last executing test programs: 15.013635622s ago: executing program 1 (id=1132): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x28, r2, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c050) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x3c00, 0x118, 0x780, 0x800, 0x4, 0xfffffffa, 0xf, 0x0, {0x7, 0x9, 0x1}, {0x3, 0x4}, {0x1, 0x3}, {0x6, 0x1ff}, 0x3, 0x1, 0xe, 0x0, 0x1, 0x9, 0x7, 0x0, 0x80, 0x7, 0xaf, 0x8, 0x24, 0x100, 0x2, 0x6}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3415, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) r7 = syz_io_uring_setup(0x2632, &(0x7f0000000200)={0x0, 0x4669, 0x10100, 0xfffffffe, 0x9d}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100007e9eb4104c053800f51601020301090212000100000000090400000008c538006e47b4fa0712910f78df3aba2b0fdf0cc2f974a507aaa9a3968fcd161dad551b5e156ab1d3fef294ebd3a1493f8594d19db762f3b7189b5fae5410b6abc28df4b79302f3d1f676"], 0x0) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r11, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000004c0)={0x20, 0xb, 0x23, "8da01f1391fe47f594b5e4fec536fc94fa6bd1f4c3b44eecbe69e18ace8619d901091b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0xfe, 0x7, 0x16, @empty, @local, 0x40, 0x20, 0xfffffffb, 0x5}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r15 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sysvipc/msg\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x21, 0x7ff, 0xd, 0x8, 0x4a000, r7, 0x3, '\x00', r12, r13, 0x3, 0x5, 0x2, 0x0, @value=r15, @void, @void, @value}, 0x50) syz_usb_control_io$hid(r10, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x8, 0x3}, 0x0, 0x0}) r16 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r16, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) syz_usb_control_io$printer(r10, 0x0, &(0x7f0000000700)={0x34, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x458}}, {0x5f, &(0x7f00000000c0)=ANY=[@ANYBLOB="5f03"]}, {0x0, 0x0}, {0x0, 0x0}]}) 12.190393604s ago: executing program 1 (id=1141): memfd_create(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x4d, 0x42, 0xd8, 0x20, 0x1ba6, 0x1, 0x4988, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xe4, 0xf9}}]}}]}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030d0000000000000000000000030006000000000002000000000000000000000000000000030005000000000002000000ac14140000000000000000000200090008000000e90000000000000002000100001e0000000000000000000001001800"], 0x68}, 0x1, 0x7}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000003c0)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="f3a4b91c090000b88446fd9cba964fde7a0f30660f3880972223f95b0f09c4c299912c918fc9309befc4e26196190f01c50f320f0011", 0x36}], 0x1, 0x2, &(0x7f0000000100)=[@cr4={0x1, 0x100000}], 0x1) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "220100"}, 0x5, 0x1, {}, 0x0, 0x0, 0xffffffffffffffff}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000001e80)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x2, @remote, 0xc}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000440)="f8ae3020089c2e59b220c4d09dcea0d525320ebe2b5629056e88ac2e9764dc7f84d270116a540d31d075d0f1db42fec6008545e29d40f1dd438b83d1a5650d64b58020d3c7579b7d5cdf175d23f1cd356e0e11aca9d49886b97608fb2f9c1b493552c19a463f0afb6c0a0845cb6702c0b7f50d5dcb3a88a1ef0850db4945c671a8b7ee2b7e426214aaf6877b20a0aa4c0ed3285b4214f227b6078c7fb4253f05e8b88f7b3b147e701c38abf6f2bc1cb14c6c675deee7109796c57de5b0e8236120a05969360a3ef84c13c63a65eebb0de8ae392a205d22e110777e7a6d1be67175089a18eaddb3367dc2608ea107", 0xee}, {&(0x7f0000000540)="470994a1b9c93802e25eb195e33b866a36e7a9bb6b26ad4401b55b6677c076c1e7f4dd4b18ec95b1e670ac3dd9a0173f88e43e6776484c0e71e9d52d87544ad390ae9672082cc1470a84bac2b0a08c64741efe16e19a1506e990daaa67b9f252056575481dcff175c599a324c270f7d7e92d9b51a332d32104c7389729ba4a3a47d746995dce", 0x86}, {&(0x7f0000000600)="d1f0199b399bf0069635d30f41aab786ad11c48497fa79419113cbd9933e26fc5300e0e781ce7491efbef1e758ca39a8d86dc0f54b3e9ab876b73a9bb277a022e8092c2eea5d672495e87c7d08e11547f535e4d19a06adf80b730ed0a2085b0eb4cc8511a4b5ad97232ff4bcce9cebb6ab72167c14c6d009302a6f2733885727c3db845a7a95b2b2f652ee320387888b02ac389b9309c68ed2cee1fb09c359dfc3807a5e0ca24f7d0eaca54a5f8d762617dcbadddf77dd61eb2be6dcbb8ede3e888f6c4ccd8f2f98f7181198ac5b47dfbcf496bed19f709264a21c35267c4988fe4ca31856b1a183256d1177778112", 0xef}, {&(0x7f0000000240)="71c4989529e5a859f17aa9a05bcd325e9d74a93e1daa59429ba78f9e5da1e1ac3217613a2135e93375c5ec85353b585377d1e94c7a9914", 0x37}, {&(0x7f0000000700)="57ef1d3e5977f2ae1defdc863e99938a6e124042a3070adb3e80915c52bdf644971e81a867b3702eeea25274826122051ff7e966223f7aab4342bd9c2489b671e44dffe28ad46c2f5db389d5f26544e7e384a377355f985682fd7f5f846b3fee974fc1021db597", 0x67}, {&(0x7f0000000880)="02190fe539ffca994d0670b2955bfdb3aa1ff808d820f356d62019296e356cf55088a82e0ac82c6f05f5a184f8a14f5480777ad509991238503fcd29967f2a53d6382c98d2dad0af3ea59152d8d1453cd6583c1f0e42e36b7efee364c3648f179995617086fe0c296783e5d31011dcd71e0d240fcf3ac7b81144a35fe6f1be7dcfcb41cb4ac769d7a8e15ca35dd2a3c5af4034ff1510daf26ec51603bb30c43b52df0e5d763a58ccb5b6e17d3962a5f4d80a21903dc55d9016087b3a31c52678c868a3ec1ac4", 0xc6}, {&(0x7f0000000280)="5398804eaacadea8e8a9557064af", 0xe}, {&(0x7f0000000780)="78e7c312a5bc834fafef6349af0b4953e26abbedfed2457994e34d9cb21c2c7ce5f654e4941db5f517be07f1653771a90b49e382fe72eb97028c6241e0e0e1433b55842f62aaabb59306d87b284e658bec9f3a13eb198c74b79dead8641825b068b8010c671f5db0a2eafc3c226960141a51841114dd06cd8b1bcbd562593a4152caed6cdb0bcba8261d1b18053c4a427f5dc3d006de95", 0x97}, {&(0x7f0000000980)="bbe58b834f7f", 0x6}], 0x9}}, {{&(0x7f0000000a80)={0xa, 0x4e23, 0xcac0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xd}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000ac0)="622f72145713e350343c8c237b6c12b91c11e265bf774d20d4eebc6b064bed5342d2f8cfda8164130ae765b95d496718aedb03432321aa3e94a9638a0aef00ca98afe4eb13921c1f1a5ce9e412d7eaefb9ac5f205698a81a57ba39cd49a2cad518d8dcdb588412276ebbaef35fd083efd29265267907b20d039e10e7dfd95d7c78d22450e76df824918239ca460482b600c8721f47cf3f4978bdc82731ef5f58ce97c774ee7edafb84cd5d08905b0f000e8409e67fe21ce1d8948be46c7ecab2f28fd816f615b3c41a956fb05fabf3e826eb1f852bc3b0ff3e0e6edc5c646bed932fc557673ed64ccee8559178f1045841ff43", 0xf3}, {&(0x7f0000000bc0)="df42a4fec419e4c3c36a8ed6075726425fb62e34a6615648b7afc4a86b486d9333f29318a70a225fd1d61eab297bfa20e8d31ee01724eeec1efe651ea917ddff90344dd29f77fd00a94d0a6d58d30f64edf505fe800c6b67935d9d3c75932c4891322ff54f57aa28daa6207de8b10065f51f55b087ee842b200438becdb5e579144feccb4bc5fbda0ab5b4f80a2d8e1df4ccd230071e3a785aac2742b0cd3991c369884058b761bfec46c8a684f66ff7bfa393", 0xb3}], 0x2, &(0x7f0000000cc0)=[@rthdrdstopts={{0x68, 0x29, 0x37, {0x2e, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0xbe60a1cd}, @calipso={0x7, 0x40, {0x0, 0xe, 0x4, 0x401, [0x8, 0x5, 0x38e, 0x1641, 0x7f, 0x4, 0xe1]}}, @ra={0x5, 0x2, 0xea08}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x840}}, @flowinfo={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7ff}}, @hopopts={{0x30, 0x29, 0x36, {0x8, 0x2, '\x00', [@hao={0xc9, 0x10, @local}, @pad1]}}}, @dstopts={{0x48, 0x29, 0x37, {0xb9, 0x5, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0xfa, 0x0, [0x7ff, 0x5637, 0x5]}}, @pad1, @jumbo={0xc2, 0x4, 0xfc}]}}}, @dstopts_2292={{0x1060, 0x29, 0x4, {0x3c, 0x208, '\x00', [@generic={0x2, 0x1000, "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"}, @generic={0x2, 0x38, "4d10b582705338b0c9e65bca5a3194219814091eb7e0099c2c372041c91d9ce39f12c69d0f851779271390ef49088bace39125df857199c9"}, @pad1, @ra={0x5, 0x2, 0x6}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x11a0}}], 0x2, 0x44040) ioctl$DRM_IOCTL_MODE_CURSOR2(r8, 0xc02464bb, &(0x7f0000000180)={0x1, 0x0, 0x6, 0xabf5, 0xa4, 0xfffffeff, 0x100, 0x6, 0x7}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x100000, 0x3, {}, {0x3, 0x8, 0x5, 0x55, 0x3, 0x87, "f013a862"}, 0x7, 0x2, {&(0x7f00000002c0)=[{0x9, 0x9, {0x0}, 0x9}, {0x5, 0x1bb, {0x0}, 0x8}]}, 0x7f, 0x0, r7}) 8.248474435s ago: executing program 4 (id=1147): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000480), 0x10) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}}, 0x0) 8.235833704s ago: executing program 1 (id=1149): syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x4, 0x0, [{0x0, 0x7fff, 0x6, 0x67c, 0x9, 0x9, 0x80000001}, {0x2, 0xa9, 0x5, 0x4, 0xfff, 0x9, 0x3}, {0x80000000, 0x1, 0x0, 0x3, 0xf, 0x4, 0x3}, {0xc0000000, 0x5c7c8f0a, 0x6, 0x8, 0xff32, 0x7fff, 0x3}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) unshare(0x2040600) syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60381f3400442f00fc0000000011ed002fb2aa95f5000000ff0200f20000000000000001042081000700892f"], 0x0) r4 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) fcntl$addseals(r4, 0x409, 0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) 7.882023838s ago: executing program 4 (id=1151): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0500000000000000000700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r7}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000200)={0xc, r7}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000700)={0xa0, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_names\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r8, &(0x7f00000014c0)=[{&(0x7f0000000200)="561700", 0x3}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000dc03000000000000", @ANYRES32, @ANYBLOB="060000000000000000000037c300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000300"/28], 0x50) write$binfmt_aout(r8, &(0x7f0000000880)={{0x108, 0x9c, 0x9, 0x1ab, 0xbb, 0x6, 0x353, 0x700}, "62c4e83f0fa8a048cb39c262f37c5a4e0a30d412f2295676023752c4cc6ba46ea49a6017c18c1feeeaac1d814c2899c540e1883555b399dd482a42a0710da6157e52f3127f794fd7bdffc32a152a552128c30781c0065cfc4895ca560a6780e168506088783571b8005e84098ab5802a29452ce8c4d2efc34a84ee00465ba532836602c50f57d1cbcd08cd6fddf9fd10edbf7a97e03f306e503e2d16ec574a215ed934a468fa84b7f192147a8d5455025fbe4115e52a5b2a8e27d7ac72c718cf2b4f1cea37a1ca", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9e7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, 0x0, &(0x7f0000000640)='%+9llu \x00'}, 0x1c) pipe2$watch_queue(&(0x7f00000006c0), 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018560000010000000000000000000000180000000900000000000000000000002815400008000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x2, &(0x7f00000001c0)=""/2, 0x40f00, 0x10, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000000440)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0xbd4a, 0x2, 0x7eab, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x10, 0x9, @void, @value}, 0x94) 7.732621115s ago: executing program 1 (id=1152): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@multicast1, 0x4e20, 0x4, 0xb, 0x80812f58, 0x12d5c}}, 0x44) 7.585872172s ago: executing program 2 (id=1153): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x10000, 0x102) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900300073797a310000000054000000030a01020000000000000000010000000900010073797a31000000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0) 7.381769254s ago: executing program 1 (id=1154): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xc, 0x0, 0x5a, 0x8, 0x2b7, 0x2, 0x9, 0xffffff7f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {&(0x7f0000000580)=""/154, 0x9a}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000005}}], 0x48, 0x80}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @raw_data="cd1bbe24cb522ca0942e7ae5897d147ce7f33897ef4f01481515e876dca85ca2f3c88930ec01da484f3a405da0fd93a65c2d08b14c8754b61863062895dd48f7c3766b4f623c36cc95b915e98996a44a6814be7f16e3ff687235845a1bd50703a4367c5c0e5f700404e5dd36f1a53c0c2de2de2f15ad991d333be811f16e54844e04bab7387615c5c03bdcda8640615529d87cdfb667ecacc24553f785af8899f26178c125bd07d22779316052f4150cbbb31a6f01420153738d759d2eca7818c5908933b18401eb"}}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220182018000000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140020aab70300000000000085000000aa000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 5.778866491s ago: executing program 0 (id=1157): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xd}, {0xffff}, {0x2, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000140)={'fscrypt:', @auto=[0x38, 0x37, 0x63, 0x61, 0x37, 0x38, 0x66, 0x39, 0x63, 0x30, 0x39, 0x30, 0x65, 0x62, 0x34, 0x65]}, &(0x7f0000000180)={0x0, "a31020e66ae64562917979c3d5b0d15d9ee39a1f4d1256d552557981ecd9e0aa5ab13cea6167f8358c04e3a6acc666470669dc457365152ca2cb87aee2a1636c", 0x1c}, 0x48, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x0) 5.356686417s ago: executing program 2 (id=1158): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@private=0xa010102, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44) (fail_nth: 2) 5.135106344s ago: executing program 0 (id=1159): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, 0x0) socket(0x1d, 0x2, 0x6) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = dup(r3) write$uinput_user_dev(r4, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x83, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x9, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x8000, 0x5, 0x1, 0x4], [0x1, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x0, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x2, 0x9, 0x20010, 0x4000e, 0x9, 0xa, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0xdec4, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x40000002, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002c40)={0x2020}, 0x2020) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x20000000, r4}, 0x38) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000210400fc800c00018008000600ffff0000080002800400728008", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 5.131653693s ago: executing program 4 (id=1160): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d00"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) 4.744514819s ago: executing program 2 (id=1161): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b00030100000009040000000101"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa8}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt(r2, 0xc747, 0x4, &(0x7f0000000340)="e373ae098dbe51c4b5fed4dea6e91dfbf20babec7c81937844c12ab65d6fc422d7ab3824d4958a2b22045aa464eddfc5dec08d6cdc5721add31451f1f6c9230a8a7dc4aa02286fbb90efe76f00fb4311219b35638d69ff2d00c8ca19c33041717d66be2eb7308895e2bd2e03a8e7b464b25efa59e7a1edcd756f455419c233adf2a25686170146dd6f3709daaa7675c91f86b285f762d69f2947a49c315863", 0x9f) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x8000}) lseek(r9, 0x1000000000931f, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) 4.7422852s ago: executing program 3 (id=1162): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) 3.996690238s ago: executing program 4 (id=1163): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x5, 0x10, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbc2, 0x4a732f64, 0x1000, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x5, 0x4, 0x7, 0x2, 0x3, 0x400, 0x7ffc, 0x5, 0x7, 0x40, 0x4, 0xf9a2, 0x80000001, 0x7, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0xfffffff3, 0x4, 0x5, 0x1000, 0x800, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x28, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x7fffffff, 0x1ff, 0x1, 0x1000, 0x10, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf785, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x18c, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x8, 0x5, 0x0, 0x2, 0x2, 0x9, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x800077, 0x9, 0xf66, 0x810000, 0x1, 0x5, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8008, 0x40f1, 0x2, 0x3, 0x101, 0x3b, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x5, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x80302, 0x1) ioctl$EVIOCGMTSLOTS(r9, 0x8040450a, &(0x7f0000000400)=""/220) 3.722269043s ago: executing program 3 (id=1164): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000005}}], 0x48, 0x80}, 0x0) (fail_nth: 7) 3.14044327s ago: executing program 3 (id=1165): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x4, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000001c0)=@mmap={0x6, 0x3, 0x4, 0x100000, 0x3, {}, {0x4, 0x1, 0x6f, 0xf, 0x4, 0x7, "6ed935eb"}, 0x8627, 0x1, {}, 0x6}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001100)=ANY=[], 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) splice(r6, 0x0, r5, 0x0, 0x5, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) socket$rxrpc(0x21, 0x2, 0xa) open_tree(r7, 0x0, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 1.745048413s ago: executing program 0 (id=1166): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) (fail_nth: 7) 1.245600066s ago: executing program 0 (id=1167): gettid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x234, 0x2c, 0xd27, 0x70bd24, 0x25dbdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x204, 0x2, [@TCA_CGROUP_EMATCHES={0x200, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x62c, 0x3, 0x2}, {0x800, 0x2, 0x480000, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x800, 0x1, 0x3}, {0xaeb1, 0x0, 0xff00, 0x1, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0x8}, {{0x1, 0x1, 0x0, 0x1}, {0x2}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xb01, 0x8, 0x4}, {0xffffffffffffffff, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff5c}}, @TCA_EMATCH_TREE_LIST={0x70, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x400}, {0xb294, 0x1, 0x2, '%'}}}, @TCF_EM_META={0x58, 0x3, 0x0, 0x0, {{0x5, 0x4, 0x3}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="e66a", @TCF_META_TYPE_VAR="22d4"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xd, 0x3}, {0x9, 0xfd, 0x2}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="ac9af72e3755374d34", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1ca, 0x8, 0x1}, {0x5, 0x6, 0x2}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x100}]}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x885c}, 0x4804) syz_emit_ethernet(0x7a, &(0x7f0000000380)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, [@hopopts={0x3a}], '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 1.168507696s ago: executing program 3 (id=1168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) 851.125331ms ago: executing program 2 (id=1169): sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x202080, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 751.80546ms ago: executing program 1 (id=1170): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r4) ioctl$KVM_CHECK_EXTENSION(r5, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x20, 0x0, 0x4, {0x0, 0x4}}, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) 531.354533ms ago: executing program 0 (id=1171): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000008000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 522.647213ms ago: executing program 2 (id=1172): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000000)) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffffc0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 467.723261ms ago: executing program 3 (id=1173): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) close_range(r0, r1, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f00000000c0)={0x964, 0x0, 0x5, 0xd04, 0x0, 0x0, {0x2, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x5}, 0x2a, 0xa3, 0x3, 0x0, 0x16, 'syz0\x00', "b4ed49e483be99f61f0f9fdbdceb593a5e56424cc7ca6362531059a1345e7e71", "00c7b5927e8612ed755b3542c915104e1631757ddd2acc1af091fa3a3e67543d", [{0x2, 0x7fff, {0x2, 0x7}}, {0x4, 0x5, {0x1, 0x9}}, {0x6, 0x1000, {0x1, 0x200}}, {0x5, 0x84a, {0x0, 0x100}}, {0x9, 0x65c, {0x2, 0x10001}}, {0x1, 0x5e8, {0x1, 0x1ff}}, {0x9, 0x0, {0x2, 0x9}}, {0x0, 0x1, {0x2, 0xfff}}, {0x4, 0x8, {0x1, 0x1}}, {0xff, 0xfffe, {0x2, 0x80000}}, {0x5, 0x4, {0x1, 0x100}}, {0x6, 0x1131, {0x1, 0x2}}, {0x0, 0x8, {0x2, 0xfffffffc}}, {0x18a, 0x4, {0x1, 0x2}}, {0x9, 0xff, {0x2, 0x5}}, {0xbe7, 0xc5, {0x3, 0x5}}, {0x8, 0xd, {0x2, 0x4}}, {0x2e6, 0x9, {0x1, 0x3b}}, {0x300, 0x8, {0x0, 0x913}}, {0x8, 0x560, {0x3}}, {0x5c7b, 0x6927, {0x1, 0x9}}, {0x6, 0xa, {0x3, 0x3}}, {0x5, 0xfff9, {0x2, 0x7}}, {0xe, 0xfff1, {0x2, 0x5}}, {0x9, 0x4}, {0x1681, 0x23ff, {0x0, 0x4}}, {0x0, 0x1}, {0x4, 0x81, {0x3, 0x81}}, {0x10, 0x9, {0x3}}, {0x1, 0x200, {0x0, 0x7}}, {0x7, 0x6, {0x2, 0x10}}, {0x7, 0xc, {0x1, 0x4d9}}, {0x4, 0x7, {0x2, 0x5}}, {0xa, 0x2, {0x2, 0x3}}, {0x2, 0xebf, {0x1, 0x9}}, {0x2d2, 0x401, {0x2, 0x10001}}, {0xd07, 0x12f6, {0x3, 0x2}}, {0x3, 0x1b, {0x0, 0x4}}, {0x7, 0x5, {0x0, 0xfffffffa}}, {0xed2, 0x6, {0x0, 0x7e400000}}]}}}, {{0x254, 0x1, {{0x3, 0x8b3a}, 0x5, 0x2, 0xa76, 0x6, 0x5, 'syz1\x00', "3016b75d314cacef425e454b2d7b921a5f47f06e491cd7a58f683381ad85dc40", "c811a4e9a5caf545d5ba4984151fb5194c5f708d79fe1af62b114f572535844d", [{0x3, 0x5, {0x3, 0x8000}}, {0x800, 0x40, {0x1, 0x3}}, {0x3, 0x3, {0x3, 0x9}}, {0x7, 0x3, {0x3, 0xffffffff}}, {0x400, 0x8, {0x0, 0x6}}, {0x1, 0xc, {0x0, 0x7}}, {0x84a, 0x5, {0x1}}, {0x5, 0x3, {0x2, 0x5}}, {0x6, 0x7af, {0x0, 0x800}}, {0x400, 0xbf0, {0x2, 0xffffff0b}}, {0x0, 0x7, {0x1, 0x9}}, {0x3, 0x9e8c, {0x2, 0x8}}, {0x400, 0x10, {0x0, 0x1}}, {0x3, 0xc, {0x0, 0x7}}, {0x401, 0x7, {0x0, 0x3}}, {0xa, 0x0, {0x2, 0x2}}, {0xe, 0x3, {0x0, 0x5}}, {0x8, 0x3, {0x0, 0xd25}}, {0xfffd, 0x6, {0x2, 0xb}}, {0x7e, 0x5, {0x0, 0x3}}, {0x6, 0x9, {0x3, 0x43}}, {0x3, 0x40, {0x3, 0xf7f}}, {0xda8, 0x2, {0x3, 0x8}}, {0x80, 0x80, {0x2, 0x7}}, {0x7, 0xaae, {0x0, 0xc7ec}}, {0x4, 0xb2, {0x0, 0x1}}, {0x0, 0x0, {0x3, 0x9}}, {0x4, 0x400, {0x0, 0x9}}, {0x3, 0xf, {0x2, 0x3}}, {0x1, 0x8033, {0x0, 0x9}}, {0x488, 0x0, {0x0, 0xf35c}}, {0x7, 0x5, {0x2, 0xc}}, {0x7, 0xfffe, {0x3, 0x5}}, {0x7ff, 0x0, {0x3, 0x5}}, {0x6, 0x1, {0x2, 0x1}}, {0x5, 0xc, {0x1, 0xb}}, {0x8000, 0x3, {0x0, 0x80000001}}, {0x4, 0x8000, {0x2, 0x3980}}, {0x4, 0x4, {0x2, 0x6}}, {0x4, 0x0, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0xb2, 0x81, 0x3ff, 0xe, 0x24, 'syz1\x00', "d0fd4459cbfcbe0f5de95488c7640559fee232bde70ece8544a329a276f90539", "8eab316a0ef00d585e6e6504da259e7654b90d4ec47a465ea9a1d18f5c6b8c86", [{0x4, 0x9, {0x1, 0x200}}, {0x3, 0x7, {0x2, 0x4}}, {0x7c7, 0x7ff, {0x0, 0x60}}, {0x400, 0xb, {0x0, 0x401}}, {0x6, 0x7, {0x2, 0x800000}}, {0x9, 0x2, {0x2, 0x4}}, {0x1, 0xb, {0x0, 0x5ef6}}, {0x9, 0xe046, {0x0, 0x10001}}, {0x8000, 0x8, {0x1, 0xfffffffa}}, {0x8, 0xa4b, {0x2, 0x3e4}}, {0xb0aa, 0xc, {0x2, 0x9}}, {0x8, 0x2, {0x3}}, {0x100, 0x7, {0x2, 0x5}}, {0xfffd, 0x7, {0x3, 0xffff}}, {0x8, 0x2, {0x2, 0x8}}, {0x4, 0x8001, {0x1, 0x1}}, {0x6, 0x5148, {0x0, 0x5}}, {0x4, 0x8000, {0x2, 0x7}}, {0xa, 0xe5, {0x1, 0x8}}, {0xfcd, 0x5, {0x1, 0x7fff}}, {0x8, 0x6, {0x1, 0x8}}, {0x860, 0x3ff, {0x1}}, {0x0, 0x8, {0x0, 0x7}}, {0x5, 0x1, {0x3, 0x5}}, {0x200, 0x3, {0x3, 0x8000}}, {0x2, 0x4, {0x2, 0x7}}, {0x8, 0xffe2, {0x1, 0x101}}, {0x101, 0x8, {0x1, 0x10000}}, {0x3ff, 0x9, {0x1, 0x9}}, {0x401, 0x4, {0x3, 0x1}}, {0xfba6, 0x1, {0x3, 0xa1}}, {0x77d9, 0x8, {0x1, 0xb0}}, {0x40, 0x20, {0x2, 0x8}}, {0x2, 0x9617, {0x1, 0x100}}, {0x8, 0xe62, {0x3, 0x3}}, {0x5, 0x1, {0x1, 0x1}}, {0x5, 0xf, {0x1, 0x3ff}}, {0xfff9, 0x4, {0x1, 0x5}}, {0x6, 0x1, {0x0, 0xe6a0}}, {0x1, 0x7e, {0x2, 0xfa}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x4, 0x9, 0x101, 0x9, 0xa, 'syz1\x00', "55f9c1b0f879c9a0c19d7110c00b7d7a3c279a259f29987c5eaab33dc50f5a1a", "016c822f588fb9c5a323c494b9d479623605a742d3ef33ec08e5bf13324254ab", [{0x2, 0xe, {0x0, 0x4}}, {0x1, 0x3, {0x2, 0x1}}, {0x98, 0xd, {0x2, 0x3}}, {0x7, 0xffff, {0x2, 0x1}}, {0x2, 0xab, {0x0, 0xffffff81}}, {0x5, 0xf07, {0x0, 0x9d}}, {0x1, 0x2, {0x0, 0xa}}, {0x6, 0x2, {0x0, 0x8001}}, {0x82, 0x8, {0x3, 0xe860}}, {0x2, 0x4, {0x2, 0x2}}, {0x6, 0x8, {0x0, 0x10000}}, {0x1000, 0x5, {0x2, 0x2}}, {0x2, 0x6, {0x2, 0x4}}, {0x8001, 0x6000, {0x602a987f82251e17, 0x2}}, {0x200, 0x2, {0x1, 0x7}}, {0x400, 0x2, {0x0, 0x3}}, {0x7, 0x1000, {0x1, 0x7}}, {0x0, 0x9, {0x1, 0x800}}, {0x4, 0x8, {0x3, 0xb7ba}}, {0x10, 0x5, {0x0, 0xffff441c}}, {0xfff, 0x408f, {0x0, 0xb32}}, {0xff81, 0x101, {0x2, 0xf}}, {0x3, 0x2, {0x3, 0x5}}, {0x5, 0x7, {0x0, 0x3}}, {0x9, 0x3, {0x1, 0x8}}, {0x9, 0xffff, {0x2, 0x6}}, {0x1, 0x5, {0x1, 0x2ef}}, {0x7, 0xff, {0x0, 0x4}}, {0x2, 0x3, {0x2, 0x6}}, {0x8000, 0xb, {0x2, 0x5}}, {0x9, 0x0, {0x0, 0x1}}, {0x3ff, 0x3, {0x2, 0x2}}, {0x6, 0xd951, {0x2, 0x7}}, {0x0, 0xbd9a, {0x1}}, {0x4, 0x5, {0x3, 0x6}}, {0x0, 0xf54, {0x0, 0xb9}}, {0x2, 0x3cb6, {0x1, 0xe2}}, {0x9, 0x10, {0x3}}, {0x3, 0x3c, {0x2, 0x3}}, {0x2d, 0x4, {0x1, 0x8}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4814}, 0x20000080) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001dc0)={0x0, 0x4f, "203a2bf98945c24393585c5d30e95978180ee1b322c16d9bbf715c392d5a821646caf71c8429b125f4d29862cbbb50d64e43e5bdffa10d23a822283540b5d5d35b938bc48206459ba6d0a354c41160"}, &(0x7f0000001e40)=0x57) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001e80)={0x0}, &(0x7f0000001ec0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001f00)={0x0, 0x8}, &(0x7f0000001f40)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001f80)={0x0, 0x200}, &(0x7f0000001fc0)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002140)=[{&(0x7f0000000ac0)=@in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000b00)="2f7dba51d219bf3aa6d0b677d95cdb06167716925e84cb06f6df69be9c46c93f0ef5f9e707960ea9420b04dc157343973534526ad66ddb8aa703a5dece35d8a2ca6d29b1920799c52cc45bbb6cb5bf291365f0a18a99915e4884f48cdb0b0b12206c871fb6f440981766e5671689a80ad60914408c10e1c1e4f1b27d7790f1439d83799d756c834781da20e57afd548564ba762ffb6058116549174c18989da91f1a0acab17c3a24bcad1a5f75c71b9eddd33fa5a13e321735a76a6a3fb99635d57752", 0xc3}, {&(0x7f0000000c00)="90e6477c15090ba5efd4a9a7a370c3fc09206a1c1f618a63f8315bd09ea23f43efd51ec3f3d4dccf2a9d517315f4036e046e69", 0x33}, {&(0x7f0000000c40)="3c00a89a4daab7735d330621fc8b67c060029a160f7a6a09cfc2c1720ca5b547c4108bf55ca55fb5c530313fb34ff0840f8551c3f73d62f2cc0d43dfa99815aa119a4449e48534f857cb5af5ddacb42d0085df7868b95ff9ccfc1b0819aef64241c16112362bc6415a1a3b07f0892764486cd0542654b0c409ac4713e46810c228c6a4eebf6457cdb11c601f981c4ddefc0b2057017fa7f7b154d48cda158805d32c70c0595a454a34029e8b4a4cd1c21717dab67162ed907d82ee4325fdd00a8ac74dc09b9e87e05fd9d2de00c1f11089e9d802ad81c8a20755200a541ff007a052fbf4d5afe6bf37e65c6cb6dd22b0978571e8e162b7f1b1c73338a1b774b84eadccc3d565cd9618e885ea6bbc955680c86f3a955636b93b58834c64dffd92c3b4c73ab9daf12375fb7ab6e610afb989dcc483d449f91f16c27440daeb16f62635fa5aac9d162474166c61c132113a823f7ba223059e303a11b1c7a11ba0de6842490ef6230a32138c36c2d8cf25d09e1cc7788a4cbd25c6252132e75a47c4ab12abde491f3bb75b17568a1fe94425356c5dda2212ce2e3a8da607223dfa1b13d5adebc42a303afe4b1a005135d0f4bb935683254afccfe3c661e70f3ed9accd232afb22f981a484be1b05aa0a65e79433d224cab0df14f1409bb7cfb33f68a17a2d7586261f3e0f8b9ca2e475056a05f4d75fae4cdee11f90f8c2b6ce293b49352e9003ec2d696eececefe6bb17e980694caa97150a6fd44affba91d527d41017fd45b2e827d2edcb3ecbc979e80838b28970e25c4bb51f7f1ce5d205723a1c810e1f5372ec386206989304cec0f3c551d34ccdc29119927985d5e62f0d4d3b2adac84dda78fc644133ad5308dc01e102595889602cd9f4d4ff42688d17eae02911231eea028355f865d482d7df564afcd6a31bac1208c59ff60022349355c07ab6415f570a25f9958284b3d66afaa1f24e16a42424fd361a5333ae477711b51da68cafec8c57ea1fce517037a322199d775050d3bd8b51ccd1006dbbcc8ead39229188217d9031515f33d31c913b74c2d12ef52e1dd192e31876b76d7bd99676b430baf49613e3be1b420e8890415224eb9ff3f17daaeb5c3011edb7c6a1b1cd29e7481ef66a48a728ff7c82e6b0bee819aac77b8a2e270dd693eab981885a33a75f20c81c829c7cebd2c3f4b60ac08d6aef810a649e00953f394a79870ea19214a8b19b58aa011863f0927b858e15ab656f1e8394b354e78d978d509b9fb5a83d12337a83a1d56f8ae5531846a0c7a5ace66d18091845ca393fc098cd058c4457824131d0871e3100b833346f16943b1cd946fe884437aa5c24a054b5d23dea014439af5737896cdd2b03d417152e7d9530d86c11527d0b52b5abb7fc4e34c47cc1708b8b18a2a756f0e9b1e002fa0a1345a4574fb71dd8598271ce38a41121ae965826681c1cade369ac8761366cecfada7bb6c379d945a52a81e7355e657d1f0e98759501690662da1b529e5bd583f2f3972833e8abe45ef8b2bbeb882beb5ea0d1e7b999bac4b0ba09ef23877d319355abffaa3c13943ea2a0ec30ff3fee1e6ddcaf74d38aec8525f562630778ed3cacbdbc0a2df401d2f5c6b95095a513f017584655817f93b356117559d4523f19206f7e30a320f1555debc5536322d5c500585a506b1fdd5d3e0e818b93575f902444d34b6300a407e6e74081aa406e0369b3befaec856a58b02c7c5597d597428aa465894b0b89af46b91abff83f40a1b41adaf0674be2e0d48d8a0e464b0a68986d839350b799a879257d06a17db04c739cae7d494da05c0d58dbc9d9975f3853ba7d239e376fe092b0239917531279a9c6070eae99a796156224094efcddce6fe15600e7ce3a06cf95e8e14b94f7157a1515b864390a18321544f75f4afc1953cfefb84c7dd23b672884c8bafe32624d4941128efa2ed74d2a312e82232a8e125f59595f2fbbfd72dcbc0314d5a2d585cbb32653d41d004f78ad690e7ebfbeb892e2757c8f55279d1093feb307fa9e3ae98b01cc1f0cc41851a1cf13f18cc5470bbdf851015e17a8b7958f2c266c0742c09c7d4d7b63949a626dce9755a6de22ed47724fd41301e500c81c0b3f13aa750528075ebb966e025e00bb869eec260ecc23f335318522a16c5b909a8ba28da9c93e0bb282b852dbad94939bdc9989937125f3b4f4aac4fd620eae07c498a4710211b4ad0b159be467c839c894e9425115d85a8bb9eb5d42cd5e733e13789e3efb6d6fa38f252bf08176ebdb56a73cb9d265ccd63c938d89014de80881f8937279370cd5f9603be7ef89ba35a7f80cde040dbbecd3a05958345f8f930043392687f45bc366919519c57b17d897c7966dadfe9bd1373315b30a633595f9dd5f8f9f4c7c2f413f10308d341a7be59a4f493993c714605daf650581a10f010ffaa1f67f90833d86830d0a1a9d081a6318c4fecaca714e4e595b53b20273aa46bd366942c9f1e2876a135b599c6f4a59341af435cb285010f35ac8b263de5b63ec7f691d8f12138fc33022f8eee7f91cc7d17c15a20b578a9f391c2f3fd40ae0033d516b12781e4d5af17ab7a5849e062349d78b5dbf36ba5b54ff26c17808359d5d2c063fa66d99bfeacddca4be497b100cc28fbd273d379e516d8717688ca21ad9684fae1a7699a1e565ca278068b94b4def9dd64344daf3ec0a89a10d4720a1d3e512bb54946ab5bb7d3eae8c70ceb31a7d87dc29fd6d612b02a6c6abd0ac42ab826663d5dc50662af701c37f9213302e7e5898fa017ca738b456ee18ad48e8998b4c21c24338aad9963304c4398f2159fa50dec03e3bf960c90e2f72aaefe8e378241e9e8f4f9dd108bdc0813369fe5019debf584609257aa6590da469e9941da5f502ea34152945fb98c5556a20aaf83c616e91702b377ac6b1251554015e876ef9631e6fec2401a6eac6957ae903f185c4bbe68c20335bba97c3e598497c2871deea1956a5bdb955bbac5f642e446a811f3b702b8f3b2c455e763060d625da4bcd4240df8f124ce60123f30216358bfe5b04a3c43b9703f313d2eb180c2b4e5fa34be258e0be5ab4435135f78a72b7ab409e7540f2ac831af07dc1040f0dae87ed2b6b4f295de2a1ee811d530d6614114f3c9f6969d96778e00a45782585aa668a2d925b3c6396c26f8b9611ba26eda74638f5629d90df3926c7040872b6a94e55134551d354bedbe1e7c73a405c96e114f656d2a503a8343d52ba5e92f89e9c960d0098573ab2aec1d5f23fb932cdb16d096348e37a2ec79ca7c76465c2a077cce5ab17f438419564ba3f786cc55d52386bb16cc84777b4a95e71dc38206c334eb69e6ef6338eb456060e3ecc63705e3c073b294aff856bb99908c351adae8710324fffeec05d253446704c28a8a1efedd999ca7fc92e7b25d52dd4065387f710d422f01e2d11bb999871f23c5502dabd63829cb434bd8076bc596b94e89ebdeae60b0fffdd7a5fbeafc63c151ccf3d451468a2ed7acb6ab9560ebf6de6ce64c069b3390a4f3e329f6172fec47375483dce716c4e296e1f637dd2b7b28d0b00629acd5f18590e1ee7b237d3bb8d34312a7f11b2b3ff5764a28cb7737cecdefc44e9d2a639d0faaaf8bde4cd8fc177f635900f7c3f8fef089dda823b2753bd19d3304c9bf2bd1162cc61e15686bfbcf1568c23e610540250c5d6642f604f3e8170d7fa0109995035752b91dada89394af2a7fda89371d9e8c2fa70f7d2ea096560263b50538ffb1d310e04296d49e90ff5a1a37b3769870e4a499a71aaaf179b520b4985ef80701941bb5016d7f7d94cb3f760422379e7a87e7e30ba6f64c6e1c4d6ba275a6d8a782dd52188b0fe69bef95b119b4a2c22d8d6ee109d61ef679d7f85f4f8b53961cc8dad5924f5f9e52968632defd00d4352048b797f2a12d219941f27512aa9ddb17099745d2a6a384c9ed8dbbf0c9b73fe9ba8b747e06915215c96ce3a0f95a045e6bfe0c4d990fe2d39e4523b80a148dbb43d360a533a280223c7eb4ce0d5515e9434eb3d6115fa0452c892ea2cd2f73829d169530d300e12049bdef73bcf30e3378c10a58bf6315278c6aaa004b2ce8e88308924d37925d058f24054e246209bbdb53a2a2aa09b776fc36e1fca815798c4f87369eb0ec1b6f5a0b997b379ffebc98ac1063708015006047812cd67351978b3978836432b280251655776b12e3daf8cbcfc1ee0c202e800000427dfd94311359972365e867af0495b005ca751571e463b384603df5576195073c1e4b487a2ba8160777df1f5fd8a534c1ce2c8dcea757db6d42dec8f7c16bcdb86e829546eca040945c9282332aae7db9c86fb32ad62e5cc63b0a75a36c538bcb5dbff5a9cf47e4eaba8f4be96ec1e5d8abed3e83c273cfa7dc98265d195333a754ef5b4db67ec9eca6d155d9f1f27aa433af0deea60a424e142613992154d91f69333d270eeff8d916af3763c4a6ce370ff5cc64b6cfd18e64a6f5b61676f7fe3d14fbe7540f0617de7b96ea7bc5e61dddce323f9a54ffa29a8ff17421887caecb6c9c4c22db92256758a7227010582ab1d9caa44098d7211708d1dd000f9f8c8509af13820848fe6274523292450539422fd0b51155e06bc206e7b1c93c49269e3b69ca1b9b7e6e75d9e3261c09e3ff431fdf642f2d1585750c9a4ed5ecd76c5038a465a1a30ec1a9b0eb165373e1649106156298f52b508ae87217f44453207bf5fd120bdff47bcca4d26e02bbdedf517a78d07f518744890d15d21c4dcee6ace10d873b6a6660d4fe21684f8e75ee35200664d50c4160903b9b3357ade3346b6398b87a2a8848ef763becf61505d2797d8199150b3d91e8f982c5b8f86ed84b9da1004827651520e4d93224db35055352fe3f2617d517677eb0b3639a68a33d4140cf563f95d2a37bb04b22110c3991c9a0050d3d3451987c80238d2a109347aab24dbce2e60eb3741e6101054db3fe8eb57a6724aae2f829fb5e698441bd4ebbac103c47f49157dd6631cd52b780b68ce7f2763bfeeeee9aea536d9d26ba62a4b75a9d97b089b8279ccf652b54328f4413ad316174eccdd9ef7b2663b65f52353738cc30289148e28786ada44a1da59177e185cf6464a9b20c440319f7ed2aa9e4a48885590f13986cfe77510f8d032aafb4df16c7b93fadf5f2d40d46d470da76e30525909df3126eb5d1d557bba42e8e7ed6d6e0b3435529a84071d063827f1740e109f5e82134e2f1979ec11ab58a11738407cf31ad5731e285687289e4be90b4ade0048be8bd58a2b5ee4eac524b2ff6d9988db9f8c704d19ffb20656cdef0aef506064b00cfd044ca5b612089041f791d9e614ab5b93a24d809038ad8ea7619896d4c895e9f0467145f921f7b80fb46752bfa8f11595197ca4a0182ed52c91ade1851664785bd6a73c5b7e8843d5907f374b8d7929a049ccef4b7d94c2e57a5a57a6fe761200c71c02b9cf88f22ea589eac9bea9820a440c2f6dad8590f6b837d042dda4e9cd8184de7193b0cfa1e03c19e0ade1bbde732db5ebd6fc5b7904157ede8716a2ac45966b561d7ea863d0fd830862b86752a62fa3505d3a191309a5edb42ad6825c32c541f5131de0b4f86a2684e7ef537070f3f56856dfbc3015cddea68a43fdecf8160fb46a7b9fb1375b0ff5094b783f0b050a922ba0feaf3aa1151e16d2034b3fae6a5cda9e2ee7805ba32a7ef448395893d2923bcbe3a14579082a3922f9eeb5ef01d0e56ddd719ac316e84b4081f5278018d02df50cc5041761b0", 0x1000}, {&(0x7f0000001c40)="19473a8c673a35c9d57d6480279f9d2d7a94a848468ff83467b05ead9837c5ba10b05920cb8a66801a8ceca505d68015c8e760601e8ebb42b4316a0834df3c7fe6261a37a7791654101d1bf7bf30c7528e045a564a17befb454abab7227c305a87d5c6e2f914cb3d954d1b2dccab64b4995eabd1d04c40d21bf094ff0c1cf0e1dfbd8074442ab652972c669b34ffc6f6469c6464c0c7bebb2afc81bfb67621752258e504ee388989b77e073a59", 0xad}, {&(0x7f0000001d00)="5c1938eb7dfb77220de28ab519d43a71649c285a854c6d89e59da81021524c249dcf", 0x22}], 0x5, &(0x7f0000002000)=[@authinfo={0x18, 0x84, 0x6, {0x545e}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x2, 0x8202, 0x466, 0x80, 0xffffff2a, 0x5, 0x9, r3}}, @sndrcv={0x30, 0x84, 0x1, {0xb4, 0x544, 0x8, 0x8, 0x0, 0x0, 0x55e, 0x4, r4}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x7fff, 0x2, 0x0, 0x1000, 0x0, 0x3, 0x3, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x1000, 0x8200, 0x2, 0xa, 0x400, 0xfffffff7, 0x6, r6}}], 0x110, 0x8000}], 0x1, 0x80) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000002180)={0x6, 0x118, 0xfa00, {{0x200, 0xb5, "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", 0x8, 0x3d, 0x3, 0x5, 0xce, 0x8, 0x3}}}, 0x120) r7 = syz_open_dev$sndctrl(&(0x7f00000022c0), 0x1000, 0x8400) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002300), 0x200002) sendfile(r7, r8, &(0x7f0000002340)=0x3, 0x1d) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r2, 0x8044610a, &(0x7f0000002380)={0x0, @raw}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000002400)) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) close(r9) fstat(r2, &(0x7f0000002440)) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000ffc000/0x3000)=nil) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x58, 0x3, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x2}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xd2}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x40000) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000002600)={{0xa3, @local, 0x4e21, 0x4, 'ovf\x00', 0x19, 0x2, 0x31}, {@remote, 0x4e20, 0x0, 0x2, 0x0, 0x18cce9c0}}, 0x44) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) preadv(r11, &(0x7f0000002700)=[{&(0x7f0000002680)=""/120, 0x78}], 0x1, 0x7, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000002740)={0x9, 0x3, 0x6}) socket(0x1, 0x1, 0x5) close_range(r1, r1, 0x2) io_uring_enter(r2, 0x69f9, 0x146b, 0x60, &(0x7f0000002780)={[0x3]}, 0x8) 228.65204ms ago: executing program 4 (id=1174): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x3c, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x890, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20005, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20000000000, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e]}) 181.842294ms ago: executing program 3 (id=1175): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x60, r2, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) (fail_nth: 7) 146.365531ms ago: executing program 2 (id=1176): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000002c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000080), &(0x7f0000000180)=0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 8.459432ms ago: executing program 4 (id=1177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x4, 0xc63, 0x2, 0x8, 0x1, 0x4, 0xf, 0xc, 0x9, 0x3, 0x0, 0x4, 0xb}, {0x3, 0x8, 0x0, 0x1, 0x7f, 0xc2, 0x1, 0x8, 0x9, 0x4, 0x3, 0xf7, 0x2}, {0xff, 0x7, 0x2, 0x3, 0xe, 0x27, 0x5, 0x0, 0x1, 0x8e, 0x6, 0x9, 0xfffffffffffffffd}], 0xfffffffa}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x1ffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) 0s ago: executing program 0 (id=1178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r3, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) kernel console output (not intermixed with test programs): ission+0x1e1/0x300 [ 215.410859][ T8051] ? aa_sock_msg_perm+0x94/0x160 [ 215.410890][ T8051] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 215.410919][ T8051] ? __pfx_rds_sendmsg+0x10/0x10 [ 215.410945][ T8051] __sock_sendmsg+0x219/0x270 [ 215.410972][ T8051] ____sys_sendmsg+0x505/0x830 [ 215.411007][ T8051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.411046][ T8051] ? import_iovec+0x74/0xa0 [ 215.411073][ T8051] ___sys_sendmsg+0x21f/0x2a0 [ 215.411105][ T8051] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.411172][ T8051] ? __fget_files+0x2a/0x420 [ 215.411197][ T8051] ? __fget_files+0x3a0/0x420 [ 215.411233][ T8051] __x64_sys_sendmsg+0x19b/0x260 [ 215.411266][ T8051] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.411306][ T8051] ? __pfx_ksys_write+0x10/0x10 [ 215.411325][ T8051] ? rcu_is_watching+0x15/0xb0 [ 215.411350][ T8051] ? do_syscall_64+0xbe/0x3b0 [ 215.411376][ T8051] do_syscall_64+0xfa/0x3b0 [ 215.411396][ T8051] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.411429][ T8051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.411450][ T8051] ? clear_bhb_loop+0x60/0xb0 [ 215.411476][ T8051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.411497][ T8051] RIP: 0033:0x7f82b8d8e929 [ 215.411516][ T8051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.411534][ T8051] RSP: 002b:00007f82b9bb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.411556][ T8051] RAX: ffffffffffffffda RBX: 00007f82b8fb5fa0 RCX: 00007f82b8d8e929 [ 215.411572][ T8051] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 215.411585][ T8051] RBP: 00007f82b9bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 215.411598][ T8051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.411610][ T8051] R13: 0000000000000000 R14: 00007f82b8fb5fa0 R15: 00007f82b90dfa28 [ 215.411642][ T8051] [ 215.727777][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.192752][ T8055] netlink: 'syz.1.766': attribute type 10 has an invalid length. [ 216.235626][ T8055] netlink: 40 bytes leftover after parsing attributes in process `syz.1.766'. [ 216.977571][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 216.984453][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 216.992352][ T5155] Bluetooth: hci4: command 0x0405 tx timeout [ 217.006043][ T5890] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 217.165536][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 217.189308][ T5890] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 217.222870][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.249924][ T5890] usb 3-1: config 0 descriptor?? [ 217.281883][ T5890] usb 3-1: invalid MIDI EP [ 217.296514][ T5890] usb 3-1: snd-bcd2000: error during probing [ 217.315279][ T5890] snd-bcd2000 3-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 217.829375][ T5890] usb 4-1: USB disconnect, device number 9 [ 217.999589][ T5890] usb 3-1: USB disconnect, device number 10 [ 218.158587][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 218.268855][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 218.775339][ T8120] netlink: 304 bytes leftover after parsing attributes in process `syz.3.791'. [ 218.796212][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'. [ 219.172229][ T8130] FAULT_INJECTION: forcing a failure. [ 219.172229][ T8130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.193633][ T8130] CPU: 0 UID: 0 PID: 8130 Comm: syz.1.796 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 219.193664][ T8130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.193677][ T8130] Call Trace: [ 219.193685][ T8130] [ 219.193695][ T8130] dump_stack_lvl+0x189/0x250 [ 219.193734][ T8130] ? __pfx____ratelimit+0x10/0x10 [ 219.193768][ T8130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.193801][ T8130] ? __pfx__printk+0x10/0x10 [ 219.193824][ T8130] ? __might_fault+0xb0/0x130 [ 219.193856][ T8130] should_fail_ex+0x414/0x560 [ 219.193889][ T8130] _copy_from_user+0x2d/0xb0 [ 219.193913][ T8130] ___sys_sendmsg+0x158/0x2a0 [ 219.193945][ T8130] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.194009][ T8130] ? __fget_files+0x2a/0x420 [ 219.194032][ T8130] ? __fget_files+0x3a0/0x420 [ 219.194067][ T8130] __x64_sys_sendmsg+0x19b/0x260 [ 219.194099][ T8130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.194138][ T8130] ? __pfx_ksys_write+0x10/0x10 [ 219.194158][ T8130] ? rcu_is_watching+0x15/0xb0 [ 219.194183][ T8130] ? do_syscall_64+0xbe/0x3b0 [ 219.194208][ T8130] do_syscall_64+0xfa/0x3b0 [ 219.194228][ T8130] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.194260][ T8130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.194280][ T8130] ? clear_bhb_loop+0x60/0xb0 [ 219.194306][ T8130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.194327][ T8130] RIP: 0033:0x7f560238e929 [ 219.194345][ T8130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.194363][ T8130] RSP: 002b:00007f5603215038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.194385][ T8130] RAX: ffffffffffffffda RBX: 00007f56025b5fa0 RCX: 00007f560238e929 [ 219.194400][ T8130] RDX: 0000000000004000 RSI: 0000200000000380 RDI: 0000000000000003 [ 219.194414][ T8130] RBP: 00007f5603215090 R08: 0000000000000000 R09: 0000000000000000 [ 219.194426][ T8130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.194437][ T8130] R13: 0000000000000000 R14: 00007f56025b5fa0 R15: 00007f56026dfa28 [ 219.194468][ T8130] [ 219.404316][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.417698][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.797'. [ 219.502365][ T8133] vlan2: entered promiscuous mode [ 219.544733][ T8133] ip6gretap0: entered promiscuous mode [ 219.696763][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 220.805964][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 220.845618][ T5906] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 220.959242][ T8171] netlink: 'syz.3.813': attribute type 29 has an invalid length. [ 220.983847][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.997964][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.023481][ T8171] netlink: 'syz.3.813': attribute type 29 has an invalid length. [ 221.025602][ T24] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 221.040924][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 221.065086][ T8171] netlink: 500 bytes leftover after parsing attributes in process `syz.3.813'. [ 221.084444][ T5906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 221.096709][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.110309][ T5906] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 221.119042][ T5906] usb 5-1: config 7 has no interface number 0 [ 221.129036][ T5906] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 221.169397][ T24] usb 1-1: config 0 descriptor?? [ 221.181340][ T8171] unsupported nla_type 58 [ 221.184750][ T5906] usb 5-1: config 7 interface 187 has no altsetting 0 [ 221.219444][ T5906] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 221.247034][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.269577][ T5906] usb 5-1: Product: syz [ 221.273855][ T5906] usb 5-1: Manufacturer: syz [ 221.346000][ T5906] usb 5-1: SerialNumber: syz [ 221.365743][ T8167] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 221.391000][ T8175] netlink: 'syz.2.815': attribute type 9 has an invalid length. [ 221.416047][ T8175] netlink: 'syz.2.815': attribute type 6 has an invalid length. [ 221.615279][ T24] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 221.628385][ T5906] usb 5-1: Limiting number of CPorts to U8_MAX [ 221.663936][ T5906] usb 5-1: Unknown endpoint type found, address 0x07 [ 221.693852][ T24] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 221.750324][ T5906] usb 5-1: Not enough endpoints found in device, aborting! [ 221.765235][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.000A/input/input6 [ 221.852817][ T24] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 222.075727][ T8189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.084571][ T8189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.227316][ T5890] usb 1-1: USB disconnect, device number 11 [ 222.337451][ T8196] No such timeout policy "syz1" [ 222.551753][ T8202] netlink: 'syz.1.824': attribute type 10 has an invalid length. [ 223.990782][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 223.990802][ T30] audit: type=1326 audit(1749393009.695:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.0.835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82b8d8e929 code=0x0 [ 224.294896][ T8228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.836'. [ 224.306397][ T5833] usb 5-1: USB disconnect, device number 6 [ 224.314646][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.836'. [ 224.359572][ T8228] netlink: 'syz.0.836': attribute type 10 has an invalid length. [ 224.925730][ T5890] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 224.974235][ T977] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 225.066248][ T5890] usb 5-1: device descriptor read/64, error -71 [ 225.127550][ T977] usb 1-1: too many configurations: 179, using maximum allowed: 8 [ 225.170836][ T977] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 225.179734][ T977] usb 1-1: can't read configurations, error -61 [ 225.315778][ T5890] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 225.323618][ T977] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 225.420156][ T8256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.848'. [ 225.429414][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 225.439637][ T8256] netlink: 'syz.3.848': attribute type 10 has an invalid length. [ 225.465731][ T5890] usb 5-1: device descriptor read/64, error -71 [ 225.610813][ T5890] usb usb5-port1: attempt power cycle [ 225.624412][ T977] usb 1-1: too many configurations: 179, using maximum allowed: 8 [ 225.651713][ T8260] binder: 8259:8260 ioctl 4018620d 0 returned -22 [ 225.717407][ T977] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 225.719693][ T8261] binder: 8259:8261 ioctl c018620c 0 returned -14 [ 225.725120][ T977] usb 1-1: can't read configurations, error -61 [ 225.828190][ T977] usb usb1-port1: attempt power cycle [ 225.941468][ T8264] FAULT_INJECTION: forcing a failure. [ 225.941468][ T8264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.955993][ T5833] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 225.975163][ T8264] CPU: 1 UID: 0 PID: 8264 Comm: syz.2.850 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 225.975188][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.975197][ T8264] Call Trace: [ 225.975204][ T8264] [ 225.975212][ T8264] dump_stack_lvl+0x189/0x250 [ 225.975244][ T8264] ? __pfx____ratelimit+0x10/0x10 [ 225.975269][ T8264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.975292][ T8264] ? __pfx__printk+0x10/0x10 [ 225.975309][ T8264] ? __might_fault+0xb0/0x130 [ 225.975332][ T8264] should_fail_ex+0x414/0x560 [ 225.975357][ T8264] _copy_from_user+0x2d/0xb0 [ 225.975374][ T8264] ___sys_sendmsg+0x158/0x2a0 [ 225.975398][ T8264] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.975449][ T8264] ? __fget_files+0x2a/0x420 [ 225.975472][ T8264] ? __fget_files+0x3a0/0x420 [ 225.975506][ T8264] __x64_sys_sendmsg+0x19b/0x260 [ 225.975538][ T8264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.975576][ T8264] ? __pfx_ksys_write+0x10/0x10 [ 225.975594][ T8264] ? rcu_is_watching+0x15/0xb0 [ 225.975620][ T8264] ? do_syscall_64+0xbe/0x3b0 [ 225.975645][ T8264] do_syscall_64+0xfa/0x3b0 [ 225.975666][ T8264] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.975697][ T8264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.975717][ T8264] ? clear_bhb_loop+0x60/0xb0 [ 225.975743][ T8264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.975762][ T8264] RIP: 0033:0x7feb7798e929 [ 225.975789][ T8264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.975806][ T8264] RSP: 002b:00007feb757f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.975828][ T8264] RAX: ffffffffffffffda RBX: 00007feb77bb5fa0 RCX: 00007feb7798e929 [ 225.975843][ T8264] RDX: 9cdc2384056b48b8 RSI: 0000200000000080 RDI: 0000000000000003 [ 225.975854][ T8264] RBP: 00007feb757f6090 R08: 0000000000000000 R09: 0000000000000000 [ 225.975863][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.975871][ T8264] R13: 0000000000000000 R14: 00007feb77bb5fa0 R15: 00007feb77cdfa28 [ 225.975894][ T8264] [ 226.135761][ T5890] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 226.141339][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.198540][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.224839][ T5890] usb 5-1: device descriptor read/8, error -71 [ 226.246535][ T977] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 226.287134][ T977] usb 1-1: too many configurations: 179, using maximum allowed: 8 [ 226.302119][ T977] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 226.325607][ T977] usb 1-1: can't read configurations, error -61 [ 226.459214][ T5833] usb 2-1: Using ep0 maxpacket: 32 [ 226.469354][ T5833] usb 2-1: unable to get BOS descriptor or descriptor too short [ 226.521475][ T5833] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 226.575691][ T5890] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 226.595574][ T977] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 226.604098][ T5890] usb 5-1: device descriptor read/8, error -71 [ 226.722986][ T5890] usb usb5-port1: unable to enumerate USB device [ 226.771349][ T5833] usb 2-1: config 7 has no interface number 0 [ 226.856179][ T977] usb 1-1: too many configurations: 179, using maximum allowed: 8 [ 226.869308][ T977] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 226.877065][ T977] usb 1-1: can't read configurations, error -61 [ 226.898328][ T977] usb usb1-port1: unable to enumerate USB device [ 227.037029][ T5833] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 227.088547][ T8273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.115051][ T5833] usb 2-1: config 7 interface 187 has no altsetting 0 [ 227.156099][ T5833] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 227.166288][ T8271] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 227.189095][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.204400][ T5833] usb 2-1: Product: syz [ 227.210238][ T5833] usb 2-1: Manufacturer: syz [ 227.214921][ T5833] usb 2-1: SerialNumber: syz [ 227.226837][ T8258] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 227.756294][ T5833] usb 2-1: Cannot retrieve CPort count: -110 [ 227.765856][ T5833] usb 2-1: Cannot retrieve CPort count: -110 [ 227.772024][ T5833] es2_ap_driver 2-1:7.187: probe with driver es2_ap_driver failed with error -110 [ 228.368422][ T8285] Cannot find del_set index 4 as target [ 228.439608][ T5919] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 228.679409][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 228.687215][ T5919] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 228.699935][ T5919] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.710052][ T5919] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.751443][ T5919] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.781987][ T5919] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.795765][ T5919] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 228.807020][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.945631][ T5906] usb 2-1: USB disconnect, device number 9 [ 229.031604][ T5919] usb 5-1: GET_CAPABILITIES returned 0 [ 229.039073][ T8284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.048650][ T5919] usbtmc 5-1:16.0: can't read capabilities [ 229.057674][ T8284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.139218][ T5919] usb 5-1: USB disconnect, device number 11 [ 229.310264][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.859'. [ 229.329511][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 229.387479][ T8293] netlink: 'syz.4.859': attribute type 10 has an invalid length. [ 229.712457][ T8307] binder: 8306:8307 ioctl 4018620d 0 returned -22 [ 229.809155][ T8307] binder: 8306:8307 ioctl c018620c 0 returned -14 [ 230.085998][ T5919] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 230.267556][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 230.306498][ T5919] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 230.322346][ T5919] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 768 [ 230.333049][ T5919] usb 2-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 230.365965][ T5919] usb 2-1: config 1 interface 0 has no altsetting 0 [ 230.408143][ T5919] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.418821][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.429157][ T5919] usb 2-1: Product: ㉠[ 230.433544][ T5919] usb 2-1: Manufacturer: ᴰ髗ᇦ랾晙êŸë­›é»‹å¶”脗镀뻟ᬗìƒé¶‘찈᱆掓鄯鑛ê«åŽ¬ãºŠà¿«é¹¸à©˜Ã²ë€º [ 230.487535][ T5919] usb 2-1: SerialNumber: ╂칶⼫Ḕۥ⥵㬡ンí¹å¥žä¢Œà¤¤â§¼à¡‡ç£‰ï°¢æ§êš¿âŸ°äˆ¤é¿æ¹ˆç…Ê„ãŒå»šá›«ä㉯䖕寓㌙罕繾闂䢾紳朕 [ 230.535922][ T8311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 230.544166][ T8311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 231.105653][ T5890] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 231.323108][ T5890] usb 4-1: config 0 has no interfaces? [ 231.372905][ T5890] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 231.383941][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.403159][ T5890] usb 4-1: Product: syz [ 231.408004][ T5890] usb 4-1: Manufacturer: syz [ 231.412702][ T5890] usb 4-1: SerialNumber: syz [ 231.428502][ T5890] usb 4-1: config 0 descriptor?? [ 231.491122][ T8339] vlan2: entered allmulticast mode [ 231.505011][ T8339] vlan1: entered allmulticast mode [ 231.531324][ T8339] veth0_vlan: entered allmulticast mode [ 231.727473][ T8329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.739492][ T8329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.766393][ T5890] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 231.988964][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 232.001292][ T5890] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 232.011174][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.032354][ T5890] usb 5-1: Product: syz [ 232.046737][ T5890] usb 5-1: Manufacturer: syz [ 232.054461][ T5890] usb 5-1: SerialNumber: syz [ 232.075169][ T5890] usb 5-1: config 0 descriptor?? [ 232.102130][ T5890] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 232.208478][ T977] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 232.393163][ T977] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 232.394772][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 232.402976][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.485358][ T977] usb 3-1: config 0 descriptor?? [ 232.505300][ T5890] gspca_ov534_9: reg_w failed -71 [ 232.570469][ T977] usb 3-1: selecting invalid altsetting 1 [ 232.578731][ T977] flexcop_usb: set interface failed. [ 232.611644][ T977] b2c2_flexcop_usb 3-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 232.823999][ T8350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.833415][ T8350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.925646][ T5890] gspca_ov534_9: Unknown sensor 0000 [ 232.925778][ T5890] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 232.947203][ T5890] usb 5-1: USB disconnect, device number 12 [ 233.197314][ T8360] binder: 8359:8360 ioctl 4018620d 0 returned -22 [ 233.258759][ T8361] binder: 8359:8361 ioctl c018620c 0 returned -14 [ 233.977127][ T5919] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 234.063214][ T5833] usb 4-1: USB disconnect, device number 10 [ 234.063243][ T5919] usb 2-1: USB disconnect, device number 10 [ 234.433993][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'. [ 234.865549][ T5919] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 234.932463][ T5833] usb 3-1: USB disconnect, device number 11 [ 235.040812][ T8402] binder: 8401:8402 ioctl 4018620d 0 returned -22 [ 235.055641][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 235.074274][ T5919] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.094895][ T5919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.107864][ T8406] binder: 8401:8406 ioctl c018620c 0 returned -14 [ 235.119141][ T5919] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.135662][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.153970][ T5919] usb 4-1: Product: syz [ 235.184333][ T5919] usb 4-1: Manufacturer: syz [ 235.189412][ T5919] usb 4-1: SerialNumber: syz [ 235.387492][ C1] net_ratelimit: 10 callbacks suppressed [ 235.387516][ C1] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 235.455327][ T5919] usb 4-1: USB disconnect, device number 11 [ 235.533896][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.778549][ T5920] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 236.045816][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.077483][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.106623][ T5920] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 236.142593][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.167361][ T5920] usb 1-1: config 0 descriptor?? [ 236.507046][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 236.584077][ T8430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.704985][ T5920] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 237.935839][ T5920] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 238.110058][ T5920] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 238.135599][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.162754][ T5920] usb 4-1: Product: syz [ 238.162784][ T8412] IPVS: set_ctl: invalid protocol: 58 100.1.1.3:20003 [ 238.167606][ T5920] usb 4-1: Manufacturer: syz [ 238.192217][ T5920] usb 4-1: SerialNumber: syz [ 238.222608][ T5920] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 238.244243][ T5919] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 238.881487][ T5833] usb 1-1: USB disconnect, device number 16 [ 239.169380][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 239.375915][ T5919] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 239.389607][ T5919] ath9k_htc: Failed to initialize the device [ 239.399834][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 239.436073][ T5919] usb 4-1: ath9k_htc: USB layer deinitialized [ 239.462468][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.563899][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 239.606846][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 239.628128][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 239.665822][ T24] usb 2-1: Product: syz [ 239.684439][ T24] usb 2-1: Manufacturer: syz [ 239.700892][ T8464] binder: 8463:8464 ioctl 4018620d 0 returned -22 [ 239.727025][ T8466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.914'. [ 239.825246][ T8467] binder: 8463:8467 ioctl c018620c 0 returned -14 [ 239.842845][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 239.895290][ T8470] netlink: 'syz.2.914': attribute type 10 has an invalid length. [ 240.021138][ T8470] bridge0: port 1(team0) entered blocking state [ 240.032016][ T8470] bridge0: port 1(team0) entered disabled state [ 240.039756][ T8470] team0: entered allmulticast mode [ 240.045196][ T8470] team_slave_0: entered allmulticast mode [ 240.063321][ T8470] team_slave_1: entered allmulticast mode [ 240.089412][ T8470] team_slave_0: entered promiscuous mode [ 240.095658][ T8470] team_slave_1: entered promiscuous mode [ 240.108749][ T8470] bridge0: port 1(team0) entered blocking state [ 240.115347][ T8470] bridge0: port 1(team0) entered forwarding state [ 240.282114][ T5890] usb 4-1: USB disconnect, device number 12 [ 240.484884][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'. [ 240.815159][ T8486] FAULT_INJECTION: forcing a failure. [ 240.815159][ T8486] name failslab, interval 1, probability 0, space 0, times 0 [ 240.860940][ T8486] CPU: 1 UID: 0 PID: 8486 Comm: syz.4.920 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 240.860977][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.860992][ T8486] Call Trace: [ 240.861000][ T8486] [ 240.861015][ T8486] dump_stack_lvl+0x189/0x250 [ 240.861055][ T8486] ? __pfx____ratelimit+0x10/0x10 [ 240.861089][ T8486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.861123][ T8486] ? __pfx__printk+0x10/0x10 [ 240.861150][ T8486] ? __pfx___might_resched+0x10/0x10 [ 240.861171][ T8486] ? fs_reclaim_acquire+0x7d/0x100 [ 240.861204][ T8486] should_fail_ex+0x414/0x560 [ 240.861239][ T8486] should_failslab+0xa8/0x100 [ 240.861266][ T8486] __kmalloc_noprof+0xcb/0x4f0 [ 240.861287][ T8486] ? sock_kmalloc+0xd6/0x160 [ 240.861323][ T8486] sock_kmalloc+0xd6/0x160 [ 240.861356][ T8486] ____sys_sendmsg+0x1b5/0x830 [ 240.861392][ T8486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.861431][ T8486] ? import_iovec+0x74/0xa0 [ 240.861459][ T8486] ___sys_sendmsg+0x21f/0x2a0 [ 240.861491][ T8486] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.861560][ T8486] ? __fget_files+0x2a/0x420 [ 240.861585][ T8486] ? __fget_files+0x3a0/0x420 [ 240.861621][ T8486] __x64_sys_sendmsg+0x19b/0x260 [ 240.861654][ T8486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.861694][ T8486] ? __pfx_ksys_write+0x10/0x10 [ 240.861713][ T8486] ? rcu_is_watching+0x15/0xb0 [ 240.861748][ T8486] ? do_syscall_64+0xbe/0x3b0 [ 240.861775][ T8486] do_syscall_64+0xfa/0x3b0 [ 240.861795][ T8486] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.861828][ T8486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.861850][ T8486] ? clear_bhb_loop+0x60/0xb0 [ 240.861876][ T8486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.861898][ T8486] RIP: 0033:0x7fd92518e929 [ 240.861917][ T8486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.861935][ T8486] RSP: 002b:00007fd926094038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.861959][ T8486] RAX: ffffffffffffffda RBX: 00007fd9253b5fa0 RCX: 00007fd92518e929 [ 240.861976][ T8486] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 240.861990][ T8486] RBP: 00007fd926094090 R08: 0000000000000000 R09: 0000000000000000 [ 240.862004][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.862017][ T8486] R13: 0000000000000000 R14: 00007fd9253b5fa0 R15: 00007fd9254dfa28 [ 240.862049][ T8486] [ 241.348467][ T5899] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 241.485709][ T5899] usb 1-1: device descriptor read/64, error -71 [ 241.675833][ T24] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 241.735705][ T5899] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 241.792670][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.927'. [ 241.827487][ T8508] syzkaller1: entered promiscuous mode [ 241.834081][ T8508] syzkaller1: entered allmulticast mode [ 241.851847][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 241.871170][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.881339][ T5899] usb 1-1: device descriptor read/64, error -71 [ 241.892315][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 241.903230][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.921535][ T24] usb 3-1: config 0 descriptor?? [ 241.996830][ T5899] usb usb1-port1: attempt power cycle [ 242.367395][ T5899] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 242.404063][ T24] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 242.456571][ T5899] usb 1-1: device descriptor read/8, error -71 [ 242.610778][ T24] usb 2-1: USB disconnect, device number 11 [ 242.675082][ T8517] binder: 8515:8517 ioctl 4018620d 0 returned -22 [ 242.744846][ T8520] binder: 8515:8520 ioctl c018620c 0 returned -14 [ 242.752221][ T5899] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 242.786481][ T5899] usb 1-1: device descriptor read/8, error -71 [ 242.924473][ T5899] usb usb1-port1: unable to enumerate USB device [ 243.175636][ T5890] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 243.441831][ T8495] IPVS: set_ctl: invalid protocol: 58 100.1.1.3:20003 [ 243.522692][ T5890] usb 2-1: config 0 has no interfaces? [ 243.557200][ T5890] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 243.598664][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.614654][ T5890] usb 2-1: Product: syz [ 243.627613][ T5890] usb 2-1: Manufacturer: syz [ 243.632396][ T5890] usb 2-1: SerialNumber: syz [ 243.687163][ T5890] usb 2-1: config 0 descriptor?? [ 244.069522][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.115179][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.147965][ T977] usb 3-1: USB disconnect, device number 12 [ 244.205580][ T5890] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 244.368649][ T5890] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 244.383057][ T5890] usb 4-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2 [ 244.403812][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.427742][ T5890] usb 4-1: Product: syz [ 244.439416][ T5890] usb 4-1: Manufacturer: syz [ 244.456655][ T5890] usb 4-1: SerialNumber: syz [ 244.477504][ T5890] usb 4-1: config 0 descriptor?? [ 245.333854][ T8561] binder: 8560:8561 ioctl 4018620d 0 returned -22 [ 245.399321][ T8566] binder: 8560:8566 ioctl c018620c 0 returned -14 [ 245.960886][ T5890] usb 2-1: USB disconnect, device number 12 [ 246.259970][ T977] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 246.355529][ T5919] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 246.436856][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 246.454459][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.481331][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.504807][ T977] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 246.546904][ T977] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 246.566256][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 246.587941][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.599971][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.615226][ T5919] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 246.625940][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.636695][ T977] usb 5-1: config 0 descriptor?? [ 246.668202][ T5919] usb 3-1: config 0 descriptor?? [ 246.900285][ T5897] usb 4-1: USB disconnect, device number 13 [ 247.147586][ T5919] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 248.206035][ T8614] binder: 8613:8614 ioctl 4018620d 0 returned -22 [ 248.304116][ T8617] binder: 8613:8617 ioctl c018620c 0 returned -14 [ 248.407434][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 248.734682][ T8616] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 248.823022][ T8616] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 248.978846][ T977] usbhid 5-1:0.0: can't add hid device: -71 [ 248.986515][ T977] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 249.029560][ T977] usb 5-1: USB disconnect, device number 13 [ 249.165135][ T5897] usb 3-1: USB disconnect, device number 13 [ 249.531727][ T8636] macvlan2: entered promiscuous mode [ 249.540134][ T8636] macvlan2: entered allmulticast mode [ 249.890018][ T8650] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[8650] [ 249.984538][ T8652] binder: 8651:8652 ioctl 4018620d 0 returned -22 [ 250.048825][ T8653] binder: 8651:8653 ioctl c018620c 0 returned -14 [ 250.136928][ T8656] FAULT_INJECTION: forcing a failure. [ 250.136928][ T8656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.150597][ T8656] CPU: 1 UID: 0 PID: 8656 Comm: syz.3.979 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 250.150626][ T8656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.150639][ T8656] Call Trace: [ 250.150648][ T8656] [ 250.150657][ T8656] dump_stack_lvl+0x189/0x250 [ 250.150695][ T8656] ? __pfx____ratelimit+0x10/0x10 [ 250.150729][ T8656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.150763][ T8656] ? __pfx__printk+0x10/0x10 [ 250.150798][ T8656] should_fail_ex+0x414/0x560 [ 250.150833][ T8656] strncpy_from_user+0x36/0x290 [ 250.150866][ T8656] getname_flags+0xf3/0x540 [ 250.150898][ T8656] __x64_sys_renameat2+0xba/0xe0 [ 250.150925][ T8656] do_syscall_64+0xfa/0x3b0 [ 250.150946][ T8656] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.150978][ T8656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.150999][ T8656] ? clear_bhb_loop+0x60/0xb0 [ 250.151025][ T8656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.151046][ T8656] RIP: 0033:0x7f785158e929 [ 250.151066][ T8656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.151085][ T8656] RSP: 002b:00007f78523ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 250.151107][ T8656] RAX: ffffffffffffffda RBX: 00007f78517b5fa0 RCX: 00007f785158e929 [ 250.151123][ T8656] RDX: ffffffffffffff9c RSI: 0000200000000380 RDI: ffffffffffffff9c [ 250.151139][ T8656] RBP: 00007f78523ad090 R08: 0000000000000002 R09: 0000000000000000 [ 250.151152][ T8656] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 250.151166][ T8656] R13: 0000000000000000 R14: 00007f78517b5fa0 R15: 00007f78518dfa28 [ 250.151197][ T8656] [ 250.583922][ T8663] Cannot find add_set index 0 as target [ 251.007879][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 251.252933][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 251.301940][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 251.311885][ T24] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 251.328598][ T24] usb 2-1: config 7 has no interface number 0 [ 251.334976][ T24] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 251.370865][ T24] usb 2-1: config 7 interface 187 has no altsetting 0 [ 251.747081][ T8687] netlink: 32 bytes leftover after parsing attributes in process `syz.0.989'. [ 251.751515][ T24] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 251.973621][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.044991][ T8686] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 252.052302][ T24] usb 2-1: Product: syz [ 252.065657][ T24] usb 2-1: Manufacturer: syz [ 252.070474][ T24] usb 2-1: SerialNumber: syz [ 252.081196][ T8686] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 252.093682][ T8667] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 252.272923][ T8686] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 252.318506][ T24] usb 2-1: Limiting number of CPorts to U8_MAX [ 252.335394][ T8686] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 252.369003][ T24] usb 2-1: Unknown endpoint type found, address 0x07 [ 252.401229][ T8686] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 252.405909][ T24] usb 2-1: Not enough endpoints found in device, aborting! [ 252.418740][ T8686] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 252.470101][ T8686] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 252.486713][ T8686] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 252.533632][ T8686] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 252.541256][ T8686] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 252.795599][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 252.862167][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'. [ 252.874122][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.884272][ T8714] batadv0: mtu less than device minimum [ 252.893156][ T8714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.905546][ T8714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.917030][ T8714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.928770][ T8714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.940192][ T8714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.951767][ T8714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.963269][ T8714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.965572][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 252.975513][ T8714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.990362][ T8714] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 253.031117][ T24] usb 3-1: config 0 interface 0 altsetting 181 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 253.044093][ T24] usb 3-1: config 0 interface 0 altsetting 181 endpoint 0x3 has invalid wMaxPacketSize 0 [ 253.075391][ T24] usb 3-1: config 0 interface 0 altsetting 181 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.090359][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 253.114468][ T24] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice= 0.00 [ 253.124085][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.133795][ T24] usb 3-1: Product: syz [ 253.137643][ T8714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.138751][ T24] usb 3-1: Manufacturer: syz [ 253.150529][ T24] usb 3-1: SerialNumber: syz [ 253.158776][ T24] usb 3-1: config 0 descriptor?? [ 253.212347][ T977] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 253.215378][ T24] usb 3-1: no audio or video endpoints found [ 253.372739][ T24] usb 3-1: USB disconnect, device number 14 [ 253.385943][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 253.402986][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.415969][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.433790][ T977] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 253.457298][ T977] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 253.482948][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.529889][ T977] usb 5-1: config 0 descriptor?? [ 254.011292][ T5890] usb 2-1: USB disconnect, device number 13 [ 254.035523][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 254.086214][ T8724] netlink: 'syz.1.1002': attribute type 29 has an invalid length. [ 254.130697][ T8499] usb 5-1: USB disconnect, device number 14 [ 254.172307][ T8727] netlink: 'syz.1.1002': attribute type 29 has an invalid length. [ 254.189015][ T8728] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1002'. [ 254.195560][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 254.335693][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 254.398384][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 254.415693][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 254.468642][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.495565][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 254.548886][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 254.588990][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 254.682677][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 254.734426][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 254.845315][ T24] usb 1-1: Product: syz [ 254.888623][ T24] usb 1-1: Manufacturer: syz [ 256.095676][ T7980] Bluetooth: hci0: command 0x0406 tx timeout [ 256.415607][ T7980] Bluetooth: hci1: command 0x0406 tx timeout [ 256.505702][ T7980] Bluetooth: hci2: command 0x0406 tx timeout [ 256.578350][ T7980] Bluetooth: hci3: command 0x0406 tx timeout [ 256.666515][ T7980] Bluetooth: hci4: command 0x0405 tx timeout [ 256.753522][ T24] usb 1-1: USB disconnect, device number 21 [ 256.956124][ T8777] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1020'. [ 257.035320][ T8732] syz.1.1004: vmalloc error: size 2363392, failed to allocated page array size 4616, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 257.117739][ T8732] CPU: 0 UID: 0 PID: 8732 Comm: syz.1.1004 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 257.117770][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.117785][ T8732] Call Trace: [ 257.117794][ T8732] [ 257.117804][ T8732] dump_stack_lvl+0x189/0x250 [ 257.117845][ T8732] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 257.117892][ T8732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.117927][ T8732] ? __pfx__printk+0x10/0x10 [ 257.117953][ T8732] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 257.117979][ T8732] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 257.118010][ T8732] warn_alloc+0x214/0x310 [ 257.118045][ T8732] ? __pfx_warn_alloc+0x10/0x10 [ 257.118082][ T8732] ? __get_vm_area_node+0x28f/0x300 [ 257.118108][ T8732] ? vb2_vmalloc_alloc+0xef/0x340 [ 257.118147][ T8732] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 257.118207][ T8732] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.118232][ T8732] ? vb2_vmalloc_alloc+0xef/0x340 [ 257.118259][ T8732] ? __get_vm_area_node+0x28f/0x300 [ 257.118283][ T8732] ? vb2_vmalloc_alloc+0xef/0x340 [ 257.118310][ T8732] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 257.118338][ T8732] ? vb2_vmalloc_alloc+0xef/0x340 [ 257.118395][ T8732] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.118428][ T8732] ? __kasan_kmalloc+0x93/0xb0 [ 257.118455][ T8732] vmalloc_user_noprof+0xad/0xf0 [ 257.118481][ T8732] ? vb2_vmalloc_alloc+0xef/0x340 [ 257.118508][ T8732] vb2_vmalloc_alloc+0xef/0x340 [ 257.118533][ T8732] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 257.118561][ T8732] __vb2_queue_alloc+0x9bf/0x15a0 [ 257.118611][ T8732] vb2_core_create_bufs+0x765/0xde0 [ 257.118649][ T8732] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 257.118670][ T8732] ? __mutex_trylock_common+0x153/0x260 [ 257.118702][ T8732] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 257.118731][ T8732] vb2_create_bufs+0x5b9/0xae0 [ 257.118761][ T8732] ? __pfx_vb2_create_bufs+0x10/0x10 [ 257.118786][ T8732] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 257.118815][ T8732] vb2_ioctl_create_bufs+0x285/0x3f0 [ 257.118845][ T8732] v4l_create_bufs+0x193/0x2a0 [ 257.118895][ T8732] __video_do_ioctl+0xc9b/0xdb0 [ 257.118932][ T8732] ? __pfx___video_do_ioctl+0x10/0x10 [ 257.118974][ T8732] video_usercopy+0x86e/0x14f0 [ 257.119012][ T8732] ? __pfx___video_do_ioctl+0x10/0x10 [ 257.119038][ T8732] ? __pfx_video_usercopy+0x10/0x10 [ 257.119077][ T8732] ? __fget_files+0x2a/0x420 [ 257.119107][ T8732] ? __fget_files+0x2a/0x420 [ 257.119133][ T8732] ? __fget_files+0x3a0/0x420 [ 257.119164][ T8732] v4l2_ioctl+0x18a/0x1e0 [ 257.119189][ T8732] ? __pfx_v4l2_ioctl+0x10/0x10 [ 257.119213][ T8732] __se_sys_ioctl+0xfc/0x170 [ 257.119252][ T8732] do_syscall_64+0xfa/0x3b0 [ 257.119274][ T8732] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.119308][ T8732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.119330][ T8732] ? clear_bhb_loop+0x60/0xb0 [ 257.119358][ T8732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.119379][ T8732] RIP: 0033:0x7f560238e929 [ 257.119400][ T8732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.119420][ T8732] RSP: 002b:00007f5603215038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.119444][ T8732] RAX: ffffffffffffffda RBX: 00007f56025b5fa0 RCX: 00007f560238e929 [ 257.119461][ T8732] RDX: 0000200000000140 RSI: 00000000c100565c RDI: 0000000000000008 [ 257.119477][ T8732] RBP: 00007f5602410b39 R08: 0000000000000000 R09: 0000000000000000 [ 257.119491][ T8732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.119505][ T8732] R13: 0000000000000000 R14: 00007f56025b5fa0 R15: 00007f56026dfa28 [ 257.119539][ T8732] [ 257.119560][ T8732] Mem-Info: [ 257.507452][ T8732] active_anon:6233 inactive_anon:0 isolated_anon:0 [ 257.507452][ T8732] active_file:11713 inactive_file:39936 isolated_file:0 [ 257.507452][ T8732] unevictable:768 dirty:183 writeback:0 [ 257.507452][ T8732] slab_reclaimable:9112 slab_unreclaimable:96277 [ 257.507452][ T8732] mapped:31334 shmem:1360 pagetables:1373 [ 257.507452][ T8732] sec_pagetables:0 bounce:0 [ 257.507452][ T8732] kernel_misc_reclaimable:0 [ 257.507452][ T8732] free:1283275 free_pcp:17464 free_cma:0 [ 257.585423][ T8732] Node 0 active_anon:25232kB inactive_anon:0kB active_file:46776kB inactive_file:159544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125660kB dirty:732kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12020kB pagetables:5140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 257.705670][ T8732] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 257.845244][ T8782] cgroup: fork rejected by pids controller in /syz2 [ 258.005558][ T8732] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.105568][ T8732] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 258.142957][ T8732] Node 0 DMA32 free:1211072kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28020kB inactive_anon:0kB active_file:46776kB inactive_file:157716kB unevictable:1536kB writepending:784kB present:3129332kB managed:2561044kB mlocked:0kB bounce:0kB free_pcp:48536kB local_pcp:30328kB free_cma:0kB [ 258.260220][ T8732] lowmem_reserve[]: 0 0 1 1 1 [ 258.293318][ T8732] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 258.377972][ T8732] lowmem_reserve[]: 0 0 0 0 0 [ 258.390172][ T8732] Node 1 Normal free:3904376kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16928kB local_pcp:9824kB free_cma:0kB [ 258.498615][ T8732] lowmem_reserve[]: 0 0 0 0 0 [ 258.503541][ T8732] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 258.625500][ T8732] Node 0 DMA32: 0*4kB 3*8kB (E) 471*16kB (ME) 404*32kB (UME) 197*64kB (ME) 33*128kB (ME) 25*256kB (M) 15*512kB (UME) 10*1024kB (M) 5*2048kB (UME) 278*4096kB (M) = 1210568kB [ 258.775653][ T8732] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 258.791830][ T8732] Node 1 Normal: 198*4kB (UME) 42*8kB (UME) 45*16kB (UME) 102*32kB (UME) 36*64kB (UME) 9*128kB (UME) 4*256kB (UM) 5*512kB (UME) 3*1024kB (ME) 3*2048kB (UME) 948*4096kB (M) = 3904376kB [ 258.885764][ T8732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.915517][ T8732] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 258.945331][ T8732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.969439][ T9262] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1032'. [ 258.988535][ T8732] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.021022][ T8732] 53705 total pagecache pages [ 259.043868][ T8732] 0 pages in swap cache [ 259.085549][ T8732] Free swap = 124996kB [ 259.089806][ T8732] Total swap = 124996kB [ 259.125524][ T8732] 2097051 pages RAM [ 259.129426][ T8732] 0 pages HighMem/MovableOnly [ 259.134234][ T8732] 424684 pages reserved [ 259.169415][ T8732] 0 pages cma reserved [ 259.495568][ T5890] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 259.641244][ T5919] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 259.692294][ T5890] usb 5-1: config 1 interface 0 altsetting 196 endpoint 0x1 is Bulk; changing to Interrupt [ 259.735935][ T5890] usb 5-1: config 1 interface 0 altsetting 196 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.769542][ T5890] usb 5-1: config 1 interface 0 has no altsetting 0 [ 259.815733][ T5919] usb 3-1: device descriptor read/64, error -71 [ 260.080548][ T5919] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 260.235761][ T5919] usb 3-1: device descriptor read/64, error -71 [ 260.356067][ T5919] usb usb3-port1: attempt power cycle [ 260.715842][ T5919] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 260.766934][ T5919] usb 3-1: device descriptor read/8, error -71 [ 260.980633][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.995562][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.036132][ T5919] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 261.083774][ T9296] FAULT_INJECTION: forcing a failure. [ 261.083774][ T9296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.085612][ T5919] usb 3-1: device descriptor read/8, error -71 [ 261.109006][ T9296] CPU: 1 UID: 0 PID: 9296 Comm: syz.3.1041 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 261.109039][ T9296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.109052][ T9296] Call Trace: [ 261.109061][ T9296] [ 261.109070][ T9296] dump_stack_lvl+0x189/0x250 [ 261.109112][ T9296] ? __pfx____ratelimit+0x10/0x10 [ 261.109147][ T9296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.109182][ T9296] ? __pfx__printk+0x10/0x10 [ 261.109206][ T9296] ? __might_fault+0xb0/0x130 [ 261.109242][ T9296] should_fail_ex+0x414/0x560 [ 261.109278][ T9296] _copy_from_user+0x2d/0xb0 [ 261.109303][ T9296] kstrtouint_from_user+0xc4/0x170 [ 261.109339][ T9296] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 261.109392][ T9296] proc_fail_nth_write+0x88/0x240 [ 261.109421][ T9296] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 261.109456][ T9296] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 261.109485][ T9296] vfs_write+0x27b/0xa90 [ 261.109518][ T9296] ? __pfx_vfs_write+0x10/0x10 [ 261.109542][ T9296] ? __fget_files+0x2a/0x420 [ 261.109581][ T9296] ? __fget_files+0x3a0/0x420 [ 261.109606][ T9296] ? __fget_files+0x2a/0x420 [ 261.109641][ T9296] ksys_write+0x145/0x250 [ 261.109667][ T9296] ? __pfx_ksys_write+0x10/0x10 [ 261.109693][ T9296] ? rcu_is_watching+0x15/0xb0 [ 261.109720][ T9296] ? do_syscall_64+0xbe/0x3b0 [ 261.109747][ T9296] do_syscall_64+0xfa/0x3b0 [ 261.109767][ T9296] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.109803][ T9296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.109824][ T9296] ? clear_bhb_loop+0x60/0xb0 [ 261.109851][ T9296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.109872][ T9296] RIP: 0033:0x7f785158d3df [ 261.109896][ T9296] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 261.109921][ T9296] RSP: 002b:00007f78523ad030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 261.109945][ T9296] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f785158d3df [ 261.109961][ T9296] RDX: 0000000000000001 RSI: 00007f78523ad0a0 RDI: 0000000000000004 [ 261.109974][ T9296] RBP: 00007f78523ad090 R08: 0000000000000000 R09: 0000000000000000 [ 261.109991][ T9296] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 261.110005][ T9296] R13: 0000000000000000 R14: 00007f78517b5fa0 R15: 00007f78518dfa28 [ 261.110039][ T9296] [ 261.353464][ T5919] usb usb3-port1: unable to enumerate USB device [ 261.801602][ T9304] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1044'. [ 262.302538][ T5890] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 262.385248][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.526130][ T5890] usb 5-1: can't set config #1, error -71 [ 262.545600][ T5890] usb 5-1: USB disconnect, device number 15 [ 263.205791][ T5920] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 263.389746][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 263.412281][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.459363][ T5920] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 263.520415][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.539285][ T9335] FAULT_INJECTION: forcing a failure. [ 263.539285][ T9335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.554484][ T5920] usb 1-1: config 0 descriptor?? [ 263.565594][ T9335] CPU: 0 UID: 0 PID: 9335 Comm: syz.1.1055 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 263.565624][ T9335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.565638][ T9335] Call Trace: [ 263.565646][ T9335] [ 263.565656][ T9335] dump_stack_lvl+0x189/0x250 [ 263.565695][ T9335] ? __pfx____ratelimit+0x10/0x10 [ 263.565729][ T9335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.565763][ T9335] ? __pfx__printk+0x10/0x10 [ 263.565786][ T9335] ? __might_fault+0xb0/0x130 [ 263.565820][ T9335] should_fail_ex+0x414/0x560 [ 263.565855][ T9335] _copy_from_iter+0x1db/0x16f0 [ 263.565892][ T9335] ? sock_alloc_send_pskb+0x875/0x990 [ 263.565931][ T9335] ? __pfx__copy_from_iter+0x10/0x10 [ 263.565974][ T9335] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 263.566010][ T9335] skb_copy_datagram_from_iter+0xf5/0x720 [ 263.566046][ T9335] ? dev_get_by_index+0x22/0x2e0 [ 263.566065][ T9335] ? skb_put+0x11b/0x210 [ 263.566096][ T9335] packet_sendmsg+0x3abb/0x53f0 [ 263.566141][ T9335] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 263.566189][ T9335] ? __pfx___might_resched+0x10/0x10 [ 263.566209][ T9335] ? __lock_acquire+0xab9/0xd20 [ 263.566256][ T9335] ? __pfx_packet_sendmsg+0x10/0x10 [ 263.566291][ T9335] ? aa_sk_perm+0x81e/0x950 [ 263.566325][ T9335] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 263.566364][ T9335] ? aa_sock_msg_perm+0x94/0x160 [ 263.566394][ T9335] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.566424][ T9335] ? __pfx_packet_sendmsg+0x10/0x10 [ 263.566455][ T9335] __sock_sendmsg+0x219/0x270 [ 263.566480][ T9335] __sys_sendto+0x3bd/0x520 [ 263.566508][ T9335] ? __pfx___sys_sendto+0x10/0x10 [ 263.566533][ T9335] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 263.566570][ T9335] ? __fget_files+0x3a0/0x420 [ 263.566607][ T9335] ? ksys_write+0x22a/0x250 [ 263.566631][ T9335] ? __pfx_ksys_write+0x10/0x10 [ 263.566649][ T9335] ? rcu_is_watching+0x15/0xb0 [ 263.566675][ T9335] __x64_sys_sendto+0xde/0x100 [ 263.566705][ T9335] do_syscall_64+0xfa/0x3b0 [ 263.566736][ T9335] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.566769][ T9335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.566791][ T9335] ? clear_bhb_loop+0x60/0xb0 [ 263.566817][ T9335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.566838][ T9335] RIP: 0033:0x7f560238e929 [ 263.566858][ T9335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.566877][ T9335] RSP: 002b:00007f5603215038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 263.566900][ T9335] RAX: ffffffffffffffda RBX: 00007f56025b5fa0 RCX: 00007f560238e929 [ 263.566916][ T9335] RDX: 0000000000000026 RSI: 0000200000000100 RDI: 0000000000000003 [ 263.566930][ T9335] RBP: 00007f5603215090 R08: 0000200000000540 R09: 0000000000000014 [ 263.566944][ T9335] R10: 0000000000040891 R11: 0000000000000246 R12: 0000000000000001 [ 263.566957][ T9335] R13: 0000000000000000 R14: 00007f56025b5fa0 R15: 00007f56026dfa28 [ 263.566990][ T9335] [ 263.870006][ T5920] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 263.895316][ T9337] FAULT_INJECTION: forcing a failure. [ 263.895316][ T9337] name failslab, interval 1, probability 0, space 0, times 0 [ 263.912276][ T9337] CPU: 1 UID: 0 PID: 9337 Comm: syz.4.1056 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 263.912309][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.912323][ T9337] Call Trace: [ 263.912332][ T9337] [ 263.912342][ T9337] dump_stack_lvl+0x189/0x250 [ 263.912382][ T9337] ? __pfx____ratelimit+0x10/0x10 [ 263.912419][ T9337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.912453][ T9337] ? __pfx__printk+0x10/0x10 [ 263.912486][ T9337] ? __pfx___might_resched+0x10/0x10 [ 263.912508][ T9337] ? fs_reclaim_acquire+0x7d/0x100 [ 263.912541][ T9337] should_fail_ex+0x414/0x560 [ 263.912577][ T9337] should_failslab+0xa8/0x100 [ 263.912603][ T9337] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 263.912628][ T9337] ? rds_rm_size+0x3ea/0x730 [ 263.912658][ T9337] ? rds_rm_size+0x3ea/0x730 [ 263.912683][ T9337] krealloc_noprof+0x124/0x340 [ 263.912711][ T9337] rds_rm_size+0x3ea/0x730 [ 263.912753][ T9337] rds_sendmsg+0xaef/0x1f00 [ 263.912796][ T9337] ? __pfx_rds_sendmsg+0x10/0x10 [ 263.912821][ T9337] ? aa_sk_perm+0x81e/0x950 [ 263.912854][ T9337] ? __pfx_aa_sk_perm+0x10/0x10 [ 263.912878][ T9337] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 263.912918][ T9337] ? aa_sock_msg_perm+0x94/0x160 [ 263.912949][ T9337] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.912979][ T9337] ? __pfx_rds_sendmsg+0x10/0x10 [ 263.913006][ T9337] __sock_sendmsg+0x219/0x270 [ 263.913032][ T9337] ____sys_sendmsg+0x505/0x830 [ 263.913068][ T9337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.913108][ T9337] ? import_iovec+0x74/0xa0 [ 263.913136][ T9337] ___sys_sendmsg+0x21f/0x2a0 [ 263.913168][ T9337] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.913236][ T9337] ? __fget_files+0x2a/0x420 [ 263.913262][ T9337] ? __fget_files+0x3a0/0x420 [ 263.913299][ T9337] __x64_sys_sendmsg+0x19b/0x260 [ 263.913332][ T9337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.913371][ T9337] ? __pfx_ksys_write+0x10/0x10 [ 263.913391][ T9337] ? rcu_is_watching+0x15/0xb0 [ 263.913417][ T9337] ? do_syscall_64+0xbe/0x3b0 [ 263.913443][ T9337] do_syscall_64+0xfa/0x3b0 [ 263.913464][ T9337] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.913504][ T9337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.913526][ T9337] ? clear_bhb_loop+0x60/0xb0 [ 263.913553][ T9337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.913574][ T9337] RIP: 0033:0x7fd92518e929 [ 263.913594][ T9337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.913613][ T9337] RSP: 002b:00007fd926094038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.913637][ T9337] RAX: ffffffffffffffda RBX: 00007fd9253b5fa0 RCX: 00007fd92518e929 [ 263.913653][ T9337] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 263.913668][ T9337] RBP: 00007fd926094090 R08: 0000000000000000 R09: 0000000000000000 [ 263.913681][ T9337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.913694][ T9337] R13: 0000000000000000 R14: 00007fd9253b5fa0 R15: 00007fd9254dfa28 [ 263.913727][ T9337] [ 264.387946][ T5920] gspca_vc032x: reg_r err -110 [ 264.392909][ T5920] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 264.477801][ T9341] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1057'. [ 264.662615][ T30] audit: type=1326 audit(1749393050.365:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.3.1063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f785158e929 code=0x0 [ 264.732906][ T9355] xt_CT: No such helper "snmp" [ 264.895886][ T5920] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 265.007580][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 266.170203][ T9390] FAULT_INJECTION: forcing a failure. [ 266.170203][ T9390] name failslab, interval 1, probability 0, space 0, times 0 [ 266.186382][ T9390] CPU: 0 UID: 0 PID: 9390 Comm: syz.3.1070 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 266.186415][ T9390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.186428][ T9390] Call Trace: [ 266.186437][ T9390] [ 266.186446][ T9390] dump_stack_lvl+0x189/0x250 [ 266.186487][ T9390] ? __pfx____ratelimit+0x10/0x10 [ 266.186520][ T9390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.186554][ T9390] ? __pfx__printk+0x10/0x10 [ 266.186585][ T9390] ? ref_tracker_alloc+0x318/0x460 [ 266.186619][ T9390] should_fail_ex+0x414/0x560 [ 266.186653][ T9390] should_failslab+0xa8/0x100 [ 266.186680][ T9390] kmem_cache_alloc_noprof+0x73/0x3c0 [ 266.186701][ T9390] ? skb_clone+0x212/0x3a0 [ 266.186736][ T9390] skb_clone+0x212/0x3a0 [ 266.186773][ T9390] __netlink_deliver_tap+0x404/0x850 [ 266.186814][ T9390] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.186843][ T9390] netlink_deliver_tap+0x19c/0x1b0 [ 266.186871][ T9390] netlink_unicast+0x72f/0x8d0 [ 266.186907][ T9390] netlink_sendmsg+0x805/0xb30 [ 266.186946][ T9390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.186978][ T9390] ? aa_sock_msg_perm+0x94/0x160 [ 266.187008][ T9390] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 266.187037][ T9390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.187067][ T9390] __sock_sendmsg+0x219/0x270 [ 266.187091][ T9390] ____sys_sendmsg+0x505/0x830 [ 266.187127][ T9390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.187166][ T9390] ? import_iovec+0x74/0xa0 [ 266.187193][ T9390] ___sys_sendmsg+0x21f/0x2a0 [ 266.187234][ T9390] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.187313][ T9390] ? __fget_files+0x2a/0x420 [ 266.187338][ T9390] ? __fget_files+0x3a0/0x420 [ 266.187374][ T9390] __x64_sys_sendmsg+0x19b/0x260 [ 266.187407][ T9390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.187447][ T9390] ? __pfx_ksys_write+0x10/0x10 [ 266.187465][ T9390] ? rcu_is_watching+0x15/0xb0 [ 266.187491][ T9390] ? do_syscall_64+0xbe/0x3b0 [ 266.187517][ T9390] do_syscall_64+0xfa/0x3b0 [ 266.187536][ T9390] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.187569][ T9390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.187590][ T9390] ? clear_bhb_loop+0x60/0xb0 [ 266.187616][ T9390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.187637][ T9390] RIP: 0033:0x7f785158e929 [ 266.187665][ T9390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.187685][ T9390] RSP: 002b:00007f78523ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.187708][ T9390] RAX: ffffffffffffffda RBX: 00007f78517b5fa0 RCX: 00007f785158e929 [ 266.187724][ T9390] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000004 [ 266.187737][ T9390] RBP: 00007f78523ad090 R08: 0000000000000000 R09: 0000000000000000 [ 266.187751][ T9390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.187764][ T9390] R13: 0000000000000000 R14: 00007f78517b5fa0 R15: 00007f78518dfa28 [ 266.187796][ T9390] [ 266.485304][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.598888][ T9363] netlink: 416 bytes leftover after parsing attributes in process `syz.4.1065'. [ 266.733264][ T9393] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1072'. [ 267.231157][ T8499] usb 1-1: USB disconnect, device number 22 [ 267.439956][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 267.474889][ T9406] FAULT_INJECTION: forcing a failure. [ 267.474889][ T9406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.555567][ T9406] CPU: 1 UID: 0 PID: 9406 Comm: syz.3.1075 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 267.555600][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.555612][ T9406] Call Trace: [ 267.555620][ T9406] [ 267.555630][ T9406] dump_stack_lvl+0x189/0x250 [ 267.555668][ T9406] ? __pfx____ratelimit+0x10/0x10 [ 267.555701][ T9406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.555735][ T9406] ? __pfx__printk+0x10/0x10 [ 267.555758][ T9406] ? __might_fault+0xb0/0x130 [ 267.555791][ T9406] should_fail_ex+0x414/0x560 [ 267.555824][ T9406] _copy_from_user+0x2d/0xb0 [ 267.555850][ T9406] io_submit_one+0xc2/0x1310 [ 267.555891][ T9406] ? __pfx_io_submit_one+0x10/0x10 [ 267.555916][ T9406] ? __might_fault+0xb0/0x130 [ 267.555949][ T9406] ? __might_fault+0xb0/0x130 [ 267.555974][ T9406] __se_sys_io_submit+0x185/0x2f0 [ 267.555999][ T9406] ? __pfx___se_sys_io_submit+0x10/0x10 [ 267.556025][ T9406] ? ksys_write+0x22a/0x250 [ 267.556058][ T9406] ? do_syscall_64+0xbe/0x3b0 [ 267.556084][ T9406] do_syscall_64+0xfa/0x3b0 [ 267.556104][ T9406] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.556135][ T9406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.556156][ T9406] ? clear_bhb_loop+0x60/0xb0 [ 267.556182][ T9406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.556201][ T9406] RIP: 0033:0x7f785158e929 [ 267.556230][ T9406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.556248][ T9406] RSP: 002b:00007f78523ad038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 267.556271][ T9406] RAX: ffffffffffffffda RBX: 00007f78517b5fa0 RCX: 00007f785158e929 [ 267.556287][ T9406] RDX: 00002000000000c0 RSI: 00000000000000f3 RDI: 00007f785236b000 [ 267.556301][ T9406] RBP: 00007f78523ad090 R08: 0000000000000000 R09: 0000000000000000 [ 267.556315][ T9406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.556327][ T9406] R13: 0000000000000000 R14: 00007f78517b5fa0 R15: 00007f78518dfa28 [ 267.556359][ T9406] [ 267.635847][ T9411] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 267.821150][ T9411] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 267.915722][ T5919] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 268.089407][ T9418] vlan2: entered allmulticast mode [ 268.097833][ T5919] usb 1-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 268.110822][ T9418] bridge_slave_0: entered allmulticast mode [ 268.140866][ T5919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.166998][ T5919] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 268.183760][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 268.207221][ T5919] usb 1-1: SerialNumber: syz [ 268.482385][ T9429] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1084'. [ 270.442647][ T5919] usb 1-1: 0:2 : does not exist [ 270.470374][ T5919] usb 1-1: unit 143 not found! [ 270.484307][ T9470] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1095'. [ 270.509130][ T5920] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 270.557535][ T5919] usb 1-1: USB disconnect, device number 23 [ 270.671797][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.696559][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 270.731489][ T5920] usb 5-1: too many configurations: 84, using maximum allowed: 8 [ 270.785615][ T5920] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 77 [ 270.795150][ T5920] usb 5-1: can't read configurations, error -22 [ 270.958005][ T5920] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 271.173890][ T9493] cgroup: fork rejected by pids controller in /syz1 [ 271.185669][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 271.199487][ T5920] usb 5-1: too many configurations: 84, using maximum allowed: 8 [ 271.249452][ T5920] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 77 [ 271.295537][ T8499] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 271.306182][ T5920] usb 5-1: can't read configurations, error -22 [ 271.629783][ T5920] usb usb5-port1: attempt power cycle [ 271.729174][ T9492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.829889][ T8499] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 271.861161][T10115] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1103'. [ 271.879428][ T8499] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 271.899081][ T8499] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.045604][ T5920] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 272.135849][ T8499] usb 1-1: Product: syz [ 272.140350][ T8499] usb 1-1: Manufacturer: syz [ 272.144982][ T8499] usb 1-1: SerialNumber: syz [ 272.150158][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 272.157984][ T5920] usb 5-1: too many configurations: 84, using maximum allowed: 8 [ 272.193304][ T5920] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 77 [ 272.205969][ T8499] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 272.215621][ T5920] usb 5-1: can't read configurations, error -22 [ 272.230962][T10119] sctp: [Deprecated]: syz.3.1103 (pid 10119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.230962][T10119] Use struct sctp_sack_info instead [ 272.375708][ T5920] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 272.435658][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 272.443903][ T5920] usb 5-1: too many configurations: 84, using maximum allowed: 8 [ 272.493028][ T5920] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 77 [ 272.515135][ T5920] usb 5-1: can't read configurations, error -22 [ 272.566284][ T5920] usb usb5-port1: unable to enumerate USB device [ 273.030268][ T8499] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 273.123467][ T8499] usb 1-1: USB disconnect, device number 24 [ 273.439616][T10135] FAULT_INJECTION: forcing a failure. [ 273.439616][T10135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.499429][T10135] CPU: 0 UID: 0 PID: 10135 Comm: syz.2.1108 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 273.499462][T10135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.499476][T10135] Call Trace: [ 273.499484][T10135] [ 273.499494][T10135] dump_stack_lvl+0x189/0x250 [ 273.499534][T10135] ? __pfx____ratelimit+0x10/0x10 [ 273.499569][T10135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.499604][T10135] ? __pfx__printk+0x10/0x10 [ 273.499628][T10135] ? __might_fault+0xb0/0x130 [ 273.499669][T10135] should_fail_ex+0x414/0x560 [ 273.499704][T10135] _copy_from_iter+0x1db/0x16f0 [ 273.499743][T10135] ? rcu_is_watching+0x15/0xb0 [ 273.499764][T10135] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 273.499789][T10135] ? __pfx__copy_from_iter+0x10/0x10 [ 273.499826][T10135] ? __build_skb_around+0x257/0x3e0 [ 273.499857][T10135] ? netlink_sendmsg+0x642/0xb30 [ 273.499882][T10135] ? skb_put+0x11b/0x210 [ 273.499913][T10135] netlink_sendmsg+0x6b2/0xb30 [ 273.499951][T10135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.499983][T10135] ? aa_sock_msg_perm+0x94/0x160 [ 273.500014][T10135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.500044][T10135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.500072][T10135] __sock_sendmsg+0x219/0x270 [ 273.500098][T10135] ____sys_sendmsg+0x505/0x830 [ 273.500133][T10135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.500173][T10135] ? import_iovec+0x74/0xa0 [ 273.500200][T10135] ___sys_sendmsg+0x21f/0x2a0 [ 273.500237][T10135] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.500306][T10135] ? __fget_files+0x2a/0x420 [ 273.500330][T10135] ? __fget_files+0x3a0/0x420 [ 273.500367][T10135] __x64_sys_sendmsg+0x19b/0x260 [ 273.500399][T10135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.500439][T10135] ? __pfx_ksys_write+0x10/0x10 [ 273.500458][T10135] ? rcu_is_watching+0x15/0xb0 [ 273.500484][T10135] ? do_syscall_64+0xbe/0x3b0 [ 273.500510][T10135] do_syscall_64+0xfa/0x3b0 [ 273.500530][T10135] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.500564][T10135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.500585][T10135] ? clear_bhb_loop+0x60/0xb0 [ 273.500611][T10135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.500633][T10135] RIP: 0033:0x7feb7798e929 [ 273.500651][T10135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.500676][T10135] RSP: 002b:00007feb757f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.500699][T10135] RAX: ffffffffffffffda RBX: 00007feb77bb5fa0 RCX: 00007feb7798e929 [ 273.500715][T10135] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 273.500729][T10135] RBP: 00007feb757f6090 R08: 0000000000000000 R09: 0000000000000000 [ 273.500743][T10135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.500756][T10135] R13: 0000000000000000 R14: 00007feb77bb5fa0 R15: 00007feb77cdfa28 [ 273.500788][T10135] [ 273.946268][T10138] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1110'. [ 274.318741][T10141] net_ratelimit: 10 callbacks suppressed [ 274.318762][T10141] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 274.367732][T10153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.378442][ T5919] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 274.525579][ T5833] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 274.546949][ T5920] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 274.557935][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 274.568584][ T5919] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.633832][ T5919] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 274.646341][ T5919] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 274.663279][ T5919] usb 1-1: config 0 interface 0 has no altsetting 0 [ 274.671196][ T5919] usb 1-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 274.684453][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.706765][ T5919] usb 1-1: config 0 descriptor?? [ 274.711740][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 274.743216][ T5833] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 274.759430][T10153] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 274.772459][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 274.778235][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.798578][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.804948][ T5833] usb 4-1: Product: syz [ 274.814430][ T5833] usb 4-1: Manufacturer: syz [ 274.819461][ T5833] usb 4-1: SerialNumber: syz [ 274.930498][ T5833] usb 4-1: config 0 descriptor?? [ 274.938263][ T5833] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 274.955600][ T5920] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 274.964793][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.107892][ T5920] usb 3-1: config 0 descriptor?? [ 275.218689][T10144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.238196][T10144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.323459][T10157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.359131][T10151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.371441][T10157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.390790][T10151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.630947][T10129] warn_alloc: 1 callbacks suppressed [ 275.631002][T10129] syz.1.1106: vmalloc error: size 2363392, failed to allocated page array size 4616, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 275.656346][T10129] CPU: 0 UID: 0 PID: 10129 Comm: syz.1.1106 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 275.656377][T10129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.656392][T10129] Call Trace: [ 275.656404][T10129] [ 275.656414][T10129] dump_stack_lvl+0x189/0x250 [ 275.656468][T10129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.656504][T10129] ? __pfx__printk+0x10/0x10 [ 275.656530][T10129] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 275.656557][T10129] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 275.656585][T10129] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 275.656614][T10129] warn_alloc+0x214/0x310 [ 275.656649][T10129] ? __pfx_warn_alloc+0x10/0x10 [ 275.656687][T10129] ? __get_vm_area_node+0x28f/0x300 [ 275.656712][T10129] ? vb2_vmalloc_alloc+0xef/0x340 [ 275.656743][T10129] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 275.656803][T10129] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.656830][T10129] ? vb2_vmalloc_alloc+0xef/0x340 [ 275.656856][T10129] ? __get_vm_area_node+0x28f/0x300 [ 275.656881][T10129] ? vb2_vmalloc_alloc+0xef/0x340 [ 275.656908][T10129] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 275.656936][T10129] ? vb2_vmalloc_alloc+0xef/0x340 [ 275.656992][T10129] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.657026][T10129] ? __kasan_kmalloc+0x93/0xb0 [ 275.657052][T10129] vmalloc_user_noprof+0xad/0xf0 [ 275.657079][T10129] ? vb2_vmalloc_alloc+0xef/0x340 [ 275.657106][T10129] vb2_vmalloc_alloc+0xef/0x340 [ 275.657131][T10129] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 275.657158][T10129] __vb2_queue_alloc+0x9bf/0x15a0 [ 275.657206][T10129] vb2_core_create_bufs+0x765/0xde0 [ 275.657236][T10129] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 275.657253][T10129] ? __mutex_trylock_common+0x153/0x260 [ 275.657286][T10129] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 275.657315][T10129] vb2_create_bufs+0x5b9/0xae0 [ 275.657344][T10129] ? __pfx_vb2_create_bufs+0x10/0x10 [ 275.657370][T10129] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 275.657399][T10129] vb2_ioctl_create_bufs+0x285/0x3f0 [ 275.657429][T10129] v4l_create_bufs+0x193/0x2a0 [ 275.657479][T10129] __video_do_ioctl+0xc9b/0xdb0 [ 275.657517][T10129] ? __pfx___video_do_ioctl+0x10/0x10 [ 275.657560][T10129] video_usercopy+0x86e/0x14f0 [ 275.657597][T10129] ? __pfx___video_do_ioctl+0x10/0x10 [ 275.657624][T10129] ? __pfx_video_usercopy+0x10/0x10 [ 275.657663][T10129] ? __fget_files+0x2a/0x420 [ 275.657693][T10129] ? __fget_files+0x2a/0x420 [ 275.657718][T10129] ? __fget_files+0x3a0/0x420 [ 275.657749][T10129] v4l2_ioctl+0x18a/0x1e0 [ 275.657775][T10129] ? __pfx_v4l2_ioctl+0x10/0x10 [ 275.657799][T10129] __se_sys_ioctl+0xfc/0x170 [ 275.657838][T10129] do_syscall_64+0xfa/0x3b0 [ 275.657860][T10129] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.657895][T10129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.657917][T10129] ? clear_bhb_loop+0x60/0xb0 [ 275.657945][T10129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.657967][T10129] RIP: 0033:0x7f560238e929 [ 275.657987][T10129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.658007][T10129] RSP: 002b:00007f5603215038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.658031][T10129] RAX: ffffffffffffffda RBX: 00007f56025b5fa0 RCX: 00007f560238e929 [ 275.658048][T10129] RDX: 0000200000000140 RSI: 00000000c100565c RDI: 0000000000000008 [ 275.658063][T10129] RBP: 00007f5602410b39 R08: 0000000000000000 R09: 0000000000000000 [ 275.658077][T10129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.658090][T10129] R13: 0000000000000000 R14: 00007f56025b5fa0 R15: 00007f56026dfa28 [ 275.658124][T10129] [ 275.658280][T10129] Mem-Info: [ 276.035674][T10129] active_anon:7611 inactive_anon:0 isolated_anon:0 [ 276.035674][T10129] active_file:11713 inactive_file:39942 isolated_file:0 [ 276.035674][T10129] unevictable:768 dirty:295 writeback:0 [ 276.035674][T10129] slab_reclaimable:9269 slab_unreclaimable:97345 [ 276.035674][T10129] mapped:35481 shmem:2378 pagetables:1356 [ 276.035674][T10129] sec_pagetables:0 bounce:0 [ 276.035674][T10129] kernel_misc_reclaimable:0 [ 276.035674][T10129] free:1286572 free_pcp:11391 free_cma:0 [ 276.101866][T10129] Node 0 active_anon:31168kB inactive_anon:0kB active_file:46776kB inactive_file:159568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142348kB dirty:1168kB writeback:0kB shmem:8476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12112kB pagetables:5272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.140086][T10129] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.227259][T10129] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.300787][T10129] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 276.309185][T10129] Node 0 DMA32 free:1226536kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31584kB inactive_anon:0kB active_file:46776kB inactive_file:157740kB unevictable:1536kB writepending:1168kB present:3129332kB managed:2561044kB mlocked:0kB bounce:0kB free_pcp:27956kB local_pcp:13096kB free_cma:0kB [ 276.360205][T10129] lowmem_reserve[]: 0 0 1 1 1 [ 276.365196][T10129] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 276.400556][T10129] lowmem_reserve[]: 0 0 0 0 0 [ 276.407028][T10129] Node 1 Normal free:3904376kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:200kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16928kB local_pcp:7104kB free_cma:0kB [ 276.449934][T10129] lowmem_reserve[]: 0 0 0 0 0 [ 276.455063][T10129] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 276.473309][T10129] Node 0 DMA32: 594*4kB (UME) 396*8kB (UME) 398*16kB (UM) 383*32kB (ME) 199*64kB (ME) 34*128kB (ME) 26*256kB (M) 14*512kB (ME) 10*1024kB (M) 5*2048kB (ME) 281*4096kB (UM) = 1226536kB [ 276.512200][T10129] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 276.534413][T10129] Node 1 Normal: 198*4kB (UME) 42*8kB (UME) 45*16kB (UME) 102*32kB (UME) 36*64kB (UME) 9*128kB (UME) 4*256kB (UM) 5*512kB (UME) 3*1024kB (ME) 3*2048kB (UME) 948*4096kB (M) = 3904376kB [ 276.567582][T10129] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.591036][T10129] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.605697][T10129] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.620690][T10129] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.630971][T10129] 55878 total pagecache pages [ 276.640169][T10129] 0 pages in swap cache [ 276.644665][T10129] Free swap = 124996kB [ 276.650293][T10129] Total swap = 124996kB [ 276.654797][T10129] 2097051 pages RAM [ 276.662788][T10129] 0 pages HighMem/MovableOnly [ 276.667987][T10129] 424684 pages reserved [ 276.672540][T10129] 0 pages cma reserved [ 276.813732][ T5919] usbhid 1-1:0.0: can't add hid device: -71 [ 276.822490][ T5919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 276.840313][ T5919] usb 1-1: USB disconnect, device number 25 [ 277.025943][ T5890] usb 4-1: USB disconnect, device number 14 [ 277.245610][ T5920] usbhid 3-1:0.0: can't add hid device: -71 [ 277.261384][ T5920] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 277.280846][ T5920] usb 3-1: USB disconnect, device number 19 [ 277.538847][T10174] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1119'. [ 277.580041][T10174] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1119'. [ 277.775927][ T5919] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 278.042917][ T5919] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 278.061613][ T5919] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 278.102495][T10187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.119526][T10187] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 278.129485][T10187] nvme_fabrics: unknown parameter or missing value 'œ «' in ctrl creation request [ 278.224002][ T5919] usb 3-1: config 8 has no interface number 0 [ 278.236766][T10186] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1123'. [ 278.291690][ T5919] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 278.338824][ T5919] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.492647][ T5919] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 278.506583][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.564762][ T5919] usb 3-1: Product: syz [ 278.585550][ T5919] usb 3-1: Manufacturer: syz [ 278.632980][ T5919] usb 3-1: SerialNumber: syz [ 278.916827][T10193] FAULT_INJECTION: forcing a failure. [ 278.916827][T10193] name failslab, interval 1, probability 0, space 0, times 0 [ 278.945954][T10173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.985070][T10193] CPU: 0 UID: 0 PID: 10193 Comm: syz.4.1126 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 278.985103][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.985121][T10193] Call Trace: [ 278.985130][T10193] [ 278.985140][T10193] dump_stack_lvl+0x189/0x250 [ 278.985181][T10193] ? __pfx____ratelimit+0x10/0x10 [ 278.985216][T10193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.985251][T10193] ? __pfx__printk+0x10/0x10 [ 278.985281][T10193] ? __pfx___might_resched+0x10/0x10 [ 278.985301][T10193] ? fs_reclaim_acquire+0x7d/0x100 [ 278.985334][T10193] should_fail_ex+0x414/0x560 [ 278.985369][T10193] should_failslab+0xa8/0x100 [ 278.985397][T10193] __kmalloc_cache_noprof+0x70/0x3d0 [ 278.985420][T10193] ? dev_ethtool+0x126/0x1990 [ 278.985453][T10193] dev_ethtool+0x126/0x1990 [ 278.985488][T10193] ? __lock_acquire+0xab9/0xd20 [ 278.985526][T10193] ? __pfx_dev_ethtool+0x10/0x10 [ 278.985569][T10193] ? dev_load+0x21/0x1f0 [ 278.985595][T10193] ? dev_load+0x21/0x1f0 [ 278.985620][T10193] dev_ioctl+0x392/0x1150 [ 278.985648][T10193] sock_do_ioctl+0x22c/0x300 [ 278.985674][T10193] ? __pfx_sock_do_ioctl+0x10/0x10 [ 278.985692][T10193] ? __lock_acquire+0xab9/0xd20 [ 278.985741][T10193] sock_ioctl+0x576/0x790 [ 278.985777][T10193] ? __pfx_sock_ioctl+0x10/0x10 [ 278.985811][T10193] ? __fget_files+0x2a/0x420 [ 278.985835][T10193] ? __fget_files+0x3a0/0x420 [ 278.985860][T10193] ? __fget_files+0x2a/0x420 [ 278.985889][T10193] ? bpf_lsm_file_ioctl+0x9/0x20 [ 278.985923][T10193] ? __pfx_sock_ioctl+0x10/0x10 [ 278.985957][T10193] __se_sys_ioctl+0xfc/0x170 [ 278.985993][T10193] do_syscall_64+0xfa/0x3b0 [ 278.986015][T10193] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.986049][T10193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.986078][T10193] ? clear_bhb_loop+0x60/0xb0 [ 278.986105][T10193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.986126][T10193] RIP: 0033:0x7fd92518e929 [ 278.986146][T10193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.986165][T10193] RSP: 002b:00007fd926094038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.986189][T10193] RAX: ffffffffffffffda RBX: 00007fd9253b5fa0 RCX: 00007fd92518e929 [ 278.986205][T10193] RDX: 0000200000000f00 RSI: 0000000000008946 RDI: 0000000000000004 [ 278.986219][T10193] RBP: 00007fd926094090 R08: 0000000000000000 R09: 0000000000000000 [ 278.986233][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.986246][T10193] R13: 0000000000000000 R14: 00007fd9253b5fa0 R15: 00007fd9254dfa28 [ 278.986278][T10193] [ 279.066277][T10173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.608058][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.668739][T10214] xt_hashlimit: max too large, truncated to 1048576 [ 279.735992][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.766446][T10217] rdma_op ffff8880788131f0 conn xmit_rdma 0000000000000000 [ 280.328394][T10225] netlink: 'syz.3.1131': attribute type 1 has an invalid length. [ 280.396458][ T8499] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 280.545677][ T8499] usb 2-1: Using ep0 maxpacket: 16 [ 280.559952][ T8499] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 280.569637][ T8499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.664643][ T8499] usb 2-1: Product: syz [ 280.678894][ T8499] usb 2-1: Manufacturer: syz [ 280.699224][ T8499] usb 2-1: SerialNumber: syz [ 280.733593][ T8499] usb 2-1: config 0 descriptor?? [ 280.771568][ T8499] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 280.958938][T10223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.979040][T10232] No such timeout policy "syz1" [ 280.995301][T10223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.226250][ T5919] usb 3-1: USB disconnect, device number 20 [ 281.256951][T10223] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 281.309324][ T8499] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 281.470605][T10234] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 24:02:48:ff:05:00 [ 281.518087][T10223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.555709][T10223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.571302][T10236] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1134'. [ 281.584480][T10234] bond0: entered promiscuous mode [ 281.589696][T10234] bond_slave_0: entered promiscuous mode [ 281.595800][T10234] bond_slave_1: entered promiscuous mode [ 281.608957][ T977] usb 2-1: USB disconnect, device number 14 [ 281.621645][ T977] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 281.658317][ T977] visor 2-1:0.0: device disconnected [ 282.031428][T10244] FAULT_INJECTION: forcing a failure. [ 282.031428][T10244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.055639][T10244] CPU: 0 UID: 0 PID: 10244 Comm: syz.2.1139 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 282.055671][T10244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.055684][T10244] Call Trace: [ 282.055693][T10244] [ 282.055707][T10244] dump_stack_lvl+0x189/0x250 [ 282.055745][T10244] ? __pfx____ratelimit+0x10/0x10 [ 282.055781][T10244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.055813][T10244] ? __pfx__printk+0x10/0x10 [ 282.055837][T10244] ? __might_fault+0xb0/0x130 [ 282.055872][T10244] should_fail_ex+0x414/0x560 [ 282.055906][T10244] _copy_from_user+0x2d/0xb0 [ 282.055932][T10244] do_ipv6_setsockopt+0x32d/0x2fb0 [ 282.055976][T10244] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 282.056006][T10244] ? __might_fault+0xb0/0x130 [ 282.056030][T10244] ? _parse_integer_limit+0x1ae/0x1f0 [ 282.056066][T10244] ? aa_label_sk_perm+0x413/0x560 [ 282.056098][T10244] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 282.056144][T10244] ? __pfx___might_resched+0x10/0x10 [ 282.056166][T10244] ? rcu_read_lock_any_held+0xb3/0x120 [ 282.056189][T10244] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 282.056214][T10244] ? vfs_write+0x8d8/0xa90 [ 282.056245][T10244] ipv6_setsockopt+0x59/0x170 [ 282.056281][T10244] rawv6_setsockopt+0x23b/0x5b0 [ 282.056313][T10244] ? __lock_acquire+0xab9/0xd20 [ 282.056346][T10244] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 282.056377][T10244] ? aa_sock_opt_perm+0x74/0x110 [ 282.056405][T10244] ? sock_common_setsockopt+0x36/0xc0 [ 282.056427][T10244] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 282.056451][T10244] do_sock_setsockopt+0x257/0x3e0 [ 282.056481][T10244] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 282.056512][T10244] ? __fget_files+0x2a/0x420 [ 282.056555][T10244] __x64_sys_setsockopt+0x18b/0x220 [ 282.056597][T10244] do_syscall_64+0xfa/0x3b0 [ 282.056618][T10244] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.056649][T10244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.056670][T10244] ? clear_bhb_loop+0x60/0xb0 [ 282.056694][T10244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.056715][T10244] RIP: 0033:0x7feb7798e929 [ 282.056733][T10244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.056751][T10244] RSP: 002b:00007feb757f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 282.056772][T10244] RAX: ffffffffffffffda RBX: 00007feb77bb5fa0 RCX: 00007feb7798e929 [ 282.056787][T10244] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 282.056799][T10244] RBP: 00007feb757f6090 R08: 00000000000015c8 R09: 0000000000000000 [ 282.056812][T10244] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 282.056824][T10244] R13: 0000000000000000 R14: 00007feb77bb5fa0 R15: 00007feb77cdfa28 [ 282.056853][T10244] [ 282.785802][ T977] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 282.968439][ T977] usb 1-1: Using ep0 maxpacket: 32 [ 283.005814][ T8499] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 283.071858][T10254] tc_dump_action: action bad kind [ 283.082046][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.147676][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.185564][ T8499] usb 2-1: Using ep0 maxpacket: 32 [ 283.194436][ T8499] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 283.272864][ T8499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.284984][ T8499] usb 2-1: Product: syz [ 283.495646][ T977] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 283.504783][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.523405][ T8499] usb 2-1: Manufacturer: syz [ 283.539972][ T977] usb 1-1: config 0 descriptor?? [ 283.558612][ T8499] usb 2-1: SerialNumber: syz [ 283.567752][ T977] hub 1-1:0.0: USB hub found [ 283.817781][ T977] hub 1-1:0.0: 1 port detected [ 283.865130][ T8499] usb 2-1: config 0 descriptor?? [ 283.940807][ T8499] as10x_usb: device has been detected [ 284.167234][ T8499] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 284.260613][ T8499] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 284.354375][ T8499] as10x_usb: error during firmware upload part1 [ 284.387288][ T8499] Registered device Abilis Systems DVB-Titan [ 284.606024][ T977] hub 1-1:0.0: activate --> -90 [ 284.810229][ T977] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 285.651088][T10277] FAULT_INJECTION: forcing a failure. [ 285.651088][T10277] name failslab, interval 1, probability 0, space 0, times 0 [ 285.731151][T10277] CPU: 1 UID: 0 PID: 10277 Comm: syz.4.1145 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 285.731185][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.731200][T10277] Call Trace: [ 285.731207][T10277] [ 285.731214][T10277] dump_stack_lvl+0x189/0x250 [ 285.731243][T10277] ? __pfx____ratelimit+0x10/0x10 [ 285.731276][T10277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.731300][T10277] ? __pfx__printk+0x10/0x10 [ 285.731319][T10277] ? __pfx___might_resched+0x10/0x10 [ 285.731333][T10277] ? fs_reclaim_acquire+0x7d/0x100 [ 285.731355][T10277] should_fail_ex+0x414/0x560 [ 285.731380][T10277] should_failslab+0xa8/0x100 [ 285.731398][T10277] __kmalloc_noprof+0xcb/0x4f0 [ 285.731412][T10277] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 285.731435][T10277] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 285.731453][T10277] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 285.731474][T10277] genl_family_rcv_msg_doit+0xb8/0x300 [ 285.731503][T10277] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 285.731531][T10277] ? rcu_is_watching+0x15/0xb0 [ 285.731547][T10277] ? apparmor_capable+0x137/0x1b0 [ 285.731563][T10277] ? bpf_lsm_capable+0x9/0x20 [ 285.731578][T10277] ? security_capable+0x7e/0x2e0 [ 285.731621][T10277] genl_rcv_msg+0x60e/0x790 [ 285.731662][T10277] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.731693][T10277] ? ref_tracker_free+0x63a/0x7d0 [ 285.731724][T10277] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 285.731755][T10277] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 285.731777][T10277] ? __pfx_nl80211_post_doit+0x10/0x10 [ 285.731811][T10277] ? __pfx_ref_tracker_free+0x10/0x10 [ 285.731853][T10277] netlink_rcv_skb+0x208/0x470 [ 285.731882][T10277] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.731917][T10277] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.731963][T10277] ? down_read+0x1ad/0x2e0 [ 285.731991][T10277] genl_rcv+0x28/0x40 [ 285.732022][T10277] netlink_unicast+0x75b/0x8d0 [ 285.732059][T10277] netlink_sendmsg+0x805/0xb30 [ 285.732098][T10277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.732131][T10277] ? aa_sock_msg_perm+0x94/0x160 [ 285.732162][T10277] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.732191][T10277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.732220][T10277] __sock_sendmsg+0x219/0x270 [ 285.732247][T10277] ____sys_sendmsg+0x505/0x830 [ 285.732291][T10277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.732330][T10277] ? import_iovec+0x74/0xa0 [ 285.732359][T10277] ___sys_sendmsg+0x21f/0x2a0 [ 285.732392][T10277] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.732461][T10277] ? __fget_files+0x2a/0x420 [ 285.732486][T10277] ? __fget_files+0x3a0/0x420 [ 285.732523][T10277] __x64_sys_sendmsg+0x19b/0x260 [ 285.732556][T10277] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.732596][T10277] ? __pfx_ksys_write+0x10/0x10 [ 285.732624][T10277] ? do_syscall_64+0xbe/0x3b0 [ 285.732651][T10277] do_syscall_64+0xfa/0x3b0 [ 285.732671][T10277] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.732705][T10277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.732726][T10277] ? clear_bhb_loop+0x60/0xb0 [ 285.732753][T10277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.732774][T10277] RIP: 0033:0x7fd92518e929 [ 285.732793][T10277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.732812][T10277] RSP: 002b:00007fd926094038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.732837][T10277] RAX: ffffffffffffffda RBX: 00007fd9253b5fa0 RCX: 00007fd92518e929 [ 285.732853][T10277] RDX: 0000000000004000 RSI: 0000200000000380 RDI: 0000000000000003 [ 285.732868][T10277] RBP: 00007fd926094090 R08: 0000000000000000 R09: 0000000000000000 [ 285.732882][T10277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.732895][T10277] R13: 0000000000000000 R14: 00007fd9253b5fa0 R15: 00007fd9254dfa28 [ 285.732928][T10277] [ 286.276223][ T8499] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 286.325555][ T5890] usb 2-1: USB disconnect, device number 15 [ 286.435559][ T8499] usb 4-1: Using ep0 maxpacket: 16 [ 286.516533][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1142'. [ 286.535612][T10272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1142'. [ 286.681497][ T5890] Unregistered device Abilis Systems DVB-Titan [ 286.704468][ T5890] as10x_usb: device has been disconnected [ 286.717099][ T977] usb 1-1: USB disconnect, device number 26 [ 286.743552][T10282] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1146'. [ 287.068582][T10290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1150'. [ 287.458657][T10296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.536347][T10296] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 287.574456][T10296] nvme_fabrics: unknown parameter or missing value 'œ «' in ctrl creation request [ 287.932457][T10304] rdma_op ffff888078fe11f0 conn xmit_rdma 0000000000000000 [ 288.409964][ T8499] usb 4-1: unable to get BOS descriptor or descriptor too short [ 288.442581][ T8499] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 288.472799][ T8499] usb 4-1: can't read configurations, error -71 [ 289.174847][T10313] FAULT_INJECTION: forcing a failure. [ 289.174847][T10313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.259424][T10313] CPU: 1 UID: 0 PID: 10313 Comm: syz.3.1156 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 289.259457][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.259470][T10313] Call Trace: [ 289.259478][T10313] [ 289.259487][T10313] dump_stack_lvl+0x189/0x250 [ 289.259527][T10313] ? __pfx____ratelimit+0x10/0x10 [ 289.259562][T10313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.259596][T10313] ? __pfx__printk+0x10/0x10 [ 289.259631][T10313] should_fail_ex+0x414/0x560 [ 289.259665][T10313] _copy_from_user+0x2d/0xb0 [ 289.259689][T10313] sctp_setsockopt+0x19f/0x1200 [ 289.259715][T10313] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 289.259742][T10313] do_sock_setsockopt+0x257/0x3e0 [ 289.259772][T10313] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 289.259809][T10313] ? __fget_files+0x2a/0x420 [ 289.259842][T10313] __x64_sys_setsockopt+0x18b/0x220 [ 289.259877][T10313] do_syscall_64+0xfa/0x3b0 [ 289.259896][T10313] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.259929][T10313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.259950][T10313] ? clear_bhb_loop+0x60/0xb0 [ 289.259977][T10313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.259998][T10313] RIP: 0033:0x7f785158e929 [ 289.260018][T10313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.260037][T10313] RSP: 002b:00007f785236b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 289.260059][T10313] RAX: ffffffffffffffda RBX: 00007f78517b6160 RCX: 00007f785158e929 [ 289.260075][T10313] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000003 [ 289.260088][T10313] RBP: 00007f785236b090 R08: 0000000000000008 R09: 0000000000000000 [ 289.260102][T10313] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 289.260116][T10313] R13: 0000000000000000 R14: 00007f78517b6160 R15: 00007f78518dfa28 [ 289.260148][T10313] [ 289.773312][T10317] FAULT_INJECTION: forcing a failure. [ 289.773312][T10317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.787894][T10317] CPU: 1 UID: 0 PID: 10317 Comm: syz.2.1158 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 289.787922][T10317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.787935][T10317] Call Trace: [ 289.787943][T10317] [ 289.787952][T10317] dump_stack_lvl+0x189/0x250 [ 289.787990][T10317] ? __pfx____ratelimit+0x10/0x10 [ 289.788025][T10317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.788058][T10317] ? __pfx__printk+0x10/0x10 [ 289.788082][T10317] ? __might_fault+0xb0/0x130 [ 289.788115][T10317] should_fail_ex+0x414/0x560 [ 289.788149][T10317] _copy_from_user+0x2d/0xb0 [ 289.788174][T10317] smc_setsockopt+0x3b8/0xab0 [ 289.788214][T10317] ? __pfx_smc_setsockopt+0x10/0x10 [ 289.788251][T10317] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 289.788280][T10317] ? __pfx_smc_setsockopt+0x10/0x10 [ 289.788312][T10317] do_sock_setsockopt+0x257/0x3e0 [ 289.788344][T10317] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 289.788377][T10317] ? __fget_files+0x2a/0x420 [ 289.788411][T10317] __x64_sys_setsockopt+0x18b/0x220 [ 289.788445][T10317] do_syscall_64+0xfa/0x3b0 [ 289.788466][T10317] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.788500][T10317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.788521][T10317] ? clear_bhb_loop+0x60/0xb0 [ 289.788548][T10317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.788568][T10317] RIP: 0033:0x7feb7798e929 [ 289.788587][T10317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.788605][T10317] RSP: 002b:00007feb757f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 289.788629][T10317] RAX: ffffffffffffffda RBX: 00007feb77bb5fa0 RCX: 00007feb7798e929 [ 289.788645][T10317] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000006 [ 289.788658][T10317] RBP: 00007feb757f6090 R08: 0000000000000044 R09: 0000000000000000 [ 289.788672][T10317] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 289.788686][T10317] R13: 0000000000000000 R14: 00007feb77bb5fa0 R15: 00007feb77cdfa28 [ 289.788715][T10317] [ 290.092498][T10321] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1160'. [ 290.211751][T10304] warn_alloc: 3 callbacks suppressed [ 290.211768][T10304] syz.1.1154: vmalloc error: size 2363392, failed to allocated page array size 4616, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 290.235186][T10304] CPU: 1 UID: 0 PID: 10304 Comm: syz.1.1154 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 290.235209][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.235219][T10304] Call Trace: [ 290.235225][T10304] [ 290.235232][T10304] dump_stack_lvl+0x189/0x250 [ 290.235264][T10304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.235289][T10304] ? __pfx__printk+0x10/0x10 [ 290.235307][T10304] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 290.235326][T10304] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 290.235345][T10304] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 290.235365][T10304] warn_alloc+0x214/0x310 [ 290.235389][T10304] ? __pfx_warn_alloc+0x10/0x10 [ 290.235433][T10304] ? __get_vm_area_node+0x28f/0x300 [ 290.235459][T10304] ? vb2_vmalloc_alloc+0xef/0x340 [ 290.235488][T10304] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 290.235546][T10304] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 290.235566][T10304] ? vb2_vmalloc_alloc+0xef/0x340 [ 290.235585][T10304] ? __get_vm_area_node+0x28f/0x300 [ 290.235603][T10304] ? vb2_vmalloc_alloc+0xef/0x340 [ 290.235621][T10304] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 290.235639][T10304] ? vb2_vmalloc_alloc+0xef/0x340 [ 290.235678][T10304] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 290.235701][T10304] ? __kasan_kmalloc+0x93/0xb0 [ 290.235719][T10304] vmalloc_user_noprof+0xad/0xf0 [ 290.235737][T10304] ? vb2_vmalloc_alloc+0xef/0x340 [ 290.235756][T10304] vb2_vmalloc_alloc+0xef/0x340 [ 290.235774][T10304] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 290.235793][T10304] __vb2_queue_alloc+0x9bf/0x15a0 [ 290.235834][T10304] vb2_core_create_bufs+0x765/0xde0 [ 290.235860][T10304] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 290.235874][T10304] ? __mutex_trylock_common+0x153/0x260 [ 290.235896][T10304] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 290.235916][T10304] vb2_create_bufs+0x5b9/0xae0 [ 290.235935][T10304] ? __pfx_vb2_create_bufs+0x10/0x10 [ 290.235952][T10304] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 290.235972][T10304] vb2_ioctl_create_bufs+0x285/0x3f0 [ 290.235993][T10304] v4l_create_bufs+0x193/0x2a0 [ 290.236022][T10304] __video_do_ioctl+0xc9b/0xdb0 [ 290.236050][T10304] ? __pfx___video_do_ioctl+0x10/0x10 [ 290.236080][T10304] video_usercopy+0x86e/0x14f0 [ 290.236105][T10304] ? __pfx___video_do_ioctl+0x10/0x10 [ 290.236123][T10304] ? __pfx_video_usercopy+0x10/0x10 [ 290.236150][T10304] ? __fget_files+0x2a/0x420 [ 290.236170][T10304] ? __fget_files+0x2a/0x420 [ 290.236188][T10304] ? __fget_files+0x3a0/0x420 [ 290.236208][T10304] v4l2_ioctl+0x18a/0x1e0 [ 290.236226][T10304] ? __pfx_v4l2_ioctl+0x10/0x10 [ 290.236242][T10304] __se_sys_ioctl+0xfc/0x170 [ 290.236268][T10304] do_syscall_64+0xfa/0x3b0 [ 290.236285][T10304] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.236310][T10304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.236325][T10304] ? clear_bhb_loop+0x60/0xb0 [ 290.236344][T10304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.236359][T10304] RIP: 0033:0x7f560238e929 [ 290.236374][T10304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.236388][T10304] RSP: 002b:00007f5603215038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.236405][T10304] RAX: ffffffffffffffda RBX: 00007f56025b5fa0 RCX: 00007f560238e929 [ 290.236416][T10304] RDX: 0000200000000140 RSI: 00000000c100565c RDI: 0000000000000009 [ 290.236427][T10304] RBP: 00007f5602410b39 R08: 0000000000000000 R09: 0000000000000000 [ 290.236436][T10304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.236446][T10304] R13: 0000000000000000 R14: 00007f56025b5fa0 R15: 00007f56026dfa28 [ 290.236469][T10304] [ 290.706572][T10304] Mem-Info: [ 290.709856][T10304] active_anon:5804 inactive_anon:0 isolated_anon:0 [ 290.709856][T10304] active_file:11713 inactive_file:39973 isolated_file:0 [ 290.709856][T10304] unevictable:768 dirty:167 writeback:0 [ 290.709856][T10304] slab_reclaimable:9062 slab_unreclaimable:97471 [ 290.709856][T10304] mapped:30344 shmem:1366 pagetables:1394 [ 290.709856][T10304] sec_pagetables:0 bounce:0 [ 290.709856][T10304] kernel_misc_reclaimable:0 [ 290.709856][T10304] free:1279180 free_pcp:20419 free_cma:0 [ 290.785799][T10304] Node 0 active_anon:23392kB inactive_anon:0kB active_file:46776kB inactive_file:159692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121336kB dirty:664kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12032kB pagetables:5500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 290.820134][T10304] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 290.852139][T10304] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.881940][T10304] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 290.889853][T10304] Node 0 DMA32 free:1196200kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23344kB inactive_anon:0kB active_file:46776kB inactive_file:157864kB unevictable:1536kB writepending:664kB present:3129332kB managed:2561044kB mlocked:0kB bounce:0kB free_pcp:61512kB local_pcp:16516kB free_cma:0kB [ 290.922926][T10304] lowmem_reserve[]: 0 0 1 1 1 [ 290.928220][T10304] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 290.959277][T10304] lowmem_reserve[]: 0 0 0 0 0 [ 290.964098][T10304] Node 1 Normal free:3905144kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20288kB local_pcp:6624kB free_cma:0kB [ 290.996621][T10304] lowmem_reserve[]: 0 0 0 0 0 [ 291.001434][T10304] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 291.057227][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1159'. [ 291.083465][T10328] : entered promiscuous mode [ 291.113330][T10304] Node 0 DMA32: 712*4kB (ME) 760*8kB (UME) 285*16kB (UM) 276*32kB (UME) 217*64kB (UME) 48*128kB (UME) 51*256kB (UM) 31*512kB (UME) 24*1024kB (UM) 4*2048kB (UE) 268*4096kB (M) = 1201776kB [ 291.133090][ T5890] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 291.169286][T10304] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 291.231943][T10304] Node 1 Normal: 198*4kB (UME) 42*8kB (UME) 45*16kB (UME) 124*32kB (UME) 37*64kB (UME) 9*128kB (UME) 4*256kB (UM) 5*512kB (UME) 3*1024kB (ME) 3*2048kB (UME) 948*4096kB (M) = 3905144kB [ 291.243997][T10332] FAULT_INJECTION: forcing a failure. [ 291.243997][T10332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.297204][T10304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.307149][T10304] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 291.320488][T10304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.336179][T10332] CPU: 1 UID: 0 PID: 10332 Comm: syz.3.1164 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 291.336209][T10332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.336222][T10332] Call Trace: [ 291.336230][T10332] [ 291.336239][T10332] dump_stack_lvl+0x189/0x250 [ 291.336277][T10332] ? __pfx____ratelimit+0x10/0x10 [ 291.336311][T10332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.336344][T10332] ? __pfx__printk+0x10/0x10 [ 291.336367][T10332] ? __might_fault+0xb0/0x130 [ 291.336402][T10332] should_fail_ex+0x414/0x560 [ 291.336436][T10332] _copy_from_user+0x2d/0xb0 [ 291.336461][T10332] rds_rdma_extra_size+0x120/0x330 [ 291.336500][T10332] rds_rm_size+0x480/0x730 [ 291.336541][T10332] rds_sendmsg+0xaef/0x1f00 [ 291.336584][T10332] ? __pfx_rds_sendmsg+0x10/0x10 [ 291.336607][T10332] ? aa_sk_perm+0x81e/0x950 [ 291.336638][T10332] ? __pfx_aa_sk_perm+0x10/0x10 [ 291.336661][T10332] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 291.336700][T10332] ? aa_sock_msg_perm+0x94/0x160 [ 291.336739][T10332] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.336768][T10332] ? __pfx_rds_sendmsg+0x10/0x10 [ 291.336795][T10332] __sock_sendmsg+0x219/0x270 [ 291.336820][T10332] ____sys_sendmsg+0x505/0x830 [ 291.336855][T10332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.336895][T10332] ? import_iovec+0x74/0xa0 [ 291.336922][T10332] ___sys_sendmsg+0x21f/0x2a0 [ 291.336954][T10332] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.337022][T10332] ? __fget_files+0x2a/0x420 [ 291.337046][T10332] ? __fget_files+0x3a0/0x420 [ 291.337082][T10332] __x64_sys_sendmsg+0x19b/0x260 [ 291.337114][T10332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.337153][T10332] ? __pfx_ksys_write+0x10/0x10 [ 291.337172][T10332] ? rcu_is_watching+0x15/0xb0 [ 291.337196][T10332] ? do_syscall_64+0xbe/0x3b0 [ 291.337222][T10332] do_syscall_64+0xfa/0x3b0 [ 291.337242][T10332] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.337275][T10332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.337296][T10332] ? clear_bhb_loop+0x60/0xb0 [ 291.337322][T10332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.337342][T10332] RIP: 0033:0x7f785158e929 [ 291.337361][T10332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.337379][T10332] RSP: 002b:00007f78523ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.337401][T10332] RAX: ffffffffffffffda RBX: 00007f78517b5fa0 RCX: 00007f785158e929 [ 291.337417][T10332] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 291.337430][T10332] RBP: 00007f78523ad090 R08: 0000000000000000 R09: 0000000000000000 [ 291.337444][T10332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.337457][T10332] R13: 0000000000000000 R14: 00007f78517b5fa0 R15: 00007f78518dfa28 [ 291.337489][T10332] [ 291.339207][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 291.435695][T10304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 291.680086][T10304] 53664 total pagecache pages [ 291.684836][T10304] 0 pages in swap cache [ 291.690029][T10304] Free swap = 124996kB [ 291.694324][T10304] Total swap = 124996kB [ 291.738021][T10304] 2097051 pages RAM [ 291.752834][T10304] 0 pages HighMem/MovableOnly [ 291.763035][T10304] 424684 pages reserved [ 291.767725][T10304] 0 pages cma reserved [ 291.806749][ T5890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.817265][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.839137][ T5890] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 291.850722][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.908192][ T5890] usb 3-1: Product: syz [ 291.930509][ T5890] usb 3-1: Manufacturer: syz [ 291.935223][ T5890] usb 3-1: SerialNumber: syz [ 292.166519][T10339] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 293.253219][T10347] FAULT_INJECTION: forcing a failure. [ 293.253219][T10347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.275923][T10347] CPU: 0 UID: 0 PID: 10347 Comm: syz.0.1166 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 293.275954][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.275966][T10347] Call Trace: [ 293.275975][T10347] [ 293.275984][T10347] dump_stack_lvl+0x189/0x250 [ 293.276020][T10347] ? __pfx____ratelimit+0x10/0x10 [ 293.276062][T10347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.276099][T10347] ? __pfx__printk+0x10/0x10 [ 293.276125][T10347] ? get_sigframe+0x596/0x7d0 [ 293.276157][T10347] should_fail_ex+0x414/0x560 [ 293.276191][T10347] _copy_to_user+0x31/0xb0 [ 293.276215][T10347] copy_siginfo_to_user+0x22/0xc0 [ 293.276236][T10347] x64_setup_rt_frame+0x776/0xd40 [ 293.276284][T10347] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 293.276320][T10347] arch_do_signal_or_restart+0x3d7/0x750 [ 293.276352][T10347] ? __fget_files+0x3a0/0x420 [ 293.276390][T10347] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 293.276441][T10347] ? exit_to_user_mode_loop+0x40/0x110 [ 293.276474][T10347] exit_to_user_mode_loop+0x75/0x110 [ 293.276504][T10347] do_syscall_64+0x2bd/0x3b0 [ 293.276523][T10347] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.276688][T10347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.276712][T10347] ? clear_bhb_loop+0x60/0xb0 [ 293.276737][T10347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.276757][T10347] RIP: 0033:0x7f82b8d8e927 [ 293.276786][T10347] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 293.276804][T10347] RSP: 002b:00007f82b9bb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 293.276826][T10347] RAX: 0000000000000013 RBX: 00007f82b8fb5fa0 RCX: 00007f82b8d8e929 [ 293.276841][T10347] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 293.276854][T10347] RBP: 00007f82b9bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 293.276867][T10347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.276879][T10347] R13: 0000000000000000 R14: 00007f82b8fb5fa0 R15: 00007f82b90dfa28 [ 293.276909][T10347] [ 293.947213][ T5890] usb 3-1: cannot find UAC_HEADER [ 293.988627][ T5890] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 294.136142][ T5890] usb 3-1: USB disconnect, device number 21 [ 294.163399][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.241183][T10355] fuse: Bad value for 'fd' [ 294.587498][T10363] netlink: 'syz.0.1171': attribute type 29 has an invalid length. [ 294.665750][T10369] netlink: 'syz.0.1171': attribute type 29 has an invalid length. [ 294.736461][T10363] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1171'. [ 294.942537][T10376] bridge0: entered promiscuous mode [ 294.948213][T10376] team0: entered promiscuous mode [ 294.953321][T10376] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 294.962799][T10376] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 10376, name: syz.2.1176 [ 294.972053][T10376] preempt_count: 201, expected: 0 [ 294.977178][T10376] RCU nest depth: 0, expected: 0 [ 294.982198][T10376] 3 locks held by syz.2.1176/10376: [ 294.987522][T10376] #0: ffffffff8fa150b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 294.997204][T10376] #1: ffffffff8f510808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 295.006498][T10376] #2: ffff888058df4368 (&dev_addr_list_lock_key#6/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 295.016824][T10376] Preemption disabled at: [ 295.016836][T10376] [] dev_uc_add+0x56/0x120 [ 295.027428][T10376] CPU: 0 UID: 0 PID: 10376 Comm: syz.2.1176 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 295.027456][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 295.027467][T10376] Call Trace: [ 295.027475][T10376] [ 295.027483][T10376] dump_stack_lvl+0x189/0x250 [ 295.027515][T10376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.027541][T10376] ? __pfx__printk+0x10/0x10 [ 295.027561][T10376] ? print_lock_name+0xde/0x100 [ 295.027576][T10376] ? dev_uc_add+0x56/0x120 [ 295.027603][T10376] __might_resched+0x495/0x610 [ 295.027622][T10376] ? dev_uc_add+0x56/0x120 [ 295.027642][T10376] ? __pfx___might_resched+0x10/0x10 [ 295.027657][T10376] ? __pfx___irq_work_queue_local+0x10/0x10 [ 295.027680][T10376] ? console_unlock+0x21b/0x270 [ 295.027705][T10376] __mutex_lock+0x106/0xe80 [ 295.027724][T10376] ? __pfx__printk+0x10/0x10 [ 295.027741][T10376] ? stack_depot_save_flags+0x40/0x900 [ 295.027764][T10376] ? team_change_rx_flags+0x38/0x220 [ 295.027779][T10376] ? __netdev_printk+0x365/0x4d0 [ 295.027795][T10376] ? __pfx___mutex_lock+0x10/0x10 [ 295.027811][T10376] ? netdev_info+0x10a/0x160 [ 295.027835][T10376] ? __pfx_netdev_info+0x10/0x10 [ 295.027852][T10376] ? _printk+0xcf/0x120 [ 295.027867][T10376] ? __sock_sendmsg+0x219/0x270 [ 295.027887][T10376] team_change_rx_flags+0x38/0x220 [ 295.027906][T10376] ? __pfx_team_change_rx_flags+0x10/0x10 [ 295.027920][T10376] __dev_set_promiscuity+0x534/0x740 [ 295.027944][T10376] ? netdev_info+0x10a/0x160 [ 295.027965][T10376] netif_set_promiscuity+0x50/0xe0 [ 295.027987][T10376] dev_set_promiscuity+0x126/0x260 [ 295.028011][T10376] br_manage_promisc+0x180/0x560 [ 295.028033][T10376] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 295.028056][T10376] __dev_set_promiscuity+0x534/0x740 [ 295.028078][T10376] ? __hw_addr_add_ex+0x3c5/0x770 [ 295.028101][T10376] __dev_set_rx_mode+0x17c/0x260 [ 295.028123][T10376] dev_uc_add+0xc8/0x120 [ 295.028146][T10376] macsec_dev_open+0xd9/0x530 [ 295.028163][T10376] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 295.028197][T10376] ? __pfx_macsec_dev_open+0x10/0x10 [ 295.028218][T10376] ? ib_device_get_by_netdev+0x84/0x4d0 [ 295.028248][T10376] ? hsr_netdev_notify+0x29e/0xcf0 [ 295.028276][T10376] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 295.028308][T10376] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 295.028332][T10376] ? ip6_route_dev_notify+0x9a/0x5b0 [ 295.028361][T10376] ? notifier_call_chain+0x3bf/0x3e0 [ 295.028382][T10376] __dev_open+0x470/0x880 [ 295.028404][T10376] ? __pfx___dev_open+0x10/0x10 [ 295.028428][T10376] __dev_change_flags+0x1ea/0x6d0 [ 295.028450][T10376] ? validate_linkmsg+0x765/0x950 [ 295.028475][T10376] ? __pfx___dev_change_flags+0x10/0x10 [ 295.028503][T10376] rtnl_newlink_create+0x555/0xb00 [ 295.028534][T10376] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 295.028553][T10376] ? rtnl_newlink+0x8db/0x1c70 [ 295.028573][T10376] ? __pfx___mutex_lock+0x10/0x10 [ 295.028597][T10376] ? ns_capable+0x8a/0xf0 [ 295.028625][T10376] rtnl_newlink+0x16d6/0x1c70 [ 295.028643][T10376] ? netlink_sendmsg+0x805/0xb30 [ 295.028672][T10376] ? __pfx_rtnl_newlink+0x10/0x10 [ 295.028707][T10376] ? kasan_quarantine_put+0xdd/0x220 [ 295.028732][T10376] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.028760][T10376] ? nlmon_xmit+0xb0/0x100 [ 295.028773][T10376] ? kmem_cache_free+0x18f/0x400 [ 295.028795][T10376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 295.028819][T10376] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.028844][T10376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 295.028868][T10376] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 295.028895][T10376] ? __dev_queue_xmit+0x27e/0x3a70 [ 295.028928][T10376] ? __lock_acquire+0xab9/0xd20 [ 295.028969][T10376] ? __pfx_rtnl_newlink+0x10/0x10 [ 295.028986][T10376] rtnetlink_rcv_msg+0x7cc/0xb70 [ 295.029006][T10376] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 295.029023][T10376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.029046][T10376] ? ref_tracker_free+0x63a/0x7d0 [ 295.029072][T10376] ? __copy_skb_header+0xa7/0x550 [ 295.029096][T10376] ? __pfx_ref_tracker_free+0x10/0x10 [ 295.029118][T10376] ? __skb_clone+0x63/0x7a0 [ 295.029146][T10376] netlink_rcv_skb+0x208/0x470 [ 295.029166][T10376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.029185][T10376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.029219][T10376] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.029239][T10376] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.029263][T10376] netlink_unicast+0x75b/0x8d0 [ 295.029288][T10376] netlink_sendmsg+0x805/0xb30 [ 295.029321][T10376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.029359][T10376] ? aa_sock_msg_perm+0x94/0x160 [ 295.029392][T10376] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 295.029423][T10376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.029448][T10376] __sock_sendmsg+0x219/0x270 [ 295.029466][T10376] ____sys_sendmsg+0x505/0x830 [ 295.029493][T10376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.029521][T10376] ? import_iovec+0x74/0xa0 [ 295.029542][T10376] ___sys_sendmsg+0x21f/0x2a0 [ 295.029565][T10376] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.029616][T10376] ? __fget_files+0x2a/0x420 [ 295.029633][T10376] ? __fget_files+0x3a0/0x420 [ 295.029660][T10376] __x64_sys_sendmsg+0x19b/0x260 [ 295.029683][T10376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.029713][T10376] ? rcu_is_watching+0x15/0xb0 [ 295.029731][T10376] ? do_syscall_64+0xbe/0x3b0 [ 295.029750][T10376] do_syscall_64+0xfa/0x3b0 [ 295.029771][T10376] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.029795][T10376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.029811][T10376] ? clear_bhb_loop+0x60/0xb0 [ 295.029837][T10376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.029852][T10376] RIP: 0033:0x7feb7798e929 [ 295.029868][T10376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.029881][T10376] RSP: 002b:00007feb757d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.029898][T10376] RAX: ffffffffffffffda RBX: 00007feb77bb6080 RCX: 00007feb7798e929 [ 295.029910][T10376] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000e [ 295.029920][T10376] RBP: 00007feb77a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 295.029929][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.029938][T10376] R13: 0000000000000000 R14: 00007feb77bb6080 R15: 00007feb77cdfa28 [ 295.029962][T10376] [ 295.030001][T10376] [ 295.645358][T10376] ============================= [ 295.650299][T10376] [ BUG: Invalid wait context ] [ 295.655160][T10376] 6.15.0-syzkaller-13743-g8630c59e9936 #0 Tainted: G W [ 295.663577][T10376] ----------------------------- [ 295.668431][T10376] syz.2.1176/10376 is trying to lock: [ 295.673800][T10376] ffff888030700e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 295.683914][T10376] other info that might help us debug this: [ 295.689803][T10376] context-{5:5} [ 295.693258][T10376] 3 locks held by syz.2.1176/10376: [ 295.698474][T10376] #0: ffffffff8fa150b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 295.708011][T10376] #1: ffffffff8f510808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 295.717080][T10376] #2: ffff888058df4368 (&dev_addr_list_lock_key#6/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 295.727325][T10376] stack backtrace: [ 295.731144][T10376] CPU: 0 UID: 0 PID: 10376 Comm: syz.2.1176 Tainted: G W 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 295.731168][T10376] Tainted: [W]=WARN [ 295.731174][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 295.731183][T10376] Call Trace: [ 295.731189][T10376] [ 295.731196][T10376] dump_stack_lvl+0x189/0x250 [ 295.731225][T10376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.731249][T10376] ? __pfx__printk+0x10/0x10 [ 295.731280][T10376] ? print_lock_name+0xde/0x100 [ 295.731297][T10376] __lock_acquire+0xbcb/0xd20 [ 295.731322][T10376] ? team_change_rx_flags+0x38/0x220 [ 295.731337][T10376] lock_acquire+0x120/0x360 [ 295.731359][T10376] ? team_change_rx_flags+0x38/0x220 [ 295.731378][T10376] __mutex_lock+0x182/0xe80 [ 295.731393][T10376] ? team_change_rx_flags+0x38/0x220 [ 295.731409][T10376] ? __pfx__printk+0x10/0x10 [ 295.731425][T10376] ? stack_depot_save_flags+0x40/0x900 [ 295.731446][T10376] ? team_change_rx_flags+0x38/0x220 [ 295.731460][T10376] ? __netdev_printk+0x365/0x4d0 [ 295.731475][T10376] ? __pfx___mutex_lock+0x10/0x10 [ 295.731490][T10376] ? netdev_info+0x10a/0x160 [ 295.731510][T10376] ? __pfx_netdev_info+0x10/0x10 [ 295.731529][T10376] ? _printk+0xcf/0x120 [ 295.731608][T10376] ? __sock_sendmsg+0x219/0x270 [ 295.731625][T10376] team_change_rx_flags+0x38/0x220 [ 295.731643][T10376] ? __pfx_team_change_rx_flags+0x10/0x10 [ 295.731658][T10376] __dev_set_promiscuity+0x534/0x740 [ 295.731680][T10376] ? netdev_info+0x10a/0x160 [ 295.731699][T10376] netif_set_promiscuity+0x50/0xe0 [ 295.731720][T10376] dev_set_promiscuity+0x126/0x260 [ 295.731741][T10376] br_manage_promisc+0x180/0x560 [ 295.731760][T10376] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 295.731790][T10376] __dev_set_promiscuity+0x534/0x740 [ 295.731810][T10376] ? __hw_addr_add_ex+0x3c5/0x770 [ 295.731832][T10376] __dev_set_rx_mode+0x17c/0x260 [ 295.731852][T10376] dev_uc_add+0xc8/0x120 [ 295.731874][T10376] macsec_dev_open+0xd9/0x530 [ 295.731888][T10376] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 295.731912][T10376] ? __pfx_macsec_dev_open+0x10/0x10 [ 295.731927][T10376] ? ib_device_get_by_netdev+0x84/0x4d0 [ 295.731948][T10376] ? hsr_netdev_notify+0x29e/0xcf0 [ 295.731974][T10376] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 295.731999][T10376] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 295.732020][T10376] ? ip6_route_dev_notify+0x9a/0x5b0 [ 295.732040][T10376] ? notifier_call_chain+0x3bf/0x3e0 [ 295.732056][T10376] __dev_open+0x470/0x880 [ 295.732075][T10376] ? __pfx___dev_open+0x10/0x10 [ 295.732094][T10376] __dev_change_flags+0x1ea/0x6d0 [ 295.732114][T10376] ? validate_linkmsg+0x765/0x950 [ 295.732139][T10376] ? __pfx___dev_change_flags+0x10/0x10 [ 295.732162][T10376] rtnl_newlink_create+0x555/0xb00 [ 295.732188][T10376] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 295.732208][T10376] ? rtnl_newlink+0x8db/0x1c70 [ 295.732226][T10376] ? __pfx___mutex_lock+0x10/0x10 [ 295.732311][T10376] ? ns_capable+0x8a/0xf0 [ 295.732336][T10376] rtnl_newlink+0x16d6/0x1c70 [ 295.732355][T10376] ? netlink_sendmsg+0x805/0xb30 [ 295.732379][T10376] ? __pfx_rtnl_newlink+0x10/0x10 [ 295.732403][T10376] ? kasan_quarantine_put+0xdd/0x220 [ 295.732429][T10376] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.732455][T10376] ? nlmon_xmit+0xb0/0x100 [ 295.732468][T10376] ? kmem_cache_free+0x18f/0x400 [ 295.732495][T10376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 295.732521][T10376] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.732545][T10376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 295.732569][T10376] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 295.732595][T10376] ? __dev_queue_xmit+0x27e/0x3a70 [ 295.732622][T10376] ? __lock_acquire+0xab9/0xd20 [ 295.732652][T10376] ? __pfx_rtnl_newlink+0x10/0x10 [ 295.732670][T10376] rtnetlink_rcv_msg+0x7cc/0xb70 [ 295.732688][T10376] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 295.732704][T10376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.732720][T10376] ? ref_tracker_free+0x63a/0x7d0 [ 295.732742][T10376] ? __copy_skb_header+0xa7/0x550 [ 295.732764][T10376] ? __pfx_ref_tracker_free+0x10/0x10 [ 295.732787][T10376] ? __skb_clone+0x63/0x7a0 [ 295.732810][T10376] netlink_rcv_skb+0x208/0x470 [ 295.732830][T10376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.732847][T10376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.732870][T10376] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.732890][T10376] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.732911][T10376] netlink_unicast+0x75b/0x8d0 [ 295.732930][T10376] netlink_sendmsg+0x805/0xb30 [ 295.732953][T10376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.732975][T10376] ? aa_sock_msg_perm+0x94/0x160 [ 295.732996][T10376] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 295.733018][T10376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.733038][T10376] __sock_sendmsg+0x219/0x270 [ 295.733054][T10376] ____sys_sendmsg+0x505/0x830 [ 295.733076][T10376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.733100][T10376] ? import_iovec+0x74/0xa0 [ 295.733118][T10376] ___sys_sendmsg+0x21f/0x2a0 [ 295.733139][T10376] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.733172][T10376] ? __fget_files+0x2a/0x420 [ 295.733190][T10376] ? __fget_files+0x3a0/0x420 [ 295.733211][T10376] __x64_sys_sendmsg+0x19b/0x260 [ 295.733244][T10376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.733269][T10376] ? rcu_is_watching+0x15/0xb0 [ 295.733285][T10376] ? do_syscall_64+0xbe/0x3b0 [ 295.733302][T10376] do_syscall_64+0xfa/0x3b0 [ 295.733318][T10376] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.733342][T10376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.733358][T10376] ? clear_bhb_loop+0x60/0xb0 [ 295.733375][T10376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.733392][T10376] RIP: 0033:0x7feb7798e929 [ 295.733407][T10376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.733421][T10376] RSP: 002b:00007feb757d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.733439][T10376] RAX: ffffffffffffffda RBX: 00007feb77bb6080 RCX: 00007feb7798e929 [ 295.733450][T10376] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000e [ 295.733460][T10376] RBP: 00007feb77a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 295.733470][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.733479][T10376] R13: 0000000000000000 R14: 00007feb77bb6080 R15: 00007feb77cdfa28 [ 295.733498][T10376] [ 296.346409][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.881441][T10376] macsec1: entered promiscuous mode [ 297.117322][T10376] bridge0: left promiscuous mode [ 297.122579][T10376] team0: left promiscuous mode [ 297.127534][T10376] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 297.136914][T10376] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 10376, name: syz.2.1176 [ 297.146101][T10376] preempt_count: 201, expected: 0 [ 297.151184][T10376] RCU nest depth: 0, expected: 0 [ 297.156199][T10376] INFO: lockdep is turned off. [ 297.160996][T10376] Preemption disabled at: [ 297.161011][T10376] [] dev_uc_del+0x56/0x110 [ 297.171552][T10376] CPU: 0 UID: 0 PID: 10376 Comm: syz.2.1176 Tainted: G W 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 297.171588][T10376] Tainted: [W]=WARN [ 297.171596][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.171611][T10376] Call Trace: [ 297.171620][T10376] [ 297.171630][T10376] dump_stack_lvl+0x189/0x250 [ 297.171671][T10376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.171705][T10376] ? __pfx__printk+0x10/0x10 [ 297.171729][T10376] ? irq_work_queue+0xbc/0x140 [ 297.171761][T10376] ? dev_uc_del+0x56/0x110 [ 297.171792][T10376] __might_resched+0x495/0x610 [ 297.171813][T10376] ? dev_uc_del+0x56/0x110 [ 297.171842][T10376] ? __pfx___might_resched+0x10/0x10 [ 297.171860][T10376] ? netlink_sendmsg+0x805/0xb30 [ 297.171887][T10376] ? ____sys_sendmsg+0x505/0x830 [ 297.171915][T10376] ? ___sys_sendmsg+0x21f/0x2a0 [ 297.171941][T10376] ? __x64_sys_sendmsg+0x19b/0x260 [ 297.171970][T10376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.171997][T10376] __mutex_lock+0x106/0xe80 [ 297.172020][T10376] ? __pfx__printk+0x10/0x10 [ 297.172044][T10376] ? team_change_rx_flags+0x38/0x220 [ 297.172064][T10376] ? __netdev_printk+0x365/0x4d0 [ 297.172085][T10376] ? __pfx___mutex_lock+0x10/0x10 [ 297.172106][T10376] ? netdev_info+0x10a/0x160 [ 297.172142][T10376] ? __pfx_netdev_info+0x10/0x10 [ 297.172173][T10376] team_change_rx_flags+0x38/0x220 [ 297.172197][T10376] ? __pfx_team_change_rx_flags+0x10/0x10 [ 297.172217][T10376] __dev_set_promiscuity+0x534/0x740 [ 297.172246][T10376] ? lock_release+0x4b/0x3e0 [ 297.172278][T10376] netif_set_promiscuity+0x50/0xe0 [ 297.172306][T10376] dev_set_promiscuity+0x126/0x260 [ 297.172336][T10376] br_manage_promisc+0x4db/0x560 [ 297.172363][T10376] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 297.172394][T10376] __dev_set_promiscuity+0x534/0x740 [ 297.172425][T10376] __dev_set_rx_mode+0x17c/0x260 [ 297.172454][T10376] dev_uc_del+0xc0/0x110 [ 297.172484][T10376] macsec_dev_stop+0x2b6/0x380 [ 297.172507][T10376] ? __pfx_macsec_dev_stop+0x10/0x10 [ 297.172526][T10376] ? dev_deactivate_many+0xb82/0xd40 [ 297.172554][T10376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 297.172587][T10376] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 297.172623][T10376] ? do_raw_spin_unlock+0x122/0x240 [ 297.172648][T10376] ? dev_deactivate_many+0xb82/0xd40 [ 297.172677][T10376] ? dev_deactivate_many+0xd03/0xd40 [ 297.172706][T10376] ? dev_deactivate_many+0x258/0xd40 [ 297.172734][T10376] ? __pfx_macsec_dev_stop+0x10/0x10 [ 297.172755][T10376] __dev_close_many+0x361/0x6f0 [ 297.172782][T10376] ? __pfx___dev_close_many+0x10/0x10 [ 297.172805][T10376] ? stack_depot_save_flags+0x40/0x900 [ 297.172836][T10376] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 297.172860][T10376] dev_close_many+0x225/0x410 [ 297.172882][T10376] ? kasan_save_track+0x4f/0x80 [ 297.172901][T10376] ? kasan_save_track+0x3e/0x80 [ 297.172919][T10376] ? __kasan_slab_free+0x62/0x70 [ 297.172951][T10376] ? __pfx_dev_close_many+0x10/0x10 [ 297.172972][T10376] ? netlink_sendmsg+0x805/0xb30 [ 297.172999][T10376] ? __sock_sendmsg+0x219/0x270 [ 297.173016][T10376] ? ____sys_sendmsg+0x505/0x830 [ 297.173041][T10376] ? ___sys_sendmsg+0x21f/0x2a0 [ 297.173077][T10376] ? __x64_sys_sendmsg+0x19b/0x260 [ 297.173106][T10376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.173137][T10376] unregister_netdevice_many_notify+0x834/0x2320 [ 297.173181][T10376] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 297.173222][T10376] ? rcu_is_watching+0x15/0xb0 [ 297.173243][T10376] ? rtnl_newlink_create+0x7fa/0xb00 [ 297.173267][T10376] ? kfree+0x18e/0x440 [ 297.173287][T10376] rtnl_newlink_create+0x802/0xb00 [ 297.173321][T10376] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 297.173349][T10376] ? rtnl_newlink+0x8db/0x1c70 [ 297.173373][T10376] ? __pfx___mutex_lock+0x10/0x10 [ 297.173400][T10376] ? ns_capable+0x8a/0xf0 [ 297.173435][T10376] rtnl_newlink+0x16d6/0x1c70 [ 297.173460][T10376] ? netlink_sendmsg+0x805/0xb30 [ 297.173490][T10376] ? __pfx_rtnl_newlink+0x10/0x10 [ 297.173525][T10376] ? kasan_quarantine_put+0xdd/0x220 [ 297.173559][T10376] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.173597][T10376] ? nlmon_xmit+0xb0/0x100 [ 297.173616][T10376] ? kmem_cache_free+0x18f/0x400 [ 297.173640][T10376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 297.173672][T10376] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.173704][T10376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 297.173737][T10376] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 297.173772][T10376] ? __dev_queue_xmit+0x27e/0x3a70 [ 297.173811][T10376] ? __lock_acquire+0xab9/0xd20 [ 297.173854][T10376] ? __pfx_rtnl_newlink+0x10/0x10 [ 297.173878][T10376] rtnetlink_rcv_msg+0x7cc/0xb70 [ 297.173905][T10376] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 297.173929][T10376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 297.173952][T10376] ? ref_tracker_free+0x63a/0x7d0 [ 297.173983][T10376] ? __copy_skb_header+0xa7/0x550 [ 297.174014][T10376] ? __pfx_ref_tracker_free+0x10/0x10 [ 297.174046][T10376] ? __skb_clone+0x63/0x7a0 [ 297.174080][T10376] netlink_rcv_skb+0x208/0x470 [ 297.174106][T10376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 297.174141][T10376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.174174][T10376] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.174201][T10376] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.174231][T10376] netlink_unicast+0x75b/0x8d0 [ 297.174260][T10376] netlink_sendmsg+0x805/0xb30 [ 297.174293][T10376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.174323][T10376] ? aa_sock_msg_perm+0x94/0x160 [ 297.174354][T10376] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.174384][T10376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.174456][T10376] __sock_sendmsg+0x219/0x270 [ 297.174478][T10376] ____sys_sendmsg+0x505/0x830 [ 297.174510][T10376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.174545][T10376] ? import_iovec+0x74/0xa0 [ 297.174570][T10376] ___sys_sendmsg+0x21f/0x2a0 [ 297.174601][T10376] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.174649][T10376] ? __fget_files+0x2a/0x420 [ 297.174674][T10376] ? __fget_files+0x3a0/0x420 [ 297.174705][T10376] __x64_sys_sendmsg+0x19b/0x260 [ 297.174736][T10376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.174772][T10376] ? rcu_is_watching+0x15/0xb0 [ 297.174794][T10376] ? do_syscall_64+0xbe/0x3b0 [ 297.174817][T10376] do_syscall_64+0xfa/0x3b0 [ 297.174838][T10376] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.174872][T10376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.174894][T10376] ? clear_bhb_loop+0x60/0xb0 [ 297.174918][T10376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.174940][T10376] RIP: 0033:0x7feb7798e929 [ 297.174959][T10376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.174979][T10376] RSP: 002b:00007feb757d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.175002][T10376] RAX: ffffffffffffffda RBX: 00007feb77bb6080 RCX: 00007feb7798e929 [ 297.175018][T10376] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000e [ 297.175032][T10376] RBP: 00007feb77a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 297.175046][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.175059][T10376] R13: 0000000000000000 R14: 00007feb77bb6080 R15: 00007feb77cdfa28 [ 297.175083][T10376] [ 297.871231][ C0] vkms_vblank_simulate: vblank timer overrun