_tunnel_create+0x10/0x10 [ 122.430676][ T6412] ? bpf_lsm_capable+0x9/0x10 [ 122.430710][ T6412] ip_tunnel_ctl+0x55f/0xc40 [ 122.430739][ T6412] vif_add+0x393/0x1660 [ 122.430778][ T6412] ? __pfx_vif_add+0x10/0x10 [ 122.430845][ T6412] ip_mroute_setsockopt+0xf39/0x11f0 [ 122.430890][ T6412] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 122.430945][ T6412] do_ip_setsockopt+0x1114/0x39c0 [ 122.430982][ T6412] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 122.431011][ T6412] ? aa_sk_perm+0x96f/0xac0 [ 122.431044][ T6412] ? ksys_write+0x24e/0x2d0 [ 122.431067][ T6412] ? __pfx_aa_sk_perm+0x10/0x10 [ 122.431103][ T6412] ? __lock_acquire+0xad5/0xd80 [ 122.431128][ T6412] ip_setsockopt+0x63/0x100 [ 122.431155][ T6412] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 122.431185][ T6412] do_sock_setsockopt+0x3b1/0x710 [ 122.431212][ T6412] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 122.431233][ T6412] ? __fget_files+0x2a/0x420 [ 122.431254][ T6412] ? __fget_files+0x39d/0x420 [ 122.431271][ T6412] ? __fget_files+0x2a/0x420 [ 122.431299][ T6412] __ia32_sys_setsockopt+0x1f2/0x280 [ 122.431328][ T6412] __do_fast_syscall_32+0xb4/0x110 [ 122.431354][ T6412] ? exc_page_fault+0x5f8/0x920 [ 122.431384][ T6412] do_fast_syscall_32+0x34/0x80 [ 122.431410][ T6412] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.431435][ T6412] RIP: 0023:0xf742d579 [ 122.431460][ T6412] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 122.431476][ T6412] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 122.431506][ T6412] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 122.431519][ T6412] RDX: 00000000000000ca RSI: 00000000800000c0 RDI: 0000000000000010 [ 122.431532][ T6412] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.431544][ T6412] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 122.431555][ T6412] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.431584][ T6412] [ 122.873863][ T5889] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.884132][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.892313][ T5889] usb 2-1: Product: syz [ 122.896518][ T5889] usb 2-1: Manufacturer: syz [ 122.899605][ T5895] usb 4-1: USB disconnect, device number 12 [ 122.919054][ T5889] cdc_wdm 2-1:1.0: skipping garbage [ 122.924849][ T5889] cdc_wdm 2-1:1.0: skipping garbage [ 122.941234][ T5889] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 122.947382][ T5889] cdc_wdm 2-1:1.0: Unknown control protocol [ 123.133181][ T47] usb 2-1: USB disconnect, device number 6 [ 123.328903][ T5889] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 123.488899][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 123.579584][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 123.611322][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 123.638283][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 6400, setting to 64 [ 123.715178][ T5889] usb 3-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 123.728119][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.754198][ T5889] usb 3-1: Product: syz [ 123.768034][ T5889] usb 3-1: Manufacturer: syz [ 123.783442][ T5889] usb 3-1: SerialNumber: syz [ 123.802111][ T5889] usb 3-1: config 0 descriptor?? [ 123.817998][ T6422] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 123.843360][ T5889] cypress_m8 3-1:0.0: HID->COM RS232 Adapter converter detected [ 123.864978][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 123.892161][ T5889] cyphidcom ttyUSB0: required endpoint is missing [ 124.808755][ T5895] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 124.978652][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 125.007499][ T5895] usb 2-1: config 13 has an invalid interface number: 151 but max is 0 [ 125.027007][ T5895] usb 2-1: config 13 has no interface number 0 [ 125.033687][ T5895] usb 2-1: config 13 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 125.045262][ T5895] usb 2-1: config 13 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 125.059325][ T5895] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 125.087373][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.111570][ T5895] usb 2-1: Product: syz [ 125.119448][ T5895] usb 2-1: Manufacturer: syz [ 125.125333][ T5895] usb 2-1: SerialNumber: syz [ 125.362477][ T6448] tipc: Started in network mode [ 125.367734][ T6448] tipc: Node identity 7, cluster identity 4711 [ 125.377860][ T6448] tipc: Node number set to 7 [ 125.578775][ T6454] netlink: 112 bytes leftover after parsing attributes in process `syz.0.163'. [ 125.732902][ T6458] FAULT_INJECTION: forcing a failure. [ 125.732902][ T6458] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.746884][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.3.164 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 125.746913][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.746926][ T6458] Call Trace: [ 125.746934][ T6458] [ 125.746942][ T6458] dump_stack_lvl+0x241/0x360 [ 125.746982][ T6458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.747013][ T6458] ? __pfx__printk+0x10/0x10 [ 125.747055][ T6458] should_fail_ex+0x424/0x570 [ 125.747082][ T6458] strncpy_from_user+0x36/0x280 [ 125.747104][ T6458] ? strncpy_from_sockptr+0x31/0xe0 [ 125.747138][ T6458] do_tcp_setsockopt+0x16e/0x2670 [ 125.747175][ T6458] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 125.747212][ T6458] ? __pfx_aa_sk_perm+0x10/0x10 [ 125.747245][ T6458] ? aa_sock_opt_perm+0x79/0x120 [ 125.747274][ T6458] ? tcp_setsockopt+0x3e/0xf0 [ 125.747306][ T6458] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 125.747337][ T6458] do_sock_setsockopt+0x3b1/0x710 [ 125.747366][ T6458] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 125.747386][ T6458] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 125.747424][ T6458] ? ksys_write+0x266/0x2d0 [ 125.747455][ T6458] __ia32_sys_setsockopt+0x1f2/0x280 [ 125.747484][ T6458] __do_fast_syscall_32+0xb4/0x110 [ 125.747512][ T6458] ? exc_page_fault+0x5f8/0x920 [ 125.747543][ T6458] do_fast_syscall_32+0x34/0x80 [ 125.747570][ T6458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.747595][ T6458] RIP: 0023:0xf748d579 [ 125.747613][ T6458] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 125.747630][ T6458] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 125.747651][ T6458] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000006 [ 125.747665][ T6458] RDX: 000000000000000d RSI: 0000000080001300 RDI: 000000000000000a [ 125.747677][ T6458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.747688][ T6458] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 125.747699][ T6458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.747728][ T6458] [ 126.017886][ T5889] usb 3-1: USB disconnect, device number 6 [ 126.026893][ T5889] cypress_m8 3-1:0.0: device disconnected [ 126.451063][ T5895] usb 2-1: USB disconnect, device number 7 [ 126.528926][ T47] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 126.636158][ T6471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.168'. [ 126.694353][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.745681][ T47] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.767977][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.813103][ T47] usb 4-1: Product: syz [ 126.820456][ T47] usb 4-1: Manufacturer: syz [ 126.825164][ T47] usb 4-1: SerialNumber: syz [ 127.001210][ T6479] macsec1: entered allmulticast mode [ 127.855950][ T47] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 127.863017][ T47] cdc_ncm 4-1:1.0: setting tx_max = 60 [ 127.928786][ T5889] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 128.106285][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 128.180277][ T5889] usb 2-1: config 162 has an invalid interface number: 84 but max is 2 [ 128.225983][ T5889] usb 2-1: config 162 has an invalid interface number: 3 but max is 2 [ 128.284085][ T5889] usb 2-1: config 162 has no interface number 0 [ 128.320993][ T5889] usb 2-1: config 162 has no interface number 1 [ 128.337655][ T5889] usb 2-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 128.364356][ T5889] usb 2-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 128.401956][ T5889] usb 2-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 128.440068][ T5889] usb 2-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 128.469872][ T5889] usb 2-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 128.498664][ T5889] usb 2-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 128.537198][ T5889] usb 2-1: config 162 interface 84 has no altsetting 0 [ 128.547323][ T5889] usb 2-1: config 162 interface 2 has no altsetting 0 [ 128.562187][ T5889] usb 2-1: config 162 interface 3 has no altsetting 0 [ 128.593571][ T5889] usb 2-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 128.606074][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.624986][ T5889] usb 2-1: Product: syz [ 128.627354][ T47] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 128.634727][ T5889] usb 2-1: Manufacturer: syz [ 128.655648][ T5889] usb 2-1: SerialNumber: syz [ 128.709052][ T47] usb 4-1: USB disconnect, device number 13 [ 128.719713][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 128.729380][ T47] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 128.742516][ T6494] netlink: 20 bytes leftover after parsing attributes in process `syz.4.176'. [ 128.956848][ T5150] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 128.986968][ T5889] usb 2-1: USB disconnect, device number 8 [ 129.156263][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.197665][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.334611][ T6503] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 129.617668][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.184'. [ 129.908796][ T5897] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 130.081582][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.134972][ T5897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.176649][ T5897] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 130.188853][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 130.214231][ T5897] usb 2-1: SerialNumber: syz [ 130.272321][ T6528] netlink: 76 bytes leftover after parsing attributes in process `syz.3.191'. [ 130.560761][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 130.691306][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.192'. [ 130.783450][ T6534] vivid-000: ================= START STATUS ================= [ 130.795003][ T6534] vivid-000: Radio HW Seek Mode: Bounded [ 130.808725][ T6534] vivid-000: Radio Programmable HW Seek: false [ 130.823705][ T6534] vivid-000: RDS Rx I/O Mode: Block I/O [ 130.848656][ T6534] vivid-000: Generate RBDS Instead of RDS: false [ 130.860029][ T6534] vivid-000: RDS Reception: true [ 130.871487][ T6534] vivid-000: RDS Program Type: 0 inactive [ 130.885704][ T6534] vivid-000: RDS PS Name: inactive [ 130.898287][ T6534] vivid-000: RDS Radio Text: inactive [ 130.915238][ T6534] vivid-000: RDS Traffic Announcement: false inactive [ 130.934475][ T6534] vivid-000: RDS Traffic Program: false inactive [ 130.996946][ T5947] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.013693][ T6534] vivid-000: RDS Music: false inactive [ 131.051642][ T6534] vivid-000: ================== END STATUS ================== [ 131.178962][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 131.194176][ T5947] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 131.208789][ T5947] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 131.267768][ T5947] usb 5-1: Product: syz [ 131.277946][ T5947] usb 5-1: Manufacturer: syz [ 131.290135][ T5947] usb 5-1: SerialNumber: syz [ 131.302935][ T10] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 131.305702][ T5947] usb 5-1: config 0 descriptor?? [ 131.352505][ T5947] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 131.499050][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.518614][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 131.544921][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 131.572159][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.588769][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 131.596946][ T10] usb 4-1: SerialNumber: syz [ 131.613876][ T6540] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 131.627786][ T10] hub 4-1:1.0: bad descriptor, ignoring hub [ 131.644106][ T10] hub 4-1:1.0: probe with driver hub failed with error -5 [ 131.832321][ T6540] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 131.964655][ T6536] program syz.4.193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.984952][ T5947] gspca_zc3xx: reg_w_i err -71 [ 132.000360][ T5947] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 132.086683][ T5947] usb 5-1: USB disconnect, device number 6 [ 132.234408][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 132.244739][ T5892] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.282180][ T10] usb 4-1: USB disconnect, device number 14 [ 132.417237][ T5892] usb 3-1: config 1 has no interfaces? [ 132.446960][ T5892] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 132.457898][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.492701][ T5892] usb 3-1: Product: syz [ 132.496943][ T5892] usb 3-1: Manufacturer: syz [ 132.528463][ T5892] usb 3-1: SerialNumber: syz [ 132.793591][ T5897] usb 2-1: 0:2 : does not exist [ 132.838155][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'. [ 132.959189][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.965957][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.993870][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'. [ 133.134762][ T5897] usb 2-1: USB disconnect, device number 9 [ 133.508234][ T6584] fuse: Bad value for 'user_id' [ 133.514493][ T6584] fuse: Bad value for 'user_id' [ 133.599559][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.902444][ T5892] usb 3-1: USB disconnect, device number 7 [ 135.043249][ T6600] mmap: syz.0.211 (6600) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 135.094196][ T6600] process 'syz.0.211' launched '/dev/fd/3' with NULL argv: empty string added [ 135.791000][ T5897] raw-gadget.0 gadget.0: failed to queue reset event [ 135.879381][ T5897] raw-gadget.0 gadget.0: failed to queue resume event [ 135.948669][ T5897] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.970085][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 135.998439][ T5897] raw-gadget.0 gadget.0: failed to queue reset event [ 136.068667][ T5897] raw-gadget.0 gadget.0: failed to queue resume event [ 136.141294][ T5897] usb 1-1: device descriptor read/64, error -32 [ 136.162049][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 136.166900][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 136.272372][ T5897] raw-gadget.0 gadget.0: failed to queue suspend event [ 136.292643][ T5897] raw-gadget.0 gadget.0: failed to queue reset event [ 136.368830][ T5897] raw-gadget.0 gadget.0: failed to queue resume event [ 136.387639][ T6642] FAULT_INJECTION: forcing a failure. [ 136.387639][ T6642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.401349][ T6642] CPU: 0 UID: 0 PID: 6642 Comm: syz.3.226 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 136.401376][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.401388][ T6642] Call Trace: [ 136.401396][ T6642] [ 136.401405][ T6642] dump_stack_lvl+0x241/0x360 [ 136.401443][ T6642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.401472][ T6642] ? __pfx__printk+0x10/0x10 [ 136.401522][ T6642] should_fail_ex+0x424/0x570 [ 136.401548][ T6642] _copy_to_user+0x31/0xb0 [ 136.401580][ T6642] simple_read_from_buffer+0xc4/0x170 [ 136.401615][ T6642] proc_fail_nth_read+0x1ef/0x260 [ 136.401640][ T6642] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 136.401665][ T6642] ? rw_verify_area+0x246/0x630 [ 136.401688][ T6642] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 136.401711][ T6642] vfs_read+0x21f/0xb90 [ 136.401739][ T6642] ? __pfx___mutex_lock+0x10/0x10 [ 136.401768][ T6642] ? __pfx_vfs_read+0x10/0x10 [ 136.401794][ T6642] ? __fget_files+0x2a/0x420 [ 136.401815][ T6642] ? __fget_files+0x39d/0x420 [ 136.401831][ T6642] ? __fget_files+0x2a/0x420 [ 136.401860][ T6642] ksys_read+0x19d/0x2d0 [ 136.401886][ T6642] ? __pfx_ksys_read+0x10/0x10 [ 136.401912][ T6642] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 136.401938][ T6642] ? lockdep_hardirqs_on+0x9d/0x150 [ 136.401965][ T6642] __do_fast_syscall_32+0xb4/0x110 [ 136.401991][ T6642] ? exc_page_fault+0x5f8/0x920 [ 136.402020][ T6642] do_fast_syscall_32+0x34/0x80 [ 136.402047][ T6642] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.402071][ T6642] RIP: 0023:0xf748d579 [ 136.402089][ T6642] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 136.402105][ T6642] RSP: 002b:00000000f5116590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 136.402126][ T6642] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5116620 [ 136.402139][ T6642] RDX: 000000000000000f RSI: 00000000f747dff4 RDI: 0000000000000000 [ 136.402151][ T6642] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 136.402162][ T6642] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 136.402174][ T6642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.402200][ T6642] [ 136.630078][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.636690][ T5897] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 136.644708][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 136.652309][ T5897] raw-gadget.0 gadget.0: failed to queue reset event [ 136.731979][ T5897] raw-gadget.0 gadget.0: failed to queue resume event [ 136.802313][ T6644] netlink: 40 bytes leftover after parsing attributes in process `syz.2.227'. [ 136.821661][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 136.821682][ T30] audit: type=1326 audit(1744638048.707:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 136.849928][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.856350][ T30] audit: type=1326 audit(1744638048.707:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 136.863649][ T5897] usb 1-1: device descriptor read/64, error -32 [ 136.879682][ T30] audit: type=1326 audit(1744638048.707:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=23 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 136.907318][ T30] audit: type=1326 audit(1744638048.707:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 136.977737][ T30] audit: type=1326 audit(1744638048.707:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 136.999657][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.020889][ T6649] usb usb8: usbfs: process 6649 (syz.4.229) did not claim interface 0 before use [ 137.058925][ T5897] raw-gadget.0 gadget.0: failed to queue suspend event [ 137.068970][ T30] audit: type=1326 audit(1744638048.707:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 137.100442][ T5897] usb usb1-port1: attempt power cycle [ 137.106093][ T5897] raw-gadget.0 gadget.0: failed to queue disconnect event [ 137.138308][ T5897] raw-gadget.0 gadget.0: failed to queue reset event [ 137.158716][ T30] audit: type=1326 audit(1744638048.707:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 137.218944][ T6657] loop2: detected capacity change from 0 to 7 [ 137.229355][ T5897] raw-gadget.0 gadget.0: failed to queue resume event [ 137.233278][ T30] audit: type=1326 audit(1744638048.707:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 137.239676][ T5897] raw-gadget.0 gadget.0: failed to queue reset event [ 137.269082][ T6657] Dev loop2: unable to read RDB block 7 [ 137.288576][ T6657] loop2: AHDI p1 p2 p3 [ 137.292996][ T6657] loop2: partition table partially beyond EOD, truncated [ 137.303454][ T30] audit: type=1326 audit(1744638048.707:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=153 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 137.312197][ T6657] loop2: p1 start 1601398130 is beyond EOD, truncated [ 137.337384][ T6657] loop2: p2 start 1702059890 is beyond EOD, truncated [ 137.348772][ T5892] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 137.386367][ T30] audit: type=1326 audit(1744638048.707:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 137.508719][ T5897] raw-gadget.0 gadget.0: failed to queue resume event [ 137.548641][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 137.569519][ T5892] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.586215][ T5892] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.599370][ T5897] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 137.621580][ T5892] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.638759][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.641105][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 137.655434][ T5892] usb 4-1: Product: syz [ 137.661573][ T5892] usb 4-1: Manufacturer: syz [ 137.666261][ T5892] usb 4-1: SerialNumber: syz [ 137.671342][ T5897] usb 1-1: device descriptor read/8, error -32 [ 137.723306][ T6666] netlink: 'syz.4.235': attribute type 1 has an invalid length. [ 137.772771][ T6668] fuse: Unknown parameter '0000000000000000000000500000000000000000000005' [ 137.781739][ T5897] raw-gadget.0 gadget.0: failed to queue suspend event [ 137.807964][ T5897] raw-gadget.0 gadget.0: failed to queue reset event [ 137.899173][ T5897] raw-gadget.0 gadget.0: failed to queue resume event [ 137.917227][ T6652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.231'. [ 137.918059][ T6672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.237'. [ 137.920222][ T5892] usb 4-1: 0:2 : does not exist [ 137.960072][ T5897] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 137.969759][ T5892] usb 4-1: USB disconnect, device number 15 [ 137.989361][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 137.989491][ T5897] usb 1-1: device descriptor read/8, error -32 [ 138.100109][ T5897] raw-gadget.0 gadget.0: failed to queue suspend event [ 138.100321][ T5897] usb usb1-port1: unable to enumerate USB device [ 138.101186][ T6624] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.222' sets config #1 [ 138.190726][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.538686][ T5892] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 138.743406][ T6676] kvm: kvm [6675]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x0 [ 138.775661][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 138.791450][ T5892] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 138.805307][ T5892] usb 5-1: can't read configurations, error -71 [ 138.918799][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 139.158774][ T10] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 139.168652][ T10] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 139.185665][ T10] usb 4-1: Product: syz [ 139.198739][ T10] usb 4-1: Manufacturer: syz [ 139.203709][ T10] usb 4-1: SerialNumber: syz [ 139.222843][ T10] usb 4-1: config 0 descriptor?? [ 139.252566][ T10] usb 4-1: selecting invalid altsetting 1 [ 139.268829][ T10] comedi comedi0: could not switch to alternate setting 1 [ 139.286452][ T10] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 139.431724][ T5947] usb 4-1: USB disconnect, device number 16 [ 139.650121][ T6698] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 139.660087][ T6699] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 139.842847][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 140.645355][ T6711] bond1: entered promiscuous mode [ 140.737928][ T6711] bond1: entered allmulticast mode [ 140.829270][ T6711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.413220][ T6711] bond1 (unregistering): Released all slaves [ 142.329844][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.340058][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.042382][ T6746] FAULT_INJECTION: forcing a failure. [ 143.042382][ T6746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.097395][ T6746] CPU: 0 UID: 0 PID: 6746 Comm: syz.4.259 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 143.097426][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.097440][ T6746] Call Trace: [ 143.097448][ T6746] [ 143.097456][ T6746] dump_stack_lvl+0x241/0x360 [ 143.097495][ T6746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.097525][ T6746] ? __pfx__printk+0x10/0x10 [ 143.097565][ T6746] should_fail_ex+0x424/0x570 [ 143.097592][ T6746] _copy_from_user+0x2d/0xb0 [ 143.097624][ T6746] get_user_ifreq+0x116/0x200 [ 143.097653][ T6746] compat_sock_ioctl+0xacd/0xf50 [ 143.097686][ T6746] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 143.097717][ T6746] ? __fget_files+0x2a/0x420 [ 143.097742][ T6746] ? __fget_files+0x2a/0x420 [ 143.097771][ T6746] __se_compat_sys_ioctl+0x50e/0xc30 [ 143.097800][ T6746] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 143.097826][ T6746] ? __fget_files+0x2a/0x420 [ 143.097851][ T6746] ? fput+0x9b/0xd0 [ 143.097870][ T6746] ? ksys_write+0x275/0x2d0 [ 143.097902][ T6746] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 143.097937][ T6746] ? lockdep_hardirqs_on+0x9d/0x150 [ 143.097964][ T6746] __do_fast_syscall_32+0xb4/0x110 [ 143.097990][ T6746] ? exc_page_fault+0x5f8/0x920 [ 143.098019][ T6746] do_fast_syscall_32+0x34/0x80 [ 143.098046][ T6746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.098070][ T6746] RIP: 0023:0xf7fc2579 [ 143.098088][ T6746] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 143.098104][ T6746] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 143.098126][ T6746] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008994 [ 143.098139][ T6746] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.098151][ T6746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.098162][ T6746] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 143.098174][ T6746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.098203][ T6746] [ 143.304615][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.368876][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 143.888705][ T5897] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 144.065265][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.080059][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.185156][ T5897] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 144.265741][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.299878][ T5897] usb 5-1: config 0 descriptor?? [ 144.459511][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 144.588849][ T5892] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 145.107638][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.127013][ T10] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 145.138957][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.169024][ T10] usb 4-1: config 0 descriptor?? [ 145.178294][ T10] usb 4-1: bad CDC descriptors [ 145.190896][ T5892] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 145.200244][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.214176][ T5892] usb 3-1: config 0 descriptor?? [ 145.229067][ T5892] cp210x 3-1:0.0: cp210x converter detected [ 145.348823][ T5897] ortek 0003:1223:3F07.0002: unknown main item tag 0x6 [ 145.382957][ T5897] ortek 0003:1223:3F07.0002: report_id 29495 is invalid [ 145.408809][ T5897] ortek 0003:1223:3F07.0002: item 0 2 1 8 parsing failed [ 145.413355][ T10] usb 4-1: USB disconnect, device number 17 [ 145.426667][ T6768] warning: `syz.2.266' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 145.471039][ T5897] ortek 0003:1223:3F07.0002: probe with driver ortek failed with error -22 [ 145.507459][ T5892] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 145.530458][ T5892] cp210x 3-1:0.0: querying part number failed [ 145.558401][ T5845] usb 5-1: USB disconnect, device number 9 [ 145.597703][ T5892] usb 3-1: cp210x converter now attached to ttyUSB0 [ 145.705206][ T5892] usb 3-1: USB disconnect, device number 8 [ 145.752790][ T5892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 145.773203][ T5892] cp210x 3-1:0.0: device disconnected [ 145.921167][ T6775] veth1_to_team: entered promiscuous mode [ 145.934230][ T6775] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 146.158727][ T5845] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 146.258712][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 146.464862][ T5845] usb 2-1: Using ep0 maxpacket: 8 [ 146.475724][ T5845] usb 2-1: unable to get BOS descriptor or descriptor too short [ 146.493938][ T5845] usb 2-1: config 64 has an invalid interface number: 103 but max is 0 [ 146.503878][ T5845] usb 2-1: config 64 has no interface number 0 [ 146.512590][ T5845] usb 2-1: config 64 interface 103 has no altsetting 0 [ 146.512700][ T10] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 146.552683][ T5845] usb 2-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=8d.88 [ 146.562259][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.571066][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.578081][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 146.588751][ T5845] usb 2-1: Product: syz [ 146.593220][ T5845] usb 2-1: Manufacturer: syz [ 146.599974][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.608105][ T5845] usb 2-1: SerialNumber: syz [ 146.647632][ T10] usb 4-1: config 0 descriptor?? [ 146.666825][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 146.778654][ T5892] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 146.886637][ T5845] snd-usb-audio 2-1:64.103: probe with driver snd-usb-audio failed with error -71 [ 147.045572][ T5845] usb 2-1: USB disconnect, device number 10 [ 147.069327][ T5892] usb 5-1: Invalid ep0 maxpacket: 32 [ 147.209206][ T5892] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 147.281933][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.368781][ T5892] usb 5-1: Invalid ep0 maxpacket: 32 [ 147.386255][ T5892] usb usb5-port1: attempt power cycle [ 147.501080][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.511553][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.748842][ T5892] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 147.781771][ T5892] usb 5-1: Invalid ep0 maxpacket: 32 [ 147.921991][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.932982][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.949583][ T5892] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 147.969309][ T5892] usb 5-1: Invalid ep0 maxpacket: 32 [ 147.975396][ T5892] usb usb5-port1: unable to enumerate USB device [ 148.135607][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 148.135623][ T30] audit: type=1326 audit(1744638060.027:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 148.189711][ T30] audit: type=1326 audit(1744638060.067:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 148.288353][ T30] audit: type=1326 audit(1744638060.067:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 148.355555][ T30] audit: type=1326 audit(1744638060.067:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 148.418359][ T30] audit: type=1326 audit(1744638060.067:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 148.460548][ T30] audit: type=1326 audit(1744638060.067:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 148.514664][ T30] audit: type=1326 audit(1744638060.067:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 148.604066][ T30] audit: type=1326 audit(1744638060.067:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 148.735657][ T30] audit: type=1326 audit(1744638060.067:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 148.824721][ T30] audit: type=1326 audit(1744638060.067:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 149.398723][ T5845] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 149.437457][ T5889] usb 4-1: USB disconnect, device number 18 [ 149.449827][ T5895] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 149.571746][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.591939][ T5845] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 149.621962][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.622534][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 149.673764][ T5845] usb 3-1: config 0 descriptor?? [ 149.683810][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.706057][ T5895] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 149.725959][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.756951][ T5895] usb 2-1: config 0 descriptor?? [ 149.904781][ T6836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.291'. [ 149.954909][ T6836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.291'. [ 149.969028][ T5892] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 149.985520][ T5845] usbhid 3-1:0.0: can't add hid device: -71 [ 149.987153][ T5895] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 149.997849][ T5845] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 150.025887][ T5845] usb 3-1: USB disconnect, device number 9 [ 150.138850][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 150.156683][ T5892] usb 5-1: config 0 has an invalid interface number: 250 but max is 2 [ 150.192189][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.222473][ T5892] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 150.232619][ T5892] usb 5-1: config 0 has no interface number 0 [ 150.249429][ T5892] usb 5-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 150.253845][ T5895] usb 2-1: USB disconnect, device number 11 [ 150.258508][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.311534][ T5892] usb 5-1: Product: syz [ 150.335432][ T5892] usb 5-1: Manufacturer: syz [ 150.345127][ T5892] usb 5-1: SerialNumber: syz [ 150.375989][ T5892] usb 5-1: config 0 descriptor?? [ 150.675280][ T5892] usb 5-1: USB disconnect, device number 14 [ 150.688897][ T47] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 150.869864][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 150.881482][ T47] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 150.923348][ T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.971377][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.008117][ T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.030639][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.072370][ T47] usb 4-1: Product: syz [ 151.089496][ T47] usb 4-1: Manufacturer: syz [ 151.104034][ T47] usb 4-1: SerialNumber: syz [ 151.541803][ T47] usb 4-1: 0:2 : does not exist [ 151.564499][ T6868] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 151.586703][ T6868] ip6erspan0: entered promiscuous mode [ 151.592437][ T5892] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 151.760939][ T5892] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 151.782491][ T5892] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.795830][ T5892] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 151.824568][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.859757][ T5892] usb 5-1: config 0 descriptor?? [ 151.877901][ T5892] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 151.961218][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.971750][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.997315][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.019058][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.408804][ T5895] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 152.469260][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 152.480438][ T47] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 152.513084][ T47] usb 4-1: USB disconnect, device number 19 [ 152.580133][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 152.594311][ T5895] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 152.604394][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.613382][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.661043][ T5895] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 152.661642][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.673179][ T5895] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 152.693353][ T5895] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 152.701713][ T5895] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 152.715522][ T5895] usb 2-1: config 0 has no interface number 0 [ 152.722396][ T5895] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 152.722475][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 152.741451][ T5895] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 152.756793][ T5895] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 152.773303][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.789595][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.805715][ T5895] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.811614][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.827635][ T5895] usb 2-1: config 0 interface 125 has no altsetting 0 [ 152.836400][ T5895] usb 2-1: config 0 interface 125 has no altsetting 2 [ 152.838003][ T10] usb 3-1: config 0 descriptor?? [ 152.856275][ T5895] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 152.866319][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.877307][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.885060][ T5895] usb 2-1: Product: syz [ 152.885084][ T5895] usb 2-1: Manufacturer: syz [ 152.898063][ T5895] usb 2-1: SerialNumber: syz [ 152.898477][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 152.913694][ T5895] usb 2-1: config 0 descriptor?? [ 152.925648][ T5895] usb 2-1: selecting invalid altsetting 2 [ 152.935157][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.957949][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.987598][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.006799][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.242767][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.252650][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.278498][ T6891] xt_hashlimit: max too large, truncated to 1048576 [ 153.286740][ T6891] xt_hashlimit: overflow, rate too high: 0 [ 153.296993][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 153.305831][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 153.331516][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 153.363376][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 153.383172][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 153.414023][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 153.425998][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 153.463649][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 153.480072][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 153.504759][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 153.517219][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 153.625076][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 153.692534][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 153.723669][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 153.746373][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 153.776537][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 153.809724][ T6902] netlink: 60 bytes leftover after parsing attributes in process `syz.0.310'. [ 153.849066][ T10] pwc: Registered as video103. [ 153.883526][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 153.993763][ T10] usb 3-1: USB disconnect, device number 10 [ 154.325588][ T6907] ip6erspan0: entered promiscuous mode [ 154.989803][ T5947] usb 5-1: USB disconnect, device number 15 [ 155.660477][ T5892] usb 2-1: USB disconnect, device number 12 [ 156.245739][ T6953] ip6erspan0: entered promiscuous mode [ 156.269067][ T5947] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 156.440067][ T47] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 156.446515][ T6958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.464316][ T5947] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.465292][ T6958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.476769][ T5947] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.511648][ T5947] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.530225][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.652893][ T47] usb 5-1: device descriptor read/64, error -71 [ 156.659373][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 156.722626][ T6960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.746536][ T5947] usb 4-1: usb_control_msg returned -32 [ 156.815997][ T5947] usbtmc 4-1:16.0: can't read capabilities [ 156.830228][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.844458][ T10] usb 3-1: config 0 has no interfaces? [ 156.851313][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 156.871118][ T6960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.906257][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.919835][ T6960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.939181][ T47] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 156.948493][ T6960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.134057][ T10] usb 3-1: config 0 descriptor?? [ 157.218833][ T47] usb 5-1: device descriptor read/64, error -71 [ 157.330445][ T47] usb usb5-port1: attempt power cycle [ 157.365104][ T6961] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -71 [ 157.436966][ T10] usb 3-1: USB disconnect, device number 11 [ 157.473641][ T5947] usb 4-1: USB disconnect, device number 20 [ 157.811347][ T47] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 157.849893][ T47] usb 5-1: device descriptor read/8, error -71 [ 157.940929][ T6963] netlink: 'syz.1.333': attribute type 4 has an invalid length. [ 158.113084][ T6963] netlink: 'syz.1.333': attribute type 4 has an invalid length. [ 158.150517][ T6963] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 158.157421][ T6963] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 158.177018][ T6963] vhci_hcd vhci_hcd.0: Device attached [ 158.186306][ T6966] vhci_hcd: connection closed [ 158.189376][ T36] vhci_hcd: stop threads [ 158.205538][ T36] vhci_hcd: release socket [ 158.210916][ T47] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 158.229897][ T36] vhci_hcd: disconnect device [ 158.246913][ T6973] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 158.258328][ T6974] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 158.265274][ T47] usb 5-1: device descriptor read/8, error -71 [ 158.379224][ T47] usb usb5-port1: unable to enumerate USB device [ 159.342908][ T6991] FAULT_INJECTION: forcing a failure. [ 159.342908][ T6991] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 159.389259][ T6991] CPU: 0 UID: 0 PID: 6991 Comm: syz.4.341 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 159.389292][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.389301][ T6991] Call Trace: [ 159.389307][ T6991] [ 159.389314][ T6991] dump_stack_lvl+0x241/0x360 [ 159.389343][ T6991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.389365][ T6991] ? __pfx__printk+0x10/0x10 [ 159.389393][ T6991] should_fail_ex+0x424/0x570 [ 159.389413][ T6991] prepare_alloc_pages+0x220/0x610 [ 159.389436][ T6991] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 159.389461][ T6991] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 159.389493][ T6991] alloc_pages_mpol+0x339/0x690 [ 159.389518][ T6991] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 159.389545][ T6991] vma_alloc_folio_noprof+0x12d/0x260 [ 159.389568][ T6991] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 159.389596][ T6991] folio_prealloc+0x2e/0x170 [ 159.389611][ T6991] handle_pte_fault+0x2e45/0x61c0 [ 159.389642][ T6991] ? __pfx_handle_pte_fault+0x10/0x10 [ 159.389656][ T6991] ? is_bpf_text_address+0x26/0x2a0 [ 159.389682][ T6991] ? rcu_is_watching+0x15/0xb0 [ 159.389706][ T6991] ? __lock_acquire+0xad5/0xd80 [ 159.389732][ T6991] ? __lock_acquire+0xad5/0xd80 [ 159.389751][ T6991] ? do_raw_spin_lock+0x151/0x370 [ 159.389779][ T6991] handle_mm_fault+0x1129/0x1bf0 [ 159.389821][ T6991] ? __pfx_handle_mm_fault+0x10/0x10 [ 159.389843][ T6991] ? follow_page_pte+0x9ff/0x15e0 [ 159.389865][ T6991] ? __pfx_find_vma+0x10/0x10 [ 159.389887][ T6991] ? vma_is_secretmem+0xd/0x50 [ 159.389907][ T6991] ? check_vma_flags+0x51b/0x590 [ 159.389933][ T6991] __get_user_pages+0x1adc/0x4180 [ 159.389983][ T6991] ? __pfx___get_user_pages+0x10/0x10 [ 159.390003][ T6991] ? __gup_longterm_locked+0xd86/0x1850 [ 159.390026][ T6991] ? __pfx_down_read_killable+0x10/0x10 [ 159.390050][ T6991] ? __lock_acquire+0xad5/0xd80 [ 159.390076][ T6991] __gup_longterm_locked+0xec1/0x1850 [ 159.390114][ T6991] ? __pfx___gup_longterm_locked+0x10/0x10 [ 159.390138][ T6991] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 159.390162][ T6991] ? gup_fast_fallback+0x203f/0x2980 [ 159.390186][ T6991] gup_fast_fallback+0x2227/0x2980 [ 159.390219][ T6991] ? __pfx_stack_trace_save+0x10/0x10 [ 159.390253][ T6991] ? rds_info_getsockopt+0x201/0x620 [ 159.390273][ T6991] ? __pfx_gup_fast_fallback+0x10/0x10 [ 159.390293][ T6991] ? do_fast_syscall_32+0x34/0x80 [ 159.390311][ T6991] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.390355][ T6991] ? is_valid_gup_args+0x124/0x200 [ 159.390379][ T6991] pin_user_pages_fast+0xd2/0x160 [ 159.390403][ T6991] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 159.390423][ T6991] ? rcu_is_watching+0x15/0xb0 [ 159.390441][ T6991] ? trace_kmalloc+0x1f/0xd0 [ 159.390466][ T6991] ? rds_info_getsockopt+0x201/0x620 [ 159.390489][ T6991] rds_info_getsockopt+0x228/0x620 [ 159.390514][ T6991] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 159.390535][ T6991] ? __might_fault+0xaa/0x120 [ 159.390560][ T6991] ? rds_getsockopt+0x177/0x530 [ 159.390575][ T6991] ? __pfx_rds_getsockopt+0x10/0x10 [ 159.390591][ T6991] do_sock_getsockopt+0x391/0x740 [ 159.390612][ T6991] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 159.390626][ T6991] ? __fget_files+0x2a/0x420 [ 159.390641][ T6991] ? __fget_files+0x39d/0x420 [ 159.390652][ T6991] ? __fget_files+0x2a/0x420 [ 159.390671][ T6991] __ia32_sys_getsockopt+0x2a1/0x370 [ 159.390692][ T6991] ? __pfx___ia32_sys_getsockopt+0x10/0x10 [ 159.390713][ T6991] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 159.390731][ T6991] ? lockdep_hardirqs_on+0x9d/0x150 [ 159.390750][ T6991] __do_fast_syscall_32+0xb4/0x110 [ 159.390769][ T6991] ? exc_page_fault+0x5f8/0x920 [ 159.390789][ T6991] do_fast_syscall_32+0x34/0x80 [ 159.390808][ T6991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.390826][ T6991] RIP: 0023:0xf7fc2579 [ 159.390838][ T6991] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 159.390850][ T6991] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 159.390865][ T6991] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000114 [ 159.390876][ T6991] RDX: 000000000000271c RSI: 0000000080c35fff RDI: 0000000080000000 [ 159.390885][ T6991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.390894][ T6991] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 159.390903][ T6991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.390924][ T6991] [ 160.136960][ T6995] ip6erspan0: entered promiscuous mode [ 160.235210][ T7003] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 160.270549][ T6997] netlink: 'syz.1.343': attribute type 8 has an invalid length. [ 160.491335][ T7011] fuse: Bad value for 'fd' [ 160.969268][ T5895] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 161.106876][ T7036] input: syz0 as /devices/virtual/input/input7 [ 161.155068][ T5895] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 161.185086][ T5895] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.203586][ T5895] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 161.224521][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.225795][ T7038] netlink: 'syz.0.359': attribute type 1 has an invalid length. [ 161.244708][ T5895] usb 4-1: config 0 descriptor?? [ 161.266021][ T5895] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 161.301609][ T7038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.329937][ T7040] ip6erspan0: entered promiscuous mode [ 161.345643][ T7040] bond1: (slave ip6erspan0): making interface the new active one [ 161.356711][ T7040] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 161.385976][ T7038] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 161.428764][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 161.580070][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 161.587365][ T10] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 161.601051][ T10] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 161.612954][ T10] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 161.627847][ T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 161.638088][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.647631][ T10] usb 2-1: Product: syz [ 161.652134][ T10] usb 2-1: Manufacturer: syz [ 161.656772][ T10] usb 2-1: SerialNumber: syz [ 161.671568][ T10] hso 2-1:6.0: Can't find BULK IN endpoint [ 161.789401][ T5892] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 161.875590][ T10] usb 2-1: USB disconnect, device number 13 [ 161.938684][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 161.961790][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.981810][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.993554][ T7050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.004020][ T7050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.039631][ T5892] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 162.144718][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.169402][ T5892] usb 5-1: config 0 descriptor?? [ 162.399771][ T7053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.409768][ T7053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.647557][ T5892] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0003/input/input8 [ 162.803566][ T5892] appleir 0003:05AC:8241.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 162.917488][ T7042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.947541][ T7042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.211630][ T7064] futex_wake_op: syz.0.362 tries to shift op by -33; fix this program [ 163.238218][ T7064] netdevsim netdevsim0: Direct firmware load for . [ 163.238218][ T7064] failed with error -2 [ 163.253225][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 163.262648][ T7064] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 163.262648][ T7064] [ 163.898669][ T10] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 164.417944][ T7078] kvm: kvm [7077]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x0 [ 164.478381][ T5895] usb 4-1: USB disconnect, device number 21 [ 164.597210][ T7083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.371'. [ 164.607462][ T7083] FAULT_INJECTION: forcing a failure. [ 164.607462][ T7083] name failslab, interval 1, probability 0, space 0, times 0 [ 164.627108][ T7083] CPU: 0 UID: 0 PID: 7083 Comm: syz.3.371 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 164.627138][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.627151][ T7083] Call Trace: [ 164.627160][ T7083] [ 164.627169][ T7083] dump_stack_lvl+0x241/0x360 [ 164.627207][ T7083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.627238][ T7083] ? __pfx__printk+0x10/0x10 [ 164.627271][ T7083] ? __pfx___might_resched+0x10/0x10 [ 164.627303][ T7083] should_fail_ex+0x424/0x570 [ 164.627332][ T7083] should_failslab+0xac/0x100 [ 164.627363][ T7083] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 164.627392][ T7083] ? __alloc_skb+0x1c2/0x480 [ 164.627417][ T7083] __alloc_skb+0x1c2/0x480 [ 164.627443][ T7083] ? __pfx___alloc_skb+0x10/0x10 [ 164.627474][ T7083] netlink_dump+0x237/0xeb0 [ 164.627503][ T7083] ? trace_contention_end+0x3c/0x120 [ 164.627531][ T7083] ? __mutex_lock+0x380/0x10c0 [ 164.627565][ T7083] ? __pfx_netlink_dump+0x10/0x10 [ 164.627590][ T7083] ? __netlink_lookup+0x894/0x980 [ 164.627639][ T7083] ? netlink_lookup+0x31/0x200 [ 164.627677][ T7083] __netlink_dump_start+0x5a2/0x790 [ 164.627711][ T7083] ? nft_netlink_dump_start_rcu+0xcd/0x200 [ 164.627737][ T7083] nft_netlink_dump_start_rcu+0x139/0x200 [ 164.627766][ T7083] nf_tables_getrule+0x201/0x2d0 [ 164.627802][ T7083] ? __pfx_nf_tables_getrule+0x10/0x10 [ 164.627832][ T7083] ? __pfx_nf_tables_dump_rules_start+0x10/0x10 [ 164.627855][ T7083] ? __pfx_nf_tables_dump_rules+0x10/0x10 [ 164.627878][ T7083] ? __pfx_nf_tables_dump_rules_done+0x10/0x10 [ 164.627910][ T7083] ? __nla_parse+0x40/0x60 [ 164.627937][ T7083] ? nfnetlink_rcv_msg+0x227/0x1190 [ 164.627957][ T7083] ? __pfx_nf_tables_getrule+0x10/0x10 [ 164.627989][ T7083] nfnetlink_rcv_msg+0x8ad/0x1190 [ 164.628018][ T7083] ? nfnetlink_rcv_msg+0x227/0x1190 [ 164.628066][ T7083] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 164.628086][ T7083] ? stack_trace_save+0x11a/0x1d0 [ 164.628141][ T7083] ? dev_hard_start_xmit+0x2d4/0x840 [ 164.628163][ T7083] ? __dev_queue_xmit+0x1b80/0x3f60 [ 164.628185][ T7083] ? __netlink_deliver_tap+0x561/0x7f0 [ 164.628212][ T7083] ? netlink_deliver_tap+0x19d/0x1b0 [ 164.628240][ T7083] ? netlink_unicast+0x7c6/0x9a0 [ 164.628263][ T7083] ? netlink_sendmsg+0x8c3/0xcd0 [ 164.628291][ T7083] ? __sock_sendmsg+0x221/0x270 [ 164.628316][ T7083] ? ____sys_sendmsg+0x523/0x860 [ 164.628335][ T7083] ? __sys_sendmsg+0x271/0x360 [ 164.628373][ T7083] netlink_rcv_skb+0x208/0x480 [ 164.628404][ T7083] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 164.628430][ T7083] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.628475][ T7083] ? apparmor_capable+0x13b/0x1b0 [ 164.628499][ T7083] ? bpf_lsm_capable+0x9/0x10 [ 164.628529][ T7083] ? security_capable+0x7e/0x2d0 [ 164.628562][ T7083] nfnetlink_rcv+0x296/0x28f0 [ 164.628587][ T7083] ? __dev_queue_xmit+0x2f9/0x3f60 [ 164.628609][ T7083] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 164.628634][ T7083] ? __dev_queue_xmit+0x2f9/0x3f60 [ 164.628658][ T7083] ? __dev_queue_xmit+0x2f9/0x3f60 [ 164.628684][ T7083] ? __dev_queue_xmit+0x1780/0x3f60 [ 164.628706][ T7083] ? kasan_save_track+0x3f/0x80 [ 164.628726][ T7083] ? __kasan_slab_alloc+0x66/0x80 [ 164.628757][ T7083] ? __do_fast_syscall_32+0xb4/0x110 [ 164.628788][ T7083] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 164.628810][ T7083] ? __dev_queue_xmit+0x2f9/0x3f60 [ 164.628838][ T7083] ? __pfx___dev_queue_xmit+0x10/0x10 [ 164.628881][ T7083] ? ref_tracker_free+0x63e/0x7e0 [ 164.628905][ T7083] ? __asan_memcpy+0x40/0x70 [ 164.628927][ T7083] ? __pfx_ref_tracker_free+0x10/0x10 [ 164.628969][ T7083] ? skb_clone+0x240/0x390 [ 164.629005][ T7083] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.629041][ T7083] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.629073][ T7083] netlink_unicast+0x7f8/0x9a0 [ 164.629109][ T7083] ? __pfx_netlink_unicast+0x10/0x10 [ 164.629139][ T7083] ? skb_put+0x114/0x1f0 [ 164.629165][ T7083] netlink_sendmsg+0x8c3/0xcd0 [ 164.629209][ T7083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.629243][ T7083] ? __import_iovec+0x585/0x830 [ 164.629271][ T7083] ? aa_sock_msg_perm+0x91/0x160 [ 164.629306][ T7083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.629333][ T7083] __sock_sendmsg+0x221/0x270 [ 164.629364][ T7083] ____sys_sendmsg+0x523/0x860 [ 164.629397][ T7083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.629438][ T7083] __sys_sendmsg+0x271/0x360 [ 164.629466][ T7083] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.629544][ T7083] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 164.629570][ T7083] ? lockdep_hardirqs_on+0x9d/0x150 [ 164.629598][ T7083] __do_fast_syscall_32+0xb4/0x110 [ 164.629623][ T7083] ? exc_page_fault+0x5f8/0x920 [ 164.629652][ T7083] do_fast_syscall_32+0x34/0x80 [ 164.629679][ T7083] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.629703][ T7083] RIP: 0023:0xf748d579 [ 164.629721][ T7083] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 164.629738][ T7083] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 164.629758][ T7083] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 164.629772][ T7083] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.629783][ T7083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.629794][ T7083] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 164.629805][ T7083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.629835][ T7083] [ 165.320964][ T7087] syzkaller1: entered promiscuous mode [ 165.326665][ T7087] syzkaller1: entered allmulticast mode [ 165.337285][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 165.351573][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 165.573002][ T7093] FAULT_INJECTION: forcing a failure. [ 165.573002][ T7093] name failslab, interval 1, probability 0, space 0, times 0 [ 165.594738][ T7093] CPU: 0 UID: 0 PID: 7093 Comm: syz.4.375 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 165.594771][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.594786][ T7093] Call Trace: [ 165.594796][ T7093] [ 165.594805][ T7093] dump_stack_lvl+0x241/0x360 [ 165.594845][ T7093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.594877][ T7093] ? __pfx__printk+0x10/0x10 [ 165.594924][ T7093] ? __pfx___might_resched+0x10/0x10 [ 165.594956][ T7093] should_fail_ex+0x424/0x570 [ 165.594985][ T7093] should_failslab+0xac/0x100 [ 165.595016][ T7093] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 165.595049][ T7093] ? __alloc_skb+0x1c2/0x480 [ 165.595074][ T7093] __alloc_skb+0x1c2/0x480 [ 165.595101][ T7093] ? __pfx___alloc_skb+0x10/0x10 [ 165.595124][ T7093] ? netlink_autobind+0xd6/0x2f0 [ 165.595154][ T7093] ? netlink_autobind+0x2b0/0x2f0 [ 165.595191][ T7093] netlink_sendmsg+0x638/0xcd0 [ 165.595235][ T7093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.595270][ T7093] ? __import_iovec+0x585/0x830 [ 165.595297][ T7093] ? aa_sock_msg_perm+0x91/0x160 [ 165.595333][ T7093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.595360][ T7093] __sock_sendmsg+0x221/0x270 [ 165.595392][ T7093] ____sys_sendmsg+0x523/0x860 [ 165.595425][ T7093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.595465][ T7093] __sys_sendmsg+0x271/0x360 [ 165.595494][ T7093] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.595570][ T7093] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 165.595597][ T7093] ? lockdep_hardirqs_on+0x9d/0x150 [ 165.595625][ T7093] __do_fast_syscall_32+0xb4/0x110 [ 165.595651][ T7093] ? exc_page_fault+0x5f8/0x920 [ 165.595680][ T7093] do_fast_syscall_32+0x34/0x80 [ 165.595707][ T7093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.595732][ T7093] RIP: 0023:0xf7fc2579 [ 165.595750][ T7093] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 165.595767][ T7093] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 165.595790][ T7093] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 165.595804][ T7093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.595816][ T7093] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.595827][ T7093] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 165.595839][ T7093] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.595869][ T7093] [ 165.860710][ T5892] usb 5-1: USB disconnect, device number 20 [ 166.335241][ T7109] hsr0: entered promiscuous mode [ 166.367664][ T7109] vlan2: entered promiscuous mode [ 166.466235][ T7115] FAULT_INJECTION: forcing a failure. [ 166.466235][ T7115] name failslab, interval 1, probability 0, space 0, times 0 [ 166.483285][ T7115] CPU: 1 UID: 0 PID: 7115 Comm: syz.4.385 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 166.483316][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.483329][ T7115] Call Trace: [ 166.483338][ T7115] [ 166.483347][ T7115] dump_stack_lvl+0x241/0x360 [ 166.483386][ T7115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.483417][ T7115] ? __pfx__printk+0x10/0x10 [ 166.483445][ T7115] ? __pfx_hlock_conflict+0x10/0x10 [ 166.483476][ T7115] ? __pfx___might_resched+0x10/0x10 [ 166.483502][ T7115] ? lock_acquire+0x167/0x2f0 [ 166.483526][ T7115] should_fail_ex+0x424/0x570 [ 166.483554][ T7115] should_failslab+0xac/0x100 [ 166.483585][ T7115] __kmalloc_cache_noprof+0x73/0x370 [ 166.483613][ T7115] ? fuse_direct_io+0x2ca/0x2c00 [ 166.483648][ T7115] fuse_direct_io+0x2ca/0x2c00 [ 166.483687][ T7115] ? __lock_acquire+0xad5/0xd80 [ 166.483725][ T7115] ? generic_write_checks_count+0x409/0x520 [ 166.483765][ T7115] ? generic_write_checks+0x162/0x1d0 [ 166.483796][ T7115] ? __pfx_fuse_direct_io+0x10/0x10 [ 166.483827][ T7115] ? __pfx_generic_write_checks+0x10/0x10 [ 166.483857][ T7115] ? __lock_acquire+0xad5/0xd80 [ 166.483887][ T7115] fuse_file_write_iter+0x8c1/0x1180 [ 166.483914][ T7115] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 166.483948][ T7115] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 166.483992][ T7115] vfs_write+0x70f/0xd10 [ 166.484023][ T7115] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 166.484111][ T7115] ? __pfx_vfs_write+0x10/0x10 [ 166.484143][ T7115] ? __fget_files+0x2a/0x420 [ 166.484168][ T7115] ? __fget_files+0x2a/0x420 [ 166.484199][ T7115] ksys_write+0x19d/0x2d0 [ 166.484227][ T7115] ? __pfx_ksys_write+0x10/0x10 [ 166.484261][ T7115] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 166.484298][ T7115] ? lockdep_hardirqs_on+0x9d/0x150 [ 166.484328][ T7115] __do_fast_syscall_32+0xb4/0x110 [ 166.484356][ T7115] ? exc_page_fault+0x5f8/0x920 [ 166.484387][ T7115] do_fast_syscall_32+0x34/0x80 [ 166.484421][ T7115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.484446][ T7115] RIP: 0023:0xf7fc2579 [ 166.484466][ T7115] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 166.484485][ T7115] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 166.484507][ T7115] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000400 [ 166.484522][ T7115] RDX: 00000000000000a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.484534][ T7115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.484547][ T7115] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 166.484560][ T7115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.484592][ T7115] [ 166.518709][ T1206] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 166.783908][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 166.783923][ T30] audit: type=1326 audit(1744638078.677:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 166.913747][ T30] audit: type=1326 audit(1744638078.677:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 166.949867][ T7115] netlink: 32 bytes leftover after parsing attributes in process `syz.4.385'. [ 167.018322][ T30] audit: type=1326 audit(1744638078.677:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 167.128321][ T30] audit: type=1326 audit(1744638078.707:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 167.244934][ T30] audit: type=1326 audit(1744638078.717:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2598 code=0x7ffc0000 [ 167.406421][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 167.417613][ T1206] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 167.457486][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.474608][ T30] audit: type=1326 audit(1744638078.717:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2598 code=0x7ffc0000 [ 167.536864][ T1206] usb 3-1: config 0 descriptor?? [ 167.559822][ T7107] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 167.628438][ T30] audit: type=1326 audit(1744638078.717:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2598 code=0x7ffc0000 [ 167.740508][ T30] audit: type=1326 audit(1744638078.717:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2598 code=0x7ffc0000 [ 167.844754][ T30] audit: type=1326 audit(1744638078.717:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2598 code=0x7ffc0000 [ 167.917610][ T30] audit: type=1326 audit(1744638078.717:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2598 code=0x7ffc0000 [ 167.988661][ T1206] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 168.193620][ T5892] usb 3-1: USB disconnect, device number 12 [ 168.646157][ T7146] netlink: 1468 bytes leftover after parsing attributes in process `syz.3.392'. [ 169.109673][ T7155] FAULT_INJECTION: forcing a failure. [ 169.109673][ T7155] name failslab, interval 1, probability 0, space 0, times 0 [ 169.148643][ T7155] CPU: 1 UID: 0 PID: 7155 Comm: syz.3.395 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 169.148673][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.148686][ T7155] Call Trace: [ 169.148694][ T7155] [ 169.148703][ T7155] dump_stack_lvl+0x241/0x360 [ 169.148743][ T7155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.148774][ T7155] ? __pfx__printk+0x10/0x10 [ 169.148816][ T7155] should_fail_ex+0x424/0x570 [ 169.148844][ T7155] should_failslab+0xac/0x100 [ 169.148876][ T7155] __kmalloc_cache_noprof+0x73/0x370 [ 169.148905][ T7155] ? sctp_add_bind_addr+0x89/0x3a0 [ 169.148937][ T7155] sctp_add_bind_addr+0x89/0x3a0 [ 169.148971][ T7155] sctp_copy_local_addr_list+0x313/0x500 [ 169.149002][ T7155] ? sctp_copy_local_addr_list+0xad/0x500 [ 169.149031][ T7155] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 169.149063][ T7155] ? sctp_v6_is_any+0x60/0x70 [ 169.149094][ T7155] ? sctp_copy_one_addr+0x94/0x360 [ 169.149127][ T7155] sctp_bind_addr_copy+0xad/0x3b0 [ 169.149155][ T7155] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 169.149184][ T7155] sctp_connect_new_asoc+0x337/0x700 [ 169.149209][ T7155] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 169.149231][ T7155] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 169.149256][ T7155] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 169.149275][ T7155] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 169.149294][ T7155] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 169.149320][ T7155] sctp_sendmsg+0x2009/0x3620 [ 169.149364][ T7155] ? __pfx_sctp_sendmsg+0x10/0x10 [ 169.149389][ T7155] ? aa_sk_perm+0x96f/0xac0 [ 169.149434][ T7155] ? inet_sendmsg+0x330/0x390 [ 169.149463][ T7155] __sock_sendmsg+0x1a6/0x270 [ 169.149496][ T7155] __sys_sendto+0x365/0x4c0 [ 169.149522][ T7155] ? __pfx___sys_sendto+0x10/0x10 [ 169.149558][ T7155] ? __fget_files+0x2a/0x420 [ 169.149588][ T7155] ? ksys_write+0x275/0x2d0 [ 169.149634][ T7155] __ia32_sys_sendto+0xdd/0x100 [ 169.149658][ T7155] __do_fast_syscall_32+0xb4/0x110 [ 169.149683][ T7155] ? exc_page_fault+0x5f8/0x920 [ 169.149711][ T7155] do_fast_syscall_32+0x34/0x80 [ 169.149737][ T7155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.149762][ T7155] RIP: 0023:0xf748d579 [ 169.149780][ T7155] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 169.149797][ T7155] RSP: 002b:00000000f50f555c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 169.149818][ T7155] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 169.149833][ T7155] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000080000000 [ 169.149844][ T7155] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 169.149904][ T7155] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 169.149929][ T7155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.149963][ T7155] [ 170.228991][ T5892] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 170.328686][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 170.391005][ T5892] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 170.400659][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.427336][ T5892] usb 5-1: config 0 descriptor?? [ 170.542920][ T10] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 170.562222][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.606138][ T10] usb 3-1: config 0 descriptor?? [ 170.673523][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 170.704631][ T7176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.403'. [ 170.722106][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 170.860768][ T10] gp8psk: usb in 128 operation failed. [ 170.934274][ T10] gp8psk: usb in 137 operation failed. [ 170.975379][ T7182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.406'. [ 171.013634][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 171.041411][ T10] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 171.098663][ T10] usb 3-1: media controller created [ 171.203802][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.239090][ T47] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 171.245362][ T10] gp8psk_fe: Frontend attached [ 171.327394][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 171.357776][ T10] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 171.449089][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 171.457875][ T47] usb 4-1: too many endpoints for config 1 interface 0 altsetting 14: 56, using maximum allowed: 30 [ 171.473646][ T47] usb 4-1: config 1 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 171.493650][ T47] usb 4-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 56 [ 171.543701][ T47] usb 4-1: config 1 interface 0 has no altsetting 0 [ 171.555996][ T47] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 171.576633][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.577417][ T5892] ath6kl: Failed to submit usb control message: -110 [ 171.597682][ T47] usb 4-1: Product: syz [ 171.606134][ T47] usb 4-1: Manufacturer: syz [ 171.613476][ T47] usb 4-1: SerialNumber: syz [ 171.619706][ T5892] ath6kl: unable to send the bmi data to the device: -110 [ 171.653243][ T5892] ath6kl: Unable to send get target info: -110 [ 171.684816][ T5892] ath6kl: Failed to init ath6kl core: -110 [ 171.702959][ T5892] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 171.735310][ T5892] usb 5-1: USB disconnect, device number 21 [ 171.761564][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'. [ 171.771557][ T10] gp8psk: usb in 137 operation failed. [ 171.787504][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 171.804538][ T10] gp8psk: found Genpix USB device pID = 203 (hex) [ 171.815389][ T10] usb 3-1: USB disconnect, device number 13 [ 171.968901][ T7196] FAULT_INJECTION: forcing a failure. [ 171.968901][ T7196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.983855][ T47] usbhid 4-1:1.0: can't add hid device: -71 [ 171.993485][ T7196] CPU: 1 UID: 0 PID: 7196 Comm: syz.0.409 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 171.993516][ T7196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.993529][ T7196] Call Trace: [ 171.993537][ T7196] [ 171.993546][ T7196] dump_stack_lvl+0x241/0x360 [ 171.993585][ T7196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.993616][ T7196] ? __pfx__printk+0x10/0x10 [ 171.993657][ T7196] should_fail_ex+0x424/0x570 [ 171.993685][ T7196] _copy_to_user+0x31/0xb0 [ 171.993719][ T7196] simple_read_from_buffer+0xc4/0x170 [ 171.993755][ T7196] proc_fail_nth_read+0x1ef/0x260 [ 171.993781][ T7196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.993806][ T7196] ? rw_verify_area+0x246/0x630 [ 171.993829][ T7196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.993853][ T7196] vfs_read+0x21f/0xb90 [ 171.993881][ T7196] ? __pfx___mutex_lock+0x10/0x10 [ 171.993909][ T7196] ? __pfx_vfs_read+0x10/0x10 [ 171.993936][ T7196] ? __fget_files+0x2a/0x420 [ 171.993957][ T7196] ? __fget_files+0x39d/0x420 [ 171.993975][ T7196] ? __fget_files+0x2a/0x420 [ 171.994012][ T7196] ksys_read+0x19d/0x2d0 [ 171.994039][ T7196] ? __pfx_ksys_read+0x10/0x10 [ 171.994066][ T7196] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 171.994091][ T7196] ? lockdep_hardirqs_on+0x9d/0x150 [ 171.994120][ T7196] __do_fast_syscall_32+0xb4/0x110 [ 171.994146][ T7196] ? exc_page_fault+0x5f8/0x920 [ 171.994176][ T7196] do_fast_syscall_32+0x34/0x80 [ 171.994203][ T7196] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.994228][ T7196] RIP: 0023:0xf73bd579 [ 171.994246][ T7196] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 171.994263][ T7196] RSP: 002b:00000000f5046590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 171.994285][ T7196] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5046620 [ 171.994299][ T7196] RDX: 000000000000000f RSI: 00000000f73adff4 RDI: 0000000000000000 [ 171.994312][ T7196] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 171.994330][ T7196] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 171.994343][ T7196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.994373][ T7196] [ 171.995281][ T47] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 172.173127][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.311723][ T47] usb 4-1: USB disconnect, device number 22 [ 172.350749][ T7192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.395829][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 172.536008][ T7204] nvme_fabrics: missing parameter 'transport=%s' [ 172.556029][ T7204] nvme_fabrics: missing parameter 'nqn=%s' [ 172.604864][ T7204] nvme_fabrics: unknown parameter or missing value '\ O' in ctrl creation request [ 172.614671][ T5897] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 172.791665][ T5897] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 172.822460][ T5897] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 172.828620][ T30] kauditd_printk_skb: 1245 callbacks suppressed [ 172.828642][ T30] audit: type=1800 audit(1744638084.717:1337): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.414" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 172.870688][ T5897] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 172.884462][ T5897] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 172.895994][ T5897] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 172.914699][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 173.037260][ T5897] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 173.065802][ T5897] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 173.208391][ T5897] usb 2-1: Product: syz [ 173.229589][ T30] audit: type=1326 audit(1744638085.117:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 173.279844][ T5897] usb 2-1: Manufacturer: syz [ 173.326496][ T5897] usb 2-1: SerialNumber: syz [ 173.404843][ T5897] usb 2-1: config 0 descriptor?? [ 173.439031][ T30] audit: type=1326 audit(1744638085.117:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 173.489365][ T7194] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 173.514541][ T5897] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 173.598191][ T5897] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 173.664001][ T30] audit: type=1326 audit(1744638085.197:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 173.760729][ T30] audit: type=1326 audit(1744638085.207:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 173.782940][ T30] audit: type=1326 audit(1744638085.207:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 173.810668][ T30] audit: type=1326 audit(1744638085.227:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=257 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 173.918172][ T30] audit: type=1326 audit(1744638085.237:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 174.064776][ T30] audit: type=1326 audit(1744638085.237:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 174.087643][ T30] audit: type=1326 audit(1744638085.237:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 174.115000][ T7194] bond1: entered promiscuous mode [ 174.136612][ T7194] netlink: 'syz.1.408': attribute type 2 has an invalid length. [ 174.214327][ T5897] usb 2-1: USB disconnect, device number 14 [ 174.229174][ T7191] bond1: left promiscuous mode [ 174.235660][ T5897] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 174.578040][ T7239] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.421'. [ 174.625370][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'. [ 174.674374][ T7243] netlink: 40 bytes leftover after parsing attributes in process `syz.4.423'. [ 174.875637][ T7252] netlink: 'syz.2.424': attribute type 8 has an invalid length. [ 175.068050][ T7262] netlink: 'syz.1.430': attribute type 1 has an invalid length. [ 175.128142][ T7262] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.151097][ T7266] ip6erspan0: entered promiscuous mode [ 175.164710][ T7266] bond2: (slave ip6erspan0): making interface the new active one [ 175.174377][ T7266] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 175.181203][ T5897] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 175.283237][ T7262] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 175.303407][ T7269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.432'. [ 175.362391][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 175.375115][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 175.415718][ T5897] usb 5-1: config 127 has an invalid interface number: 25 but max is 0 [ 175.438912][ T5897] usb 5-1: config 127 has no interface number 0 [ 175.459417][ T5897] usb 5-1: config 127 interface 25 has no altsetting 0 [ 175.482542][ T5897] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 175.495484][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.505613][ T5897] usb 5-1: Product: syz [ 175.515749][ T5897] usb 5-1: Manufacturer: syz [ 175.538611][ T5897] usb 5-1: SerialNumber: syz [ 175.676628][ T7280] fuse: Unknown parameter 'gro' [ 175.815620][ T5897] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 175.888028][ T7260] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3939452899 (63031246384 ns) > initial count (46017005824 ns). Using initial count to start timer. [ 175.971592][ T7289] sch_fq: defrate 9 ignored. [ 176.619160][ T5947] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 176.687634][ T5897] ueagle-atm 5-1:127.25: usbatm_usb_probe: bind failed: -19! [ 176.752878][ T5897] usb 5-1: USB disconnect, device number 22 [ 176.788777][ T5947] usb 4-1: Invalid ep0 maxpacket: 16 [ 176.978033][ T5947] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 177.179229][ T5947] usb 4-1: Invalid ep0 maxpacket: 16 [ 177.204251][ T5947] usb usb4-port1: attempt power cycle [ 177.572054][ T7328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.453'. [ 177.577533][ T7330] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 177.589510][ T5947] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 177.603636][ T7328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.615433][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.683799][ T5947] usb 4-1: Invalid ep0 maxpacket: 16 [ 177.702251][ T7330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.834872][ T5947] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 177.895027][ T5947] usb 4-1: Invalid ep0 maxpacket: 16 [ 177.904626][ T5947] usb usb4-port1: unable to enumerate USB device [ 178.312113][ T7347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.321437][ T7347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.332683][ T7347] @: renamed from vlan0 (while UP) [ 178.383618][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 178.629358][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 178.657265][ T10] usb 5-1: config 0 has no interfaces? [ 178.663007][ T10] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 178.680516][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.697802][ T10] usb 5-1: config 0 descriptor?? [ 178.972448][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.000488][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.098138][ T7353] netlink: 64 bytes leftover after parsing attributes in process `syz.4.456'. [ 179.136965][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 179.584212][ T7356] netlink: 280 bytes leftover after parsing attributes in process `syz.1.459'. [ 179.921302][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 179.921319][ T30] audit: type=1326 audit(1744638091.817:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 179.954412][ T30] audit: type=1326 audit(1744638091.817:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 179.976448][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.023022][ T30] audit: type=1326 audit(1744638091.847:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 180.046839][ T7365] tipc: Enabling of bearer rejected, failed to enable media [ 180.057742][ T30] audit: type=1326 audit(1744638091.847:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 180.085682][ T5947] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 180.112436][ T30] audit: type=1326 audit(1744638091.847:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 180.218211][ T30] audit: type=1326 audit(1744638091.887:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=335 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 180.240201][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.263212][ T5947] usb 4-1: device descriptor read/64, error -71 [ 180.316425][ T30] audit: type=1326 audit(1744638091.887:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 180.400829][ T30] audit: type=1326 audit(1744638091.887:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 180.422766][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.456546][ T7369] netlink: 'syz.1.465': attribute type 1 has an invalid length. [ 180.467240][ T30] audit: type=1326 audit(1744638091.887:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 180.489222][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.505704][ T30] audit: type=1326 audit(1744638091.887:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 180.527636][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.570123][ T7369] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.601676][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'. [ 180.611112][ T5947] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 180.661801][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.696530][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.769258][ T5947] usb 4-1: device descriptor read/64, error -71 [ 180.889348][ T5947] usb usb4-port1: attempt power cycle [ 180.909091][ T5897] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 181.069328][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 181.093930][ T5895] usb 5-1: USB disconnect, device number 23 [ 181.101112][ T5897] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 181.139087][ T5897] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.158068][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.185224][ T5897] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.195662][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.207154][ T5897] usb 3-1: Product: syz [ 181.211953][ T5897] usb 3-1: Manufacturer: syz [ 181.216898][ T5897] usb 3-1: SerialNumber: syz [ 181.259384][ T5947] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 181.300820][ T5947] usb 4-1: device descriptor read/8, error -71 [ 181.559489][ T5947] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 181.589878][ T5947] usb 4-1: device descriptor read/8, error -71 [ 181.637076][ T5897] usb 3-1: 0:2 : does not exist [ 181.704082][ T5947] usb usb4-port1: unable to enumerate USB device [ 181.791923][ T7396] FAULT_INJECTION: forcing a failure. [ 181.791923][ T7396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.806045][ T7396] CPU: 1 UID: 0 PID: 7396 Comm: syz.1.472 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 181.806074][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.806087][ T7396] Call Trace: [ 181.806096][ T7396] [ 181.806104][ T7396] dump_stack_lvl+0x241/0x360 [ 181.806143][ T7396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.806176][ T7396] ? __pfx__printk+0x10/0x10 [ 181.806229][ T7396] should_fail_ex+0x424/0x570 [ 181.806256][ T7396] _copy_from_user+0x2d/0xb0 [ 181.806287][ T7396] kstrtouint_from_user+0xce/0x1a0 [ 181.806316][ T7396] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 181.806345][ T7396] ? __lock_acquire+0xad5/0xd80 [ 181.806378][ T7396] proc_fail_nth_write+0xac/0x2d0 [ 181.806400][ T7396] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 181.806430][ T7396] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 181.806469][ T7396] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 181.806492][ T7396] vfs_write+0x2bc/0xd10 [ 181.806527][ T7396] ? __pfx_vfs_write+0x10/0x10 [ 181.806575][ T7396] ? arch_do_signal_or_restart+0x2de/0x840 [ 181.806625][ T7396] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 181.806666][ T7396] ksys_write+0x19d/0x2d0 [ 181.806699][ T7396] ? __pfx_ksys_write+0x10/0x10 [ 181.806725][ T7396] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 181.806750][ T7396] ? lockdep_hardirqs_on+0x9d/0x150 [ 181.806777][ T7396] __do_fast_syscall_32+0xb4/0x110 [ 181.806803][ T7396] ? exc_page_fault+0x5f8/0x920 [ 181.806831][ T7396] do_fast_syscall_32+0x34/0x80 [ 181.806857][ T7396] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.806882][ T7396] RIP: 0023:0xf747d579 [ 181.806899][ T7396] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 181.806915][ T7396] RSP: 002b:00000000f5106590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 181.806937][ T7396] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5106620 [ 181.806950][ T7396] RDX: 0000000000000001 RSI: 00000000f746dff4 RDI: 0000000000000000 [ 181.806962][ T7396] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 181.806974][ T7396] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 181.806985][ T7396] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.807014][ T7396] [ 182.161799][ T7399] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 182.253942][ T7371] [ 182.256328][ T7371] ====================================================== [ 182.263396][ T7371] WARNING: possible circular locking dependency detected [ 182.270435][ T7371] 6.15.0-rc2-syzkaller #0 Not tainted [ 182.275809][ T7371] ------------------------------------------------------ [ 182.282839][ T7371] syz.2.466/7371 is trying to acquire lock: [ 182.288746][ T7371] ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0xde/0x2d60 [ 182.297745][ T7371] [ 182.297745][ T7371] but task is already holding lock: [ 182.305118][ T7371] ffff88803339a1a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 182.315270][ T7371] [ 182.315270][ T7371] which lock already depends on the new lock. [ 182.315270][ T7371] [ 182.325701][ T7371] [ 182.325701][ T7371] the existing dependency chain (in reverse order) is: [ 182.334730][ T7371] [ 182.334730][ T7371] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 182.343371][ T7371] lock_acquire+0x116/0x2f0 [ 182.348419][ T7371] __mutex_lock+0x1a5/0x10c0 [ 182.353553][ T7371] smc_switch_to_fallback+0x35/0xda0 [ 182.359380][ T7371] smc_sendmsg+0x11f/0x530 [ 182.364356][ T7371] __sock_sendmsg+0x221/0x270 [ 182.369584][ T7371] __sys_sendto+0x365/0x4c0 [ 182.374624][ T7371] __ia32_sys_sendto+0xdd/0x100 [ 182.380009][ T7371] __do_fast_syscall_32+0xb4/0x110 [ 182.385656][ T7371] do_fast_syscall_32+0x34/0x80 [ 182.391044][ T7371] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.397913][ T7371] [ 182.397913][ T7371] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 182.405669][ T7371] lock_acquire+0x116/0x2f0 [ 182.410718][ T7371] lock_sock_nested+0x48/0x100 [ 182.416044][ T7371] do_ipv6_setsockopt+0xccd/0x3680 [ 182.421701][ T7371] ipv6_setsockopt+0x5d/0x170 [ 182.426934][ T7371] do_sock_setsockopt+0x3b1/0x710 [ 182.432518][ T7371] __ia32_sys_setsockopt+0x1f2/0x280 [ 182.438362][ T7371] __do_fast_syscall_32+0xb4/0x110 [ 182.444030][ T7371] do_fast_syscall_32+0x34/0x80 [ 182.449447][ T7371] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.456326][ T7371] [ 182.456326][ T7371] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 182.463588][ T7371] validate_chain+0xa69/0x24e0 [ 182.468902][ T7371] __lock_acquire+0xad5/0xd80 [ 182.474134][ T7371] lock_acquire+0x116/0x2f0 [ 182.479265][ T7371] __mutex_lock+0x1a5/0x10c0 [ 182.484403][ T7371] start_sync_thread+0xde/0x2d60 [ 182.489899][ T7371] do_ip_vs_set_ctl+0x48e/0xe50 [ 182.495289][ T7371] nf_setsockopt+0x295/0x2c0 [ 182.500418][ T7371] smc_setsockopt+0x25c/0xd50 [ 182.505644][ T7371] do_sock_setsockopt+0x3b1/0x710 [ 182.511219][ T7371] __ia32_sys_setsockopt+0x1f2/0x280 [ 182.517056][ T7371] __do_fast_syscall_32+0xb4/0x110 [ 182.522717][ T7371] do_fast_syscall_32+0x34/0x80 [ 182.528119][ T7371] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.534999][ T7371] [ 182.534999][ T7371] other info that might help us debug this: [ 182.534999][ T7371] [ 182.545254][ T7371] Chain exists of: [ 182.545254][ T7371] rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock [ 182.545254][ T7371] [ 182.559059][ T7371] Possible unsafe locking scenario: [ 182.559059][ T7371] [ 182.566562][ T7371] CPU0 CPU1 [ 182.571949][ T7371] ---- ---- [ 182.577353][ T7371] lock(&smc->clcsock_release_lock); [ 182.582777][ T7371] lock(sk_lock-AF_INET6); [ 182.589840][ T7371] lock(&smc->clcsock_release_lock); [ 182.597762][ T7371] lock(rtnl_mutex); [ 182.601798][ T7371] [ 182.601798][ T7371] *** DEADLOCK *** [ 182.601798][ T7371] [ 182.609971][ T7371] 1 lock held by syz.2.466/7371: [ 182.614937][ T7371] #0: ffff88803339a1a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 182.625539][ T7371] [ 182.625539][ T7371] stack backtrace: [ 182.631581][ T7371] CPU: 0 UID: 0 PID: 7371 Comm: syz.2.466 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 182.631606][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.631620][ T7371] Call Trace: [ 182.631629][ T7371] [ 182.631637][ T7371] dump_stack_lvl+0x241/0x360 [ 182.631686][ T7371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.631716][ T7371] ? __pfx__printk+0x10/0x10 [ 182.631744][ T7371] ? print_lock+0x171/0x1a0 [ 182.631769][ T7371] print_circular_bug+0x2e1/0x300 [ 182.631792][ T7371] check_noncircular+0x142/0x160 [ 182.631814][ T7371] validate_chain+0xa69/0x24e0 [ 182.631833][ T7371] ? __lock_acquire+0xad5/0xd80 [ 182.631862][ T7371] __lock_acquire+0xad5/0xd80 [ 182.631888][ T7371] lock_acquire+0x116/0x2f0 [ 182.631908][ T7371] ? start_sync_thread+0xde/0x2d60 [ 182.631941][ T7371] __mutex_lock+0x1a5/0x10c0 [ 182.631966][ T7371] ? start_sync_thread+0xde/0x2d60 [ 182.631994][ T7371] ? __lock_acquire+0xad5/0xd80 [ 182.632019][ T7371] ? start_sync_thread+0xde/0x2d60 [ 182.632047][ T7371] ? __pfx___mutex_lock+0x10/0x10 [ 182.632075][ T7371] ? finish_task_switch+0x1e5/0x870 [ 182.632093][ T7371] ? lockdep_hardirqs_on+0x9d/0x150 [ 182.632117][ T7371] ? rcu_is_watching+0x15/0xb0 [ 182.632152][ T7371] start_sync_thread+0xde/0x2d60 [ 182.632198][ T7371] ? __pfx_start_sync_thread+0x10/0x10 [ 182.632235][ T7371] ? read_word_at_a_time+0xe/0x20 [ 182.632254][ T7371] ? sized_strscpy+0x9a/0x2b0 [ 182.632294][ T7371] do_ip_vs_set_ctl+0x48e/0xe50 [ 182.632318][ T7371] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 182.632345][ T7371] ? __mutex_unlock_slowpath+0x229/0x800 [ 182.632374][ T7371] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 182.632397][ T7371] ? __pfx___mutex_lock+0x10/0x10 [ 182.632415][ T7371] ? futex_wake+0x525/0x5d0 [ 182.632431][ T7371] nf_setsockopt+0x295/0x2c0 [ 182.632461][ T7371] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 182.632492][ T7371] smc_setsockopt+0x25c/0xd50 [ 182.632516][ T7371] ? __pfx_aa_sk_perm+0x10/0x10 [ 182.632539][ T7371] ? __pfx_smc_setsockopt+0x10/0x10 [ 182.632555][ T7371] ? __lock_acquire+0xad5/0xd80 [ 182.632569][ T7371] ? aa_sock_opt_perm+0x79/0x120 [ 182.632592][ T7371] ? __pfx_smc_setsockopt+0x10/0x10 [ 182.632615][ T7371] do_sock_setsockopt+0x3b1/0x710 [ 182.632639][ T7371] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 182.632658][ T7371] ? __fget_files+0x2a/0x420 [ 182.632680][ T7371] ? __fget_files+0x39d/0x420 [ 182.632692][ T7371] ? __fget_files+0x2a/0x420 [ 182.632707][ T7371] __ia32_sys_setsockopt+0x1f2/0x280 [ 182.632724][ T7371] __do_fast_syscall_32+0xb4/0x110 [ 182.632746][ T7371] ? exc_page_fault+0x5f8/0x920 [ 182.632772][ T7371] do_fast_syscall_32+0x34/0x80 [ 182.632797][ T7371] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.632821][ T7371] RIP: 0023:0xf742d579 [ 182.632835][ T7371] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 182.632847][ T7371] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 182.632864][ T7371] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 182.632874][ T7371] RDX: 000000000000048b RSI: 0000000080000000 RDI: 0000000000000018 [ 182.632883][ T7371] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.632894][ T7371] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 182.632906][ T7371] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.632926][ T7371] [ 183.043675][ T7404] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 183.056796][ T7372] IPVS: stopping master sync thread 7404 ... [ 183.287636][ T5897] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 183.315121][ T5897] usb 3-1: USB disconnect, device number 14 [ 183.490936][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory