last executing test programs: 9.648031655s ago: executing program 1 (id=2980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x14, r1, 0x680822d7e3b5f37d}, 0x14}, 0x1, 0x0, 0x0, 0xfff0}, 0x0) 9.428573711s ago: executing program 1 (id=2984): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400012000008000240000000030c00048005000100690000000c00038005000100430000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000c0ffffff181100000a907569d2169e651123f477654dda97d0e6b167e654cfed1d9f95c71bb54dff1a690291663be224f51cd13d6c4ee6cd8eb727f806640b17457785", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000180)) (async) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000180)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 9.227445943s ago: executing program 2 (id=2987): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd318001c0600fc010000000000000000000000000002fe80000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r2) add_key(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) syz_open_procfs(0x0, 0x0) r4 = getpid() ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x100000, 0x2000}) syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r5, 0x80086303, &(0x7f0000000200)) syz_pidfd_open(r4, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 8.653408421s ago: executing program 4 (id=2990): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d8c795dd0ab0", 0x31}], 0x1}, 0x8400) sendmsg$inet(r0, &(0x7f0000000c00)={&(0x7f0000000540)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001840)="aeed64bf5e4051b614e6074c43fdb5e7dfcca1b4d71c8d59c298586dd73e1b9abbdab4c26c2ee067fb42c520be3ee5aae220336ab6d487f2d0617a6dbac51c2e9a0c3ef2524f390f6173b6ae44fcfb52b7086b856bb7196d0ba9c467c870086c7e669ba079403e654a0ac04111d0e0141137b5dc634c41187f997c9882652c04e6d3d253d74570084ff67a8dd078aa21712f52e3d4693e49f45cf9664ab60bac0503b714066849f1823614bdfd6d00658e94bdc5e26420deb7a1b89b84ebd16626d01c1b362ea84c176f41419e41fc2953aafe496a7a831a3e8c37aa6b333649f228df6c9e35565322001a02108c4681feb1b6e2bc8c26", 0xf7}, {&(0x7f0000000000)="485af149ede0eeba35d196d0146e6eba770600005b3c2a14be4a43c8010a71b55c71db672f28d7a967d05702816e", 0x2e}, {&(0x7f0000000380)="67c0bd6fb0a5e17a31", 0x9}, {&(0x7f0000001940)="06acdb8d27d71927a8e18a07de60c9a5b1847d08f4dcb6360b4a0022996167c1de7cc16146d17ad0a78f3f4487fe0825080f9574b9d5e3a62386d1755c07fc994b2f37e2b3fe820259396124442cd81f8d8fedfcfea5755cafb4a91a2d07edaa1d425c33b8539ed3e4d361edb85e07cb37ddbca6eda13516df02b4b35d203ade654812ecbe6f2b1d908c2a1e8d46f6d1cf58541273f2cc186aafd22d14db6d7e1475d854673c353573aad3bd03f3ce09845f92", 0xb3}, {&(0x7f00000028c0)="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", 0x1000}, {&(0x7f0000001a00)="a09fe8f4e208d8e33a7263e216e0049820022aafd2cd4aa5c73796040f1c5daf974c0941a8aa16b538be3ead8d989a446a4c644c758c738e27034afdf2acdc82d5460bb42906439a522ee00a", 0x4c}, {&(0x7f0000001b00)="6ce20c75d7ff176a8a8dd007effb9fc18cd96057206c5785b2249099736558b18f204444bac99cfd70cc46e3e65e4689fd9dbe8c3160c165534595f6f6590e19dcb64c823ca4201ffc9bc1a2b9da8cb7", 0x50}], 0x7}, 0x0) r1 = inotify_init() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, 0x0, 0x0) r5 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x400}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x84003) syz_usb_disconnect(r8) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201010200000020"], 0x0) ioctl$EVIOCRMFF(r8, 0x40085507, &(0x7f0000000400)=0x8000e) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_GET_STATION(r9, &(0x7f0000001740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001700)={&(0x7f0000001500)={0x200, r10, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x15}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1a0, 0x9}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x5, 0x3, 0x8]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xeb, 0xbe, "2c4e7b2a80d461f747ba82561efa7097aa2f335276a91c94cbfb3dfe485848e5e3a2a2419aeb556d91b20b20642c9c0014bc54a9b6e30b4aad7f84bf9a705c6d79e5a235fb32e64a2839afa70e19ca46377dfc1603ff58440e3ca3898e2f0cf385f9fcc67ba107bd35845ccfb895ad509e3baaaf309f7e7bce801f9245f2c89a3231d4ee69b15b262ee561a78e40d97cc00412ea03fb11aad5bcba3b89a77a4eb0d0ff8a50cbeb52af8a7db8d163c16494e5665bb412aee8352140a204c0226a0caf31395558100696d87446e8fae760c59ebf1ab9de3e1f7a80edcb5475e71ade6c4b6fdeef1a"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1fe}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xba, 0xac, "a007cc298e33eea6663dc71f4ab717ffb248ba452df8943c9d93e1d94e1d7cf479d2ce2bb6309db6ac4c023366d1e68469d5b8baa176698f243273efc99a2fa32a64e0019c700f53e530940a25a07c4132852644e04b62b65ae9c236a8e6aaf513d02991ada67a6ffb70ee1b66165b6e1472a56c60ed902335d4ab3c873b1b789c6eefa189cbf46e1b361a19520fc06682580cc9edd8f3bd7032792550ec8e5075d34b766d62810df2f783afc3465bb31564ac3a0d3d"}]}, 0x200}, 0x1, 0x0, 0x0, 0x20004800}, 0x8809) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r11 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r11, &(0x7f0000001c00)=ANY=[@ANYBLOB="7065726d686174203078303030306e676568617420a6b768e1d54becd99662c8e6f9d62c84389de41d39e7276de5d4a7ba6a2880ed1d7ca658d1ee960430c7e84ecb6a8eaeaf7f8301364261f339cc7423360aff895ef86b4c4eda75f2d5b34f32e7f3fb88c606a815b352a1bfeef3619b6f53a734d86e62442cf1a74dfe49c386ea0c3eb7586f9149377dddcecd2c60299488a37ba64be903003e1d776978ffa34c69c4a4fe60e67f169beb6dbae78a8ab09ac42c61142b"], 0x25) sendmsg$rds(r3, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/253, 0xfd}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x80}, 0x40) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r12, 0x10e, 0x5, &(0x7f0000000080)=0x7, 0x4) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001780), 0x800) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r13, 0x40505331, &(0x7f00000017c0)={{0x0, 0x7}, {0x5, 0x40}, 0x7, 0x4, 0xf}) pread64(r2, &(0x7f0000000080)=""/187, 0xbb, 0x5) syz_usb_connect(0x4, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1], 0x0) 8.355538992s ago: executing program 1 (id=2992): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r2, 0x9}, &(0x7f0000000040)=0x8) 8.192931252s ago: executing program 1 (id=2993): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x22, 0x2, 0x24) close(r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r1, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r6, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r7) sendmmsg$inet(r5, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000a00)="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", 0xfe5}], 0x1, 0x0}}], 0x1, 0xf00) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r8, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 7.13590236s ago: executing program 3 (id=2995): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x108, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000008}, 0x8010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x3e, 0x107, 0xfffffffc, 0x0, {0x4, 0x7c}, [@typed={0x0, 0x14d, 0x0, 0x0, @pid}, @nested={0xfffffffffffffd3d, 0x1, 0x0, 0x1, [@typed={0x15, 0x6, 0x0, 0x0, @str='\x83\n\xc7$S\x9b#U*P\xd7l\x94\x19\x80\x8a\x99'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) 5.991636019s ago: executing program 2 (id=2996): socket(0x1, 0x803, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x440000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd2(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 5.360901803s ago: executing program 4 (id=2999): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b508020000000000db8a120001000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) syz_io_uring_setup(0x2619, &(0x7f0000010280)={0x0, 0x2d4a, 0x2, 0x4000003}, 0x0, &(0x7f0000000080)) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, 0x0) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES16, @ANYRESHEX], 0x20}}, 0x0) 4.050277546s ago: executing program 1 (id=3001): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='schedstat\x00') read$FUSE(r0, &(0x7f0000002f40)={0x2020}, 0x2020) socket$inet(0x2, 0x4000000000000001, 0x0) socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = userfaultfd(0x801) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x13bd, &(0x7f0000000300)={0x0, 0x3468, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x10041, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.906588339s ago: executing program 3 (id=3002): socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) socket(0x2, 0x80805, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x101402) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="ef050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a8000008000500", @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000000) 3.741717555s ago: executing program 3 (id=3003): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x9}, &(0x7f0000000040)=0x8) 3.633920279s ago: executing program 3 (id=3004): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@private, @rand_addr, 0x0}, &(0x7f0000000280)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x8, &(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x0, 0x4, 0x84, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000080)={0x2, {0x4, 0x3ff, 0x7, 0x8}}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_buf(r1, 0x0, 0xa, &(0x7f0000000600)="c98698a8a9a9e9e8ad80e67a8974d3c1096bdadfaa640e4a04531e41d11d212a0da79d71cc052e5005b1ea72f1ce6926c8d004769b6d4d6c8c7ce979495c4097b0d73f0549501c4bd0d5023247739aa820ff6b66e7b774b5d96b3742effb91f53b5fc7ca73399bd7ae899f26c6972fa52252f75aae86266ad628d2acba5e3fdba713f8b98e15d5b1e2aced4a5023e04fcf0c078e3fb9536d84703c282321bfd30e7d39", 0xa3) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0xfffffffffffffc69, &(0x7f0000000480)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x0, 0x3, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x9bfa}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xfff}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}]}}]}, 0x50}}, 0x200040e4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)={0x1c0, r4, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40084}, 0x40c8884) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000440)=0x8) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000030900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006c696d6974000000240002800c00024000000000000010000c0001400000000000000003080005400000000114000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) r14 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r14, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfffffffd, @local, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) 3.419617821s ago: executing program 3 (id=3005): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) connect$unix(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0xffffffffffffffff, 0x1, 0x5002) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x248, 0x228, 0x25a, 0x248, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a}, 0x5002, 0xf8, 0x138, 0x52020000, {0x0, 0x6802000000000000}, [@common=@unspec=@connlabel={{0x28}, {0x5, 0x3}}, @common=@unspec=@state={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7, 0x2, {0xfffffffffffffffa}}}}, {{@ipv6={@local, @empty, [], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xffffffff, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) futex_waitv(&(0x7f0000001f00)=[{0xfd91, &(0x7f0000000000)=0x2, 0x82}, {0x6, &(0x7f0000000080)=0x7, 0x186}, {0xffffffffffffffff, &(0x7f00000000c0)=0x2, 0x82}, {0x1, 0x0, 0x82}, {0x205, &(0x7f0000000180)=0x4, 0x2}, {0x3, &(0x7f00000001c0)=0x5, 0x2}, {0x3, &(0x7f0000000200)=0x3, 0x82}, {0x1, &(0x7f0000000240)=0x3}, {0xa, &(0x7f0000000280)=0x995, 0x2}, {0x38, &(0x7f00000002c0)=0x3, 0x2}, {0x5, &(0x7f0000000300)=0x8, 0x82}, {0x2, 0x0, 0x82}, {0x1000, &(0x7f0000000380)=0x2, 0x82}, {0x4, &(0x7f00000003c0)=0x6, 0x82}, {0xfd5d, &(0x7f0000000400)=0x8, 0x2}, {0x7, &(0x7f0000000440)=0x20000000000, 0x82}, {0x6f7a, &(0x7f00000004c0)=0x1, 0x82}, {0x2, &(0x7f0000000500)=0x100000000, 0x2}, {0x9, 0x0, 0x2}, {0x5, &(0x7f0000000580)=0x2}, {0x1, &(0x7f00000005c0)=0x5, 0x82}, {0x9, &(0x7f0000000600)=0xd9, 0x2}, {0x3cd, &(0x7f0000000640)=0x4, 0x2}, {0x8, &(0x7f0000000680)=0x6, 0x2}, {0x85, &(0x7f00000006c0)=0x1, 0x2}, {0x0, &(0x7f0000000700)=0x8, 0x2}, {0x5, &(0x7f0000000740)=0x5, 0x2}, {0x40, &(0x7f0000000780)=0xfffffffffffff80c, 0x2}, {0x9, &(0x7f00000007c0)=0xe, 0x81}, {0x1, &(0x7f0000000800)=0x6, 0x2}, {0x9, &(0x7f0000000880)=0xc0, 0x82}, {0x9, &(0x7f00000008c0)=0x5, 0x82}, {0x1, &(0x7f0000000900)=0xfffffffffffffffa, 0x2}, {0x100000000, &(0x7f0000000940)=0xfffffffffffffff7, 0x82}, {0x1, &(0x7f0000000980)=0x9, 0x2}, {0x7, &(0x7f00000009c0)=0x7, 0x2}, {0x1, &(0x7f0000000a00)=0x5, 0x82}, {0x1, &(0x7f0000000a40)=0x8000, 0x2}, {0x10001, &(0x7f0000000a80), 0x2}, {0x6, &(0x7f0000000ac0)=0x4, 0x80}, {0x0, &(0x7f0000000b00)=0x100000001, 0x2}, {0x1400000000000000, &(0x7f0000000bc0)=0x81, 0x2}, {0xea7, &(0x7f0000000c00)=0x10, 0x82}, {0x1, &(0x7f0000000c40)=0xecf8, 0x2}, {0xe, &(0x7f0000000c80)=0x2, 0x2}, {0x10001, &(0x7f0000000cc0)=0xafd, 0x82}, {0x7, &(0x7f0000000d00)=0xec, 0x2}, {0x274a, 0x0, 0x2}, {0x9, &(0x7f0000000d80)=0xc, 0x2}, {0x2, &(0x7f0000000dc0)=0x1a, 0x82}, {0x10, &(0x7f0000000e00)=0x9, 0x82}, {0x0, &(0x7f0000000e40)=0x7fffffff, 0x82}, {0x7, 0x0, 0x82}, {0xfffffffffffffff7, &(0x7f0000000ec0), 0x2}, {0x5, &(0x7f0000000f00)=0x406710b6}, {0x1, &(0x7f0000000f40)=0x1, 0x82}, {0x10001, &(0x7f0000000f80)=0x6, 0x82}, {0x5, &(0x7f0000000fc0)=0x100000000, 0x2}, {0x1, &(0x7f0000001000), 0x2}, {0x7, &(0x7f0000001040)=0x11, 0x2}, {0x5, 0x0, 0x82}, {0x7000000000000000, &(0x7f00000010c0)=0x81, 0x2}, {0x0, &(0x7f0000001100)=0x102000, 0x2}, {0x6, &(0x7f0000001140)=0xffffffffffffffdf, 0x82}, {0x53ef, &(0x7f00000011c0)=0x1, 0x2}, {0x3f82efc8, 0x0, 0x82}, {0x8, &(0x7f0000001240)=0xb, 0x82}, {0x5, &(0x7f0000001280)=0x1, 0x82}, {0x0, 0x0, 0x2}, {0xfffffffffffffeff, &(0x7f0000001340)=0x1c000000000, 0x2}, {0x1b9e, &(0x7f0000001380)=0xfffffffffffffd6c, 0x2}, {0x1, &(0x7f00000013c0)=0x8, 0x82}, {0xbf, &(0x7f0000001400)=0x755, 0x82}, {0x796e, 0x0, 0x2}, {0x57, &(0x7f00000014c0)=0x2, 0x2}, {0xba4, &(0x7f0000001500)=0x33e, 0x2}, {0x3, &(0x7f0000001540)=0x6, 0x82}, {0x9, &(0x7f0000001580)=0x7, 0x82}, {0x1, &(0x7f00000015c0)=0x6, 0x80}, {0x6, &(0x7f0000001600)=0x4, 0x82}, {0x5, 0x0, 0x82}, {0x7ff, &(0x7f0000001680)=0x5, 0x82}, {0x5, &(0x7f00000016c0)=0xffffffff00000000, 0x82}, {0x100000001, &(0x7f0000001740)=0x1000, 0x2}, {0x6, &(0x7f0000001780)=0x80000000, 0x2}, {0x90, &(0x7f00000017c0)=0xa, 0x82}, {0x9, &(0x7f0000001800)=0x7fffffff, 0x2}, {0x8, &(0x7f0000001840)=0x6, 0x2}, {0x10000, &(0x7f0000001880)=0x2, 0x82}, {0x2bc, &(0x7f0000001940)=0x9, 0x82}, {0x6, &(0x7f00000019c0), 0x82}, {0x0, &(0x7f0000001a00)=0x7, 0x2}, {0x5c7f61a5, &(0x7f0000001a40)=0x2, 0x2}, {0x4, &(0x7f0000001a80), 0x82}, {0x9, &(0x7f0000001ac0)=0x8, 0x2}, {0x0, &(0x7f0000001b00)=0x9, 0x2}, {0xed6c, 0x0, 0x2}, {0x8, &(0x7f0000001b80)=0x3bc0, 0x82}, {0xa0, &(0x7f0000001bc0)=0x4, 0x82}, {0x2, &(0x7f0000001c40)=0x4, 0x82}, {0x7, &(0x7f0000001c80)=0x2, 0x82}, {0x4, &(0x7f0000001cc0)=0xfffffffffffffff9, 0x82}, {0x8, &(0x7f0000001d00)=0x9, 0x82}, {0x4, &(0x7f0000001d40)=0x7, 0x2}, {0x6, &(0x7f0000001d80)=0x5, 0x82}, {0x0, &(0x7f0000001dc0), 0x2}, {0xc8c, 0x0, 0x82}, {0x1, &(0x7f0000001e80)=0x3a2, 0x2}, {0x3, &(0x7f0000001ec0)=0xf9, 0x82}], 0x6d, 0x0, &(0x7f0000002ac0), 0x1) socket$inet_udplite(0x2, 0x2, 0x88) 3.205055099s ago: executing program 4 (id=3006): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) (async) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0x1004e, 0x2) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) msync(&(0x7f0000a54000/0x2000)=nil, 0x2000, 0x2) dup(r0) fcntl$notify(r0, 0x402, 0x4) 3.204040283s ago: executing program 2 (id=3007): socket(0x1, 0x803, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x5c5d, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2.216504347s ago: executing program 4 (id=3008): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4, @empty}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000120001000000000000000000ac141400000000000000000000000000000000000000000014000d00200100000000000000000000000000000c0015000000000004000000dea6149caea377fca8fa9bb02a61d8ad91498c"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r4 = syz_usb_connect(0x4, 0x24, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x2040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000090a010400000000000000000700000008000a44000000000900010073797a30000000000900020073797a3100000000080005400000000c080003400000000a0800074000000031080006400000000008000f4000000006140000001000010000000000000000000084000ad821b77ef98873c6bf9f19499602deff31e30ec939748b327dcaa5e2e8be68ff15c2d8854f3266fe93bdb8d977dbb62b744d7d17181df84d7e"], 0x84}}, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f00000000c0)={0x2, "edbd2df6c5705168cb7771d31ad5d25955064ff4b852c51ff4a0b7ed5ac362e53c2dd32939d803770168c9e6f30ed611d50be914965e41088181d4e4e18727ec", {0x0, 0xfff}}) syz_io_uring_setup(0x4f83, &(0x7f00000000c0)={0x0, 0x7073, 0x800, 0x2, 0x28a, 0x0, r5}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="9cf5e68f36e083e95cc99b76fd8f0010d8510888203f381255a355de8676e976e3b602d508fa9cf3070000001067087e580f0107e559a30665ad3a10c42240a2464eedcd7ac887a1384b4c1fe440cfce60", @ANYRES16=r10, @ANYBLOB="070000000000000000000200000014000180060005004e290000080003000a010101"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000001a40)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r5, @ANYBLOB="00012cbd7000fbdbdf2509000000080002000000000008000300060000003000068008000300e000000208000700", @ANYBLOB="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", @ANYBLOB="1468ba24a1f5b40370b08d9d743e6d001542f51c000000000000000000010108e9103d", @ANYRES32=0x0, @ANYBLOB="38000180060005004e23000008000700", @ANYRES32, @ANYBLOB="060005004e87ed787f000400fe80000000000000000000000000000b060001000a0000003c000680060001000a00000008100700", @ANYRESDEC=r8, @ANYRESOCT=r4], 0xf0}, 0x1, 0x0, 0x0, 0x48011}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240), 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.17102389s ago: executing program 0 (id=3009): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) syz_emit_ethernet(0x113, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd63a4bd6300d921"], 0x0) 1.960093643s ago: executing program 0 (id=3010): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) pipe2$9p(&(0x7f0000000080), 0x80000) writev(r0, &(0x7f0000000000), 0x0) 1.879545904s ago: executing program 2 (id=3011): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060001"], 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.704668648s ago: executing program 0 (id=3012): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) socket(0x2, 0x80805, 0x0) memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\xe5\xb4}5\xe7-3\x8f\x98\xcep\xebQ\x99\xd3\xa5\xd0\xcb\x04\xe1#D\"[=\x81\xaa\"\x9b\xbda\xaen\xee\xbfU\xd4\x82it;\xd18`\xd3\xcd\xf0\xe3\xa9\xe6e\x06G\x11x\"qE\xfay}|.\xd2', 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) pipe2$9p(&(0x7f0000000080), 0x80000) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {0x0}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1.347874263s ago: executing program 2 (id=3013): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$usbfs(&(0x7f0000000040), 0x74, 0x101301) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$media(&(0x7f0000000000), 0xe, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x7e3c, 0x3, 0x1000009, 0xfffffff9, 0x2cb9, 0xfffffffe, 0x7, 0x10001, 0xff000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 1.299039703s ago: executing program 0 (id=3014): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.27689155s ago: executing program 4 (id=3015): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r1 = socket(0x2a, 0x2, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x7f, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x6, 0x80, 0x7f1b, 0x5, 0x5, 0x80000000, 0xfffffffa, 0xffffffff, 0x800, 0xf20d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x401, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x8, 0x4, 0x9, 0x200, 0x3ff, 0x8000, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0x2, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0x6c, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x0, 0xf9, 0x8, 0x401, 0xffffffff, 0xe19b, 0x80000000, 0x3ff, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x1d58, 0x401, 0x3, 0x8002, 0x8, 0x36, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0xffffffff, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x9c06, 0x7, 0x0, 0x27b, 0x3, 0x1000, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0x7, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x5, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xd, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0xccf1793, 0x2c800000, 0x5d, 0x1, 0x239, 0x5, 0x5a5057fd, 0x5, 0x4, 0x6, 0x8, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0x9, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xffffffff, 0x5, 0xe8, 0x6, 0x8, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x7, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x7ffe, 0x2, 0x2, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0xffffffd8, 0x10001, 0xfffffff9, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x5, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x7, 0x3, 0x8, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x7f, 0x0, {0x6, 0x0, 0x6, 0x7ff, 0x6e6, 0xd74}, {0x8, 0x0, 0xffff, 0x8, 0x7f, 0x7fff}, 0x0, 0x8000, 0xbab2}}]}]}}]}, 0x87c}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.094416727s ago: executing program 4 (id=3016): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x542f, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000140)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x3, 0x3, 0x7fffffff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000200)=[{0x5, 0x1, 0x3, 0x1}, {0x2, 0x1, 0x2, 0x8}], 0x10, 0x7, @void, @value}, 0x94) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000300)=r3) r4 = socket$inet(0x2, 0x0, 0x9) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x700f}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000003c0)={r6, 0xffffffff}, 0x8) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) r7 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 980.847663ms ago: executing program 0 (id=3017): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000005700000034000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 623.420575ms ago: executing program 2 (id=3018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x840) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfce) 473.003257ms ago: executing program 0 (id=3019): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0xbc989613abadf7b5, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000442ab420720c0d009b270102030109021223010000000009e9ffffffdaa292"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000004c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 316.500686ms ago: executing program 1 (id=3020): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x2, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x60, 0x0, @fd_index=0x1, 0x80, {}, 0x4, 0x5}) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r7 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r7, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'dummy0\x00', 0xfffffffc}, 0x18) write$binfmt_script(r6, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'btrfs_cow_block\x00'}, {0x20, 'btrfs_cow_block\x00'}, {}, {0x20, '&\t'}, {0x20, 'btrfs_cow_block\x00'}, {0x20, 'btrfs_cow_block\x00'}, {0x20, ')+}.-./'}], 0xa, "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"}, 0x104b) 0s ago: executing program 3 (id=3021): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="f2e0b7531e2063b7a6345c67a555f26bf2ef0fbc7006a89c01a5517e64a10b791358670701b411733c3a0934877d466f0cd8cb7f6a170fc7a990fb07b3e8d4c588345e6b8fdf025851f3aadc6c3abde6ba8a4b5ece8598be1d57bd1e85c8e8660cbc3a", 0x63}], 0x1}}], 0x1, 0x48100) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8582, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) dup(0xffffffffffffffff) syz_io_uring_setup(0xed8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100}, 0x0, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0x6, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000) kernel console output (not intermixed with test programs): 20][ T3003] usb 3-1: Failed to submit usb control message: -71 [ 658.835760][ T3003] usb 3-1: unable to send the bmi data to the device: -71 [ 658.864680][ T9] usb 3-1: USB disconnect, device number 106 [ 658.932464][ T3003] usb 3-1: unable to get target info from device [ 658.983057][ T3003] usb 3-1: could not get target info (-71) [ 659.003485][ T3003] usb 3-1: could not probe fw (-71) [ 660.455750][T13291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.917937][ T5896] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 663.128440][ T5896] usb 3-1: config 0 has no interfaces? [ 663.143271][ T5896] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 663.170600][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.190770][ T5896] usb 3-1: Product: syz [ 663.200147][ T5896] usb 3-1: Manufacturer: syz [ 663.220572][ T5896] usb 3-1: SerialNumber: syz [ 663.259714][T13339] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2357'. [ 663.270015][T13339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2357'. [ 663.277795][ T5896] usb 3-1: config 0 descriptor?? [ 663.283499][T13339] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2357'. [ 663.301754][T13339] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2357'. [ 664.729342][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2360'. [ 665.517522][T13363] sctp: [Deprecated]: syz.1.2365 (pid 13363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 665.517522][T13363] Use struct sctp_sack_info instead [ 665.613607][ T9849] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 666.004847][ T9849] usb 5-1: config 0 has no interfaces? [ 666.195282][ T9849] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 666.244741][ T9849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.308031][ T9849] usb 5-1: Product: syz [ 666.312268][ T9849] usb 5-1: Manufacturer: syz [ 666.535175][ T9849] usb 5-1: SerialNumber: syz [ 666.591508][ T9849] usb 5-1: config 0 descriptor?? [ 667.106918][ T5896] usb 3-1: USB disconnect, device number 107 [ 667.969999][T13392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2374'. [ 668.515905][ T976] usb 5-1: USB disconnect, device number 94 [ 669.672413][T13411] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2382'. [ 670.321645][T13423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2387'. [ 671.577283][T13448] sctp: [Deprecated]: syz.2.2395 (pid 13448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 671.577283][T13448] Use struct sctp_sack_info instead [ 672.207222][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2396'. [ 672.560994][T13453] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2397'. [ 673.512098][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2402'. [ 673.981334][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2407'. [ 674.004101][ T979] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 674.178224][ T979] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 674.217459][ T979] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.251210][ T979] usb 5-1: config 0 has no interface number 0 [ 674.267377][ T979] usb 5-1: config 0 interface 20 altsetting 119 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 674.302673][ T979] usb 5-1: config 0 interface 20 has no altsetting 0 [ 674.323353][ T979] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 674.338708][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.362792][ T979] usb 5-1: Product: syz [ 674.376403][ T979] usb 5-1: Manufacturer: syz [ 674.387530][T13493] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2411'. [ 674.403015][ T979] usb 5-1: SerialNumber: syz [ 674.428691][ T979] usb 5-1: config 0 descriptor?? [ 674.467783][ T979] keyspan 5-1:0.20: Keyspan 1 port adapter converter detected [ 674.500274][ T979] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 87 [ 674.520016][ T979] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 7 [ 674.555584][ T979] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 81 [ 674.580624][ T979] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 1 [ 674.608970][ T979] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 2 [ 674.637497][ T979] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 85 [ 674.658911][T13472] netlink: 368 bytes leftover after parsing attributes in process `syz.4.2404'. [ 674.668881][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2404'. [ 674.688598][ T979] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 5 [ 674.737337][ T979] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 674.780435][ T979] usb 5-1: USB disconnect, device number 95 [ 674.801130][ T979] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 674.826861][ T979] keyspan 5-1:0.20: device disconnected [ 675.203824][ T5895] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 675.405276][ T5895] usb 2-1: config 0 has no interfaces? [ 675.476048][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 675.485456][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.707540][ T5895] usb 2-1: Product: syz [ 675.729050][ T5895] usb 2-1: Manufacturer: syz [ 675.753597][ T5895] usb 2-1: SerialNumber: syz [ 675.785215][ T5895] usb 2-1: config 0 descriptor?? [ 677.268587][T13544] syzkaller1: entered promiscuous mode [ 677.289442][T13544] syzkaller1: entered allmulticast mode [ 677.713521][ T9] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 677.893237][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 677.905066][ T9] usb 3-1: config 0 has no interface number 0 [ 677.911294][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 678.020427][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.042114][ T9] usb 3-1: config 0 descriptor?? [ 678.067436][ T9] usb 3-1: selecting invalid altsetting 1 [ 678.084107][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 678.090515][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 678.216361][T13561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2439'. [ 678.232464][T13561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2439'. [ 678.282090][T13553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.312505][T13553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.401358][ T9] DVB: Unable to find symbol cx22700_attach() [ 678.723226][ T9] DVB: Unable to find symbol tda10046_attach() [ 678.818727][ T10] usb 2-1: USB disconnect, device number 96 [ 678.853792][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 678.911702][ T9] usb 3-1: USB disconnect, device number 108 [ 679.354945][T13575] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2444'. [ 679.418168][T13575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2444'. [ 679.586550][T13575] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2444'. [ 679.603914][T13580] netlink: 'syz.3.2441': attribute type 16 has an invalid length. [ 679.611898][T13580] netlink: 'syz.3.2441': attribute type 3 has an invalid length. [ 679.620171][T13580] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.2441'. [ 679.733721][T13575] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2444'. [ 681.043554][ T5895] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 681.229451][ T5895] usb 5-1: config 0 has no interfaces? [ 681.250421][ T5895] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 681.260020][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.268710][ T5895] usb 5-1: Product: syz [ 681.275103][ T5895] usb 5-1: Manufacturer: syz [ 681.298713][ T5895] usb 5-1: SerialNumber: syz [ 681.333630][ T5895] usb 5-1: config 0 descriptor?? [ 682.813567][ T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 683.053586][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 683.073837][ T9] usb 2-1: config index 0 descriptor too short (expected 8978, got 18) [ 683.091112][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 683.105789][T13640] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2468'. [ 683.137670][T13640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2468'. [ 683.149698][ T9] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 683.176582][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.186671][T13640] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2468'. [ 683.199463][ T9] usb 2-1: Product: syz [ 683.207652][ T9] usb 2-1: Manufacturer: syz [ 683.222474][ T9] usb 2-1: SerialNumber: syz [ 683.244350][T13640] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2468'. [ 683.263891][ T9] usb 2-1: config 0 descriptor?? [ 683.763707][ T9] usb 5-1: USB disconnect, device number 96 [ 684.525949][T13668] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2479'. [ 684.538445][T13668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2479'. [ 684.547649][T13668] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2479'. [ 684.558488][T13668] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2479'. [ 685.296816][T13679] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2483'. [ 685.521972][ T5896] usb 2-1: USB disconnect, device number 97 [ 685.988812][T13697] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2491'. [ 686.063685][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 686.233527][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 686.267085][T13705] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2495'. [ 686.338055][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 686.365195][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 686.458861][ T9] usb 2-1: can't read configurations, error -71 [ 687.924090][T13723] sctp: [Deprecated]: syz.3.2498 (pid 13723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 687.924090][T13723] Use struct sctp_sack_info instead [ 688.702219][T13731] syzkaller1: entered promiscuous mode [ 688.720178][T13731] syzkaller1: entered allmulticast mode [ 689.269408][T13740] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2503'. [ 690.094327][T13751] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2508'. [ 690.273598][ T5882] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 691.092272][ T5882] usb 3-1: config 0 has no interfaces? [ 691.106623][ T5882] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 691.128411][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.154691][ T5882] usb 3-1: Product: syz [ 691.182100][ T5882] usb 3-1: Manufacturer: syz [ 691.211650][ T5882] usb 3-1: SerialNumber: syz [ 691.285639][ T5882] usb 3-1: config 0 descriptor?? [ 691.843800][T13770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2514'. [ 691.893502][T13770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2514'. [ 691.977446][T13770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2514'. [ 692.073631][T13770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2514'. [ 692.303479][ T9] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 692.567625][ T9] usb 2-1: config 0 has no interfaces? [ 692.585850][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 692.595343][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.610236][ T9] usb 2-1: Product: syz [ 692.652570][ T9] usb 2-1: Manufacturer: syz [ 692.746849][ T9] usb 2-1: SerialNumber: syz [ 692.996965][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 693.003899][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.035594][ T9] usb 2-1: config 0 descriptor?? [ 693.507799][T13791] sctp: [Deprecated]: syz.0.2520 (pid 13791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 693.507799][T13791] Use struct sctp_sack_info instead [ 694.014652][T13795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2518'. [ 694.424090][T13795] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 695.189315][T13793] netlink: 'syz.4.2518': attribute type 16 has an invalid length. [ 695.207451][T13793] netlink: 'syz.4.2518': attribute type 3 has an invalid length. [ 695.225772][T13793] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.2518'. [ 695.248751][ T5896] usb 3-1: USB disconnect, device number 109 [ 695.783616][ T5896] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 695.943563][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 695.958966][ T5896] usb 3-1: config index 0 descriptor too short (expected 8978, got 18) [ 695.978618][ T5896] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 696.012764][ T5896] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 696.025209][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.053453][ T5896] usb 3-1: Product: syz [ 696.110688][T13807] delete_channel: no stack [ 696.310949][ T5896] usb 3-1: Manufacturer: syz [ 696.320591][ T5896] usb 3-1: SerialNumber: syz [ 696.353050][ T5896] usb 3-1: config 0 descriptor?? [ 696.623807][ T10] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 696.685705][ T5882] usb 2-1: USB disconnect, device number 100 [ 696.818581][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 696.893622][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 696.915573][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 696.946220][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.982891][T13807] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 697.016131][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 697.043730][T13815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2526'. [ 697.305064][ T9] usb 5-1: USB disconnect, device number 97 [ 697.532697][T13826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2528'. [ 697.573585][T13826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2528'. [ 697.683179][ T6810] udevd[6810]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 698.483504][ T979] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 698.510058][ T10] usb 3-1: USB disconnect, device number 110 [ 698.691797][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 698.775928][ T979] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 698.788518][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 698.933056][ T979] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 698.950661][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.431856][ T979] usb 4-1: Product: syz [ 699.522217][ T979] usb 4-1: Manufacturer: syz [ 699.545946][ T979] usb 4-1: SerialNumber: syz [ 699.572161][T13843] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2533'. [ 699.594909][ T979] usb 4-1: config 0 descriptor?? [ 699.923888][ T979] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 700.074095][ T979] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 700.630921][T13860] delete_channel: no stack [ 700.996383][ T10] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 701.188184][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 701.200170][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 701.217125][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 701.240450][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.277469][T13860] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 701.295392][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 701.413634][ T976] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 701.583727][ T976] usb 5-1: device descriptor read/64, error -71 [ 701.615574][T13871] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2545'. [ 701.724858][ T5882] usb 2-1: USB disconnect, device number 101 [ 701.833612][ T976] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 702.003158][ T10] usb 4-1: USB disconnect, device number 114 [ 702.013530][ T976] usb 5-1: device descriptor read/64, error -71 [ 702.178292][ T976] usb usb5-port1: attempt power cycle [ 702.533485][ T976] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 702.565418][ T976] usb 5-1: device descriptor read/8, error -71 [ 702.818898][ T976] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 702.864530][ T976] usb 5-1: device descriptor read/8, error -71 [ 702.978242][ T976] usb usb5-port1: unable to enumerate USB device [ 703.511171][ T976] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 703.785493][ T976] usb 3-1: config 0 has no interfaces? [ 703.805409][ T976] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 703.829412][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.849657][ T976] usb 3-1: Product: syz [ 703.858588][ T976] usb 3-1: Manufacturer: syz [ 703.874212][ T976] usb 3-1: SerialNumber: syz [ 703.924303][ T976] usb 3-1: config 0 descriptor?? [ 704.515374][T13905] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2557'. [ 704.717069][T13911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2558'. [ 704.807104][T13911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2558'. [ 704.868004][T13911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2558'. [ 704.951536][T13911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2558'. [ 705.942412][ T976] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 706.093614][ T976] usb 5-1: device descriptor read/64, error -71 [ 706.403671][ T976] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 706.461022][ T5895] usb 3-1: USB disconnect, device number 111 [ 706.573523][ T976] usb 5-1: device descriptor read/64, error -71 [ 706.683831][ T976] usb usb5-port1: attempt power cycle [ 706.911362][T13950] "syz.3.2571" (13950) uses obsolete ecb(arc4) skcipher [ 706.984437][T13952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2574'. [ 707.009628][T13952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2574'. [ 707.302152][ T976] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 707.320719][T13952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2574'. [ 707.337041][ T976] usb 5-1: device descriptor read/8, error -71 [ 707.402379][T13952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2574'. [ 707.733626][ T976] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 707.770399][ T976] usb 5-1: device descriptor read/8, error -71 [ 707.924066][ T976] usb usb5-port1: unable to enumerate USB device [ 708.847672][T13979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2582'. [ 708.883550][T13979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2582'. [ 709.171643][T13985] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2584'. [ 710.103716][ T10] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 710.297010][ T10] usb 3-1: config 0 has no interfaces? [ 710.417708][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 710.491940][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.538755][ T10] usb 3-1: Product: syz [ 710.554088][ T10] usb 3-1: Manufacturer: syz [ 710.583270][ T10] usb 3-1: SerialNumber: syz [ 710.628227][ T10] usb 3-1: config 0 descriptor?? [ 711.197469][T13996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2587'. [ 712.206043][T14015] netlink: 'syz.3.2589': attribute type 16 has an invalid length. [ 712.214546][T14015] netlink: 'syz.3.2589': attribute type 3 has an invalid length. [ 712.222317][T14015] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.2589'. [ 712.941077][T14023] sctp: [Deprecated]: syz.0.2595 (pid 14023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 712.941077][T14023] Use struct sctp_sack_info instead [ 714.190263][ T5896] usb 3-1: USB disconnect, device number 112 [ 714.444150][T14043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2602'. [ 714.493786][ T5895] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 714.602065][T14051] "syz.0.2603" (14051) uses obsolete ecb(arc4) skcipher [ 714.682554][ T5895] usb 4-1: config 0 has no interfaces? [ 714.780113][ T5895] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 714.780132][T14053] syzkaller1: entered promiscuous mode [ 714.780155][T14053] syzkaller1: entered allmulticast mode [ 714.796049][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.885622][ T5895] usb 4-1: Product: syz [ 714.893860][ T5895] usb 4-1: Manufacturer: syz [ 714.907655][ T5895] usb 4-1: SerialNumber: syz [ 715.061212][ T5895] usb 4-1: config 0 descriptor?? [ 715.115258][T14057] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2606'. [ 715.151388][T14057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2606'. [ 715.168328][T14059] "syz.1.2605" (14059) uses obsolete ecb(arc4) skcipher [ 715.175605][T14057] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2606'. [ 715.190927][T14057] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2606'. [ 716.710839][T14074] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2612'. [ 716.937271][ T30] kauditd_printk_skb: 264 callbacks suppressed [ 716.937286][ T30] audit: type=1326 audit(1744674614.500:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14079 comm="syz.2.2615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb83a58d169 code=0x0 [ 717.110601][T14086] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2617'. [ 717.131926][T14086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2617'. [ 717.142869][T14086] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2617'. [ 717.886555][ T10] usb 4-1: USB disconnect, device number 115 [ 717.993880][ T5896] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 718.204878][ T5896] usb 5-1: config 0 has no interfaces? [ 718.233845][ T5896] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 718.243734][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.252435][ T5896] usb 5-1: Product: syz [ 718.305319][ T5896] usb 5-1: Manufacturer: syz [ 718.310063][ T5896] usb 5-1: SerialNumber: syz [ 718.398508][ T5896] usb 5-1: config 0 descriptor?? [ 718.497994][T14118] __nla_validate_parse: 1 callbacks suppressed [ 718.498010][T14118] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2630'. [ 718.536443][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'. [ 718.541043][T14118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2630'. [ 718.578309][T14118] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2630'. [ 718.594378][T14118] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2630'. [ 718.623356][T14117] vlan2: entered promiscuous mode [ 718.636592][T14117] batadv0: entered promiscuous mode [ 718.760060][T14122] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2620'. [ 718.791243][T14122] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2620'. [ 720.263664][ T5895] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 720.473026][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 720.495894][T14148] vlan3: entered promiscuous mode [ 720.501095][T14148] batadv0: entered promiscuous mode [ 720.523546][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 720.632622][ T5895] usb 4-1: unable to get BOS descriptor or descriptor too short [ 720.642209][ T5895] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 720.650419][ T5895] usb 4-1: can't read configurations, error -71 [ 720.724078][ T5896] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 720.903568][ T5896] usb 3-1: config 0 has no interfaces? [ 720.918936][ T5896] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 720.928742][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.943483][ T5896] usb 3-1: Product: syz [ 720.952305][ T5896] usb 3-1: Manufacturer: syz [ 721.142511][ T5882] usb 5-1: USB disconnect, device number 106 [ 721.143873][ T5896] usb 3-1: SerialNumber: syz [ 721.206645][ T5896] usb 3-1: config 0 descriptor?? [ 722.623790][ T5895] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 722.815703][ T5895] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 722.842758][ T5895] usb 4-1: config 0 has no interface number 0 [ 722.893633][ T5895] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 722.955972][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.007139][ T5895] usb 4-1: config 0 descriptor?? [ 723.057187][ T5895] usb 4-1: selecting invalid altsetting 1 [ 723.064795][ T5895] dvb_ttusb_budget: ttusb_init_controller: error [ 723.071277][ T5895] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 723.249951][T14176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.308440][ T5895] DVB: Unable to find symbol cx22700_attach() [ 723.315658][T14176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.353669][ T5882] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 723.500876][ T5895] DVB: Unable to find symbol tda10046_attach() [ 723.525342][ T5882] usb 2-1: config 0 has no interfaces? [ 723.535240][ T5895] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 723.544805][ T5882] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 723.580653][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.613295][ T5895] usb 4-1: USB disconnect, device number 118 [ 723.649525][ T5882] usb 2-1: Product: syz [ 723.678093][ T5882] usb 2-1: Manufacturer: syz [ 723.707319][ T5882] usb 2-1: SerialNumber: syz [ 723.746546][ T5882] usb 2-1: config 0 descriptor?? [ 723.786253][ T5896] usb 3-1: USB disconnect, device number 113 [ 724.120180][T14203] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2658'. [ 724.148701][T14203] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2658'. [ 724.873566][ T5896] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 725.185756][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 725.228510][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 725.240703][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 725.254595][T14220] sctp: [Deprecated]: syz.3.2669 (pid 14220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 725.254595][T14220] Use struct sctp_sack_info instead [ 725.290431][ T5896] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 725.299853][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.335306][ T5896] usb 3-1: Product: syz [ 725.339550][ T5896] usb 3-1: Manufacturer: syz [ 725.349124][ T5896] usb 3-1: SerialNumber: syz [ 725.548207][ T5896] usb 3-1: config 0 descriptor?? [ 725.863980][ T5896] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 725.886351][ T5896] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 726.873748][ T5882] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 726.947747][ T5895] usb 2-1: USB disconnect, device number 102 [ 727.064653][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 727.193682][ T5882] usb 5-1: unable to get BOS descriptor or descriptor too short [ 727.233073][ T5882] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 727.252977][ T5882] usb 5-1: can't read configurations, error -71 [ 727.345232][T14237] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2676'. [ 727.805760][ T10] usb 3-1: USB disconnect, device number 114 [ 728.580457][ T5895] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 728.915214][ T5895] usb 4-1: config 0 has no interfaces? [ 728.972593][ T5895] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 729.019267][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.033760][ T9849] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 729.083718][ T5895] usb 4-1: Product: syz [ 729.115772][ T5895] usb 4-1: Manufacturer: syz [ 729.120454][ T5895] usb 4-1: SerialNumber: syz [ 729.222029][ T5895] usb 4-1: config 0 descriptor?? [ 729.292963][ T9849] usb 3-1: config 0 has no interfaces? [ 729.312543][ T9849] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 729.321994][ T9849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.342307][ T9849] usb 3-1: Product: syz [ 729.352498][ T9849] usb 3-1: Manufacturer: syz [ 729.362610][ T9849] usb 3-1: SerialNumber: syz [ 729.400704][ T9849] usb 3-1: config 0 descriptor?? [ 729.564262][T14277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2693'. [ 730.392118][T14284] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2686'. [ 730.427358][T14284] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2686'. [ 730.687261][T14290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2694'. [ 730.774043][ T9849] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 730.933890][ T9849] usb 5-1: Using ep0 maxpacket: 16 [ 730.949428][ T9849] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 730.978747][ T9849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 731.008551][ T9849] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 731.033304][ T9849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.048681][ T9849] usb 5-1: Product: syz [ 731.120418][ T9849] usb 5-1: Manufacturer: syz [ 731.132557][ T9849] usb 5-1: SerialNumber: syz [ 731.177091][ T9849] usb 5-1: config 0 descriptor?? [ 731.514122][ T9849] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 731.538783][ T9849] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 731.753093][ T976] usb 3-1: USB disconnect, device number 115 [ 731.941799][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.952229][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.248645][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2699'. [ 732.267486][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2699'. [ 732.294222][ T10] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 732.400556][T14308] Invalid logical block size (-4097) [ 732.456630][ T10] usb 3-1: config index 0 descriptor too short (expected 8192, got 77) [ 732.469825][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.501084][ T9849] usb 4-1: USB disconnect, device number 119 [ 732.525903][ T10] usb 3-1: config 0 has no interfaces? [ 732.565935][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 732.583782][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.631664][ T10] usb 3-1: Product: syz [ 732.653000][ T10] usb 3-1: Manufacturer: syz [ 732.679459][ T10] usb 3-1: SerialNumber: syz [ 732.704868][ T10] usb 3-1: config 0 descriptor?? [ 732.776463][T14315] sctp: [Deprecated]: syz.3.2701 (pid 14315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 732.776463][T14315] Use struct sctp_sack_info instead [ 732.975479][ T976] usb 5-1: USB disconnect, device number 109 [ 733.143781][ T5896] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 733.313636][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 733.329336][ T5896] usb 2-1: config index 0 descriptor too short (expected 8978, got 18) [ 733.348992][ T5896] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 733.372910][ T5896] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 733.401112][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.411749][ T5896] usb 2-1: Product: syz [ 733.416531][ T5896] usb 2-1: Manufacturer: syz [ 733.421461][ T5896] usb 2-1: SerialNumber: syz [ 733.429377][ T5896] usb 2-1: config 0 descriptor?? [ 733.513579][ T976] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 733.708050][ T976] usb 5-1: config 0 has no interfaces? [ 733.723865][ T976] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 733.733173][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.741354][ T976] usb 5-1: Product: syz [ 733.748012][ T976] usb 5-1: Manufacturer: syz [ 733.755566][ T976] usb 5-1: SerialNumber: syz [ 733.773767][ T976] usb 5-1: config 0 descriptor?? [ 734.922465][ T976] usb 3-1: USB disconnect, device number 116 [ 735.009419][T14337] bond0: entered promiscuous mode [ 735.022215][T14337] bond_slave_0: entered promiscuous mode [ 735.034182][T14337] bond_slave_1: entered promiscuous mode [ 735.883338][ T5882] usb 2-1: USB disconnect, device number 103 [ 736.231862][T14347] CIFS: VFS: Malformed UNC in devname [ 737.705143][ T5882] usb 5-1: USB disconnect, device number 110 [ 737.894884][T14361] sctp: [Deprecated]: syz.0.2718 (pid 14361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 737.894884][T14361] Use struct sctp_sack_info instead [ 738.266802][T14371] "syz.3.2716" (14371) uses obsolete ecb(arc4) skcipher [ 738.833741][ T5895] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 739.033695][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 739.041426][ T5895] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 739.063453][ T5895] usb 3-1: config 0 has no interface number 0 [ 739.093742][ T5895] usb 3-1: config 0 interface 29 has no altsetting 0 [ 739.133802][ T5895] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 739.142967][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.224054][ T5895] usb 3-1: Product: syz [ 739.224075][ T5895] usb 3-1: Manufacturer: syz [ 739.224087][ T5895] usb 3-1: SerialNumber: syz [ 739.235146][ T5895] usb 3-1: config 0 descriptor?? [ 739.445263][ T5895] peak_usb 3-1:0.29 can0: unable to request usb[type=0 value=1] err=-32 [ 739.469900][ T5895] peak_usb 3-1:0.29: unable to read PCAN-USB X6 firmware info (err -32) [ 739.474337][ T5896] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 739.574538][ T5895] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -32 [ 739.630537][ T5895] usb 3-1: USB disconnect, device number 117 [ 739.646233][ T5896] usb 5-1: config 0 has no interfaces? [ 739.652196][ T5896] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 739.684804][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.708058][ T5896] usb 5-1: config 0 descriptor?? [ 739.940311][ T5895] usb 5-1: USB disconnect, device number 111 [ 740.134798][ T5882] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 740.299435][ T5882] usb 4-1: config 0 has no interfaces? [ 740.349932][ T5882] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 740.375657][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.412003][ T5882] usb 4-1: Product: syz [ 740.422274][ T5882] usb 4-1: Manufacturer: syz [ 740.455448][ T5882] usb 4-1: SerialNumber: syz [ 740.529404][ T5882] usb 4-1: config 0 descriptor?? [ 742.496461][T14418] "syz.0.2737" (14418) uses obsolete ecb(arc4) skcipher [ 743.035104][ T5896] usb 4-1: USB disconnect, device number 120 [ 743.579007][T14427] FAULT_INJECTION: forcing a failure. [ 743.579007][T14427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.596933][T11550] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 743.613950][T14427] CPU: 1 UID: 0 PID: 14427 Comm: syz.2.2741 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 743.613984][T14427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 743.613997][T14427] Call Trace: [ 743.614007][T14427] [ 743.614017][T14427] dump_stack_lvl+0x241/0x360 [ 743.614061][T14427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 743.614092][T14427] ? __pfx__printk+0x10/0x10 [ 743.614131][T14427] should_fail_ex+0x424/0x570 [ 743.614164][T14427] _copy_from_user+0x2d/0xb0 [ 743.614197][T14427] copy_from_sockptr_offset+0x60/0xb0 [ 743.614231][T14427] do_ip6t_set_ctl+0xbed/0x1270 [ 743.614261][T14427] ? __pfx___mutex_trylock_common+0x10/0x10 [ 743.614287][T14427] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 743.614325][T14427] ? __mutex_unlock_slowpath+0x229/0x800 [ 743.614357][T14427] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 743.614382][T14427] ? __pfx___mutex_lock+0x10/0x10 [ 743.614413][T14427] nf_setsockopt+0x295/0x2c0 [ 743.614443][T14427] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 743.614480][T14427] smc_setsockopt+0x25c/0xd50 [ 743.614504][T14427] ? __pfx_aa_sk_perm+0x10/0x10 [ 743.614527][T14427] ? __pfx_smc_setsockopt+0x10/0x10 [ 743.614548][T14427] ? aa_sock_opt_perm+0x79/0x120 [ 743.614577][T14427] ? __pfx_smc_setsockopt+0x10/0x10 [ 743.614596][T14427] do_sock_setsockopt+0x3b1/0x710 [ 743.614619][T14427] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 743.614635][T14427] ? __fget_files+0x2a/0x420 [ 743.614656][T14427] ? __fget_files+0x39d/0x420 [ 743.614670][T14427] ? __fget_files+0x2a/0x420 [ 743.614692][T14427] __x64_sys_setsockopt+0x1ee/0x280 [ 743.614716][T14427] do_syscall_64+0xf3/0x230 [ 743.614739][T14427] ? clear_bhb_loop+0x45/0xa0 [ 743.614759][T14427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.614777][T14427] RIP: 0033:0x7fb83a58d169 [ 743.614793][T14427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.614808][T14427] RSP: 002b:00007fb8383f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 743.614828][T14427] RAX: ffffffffffffffda RBX: 00007fb83a7a5fa0 RCX: 00007fb83a58d169 [ 743.614840][T14427] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 743.614851][T14427] RBP: 00007fb8383f6090 R08: 00000000000003f8 R09: 0000000000000000 [ 743.614863][T14427] R10: 0000200000000ec0 R11: 0000000000000246 R12: 0000000000000001 [ 743.614874][T14427] R13: 0000000000000000 R14: 00007fb83a7a5fa0 R15: 00007fb83a8cfa28 [ 743.614900][T14427] [ 743.886492][T11550] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 743.914465][T11550] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 743.926379][T11550] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 743.935980][T11550] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 744.553716][ T5895] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 744.750760][ T5895] usb 3-1: config 0 has no interfaces? [ 744.869740][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 744.946203][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.008345][ T5895] usb 3-1: Product: syz [ 745.012715][ T5895] usb 3-1: Manufacturer: syz [ 745.017539][ T5895] usb 3-1: SerialNumber: syz [ 745.025854][ T5895] usb 3-1: config 0 descriptor?? [ 745.309633][T14433] chnl_net:caif_netlink_parms(): no params data found [ 745.610708][T14440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2744'. [ 745.911149][T14468] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2753'. [ 746.033915][ T55] Bluetooth: hci5: command tx timeout [ 746.143731][T14433] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.173812][T14433] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.186327][T14433] bridge_slave_0: entered allmulticast mode [ 746.240879][T14433] bridge_slave_0: entered promiscuous mode [ 746.365801][T14433] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.380573][T14433] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.560608][T14433] bridge_slave_1: entered allmulticast mode [ 746.590997][T14433] bridge_slave_1: entered promiscuous mode [ 746.852600][T14433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.890243][T14433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.092132][T14433] team0: Port device team_slave_0 added [ 747.123100][T14433] team0: Port device team_slave_1 added [ 747.332242][T14433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.453505][T14433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.604758][T14433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.622605][T14433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.643121][T14433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.691883][ T5882] usb 3-1: USB disconnect, device number 118 [ 747.757915][T14433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.059089][T14491] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2762'. [ 748.085369][T14433] hsr_slave_0: entered promiscuous mode [ 748.101762][T14433] hsr_slave_1: entered promiscuous mode [ 748.108623][T14433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 748.116886][ T55] Bluetooth: hci5: command tx timeout [ 748.122782][T14433] Cannot create hsr debugfs directory [ 748.983467][ T5882] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 749.105636][T14433] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.583193][ T5882] usb 4-1: config 0 has no interfaces? [ 749.609775][ T5882] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 749.626624][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.638604][ T5882] usb 4-1: Product: syz [ 749.648143][ T5882] usb 4-1: Manufacturer: syz [ 749.662651][ T5882] usb 4-1: SerialNumber: syz [ 749.693309][ T5882] usb 4-1: config 0 descriptor?? [ 749.773273][T14433] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.941210][T14433] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.211353][ T55] Bluetooth: hci5: command tx timeout [ 750.422180][T14433] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.865392][T14433] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 750.882431][T14518] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2773'. [ 750.971438][T14433] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 750.995931][T14433] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 751.022529][T14433] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 751.131079][T14522] syzkaller1: entered promiscuous mode [ 751.139410][T14522] syzkaller1: entered allmulticast mode [ 751.334004][ T5882] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 751.496722][ T5882] usb 3-1: device descriptor read/64, error -71 [ 751.607140][T14433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.705804][T14433] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.750915][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.753532][ T5882] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 751.758247][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.907611][ T647] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.914843][ T647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.946843][ T5882] usb 3-1: device descriptor read/64, error -71 [ 752.074105][ T5882] usb usb3-port1: attempt power cycle [ 752.182405][T14433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.283542][ T55] Bluetooth: hci5: command tx timeout [ 752.523788][ T5882] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 752.579100][ T5896] usb 4-1: USB disconnect, device number 121 [ 752.579627][ T5882] usb 3-1: device descriptor read/8, error -71 [ 752.692461][T14433] veth0_vlan: entered promiscuous mode [ 752.825810][T14433] veth1_vlan: entered promiscuous mode [ 752.873879][ T5882] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 752.886010][T14433] veth0_macvtap: entered promiscuous mode [ 752.896832][T14433] veth1_macvtap: entered promiscuous mode [ 753.054122][ T5882] usb 3-1: device descriptor read/8, error -71 [ 753.080352][T14433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.116030][T14433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.179189][T14433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.193824][ T5882] usb usb3-port1: unable to enumerate USB device [ 753.238052][T14433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.281641][T14433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.313030][T14433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.338396][T14433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.396009][T14433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.412745][T14433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.431762][T14433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.506625][T14433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.585880][T14433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.609066][T14433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.676772][T14433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.795106][T14433] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.843514][T14433] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.853972][T14433] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.882502][T14433] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.444363][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.451520][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.587241][T14553] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2783'. [ 756.113701][ T55] Bluetooth: hci5: command 0x0405 tx timeout [ 756.119983][T14547] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 756.907363][T14547] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 756.922732][T14547] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 757.060573][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.105936][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.316292][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.331196][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.917321][ T5896] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 757.956181][ T5896] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 757.983934][T14582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2792'. [ 758.193700][ T55] Bluetooth: hci5: command 0x0405 tx timeout [ 758.222632][T14586] sctp: [Deprecated]: syz.1.2793 (pid 14586) Use of struct sctp_assoc_value in delayed_ack socket option. [ 758.222632][T14586] Use struct sctp_sack_info instead [ 758.526202][ T30] audit: type=1326 audit(1744674656.090:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83a58d169 code=0x7ffc0000 [ 758.569177][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2797'. [ 758.586418][ T30] audit: type=1326 audit(1744674656.090:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fb83a58d169 code=0x7ffc0000 [ 758.614629][ T30] audit: type=1326 audit(1744674656.090:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83a58d169 code=0x7ffc0000 [ 758.638138][ T30] audit: type=1326 audit(1744674656.090:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb83a58d169 code=0x7ffc0000 [ 758.661729][ T30] audit: type=1326 audit(1744674656.090:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83a58d169 code=0x7ffc0000 [ 758.685198][ T30] audit: type=1326 audit(1744674656.090:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb83a58d169 code=0x7ffc0000 [ 758.710929][ T30] audit: type=1326 audit(1744674656.090:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83a58d169 code=0x7ffc0000 [ 758.768377][ T30] audit: type=1326 audit(1744674656.090:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb83a58d169 code=0x7ffc0000 [ 758.820191][ T30] audit: type=1326 audit(1744674656.090:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83a58d169 code=0x7ffc0000 [ 758.853618][ T5896] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 758.887560][ T30] audit: type=1326 audit(1744674656.090:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83a58d169 code=0x7ffc0000 [ 759.020050][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.031575][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.068699][ T5896] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 759.200988][T14600] "syz.2.2798" (14600) uses obsolete ecb(arc4) skcipher [ 759.259122][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.327788][ T5896] usb 5-1: config 0 descriptor?? [ 760.188646][ T5896] usbhid 5-1:0.0: can't add hid device: -71 [ 760.205264][ T5896] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 760.271438][ T5896] usb 5-1: USB disconnect, device number 112 [ 760.333570][T11550] Bluetooth: hci5: command 0x0405 tx timeout [ 762.363553][T11550] Bluetooth: hci5: command 0x0405 tx timeout [ 763.273691][ T10] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 763.563616][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 763.644079][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 763.693884][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 763.891988][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 763.930940][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.958928][ T10] usb 5-1: Product: syz [ 763.970684][ T10] usb 5-1: Manufacturer: syz [ 763.977858][ T10] usb 5-1: SerialNumber: syz [ 764.110189][ T10] usb 5-1: config 0 descriptor?? [ 764.423728][ T9849] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 764.455308][ T10] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 764.459441][ T10] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 764.599603][ T9849] usb 2-1: Using ep0 maxpacket: 8 [ 764.751254][ T9849] usb 2-1: unable to get BOS descriptor or descriptor too short [ 764.774842][ T9849] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 764.815774][ T9849] usb 2-1: can't read configurations, error -71 [ 766.018913][ T9849] usb 5-1: USB disconnect, device number 113 [ 766.473605][ T9849] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 766.594700][ T5882] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 766.762273][ T9849] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 766.770928][ T9849] usb 5-1: config 0 has no interface number 0 [ 766.779352][ T9849] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 766.789099][ T9849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.800525][ T5882] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 766.808862][ T5882] usb 3-1: config 0 has no interface number 0 [ 766.819742][ T9849] usb 5-1: config 0 descriptor?? [ 766.828960][ T5882] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 766.841581][ T9849] usb 5-1: selecting invalid altsetting 1 [ 766.847941][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.856746][ T9849] dvb_ttusb_budget: ttusb_init_controller: error [ 766.863220][ T9849] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 766.872396][ T5882] usb 3-1: Product: syz [ 766.877077][ T5882] usb 3-1: Manufacturer: syz [ 766.879021][T14690] dlm: non-version read from control device 36 [ 766.887657][ T5882] usb 3-1: SerialNumber: syz [ 766.910822][ T5882] usb 3-1: config 0 descriptor?? [ 766.928472][ T5882] usb-storage 3-1:0.20: USB Mass Storage device detected [ 766.964566][ T9849] DVB: Unable to find symbol cx22700_attach() [ 767.012145][ T9849] DVB: Unable to find symbol tda10046_attach() [ 767.020185][ T9849] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 767.054113][T14673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.080627][T14673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.128078][T14682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.143754][T14682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.146805][ T5882] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 767.153561][T14682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2825'. [ 767.193470][T14682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2825'. [ 767.219724][T14682] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 767.252009][T14682] team0: entered promiscuous mode [ 767.262984][ T9849] usb 5-1: USB disconnect, device number 114 [ 767.327622][T14682] team_slave_0: entered promiscuous mode [ 767.344187][T14682] team_slave_1: entered promiscuous mode [ 767.363764][T14682] geneve0: entered promiscuous mode [ 767.382536][T14682] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 767.408425][T14682] Cannot create hsr debugfs directory [ 767.463283][ T5896] usb 3-1: USB disconnect, device number 123 [ 767.710248][T14703] FAULT_INJECTION: forcing a failure. [ 767.710248][T14703] name failslab, interval 1, probability 0, space 0, times 0 [ 767.730191][T14703] CPU: 1 UID: 0 PID: 14703 Comm: syz.3.2829 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 767.730223][T14703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 767.730235][T14703] Call Trace: [ 767.730245][T14703] [ 767.730254][T14703] dump_stack_lvl+0x241/0x360 [ 767.730293][T14703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 767.730324][T14703] ? __pfx__printk+0x10/0x10 [ 767.730359][T14703] ? __pfx___might_resched+0x10/0x10 [ 767.730389][T14703] should_fail_ex+0x424/0x570 [ 767.730418][T14703] should_failslab+0xac/0x100 [ 767.730450][T14703] __kmalloc_noprof+0xdf/0x4d0 [ 767.730478][T14703] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 767.730508][T14703] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 767.730547][T14703] tomoyo_realpath_from_path+0xcf/0x5e0 [ 767.730593][T14703] tomoyo_path_number_perm+0x245/0x790 [ 767.730625][T14703] ? tomoyo_path_number_perm+0x215/0x790 [ 767.730656][T14703] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 767.730692][T14703] ? ksys_write+0x24e/0x2d0 [ 767.730725][T14703] ? __lock_acquire+0xad5/0xd80 [ 767.730768][T14703] ? __fget_files+0x2a/0x420 [ 767.730786][T14703] ? __fget_files+0x2a/0x420 [ 767.730809][T14703] ? __fget_files+0x2a/0x420 [ 767.730834][T14703] security_file_ioctl+0xc6/0x2a0 [ 767.730862][T14703] __se_sys_ioctl+0x46/0x160 [ 767.730890][T14703] do_syscall_64+0xf3/0x230 [ 767.730918][T14703] ? clear_bhb_loop+0x45/0xa0 [ 767.730943][T14703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.730965][T14703] RIP: 0033:0x7f179a38d169 [ 767.730984][T14703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.731001][T14703] RSP: 002b:00007f179b1b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.731024][T14703] RAX: ffffffffffffffda RBX: 00007f179a5a5fa0 RCX: 00007f179a38d169 [ 767.731041][T14703] RDX: 0000200000000000 RSI: 00000000c0405602 RDI: 0000000000000003 [ 767.731055][T14703] RBP: 00007f179b1b5090 R08: 0000000000000000 R09: 0000000000000000 [ 767.731113][T14703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.731126][T14703] R13: 0000000000000000 R14: 00007f179a5a5fa0 R15: 00007f179a6cfa28 [ 767.731159][T14703] [ 767.732041][T14703] ERROR: Out of memory at tomoyo_realpath_from_path. [ 768.363793][ T976] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 768.990166][ T5896] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 769.253522][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 769.284813][ T5896] usb 4-1: config index 0 descriptor too short (expected 51981, got 77) [ 769.294646][ T976] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 769.309586][ T976] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 769.320769][ T5896] usb 4-1: config 81 has too many interfaces: 211, using maximum allowed: 32 [ 769.342116][ T5896] usb 4-1: config 81 has an invalid descriptor of length 216, skipping remainder of the config [ 769.355078][ T976] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 769.377469][ T5896] usb 4-1: config 81 has 0 interfaces, different from the descriptor's value: 211 [ 769.388775][ T976] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 769.459442][ T5896] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 769.477528][ T976] usb 3-1: config 0 interface 0 has no altsetting 0 [ 769.491680][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.513335][ T976] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 769.523086][ T976] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 769.543400][ T976] usb 3-1: Product: syz [ 769.547736][ T976] usb 3-1: Manufacturer: syz [ 769.552366][ T976] usb 3-1: SerialNumber: syz [ 769.557477][ T5896] usb 4-1: Product: syz [ 769.561685][ T5896] usb 4-1: Manufacturer: syz [ 769.573156][ T5896] usb 4-1: SerialNumber: syz [ 769.597049][ T976] usb 3-1: config 0 descriptor?? [ 769.609853][ T976] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 769.804506][ T976] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 769.948001][T14716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.960361][T14716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.993652][ T5882] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 770.012692][T14716] dns_resolver: Unsupported content type (8) [ 770.176762][ T5882] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 770.244734][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.333534][ T5882] usb 2-1: config 0 has no interface number 0 [ 770.370026][ T5882] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 770.377819][ T976] usb 3-1: USB disconnect, device number 124 [ 770.401515][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.422220][ T976] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 770.440362][ T5882] usb 2-1: Product: syz [ 770.469155][ T5882] usb 2-1: Manufacturer: syz [ 770.505013][ T5882] usb 2-1: SerialNumber: syz [ 770.597095][ T5882] usb 2-1: config 0 descriptor?? [ 770.616161][ T5882] keyspan 2-1:0.20: Keyspan 1 port adapter converter detected [ 770.653900][ T5882] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 87 [ 770.676009][ T5882] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 7 [ 770.725335][ T5882] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 81 [ 770.744879][ T5882] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 1 [ 770.781647][ T5882] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 2 [ 770.818170][ T5882] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 85 [ 770.832781][T14728] netlink: 368 bytes leftover after parsing attributes in process `syz.1.2836'. [ 770.855981][T14728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2836'. [ 770.875469][ T5882] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 5 [ 770.894887][ T5882] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 770.994037][ T5882] usb 2-1: USB disconnect, device number 106 [ 771.043026][ T5882] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 771.115800][ T5882] keyspan 2-1:0.20: device disconnected [ 771.454124][T14741] "syz.2.2840" (14741) uses obsolete ecb(arc4) skcipher [ 771.769745][ T5896] usb 4-1: USB disconnect, device number 122 [ 772.020801][T14745] FAULT_INJECTION: forcing a failure. [ 772.020801][T14745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.133950][T14745] CPU: 1 UID: 0 PID: 14745 Comm: syz.0.2841 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 772.133982][T14745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 772.133996][T14745] Call Trace: [ 772.134005][T14745] [ 772.134014][T14745] dump_stack_lvl+0x241/0x360 [ 772.134054][T14745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 772.134085][T14745] ? __pfx__printk+0x10/0x10 [ 772.134129][T14745] should_fail_ex+0x424/0x570 [ 772.134157][T14745] _copy_from_user+0x2d/0xb0 [ 772.134190][T14745] move_addr_to_kernel+0x7f/0x170 [ 772.134222][T14745] __sys_connect+0xb8/0x2d0 [ 772.134258][T14745] ? __pfx___sys_connect+0x10/0x10 [ 772.134313][T14745] __x64_sys_connect+0x7a/0x90 [ 772.134347][T14745] do_syscall_64+0xf3/0x230 [ 772.134375][T14745] ? clear_bhb_loop+0x45/0xa0 [ 772.134402][T14745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.134422][T14745] RIP: 0033:0x7ff8de58d169 [ 772.134440][T14745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.134458][T14745] RSP: 002b:00007ff8df421038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 772.134480][T14745] RAX: ffffffffffffffda RBX: 00007ff8de7a5fa0 RCX: 00007ff8de58d169 [ 772.134496][T14745] RDX: 000000000000001e RSI: 0000200000000080 RDI: 0000000000000006 [ 772.134510][T14745] RBP: 00007ff8df421090 R08: 0000000000000000 R09: 0000000000000000 [ 772.134524][T14745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.134537][T14745] R13: 0000000000000000 R14: 00007ff8de7a5fa0 R15: 00007ff8de8cfa28 [ 772.134569][T14745] [ 772.173540][ T9] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 772.176527][ C1] vkms_vblank_simulate: vblank timer overrun [ 772.318839][ C1] vkms_vblank_simulate: vblank timer overrun [ 772.324840][ C1] hrtimer: interrupt took 181479906 ns [ 772.564237][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 772.564378][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 772.572277][ T9] usb 2-1: config 0 has no interface number 0 [ 772.572337][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 772.611451][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.611485][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 772.630551][ T9] usb 2-1: config 0 descriptor?? [ 772.632800][T14752] FAULT_INJECTION: forcing a failure. [ 772.632800][T14752] name failslab, interval 1, probability 0, space 0, times 0 [ 772.652083][T14752] CPU: 1 UID: 0 PID: 14752 Comm: syz.0.2845 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 772.652114][T14752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 772.652128][T14752] Call Trace: [ 772.652137][T14752] [ 772.652146][T14752] dump_stack_lvl+0x241/0x360 [ 772.652186][T14752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 772.652218][T14752] ? __pfx__printk+0x10/0x10 [ 772.652253][T14752] ? __pfx___might_resched+0x10/0x10 [ 772.652284][T14752] should_fail_ex+0x424/0x570 [ 772.652313][T14752] should_failslab+0xac/0x100 [ 772.652344][T14752] __kmalloc_noprof+0xdf/0x4d0 [ 772.652373][T14752] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 772.652405][T14752] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 772.652445][T14752] tomoyo_realpath_from_path+0xcf/0x5e0 [ 772.652493][T14752] tomoyo_path_number_perm+0x245/0x790 [ 772.652525][T14752] ? tomoyo_path_number_perm+0x215/0x790 [ 772.652556][T14752] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 772.652600][T14752] ? ksys_write+0x24e/0x2d0 [ 772.652634][T14752] ? __lock_acquire+0xad5/0xd80 [ 772.652677][T14752] ? __fget_files+0x2a/0x420 [ 772.652696][T14752] ? __fget_files+0x2a/0x420 [ 772.652718][T14752] ? __fget_files+0x2a/0x420 [ 772.652742][T14752] security_file_ioctl+0xc6/0x2a0 [ 772.652768][T14752] __se_sys_ioctl+0x46/0x160 [ 772.652794][T14752] do_syscall_64+0xf3/0x230 [ 772.652822][T14752] ? clear_bhb_loop+0x45/0xa0 [ 772.652849][T14752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.652870][T14752] RIP: 0033:0x7ff8de58d169 [ 772.652890][T14752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.652908][T14752] RSP: 002b:00007ff8df421038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.652931][T14752] RAX: ffffffffffffffda RBX: 00007ff8de7a5fa0 RCX: 00007ff8de58d169 [ 772.652947][T14752] RDX: 0000200000000380 RSI: 0000000000002283 RDI: 0000000000000003 [ 772.652961][T14752] RBP: 00007ff8df421090 R08: 0000000000000000 R09: 0000000000000000 [ 772.652975][T14752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.652988][T14752] R13: 0000000000000000 R14: 00007ff8de7a5fa0 R15: 00007ff8de8cfa28 [ 772.653021][T14752] [ 772.653031][T14752] ERROR: Out of memory at tomoyo_realpath_from_path. [ 772.753738][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 772.894464][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 772.904433][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 772.949266][ T9] usb 2-1: selecting invalid altsetting 1 [ 772.963859][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 772.970267][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 773.045793][ T9] DVB: Unable to find symbol cx22700_attach() [ 773.117433][ T9] DVB: Unable to find symbol tda10046_attach() [ 773.128149][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 773.152491][T14747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.193891][T14747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.339432][ T9] usb 2-1: USB disconnect, device number 107 [ 773.822104][T14757] chnl_net:caif_netlink_parms(): no params data found [ 774.032346][T14776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2848'. [ 774.055484][T14776] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 774.065736][ T9849] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 774.162175][T14757] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.175136][T14757] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.184416][T14757] bridge_slave_0: entered allmulticast mode [ 774.192504][T14757] bridge_slave_0: entered promiscuous mode [ 774.215227][T14757] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.222463][T14757] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.232404][T14757] bridge_slave_1: entered allmulticast mode [ 774.242625][T14757] bridge_slave_1: entered promiscuous mode [ 774.255863][ T9849] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 774.264187][ T9849] usb 3-1: config 0 has no interface number 0 [ 774.282820][ T9849] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 774.309843][ T9849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.323061][ T9849] usb 3-1: Product: syz [ 774.327778][ T9849] usb 3-1: Manufacturer: syz [ 774.333305][ T9849] usb 3-1: SerialNumber: syz [ 774.364463][ T9849] usb 3-1: config 0 descriptor?? [ 774.388196][ T9849] usb-storage 3-1:0.20: USB Mass Storage device detected [ 774.402883][T14757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.425492][ T9849] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 774.447097][T14757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.598553][T14778] netlink: 'syz.3.2848': attribute type 16 has an invalid length. [ 774.606597][T14778] netlink: 'syz.3.2848': attribute type 3 has an invalid length. [ 774.614500][T14778] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.2848'. [ 774.656408][T14769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.674472][T14769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.699898][T14769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2849'. [ 774.718900][T14769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2849'. [ 774.791042][T14757] team0: Port device team_slave_0 added [ 774.802484][T14757] team0: Port device team_slave_1 added [ 774.818193][ T9] usb 3-1: USB disconnect, device number 125 [ 774.897151][T14757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.993549][ T55] Bluetooth: hci0: command tx timeout [ 775.001601][T14757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.073974][T14757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.121394][T14757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.131328][T14757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.157339][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.170923][T14757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.307615][T14757] hsr_slave_0: entered promiscuous mode [ 775.316448][T14757] hsr_slave_1: entered promiscuous mode [ 775.322624][T14757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 775.331766][T14757] Cannot create hsr debugfs directory [ 775.514112][ T9] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 775.579932][T14757] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.660527][T14757] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.688192][ T9] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 775.696748][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.707125][ T9] usb 4-1: config 0 has no interface number 0 [ 775.735519][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 775.752120][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.762311][ T9] usb 4-1: Product: syz [ 775.766988][ T9] usb 4-1: Manufacturer: syz [ 775.771782][ T9] usb 4-1: SerialNumber: syz [ 775.781066][T14757] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.783578][ T5896] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 775.802173][ T9] usb 4-1: config 0 descriptor?? [ 775.814341][ T9] keyspan 4-1:0.20: Keyspan 1 port adapter converter detected [ 775.822856][ T9] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 87 [ 775.831089][ T9] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 7 [ 775.841143][ T9] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 81 [ 775.850454][ T9] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 1 [ 775.858430][ T9] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 2 [ 775.866675][ T9] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 85 [ 775.874894][ T9] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 5 [ 775.886184][ T9] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 775.941041][T14757] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.963791][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 775.974434][ T5896] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 775.983845][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.991865][ T5896] usb 3-1: Product: syz [ 776.007228][ T5896] usb 3-1: Manufacturer: syz [ 776.031556][T14783] netlink: 368 bytes leftover after parsing attributes in process `syz.3.2851'. [ 776.036297][ T5896] usb 3-1: SerialNumber: syz [ 776.051674][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2851'. [ 776.072951][ T5896] usb 3-1: config 0 descriptor?? [ 776.097419][ T5895] usb 4-1: USB disconnect, device number 123 [ 776.098751][ T5896] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 776.117368][ T5896] usb 3-1: setting power ON [ 776.121956][ T5896] dvb-usb: bulk message failed: -22 (2/0) [ 776.121956][ T5895] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 776.130118][ T5895] keyspan 4-1:0.20: device disconnected [ 776.172031][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 776.195821][ T5896] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 776.216193][ T5896] usb 3-1: media controller created [ 776.245835][T14757] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 776.282562][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 776.307593][T14757] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 776.316651][T14787] dvb-usb: bulk message failed: -22 (3/0) [ 776.322598][T14787] usb 3-1: gpio_write failed. [ 776.333879][T14787] cxusb: i2c wr: len=80 is too big! [ 776.333879][T14787] [ 776.346070][T14757] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 776.359132][ T5896] usb 3-1: selecting invalid altsetting 6 [ 776.365931][T14757] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 776.383868][ T5896] usb 3-1: digital interface selection failed (-22) [ 776.392681][ T5896] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 776.411408][ T5896] usb 3-1: setting power OFF [ 776.421355][ T5896] dvb-usb: bulk message failed: -22 (2/0) [ 776.432528][ T5896] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 776.449922][ T5896] (NULL device *): no alternate interface [ 776.520578][T14757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.530335][ T5896] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 776.560210][T14757] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.576191][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.583484][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.592810][ T5896] usb 3-1: USB disconnect, device number 126 [ 776.647849][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.655114][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.830028][T14757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.939335][T14757] veth0_vlan: entered promiscuous mode [ 776.967778][T14757] veth1_vlan: entered promiscuous mode [ 777.027617][T14757] veth0_macvtap: entered promiscuous mode [ 777.057586][T14757] veth1_macvtap: entered promiscuous mode [ 777.078817][ T55] Bluetooth: hci0: command tx timeout [ 777.150508][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.182841][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.202085][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.213002][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.244280][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.264195][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.282163][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.327642][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.342068][T14757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.366341][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.380161][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.390853][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.404174][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.414695][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.425510][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.438777][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.459018][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.471177][T14757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.471970][T14807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2861'. [ 777.503292][T14757] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.516036][T14757] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.527646][T14757] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.538983][T14757] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.652338][T11831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.675007][T11831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.722514][T11831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.735556][T11831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.890837][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'. [ 777.906395][T14813] 8021q: VLANs not supported on caif0 [ 778.103661][ T5882] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 778.263629][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 778.333564][ T5898] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 778.362691][T14824] "syz.1.2866" (14824) uses obsolete ecb(arc4) skcipher [ 778.388050][ T5882] usb 4-1: unable to get BOS descriptor or descriptor too short [ 778.404771][ T5882] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 778.417574][ T5882] usb 4-1: can't read configurations, error -71 [ 778.566459][ T5898] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 778.574948][ T5898] usb 3-1: config 0 has no interface number 0 [ 778.581943][ T5898] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 778.598399][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.612564][ T5898] usb 3-1: config 0 descriptor?? [ 778.624443][ T5898] usb 3-1: selecting invalid altsetting 1 [ 778.630732][ T5898] dvb_ttusb_budget: ttusb_init_controller: error [ 778.638448][ T5898] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 778.737863][ T5898] DVB: Unable to find symbol cx22700_attach() [ 778.824839][T14819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.840125][T14819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.987519][ T5898] DVB: Unable to find symbol tda10046_attach() [ 779.023817][ T5898] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 779.094131][ T5898] usb 3-1: USB disconnect, device number 127 [ 779.155679][ T55] Bluetooth: hci0: command tx timeout [ 780.044923][ T5882] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 780.244881][T14848] FAULT_INJECTION: forcing a failure. [ 780.244881][T14848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.276169][ T5882] usb 3-1: config 0 has no interfaces? [ 780.304343][T14848] CPU: 0 UID: 0 PID: 14848 Comm: syz.1.2874 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 780.304372][T14848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 780.304386][T14848] Call Trace: [ 780.304395][T14848] [ 780.304404][T14848] dump_stack_lvl+0x241/0x360 [ 780.304443][T14848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 780.304490][T14848] ? __pfx__printk+0x10/0x10 [ 780.304533][T14848] should_fail_ex+0x424/0x570 [ 780.304563][T14848] _copy_from_user+0x2d/0xb0 [ 780.304597][T14848] copy_msghdr_from_user+0xb3/0x580 [ 780.304634][T14848] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 780.304661][T14848] ? __fget_files+0x2a/0x420 [ 780.304686][T14848] ? __fget_files+0x2a/0x420 [ 780.304721][T14848] __sys_sendmmsg+0x361/0x7b0 [ 780.304759][T14848] ? __pfx___sys_sendmmsg+0x10/0x10 [ 780.304822][T14848] ? rcu_read_lock_any_held+0xbb/0x160 [ 780.304852][T14848] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 780.304886][T14848] ? vfs_write+0xb29/0xd10 [ 780.304920][T14848] ? ksys_write+0x24e/0x2d0 [ 780.304949][T14848] ? __mutex_unlock_slowpath+0x229/0x800 [ 780.305009][T14848] ? ksys_write+0x275/0x2d0 [ 780.305047][T14848] __x64_sys_sendmmsg+0xa0/0xb0 [ 780.305074][T14848] do_syscall_64+0xf3/0x230 [ 780.305101][T14848] ? clear_bhb_loop+0x45/0xa0 [ 780.305126][T14848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.305149][T14848] RIP: 0033:0x7fc38e78d169 [ 780.305184][T14848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.305202][T14848] RSP: 002b:00007fc38f550038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 780.305225][T14848] RAX: ffffffffffffffda RBX: 00007fc38e9a5fa0 RCX: 00007fc38e78d169 [ 780.305240][T14848] RDX: 0000000000000001 RSI: 0000200000003f00 RDI: 0000000000000004 [ 780.305254][T14848] RBP: 00007fc38f550090 R08: 0000000000000000 R09: 0000000000000000 [ 780.305267][T14848] R10: 0000000040000840 R11: 0000000000000246 R12: 0000000000000001 [ 780.305281][T14848] R13: 0000000000000000 R14: 00007fc38e9a5fa0 R15: 00007fc38eacfa28 [ 780.305313][T14848] [ 780.309687][ T5882] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 780.609291][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.622237][ T5882] usb 3-1: Product: syz [ 780.628339][ T5882] usb 3-1: Manufacturer: syz [ 780.632976][ T5882] usb 3-1: SerialNumber: syz [ 780.647347][ T5882] usb 3-1: config 0 descriptor?? [ 781.032063][T14844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2872'. [ 781.233830][ T55] Bluetooth: hci0: command tx timeout [ 782.053594][ T5882] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 782.213670][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 782.226604][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 782.226620][ T30] audit: type=1326 audit(1744674679.710:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14861 comm="syz.3.2878" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f179a38d169 code=0x0 [ 782.350375][ T5882] usb 2-1: unable to get BOS descriptor or descriptor too short [ 782.451751][ T5882] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 782.473763][ T30] audit: type=1326 audit(1744674679.930:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14861 comm="syz.3.2878" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f179a38d169 code=0x0 [ 782.564799][ T5882] usb 2-1: can't read configurations, error -71 [ 783.415006][ T5896] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 783.441980][T14882] "syz.3.2883" (14882) uses obsolete ecb(arc4) skcipher [ 783.496468][ T5898] usb 3-1: USB disconnect, device number 2 [ 783.619008][ T5896] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 783.646402][ T5896] usb 5-1: config 0 has no interface number 0 [ 783.676508][ T5896] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 783.706702][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.722528][ T5896] usb 5-1: config 0 descriptor?? [ 783.753052][ T5896] usb 5-1: selecting invalid altsetting 1 [ 783.791560][ T5896] dvb_ttusb_budget: ttusb_init_controller: error [ 783.807841][ T5896] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 783.883720][ T5896] DVB: Unable to find symbol cx22700_attach() [ 783.926434][ T5896] DVB: Unable to find symbol tda10046_attach() [ 783.932866][ T5896] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 783.967797][T14877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.027023][T14877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.079713][ T5896] usb 5-1: USB disconnect, device number 115 [ 784.394167][ T976] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 784.443492][ T5957] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 784.543796][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 784.557030][ T976] usb 3-1: too many endpoints for config 64 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 784.568272][ T976] usb 3-1: config 64 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.579688][ T976] usb 3-1: config 64 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.589932][ T976] usb 3-1: config 64 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 784.604513][ T5957] usb 4-1: Using ep0 maxpacket: 16 [ 784.613747][ T976] usb 3-1: config 64 interface 0 has no altsetting 0 [ 784.624408][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.643493][ T976] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 784.652576][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.660698][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.674631][ T5957] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 784.688995][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.714449][ T5957] usb 4-1: config 0 descriptor?? [ 785.130006][ T5957] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 785.137222][ T5957] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 785.144197][ T5957] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 785.150998][ T5957] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 785.159157][ T5957] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 785.169722][ T5957] lua 0003:1E7D:2C2E.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 785.373701][T14908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.382447][ T5957] usb 4-1: USB disconnect, device number 126 [ 785.382485][T14908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.481140][ C0] vkms_vblank_simulate: vblank timer overrun [ 786.060550][ T976] usbhid 3-1:64.0: can't add hid device: -71 [ 786.093804][ T976] usbhid 3-1:64.0: probe with driver usbhid failed with error -71 [ 786.131778][ T976] usb 3-1: USB disconnect, device number 3 [ 786.172563][T14914] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2895'. [ 786.534171][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2899'. [ 786.654301][ T976] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 786.670047][T14923] 8021q: VLANs not supported on caif0 [ 786.677921][T14927] loop2: detected capacity change from 0 to 7 [ 786.687626][T14927] Dev loop2: unable to read RDB block 7 [ 786.694321][T14927] loop2: unable to read partition table [ 786.749854][T14927] loop2: partition table beyond EOD, truncated [ 786.793565][T14927] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 786.919633][ T976] usb 4-1: config 0 has no interfaces? [ 786.934268][ T976] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 786.943812][T14930] netlink: 448 bytes leftover after parsing attributes in process `syz.2.2901'. [ 786.958485][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.994324][ T976] usb 4-1: Product: syz [ 786.998718][ T976] usb 4-1: Manufacturer: syz [ 787.021268][ T976] usb 4-1: SerialNumber: syz [ 787.042808][ T976] usb 4-1: config 0 descriptor?? [ 787.531985][ T5898] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 788.343808][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.396991][ T5898] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 788.406300][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 788.434565][ T5898] usb 3-1: Product: syz [ 788.452650][ T5898] usb 3-1: Manufacturer: syz [ 788.472232][ T5898] usb 3-1: SerialNumber: syz [ 788.522828][ T5898] usb 3-1: config 0 descriptor?? [ 788.554548][T14948] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2908'. [ 788.561904][ T5898] gspca_main: conex-2.14.0 probing 0572:0041 [ 788.903786][ T976] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 789.075890][ T976] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 789.142853][ T976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.159439][ T976] usb 5-1: config 0 has no interface number 0 [ 789.169170][ T976] usb 5-1: config 0 interface 20 has no altsetting 0 [ 789.188167][ T976] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 789.216452][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.225870][ T976] usb 5-1: Product: syz [ 789.230402][ T976] usb 5-1: Manufacturer: syz [ 789.263940][ T976] usb 5-1: SerialNumber: syz [ 789.289277][ T976] usb 5-1: config 0 descriptor?? [ 789.363809][ T976] keyspan 5-1:0.20: Keyspan 1 port adapter converter detected [ 789.437771][ T976] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 87 [ 789.508849][ T976] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 7 [ 789.538044][ T976] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 81 [ 789.557614][ T976] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 1 [ 789.574416][T14950] netlink: 368 bytes leftover after parsing attributes in process `syz.4.2909'. [ 789.589775][ T976] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 2 [ 789.599682][ T976] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 85 [ 789.615140][ T976] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 5 [ 789.617802][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2909'. [ 789.639110][ T976] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 789.690380][ T5898] usb 4-1: USB disconnect, device number 127 [ 789.745329][ T976] usb 5-1: USB disconnect, device number 116 [ 789.777289][ T976] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 789.801531][ T976] keyspan 5-1:0.20: device disconnected [ 790.089261][ T5898] usb 3-1: USB disconnect, device number 4 [ 790.213771][ T5895] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 790.476464][ T5895] usb 4-1: config 0 has no interfaces? [ 790.651192][ T5895] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 790.670371][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.696001][ T5895] usb 4-1: Product: syz [ 790.703494][ T5898] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 790.814762][ T5895] usb 4-1: Manufacturer: syz [ 790.820618][ T5895] usb 4-1: SerialNumber: syz [ 790.838826][ T5895] usb 4-1: config 0 descriptor?? [ 790.854300][ T976] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 790.978515][ T5898] usb 3-1: config 0 has no interfaces? [ 790.988013][ T5898] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 791.053522][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 791.062779][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 791.103054][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 791.103144][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.143019][T14957] xt_TCPMSS: Only works on TCP SYN packets [ 791.187589][ T5898] usb 3-1: Product: syz [ 791.198527][ T5898] usb 3-1: Manufacturer: syz [ 791.213248][ T976] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 791.230316][ T5898] usb 3-1: SerialNumber: syz [ 791.259417][ T5898] usb 3-1: config 0 descriptor?? [ 791.303431][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 791.351961][ T976] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 791.423160][ T976] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 791.507361][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.588560][ T976] usb 2-1: config 0 descriptor?? [ 791.624425][T11550] Bluetooth: hci3: urb ffff88814d0ddd00 submission failed (90) [ 792.113651][T11550] Bluetooth: hci0: command 0x0405 tx timeout [ 792.126586][ T976] usb 2-1: USB disconnect, device number 110 [ 792.924206][T14979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2918'. [ 793.158227][ T30] audit: type=1326 audit(1744674690.720:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38e78d169 code=0x7ffc0000 [ 793.239186][ T30] audit: type=1326 audit(1744674690.720:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38e78d169 code=0x7ffc0000 [ 793.261606][ C0] vkms_vblank_simulate: vblank timer overrun [ 793.281944][ T30] audit: type=1326 audit(1744674690.720:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38e78d169 code=0x7ffc0000 [ 793.314776][ T30] audit: type=1326 audit(1744674690.720:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38e78d169 code=0x7ffc0000 [ 793.389202][ T30] audit: type=1326 audit(1744674690.720:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fc38e78d169 code=0x7ffc0000 [ 793.411582][ C0] vkms_vblank_simulate: vblank timer overrun [ 793.435905][ T30] audit: type=1326 audit(1744674690.720:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38e78d169 code=0x7ffc0000 [ 793.436272][ T979] usb 4-1: USB disconnect, device number 2 [ 793.458791][ T30] audit: type=1326 audit(1744674690.720:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38e78d169 code=0x7ffc0000 [ 793.458853][ T30] audit: type=1326 audit(1744674690.740:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fc38e78d169 code=0x7ffc0000 [ 793.458899][ T30] audit: type=1326 audit(1744674690.740:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38e78d169 code=0x7ffc0000 [ 793.509980][ C0] vkms_vblank_simulate: vblank timer overrun [ 793.541279][ T30] audit: type=1326 audit(1744674690.740:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.1.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38e78d169 code=0x7ffc0000 [ 793.563614][ C0] vkms_vblank_simulate: vblank timer overrun [ 793.703639][ T5898] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 793.866021][ T5898] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 793.875124][ T5898] usb 2-1: config 0 has no interface number 0 [ 793.884614][ T5898] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 793.893998][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.906546][ T5898] usb 2-1: config 0 descriptor?? [ 793.918144][ T5898] usb 2-1: selecting invalid altsetting 1 [ 793.924191][ T5898] dvb_ttusb_budget: ttusb_init_controller: error [ 793.930563][ T5898] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 793.936510][ T976] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 794.027683][ T5957] usb 3-1: USB disconnect, device number 5 [ 794.033700][ T5898] DVB: Unable to find symbol cx22700_attach() [ 794.104242][ T5898] DVB: Unable to find symbol tda10046_attach() [ 794.110476][ T5898] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 794.127524][T14985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.156849][ T976] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 794.173797][ T976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.178830][T14985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.209387][ T976] usb 5-1: config 0 has no interface number 0 [ 794.236366][ T976] usb 5-1: config 0 interface 20 has no altsetting 0 [ 794.254931][ T976] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 794.266509][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.275164][ T976] usb 5-1: Product: syz [ 794.280558][ T976] usb 5-1: Manufacturer: syz [ 794.285876][ T976] usb 5-1: SerialNumber: syz [ 794.302487][ T976] usb 5-1: config 0 descriptor?? [ 794.319554][ T976] keyspan 5-1:0.20: Keyspan 1 port adapter converter detected [ 794.332834][ T979] usb 2-1: USB disconnect, device number 111 [ 794.339286][ T976] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 87 [ 794.348084][ T976] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 7 [ 794.359297][ T976] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 81 [ 794.377589][ T976] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 1 [ 794.389106][ T976] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 2 [ 794.398163][ T976] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 85 [ 794.410111][ T976] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 5 [ 794.421381][ T976] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 794.535106][T14991] netlink: 368 bytes leftover after parsing attributes in process `syz.4.2923'. [ 794.548765][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2923'. [ 794.562194][ T976] usb 5-1: USB disconnect, device number 117 [ 794.578492][ T976] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 794.594130][ T976] keyspan 5-1:0.20: device disconnected [ 795.599446][ T976] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 795.643472][ T5898] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 795.784084][T15021] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 795.878763][ T976] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 795.901661][ T976] usb 5-1: config 0 has no interface number 0 [ 795.998970][ T976] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 796.003694][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 796.033770][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.126185][ T976] usb 5-1: config 0 descriptor?? [ 796.216562][ T976] usb 5-1: selecting invalid altsetting 1 [ 796.336510][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.338825][ T976] dvb_ttusb_budget: ttusb_init_controller: error [ 796.356133][T15018] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x1 [ 796.364761][T15027] @: renamed from vlan0 [ 796.373249][T15018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.388096][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.411081][ T976] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 796.420041][T15018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.431155][ T5898] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 796.439272][T15018] tmpfs: Unknown parameter 'twMõ™>.–J•šá»Ô' [ 796.504880][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.539300][T15026] netlink: 788 bytes leftover after parsing attributes in process `syz.3.2935'. [ 796.582673][ T5898] usb 2-1: config 0 descriptor?? [ 796.762208][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2936'. [ 796.778277][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2936'. [ 796.852370][ T976] DVB: Unable to find symbol cx22700_attach() [ 796.926112][ T976] DVB: Unable to find symbol tda10046_attach() [ 796.932357][ T976] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 796.960083][ T976] usb 5-1: USB disconnect, device number 118 [ 797.073710][ T5895] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 797.223896][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 797.237472][ T5895] usb 3-1: config 6 has an invalid interface number: 66 but max is 0 [ 797.246636][ T5895] usb 3-1: config 6 has no interface number 0 [ 797.253094][ T5895] usb 3-1: config 6 interface 66 has no altsetting 0 [ 797.266730][ T5895] usb 3-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice=d6.95 [ 797.277000][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.285669][ T5895] usb 3-1: Product: syz [ 797.290127][ T5895] usb 3-1: Manufacturer: syz [ 797.298016][ T5895] usb 3-1: SerialNumber: syz [ 797.794736][T15037] fuse: Bad value for 'fd' [ 797.803423][T15037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.814447][T15037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.338721][ T5898] usbhid 2-1:0.0: can't add hid device: -71 [ 798.345350][ T5898] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 798.431342][ T5898] usb 2-1: USB disconnect, device number 112 [ 798.875060][ T5898] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 799.496358][ T5898] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 799.505357][ T5898] usb 2-1: config 0 has no interface number 0 [ 799.553289][ T5898] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 799.710836][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.732201][ T5898] usb 2-1: config 0 descriptor?? [ 799.763634][ T5957] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 799.806167][ T5898] usb 2-1: selecting invalid altsetting 1 [ 799.812207][ T5898] dvb_ttusb_budget: ttusb_init_controller: error [ 799.849776][ T5898] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 799.967990][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 800.046909][ T5898] DVB: Unable to find symbol cx22700_attach() [ 800.054487][T15045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.115134][T15045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.305825][ T5898] DVB: Unable to find symbol tda10046_attach() [ 800.362973][ T5898] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 800.428191][ T5895] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 800.469869][ T5898] usb 2-1: USB disconnect, device number 113 [ 800.625733][ T5895] snd-usb-audio 3-1:6.66: probe with driver snd-usb-audio failed with error -2 [ 800.683759][ T5895] usb 3-1: USB disconnect, device number 6 [ 801.233594][ T5957] usb 5-1: unable to get BOS descriptor or descriptor too short [ 801.273514][ T5895] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 801.308843][ T5957] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 801.356970][ T5957] usb 5-1: can't read configurations, error -71 [ 801.374855][T15072] netlink: 592 bytes leftover after parsing attributes in process `syz.1.2946'. [ 801.469995][ T5895] usb 3-1: config 0 has no interfaces? [ 801.494438][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 801.503907][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.511920][ T5895] usb 3-1: Product: syz [ 801.563819][ T5895] usb 3-1: Manufacturer: syz [ 801.582528][ T5895] usb 3-1: SerialNumber: syz [ 801.670456][ T5895] usb 3-1: config 0 descriptor?? [ 801.705249][ T6020] udevd[6020]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.66/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 801.932402][T15079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2949'. [ 802.161689][T15079] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.170722][T15079] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.179609][T15079] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.188433][T15079] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.323890][T15079] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.332876][T15079] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.341885][T15079] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.350811][T15079] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.496328][T15085] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 803.008018][T15088] xt_CT: No such helper "snmp" [ 803.697883][T15104] wireguard0: entered promiscuous mode [ 803.703979][T15104] wireguard0: entered allmulticast mode [ 803.765956][T15108] FAULT_INJECTION: forcing a failure. [ 803.765956][T15108] name failslab, interval 1, probability 0, space 0, times 0 [ 803.870796][T15108] CPU: 0 UID: 0 PID: 15108 Comm: syz.1.2957 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 803.870829][T15108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 803.870842][T15108] Call Trace: [ 803.870851][T15108] [ 803.870862][T15108] dump_stack_lvl+0x241/0x360 [ 803.870903][T15108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 803.870934][T15108] ? __pfx__printk+0x10/0x10 [ 803.870962][T15108] ? __mutex_unlock_slowpath+0x229/0x800 [ 803.870994][T15108] ? __pfx___might_resched+0x10/0x10 [ 803.871035][T15108] should_fail_ex+0x424/0x570 [ 803.871064][T15108] should_failslab+0xac/0x100 [ 803.871096][T15108] __kmalloc_cache_noprof+0x73/0x370 [ 803.871125][T15108] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 803.871151][T15108] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 803.871188][T15108] genl_rcv_msg+0xb38/0xf00 [ 803.871222][T15108] ? __pfx_genl_rcv_msg+0x10/0x10 [ 803.871244][T15108] ? __dev_queue_xmit+0x1780/0x3f60 [ 803.871267][T15108] ? kasan_save_track+0x3f/0x80 [ 803.871289][T15108] ? __kasan_slab_alloc+0x66/0x80 [ 803.871321][T15108] ? do_syscall_64+0xf3/0x230 [ 803.871365][T15108] ? __lock_acquire+0xad5/0xd80 [ 803.871389][T15108] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 803.871426][T15108] netlink_rcv_skb+0x208/0x480 [ 803.871457][T15108] ? __pfx_genl_rcv_msg+0x10/0x10 [ 803.871482][T15108] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 803.871536][T15108] ? netlink_deliver_tap+0x2e/0x1b0 [ 803.871577][T15108] genl_rcv+0x28/0x40 [ 803.871599][T15108] netlink_unicast+0x7f8/0x9a0 [ 803.871728][T15108] ? __pfx_netlink_unicast+0x10/0x10 [ 803.871771][T15108] ? skb_put+0x114/0x1f0 [ 803.871800][T15108] netlink_sendmsg+0x8c3/0xcd0 [ 803.871848][T15108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.871892][T15108] ? aa_sock_msg_perm+0x91/0x160 [ 803.871931][T15108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.871961][T15108] __sock_sendmsg+0x221/0x270 [ 803.871995][T15108] ____sys_sendmsg+0x523/0x860 [ 803.872089][T15108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 803.872115][T15108] ? __fget_files+0x2a/0x420 [ 803.872141][T15108] ? __fget_files+0x2a/0x420 [ 803.872172][T15108] __sys_sendmsg+0x271/0x360 [ 803.872202][T15108] ? __pfx___sys_sendmsg+0x10/0x10 [ 803.872294][T15108] ? do_syscall_64+0xb6/0x230 [ 803.872326][T15108] do_syscall_64+0xf3/0x230 [ 803.872355][T15108] ? clear_bhb_loop+0x45/0xa0 [ 803.872382][T15108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.872403][T15108] RIP: 0033:0x7fc38e78d169 [ 803.872423][T15108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.872442][T15108] RSP: 002b:00007fc38f550038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 803.872465][T15108] RAX: ffffffffffffffda RBX: 00007fc38e9a5fa0 RCX: 00007fc38e78d169 [ 803.872481][T15108] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 803.872495][T15108] RBP: 00007fc38f550090 R08: 0000000000000000 R09: 0000000000000000 [ 803.872509][T15108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 803.872522][T15108] R13: 0000000000000000 R14: 00007fc38e9a5fa0 R15: 00007fc38eacfa28 [ 803.872554][T15108] [ 804.179464][ C0] vkms_vblank_simulate: vblank timer overrun [ 804.383718][ T5898] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 804.700127][ T5957] usb 3-1: USB disconnect, device number 7 [ 804.735425][ T5898] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 804.747885][ T5898] usb 4-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 804.800040][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.823721][ T976] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 804.881590][ T5898] usb 4-1: config 0 descriptor?? [ 805.016092][ T976] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 805.055465][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.099443][ T976] usb 5-1: config 0 descriptor?? [ 805.645853][ T976] elan 0003:04F3:0755.0014: unknown main item tag 0x0 [ 805.656473][ T976] elan 0003:04F3:0755.0014: item fetching failed at offset 3/5 [ 805.697074][ T976] elan 0003:04F3:0755.0014: Hid Parse failed [ 805.715871][ T976] elan 0003:04F3:0755.0014: probe with driver elan failed with error -22 [ 805.796546][ T976] usb 5-1: USB disconnect, device number 121 [ 806.543484][ T5898] usb 4-1: string descriptor 0 read error: -71 [ 806.555031][ T5898] usb 4-1: USB disconnect, device number 3 [ 806.691157][T15130] sctp: [Deprecated]: syz.1.2965 (pid 15130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 806.691157][T15130] Use struct sctp_sack_info instead [ 806.738735][T15132] delete_channel: no stack [ 807.157365][ T976] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 807.294055][T15147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 807.337390][ T976] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 807.383217][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.418889][T15144] Invalid logical block size (65531) [ 807.441118][ T976] usb 5-1: config 0 descriptor?? [ 807.451913][ T976] cp210x 5-1:0.0: cp210x converter detected [ 807.853986][ T976] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 807.864233][ T976] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 807.872341][ T976] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 807.913942][ T976] usb 5-1: cp210x converter now attached to ttyUSB0 [ 808.499135][ T5898] usb 5-1: USB disconnect, device number 122 [ 808.553199][ T5898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 808.711964][ T5898] cp210x 5-1:0.0: device disconnected [ 809.078746][T15168] FAULT_INJECTION: forcing a failure. [ 809.078746][T15168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.155002][T15168] CPU: 0 UID: 0 PID: 15168 Comm: syz.1.2977 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 809.155036][T15168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 809.155050][T15168] Call Trace: [ 809.155058][T15168] [ 809.155080][T15168] dump_stack_lvl+0x241/0x360 [ 809.155119][T15168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 809.155150][T15168] ? __pfx__printk+0x10/0x10 [ 809.155192][T15168] should_fail_ex+0x424/0x570 [ 809.155220][T15168] _copy_from_user+0x2d/0xb0 [ 809.155252][T15168] copy_msghdr_from_user+0xb3/0x580 [ 809.155287][T15168] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 809.155314][T15168] ? __fget_files+0x2a/0x420 [ 809.155336][T15168] ? __fget_files+0x2a/0x420 [ 809.155365][T15168] __sys_sendmmsg+0x361/0x7b0 [ 809.155400][T15168] ? __pfx___sys_sendmmsg+0x10/0x10 [ 809.155459][T15168] ? rcu_read_lock_any_held+0xbb/0x160 [ 809.155488][T15168] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 809.155519][T15168] ? vfs_write+0xb29/0xd10 [ 809.155553][T15168] ? ksys_write+0x24e/0x2d0 [ 809.155580][T15168] ? __mutex_unlock_slowpath+0x229/0x800 [ 809.155647][T15168] ? ksys_write+0x275/0x2d0 [ 809.155683][T15168] __x64_sys_sendmmsg+0xa0/0xb0 [ 809.155707][T15168] do_syscall_64+0xf3/0x230 [ 809.155734][T15168] ? clear_bhb_loop+0x45/0xa0 [ 809.155758][T15168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.155778][T15168] RIP: 0033:0x7fc38e78d169 [ 809.155796][T15168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.155813][T15168] RSP: 002b:00007fc38f550038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 809.155835][T15168] RAX: ffffffffffffffda RBX: 00007fc38e9a5fa0 RCX: 00007fc38e78d169 [ 809.155850][T15168] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 809.155864][T15168] RBP: 00007fc38f550090 R08: 0000000000000000 R09: 0000000000000000 [ 809.155894][T15168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.155907][T15168] R13: 0000000000000000 R14: 00007fc38e9a5fa0 R15: 00007fc38eacfa28 [ 809.155939][T15168] [ 809.610666][T15173] sctp: [Deprecated]: syz.2.2979 (pid 15173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 809.610666][T15173] Use struct sctp_sack_info instead [ 809.943139][T15188] program syz.0.2985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 809.998046][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 809.998067][ T30] audit: type=1326 audit(1744674707.550:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.1.2984" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc38e78d169 code=0x0 [ 810.287713][T15198] hsr0: entered promiscuous mode [ 810.413468][ T5895] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 810.524523][T15201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2989'. [ 810.553682][T15201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2989'. [ 810.590803][ T5895] usb 3-1: device descriptor read/64, error -71 [ 810.674829][T15201] vlan2: entered allmulticast mode [ 810.680199][T15201] macvtap0: entered allmulticast mode [ 810.688199][T15201] veth0_macvtap: entered allmulticast mode [ 810.863749][ T5895] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 810.932855][T15209] sctp: [Deprecated]: syz.1.2992 (pid 15209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 810.932855][T15209] Use struct sctp_sack_info instead [ 811.033583][ T5895] usb 3-1: device descriptor read/64, error -71 [ 811.133600][ T5898] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 811.143876][ T5895] usb usb3-port1: attempt power cycle [ 811.220414][T15213] delete_channel: no stack [ 811.401214][T15214] AppArmor: change_hat: Invalid input '0x0000ngehat ¦·háÕKìÙ–bÈæùÖ,„' [ 811.483645][ T979] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 811.513455][ T5895] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 811.546008][ T5895] usb 3-1: device descriptor read/8, error -71 [ 811.660847][ T979] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 811.674628][ T979] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 811.705943][ T979] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 811.738441][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.753652][T15216] FAULT_INJECTION: forcing a failure. [ 811.753652][T15216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.767181][T15216] CPU: 0 UID: 0 PID: 15216 Comm: syz.3.2994 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 811.767213][T15216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 811.767227][T15216] Call Trace: [ 811.767236][T15216] [ 811.767246][T15216] dump_stack_lvl+0x241/0x360 [ 811.767285][T15216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 811.767318][T15216] ? __pfx__printk+0x10/0x10 [ 811.767358][T15216] should_fail_ex+0x424/0x570 [ 811.767385][T15216] _copy_from_user+0x2d/0xb0 [ 811.767417][T15216] snd_seq_ioctl+0x1d5/0x480 [ 811.767452][T15216] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 811.767510][T15216] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 811.767543][T15216] __se_sys_ioctl+0xf1/0x160 [ 811.767573][T15216] do_syscall_64+0xf3/0x230 [ 811.767602][T15216] ? clear_bhb_loop+0x45/0xa0 [ 811.767628][T15216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.767649][T15216] RIP: 0033:0x7f179a38d169 [ 811.767668][T15216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.767685][T15216] RSP: 002b:00007f179b1b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 811.767709][T15216] RAX: ffffffffffffffda RBX: 00007f179a5a5fa0 RCX: 00007f179a38d169 [ 811.767727][T15216] RDX: 0000200000000100 RSI: 0000000040505331 RDI: 0000000000000006 [ 811.767741][T15216] RBP: 00007f179b1b5090 R08: 0000000000000000 R09: 0000000000000000 [ 811.767754][T15216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.767768][T15216] R13: 0000000000000000 R14: 00007f179a5a5fa0 R15: 00007f179a6cfa28 [ 811.767801][T15216] [ 811.813664][ T5895] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 811.982647][T15213] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 812.048091][ T979] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 812.085601][ T5895] usb 3-1: device descriptor read/8, error -71 [ 812.194688][ T5895] usb usb3-port1: unable to enumerate USB device [ 813.051195][T15220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2995'. [ 813.083578][T15220] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 813.758399][ T5898] usb 5-1: unable to get BOS descriptor or descriptor too short [ 813.770496][ T5898] usb 5-1: no configurations [ 813.793253][ T5898] usb 5-1: can't read configurations, error -22 [ 814.992550][ T976] usb 2-1: USB disconnect, device number 114 [ 815.390826][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 815.490459][T15244] sctp: [Deprecated]: syz.3.3003 (pid 15244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 815.490459][T15244] Use struct sctp_sack_info instead [ 815.893027][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.903102][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.303729][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 816.677430][ T9] usb 4-1: config 0 has no interfaces? [ 816.784013][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 816.818403][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.843068][ T9] usb 4-1: Product: syz [ 816.861215][ T9] usb 4-1: Manufacturer: syz [ 816.888163][ T9] usb 4-1: SerialNumber: syz [ 816.956674][ T9] usb 4-1: config 0 descriptor?? [ 819.046604][T15285] syzkaller1: entered promiscuous mode [ 819.092466][T15285] syzkaller1: entered allmulticast mode [ 819.143552][ T5896] usb 4-1: USB disconnect, device number 4 [ 819.201622][T15293] [ 819.204019][T15293] ====================================================== [ 819.211058][T15293] WARNING: possible circular locking dependency detected [ 819.218114][T15293] 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 Not tainted [ 819.225250][T15293] ------------------------------------------------------ [ 819.232283][T15293] syz.1.3020/15293 is trying to acquire lock: [ 819.238356][T15293] ffffffff900fd588 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0xde/0x2d60 [ 819.247365][T15293] [ 819.247365][T15293] but task is already holding lock: [ 819.254746][T15293] ffff88807e48fda8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 819.264874][T15293] [ 819.264874][T15293] which lock already depends on the new lock. [ 819.264874][T15293] [ 819.275285][T15293] [ 819.275285][T15293] the existing dependency chain (in reverse order) is: [ 819.284301][T15293] [ 819.284301][T15293] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 819.292917][T15293] lock_acquire+0x116/0x2f0 [ 819.297951][T15293] __mutex_lock+0x1a5/0x10c0 [ 819.303067][T15293] smc_switch_to_fallback+0x35/0xda0 [ 819.308891][T15293] smc_sendmsg+0x11f/0x530 [ 819.313860][T15293] __sock_sendmsg+0x221/0x270 [ 819.319074][T15293] __sys_sendto+0x365/0x4c0 [ 819.324101][T15293] __x64_sys_sendto+0xde/0x100 [ 819.329387][T15293] do_syscall_64+0xf3/0x230 [ 819.334421][T15293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.340842][T15293] [ 819.340842][T15293] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 819.348503][T15293] lock_acquire+0x116/0x2f0 [ 819.353542][T15293] lock_sock_nested+0x48/0x100 [ 819.358854][T15293] do_ip_setsockopt+0x17e9/0x39c0 [ 819.364413][T15293] ip_setsockopt+0x63/0x100 [ 819.369444][T15293] do_sock_setsockopt+0x3b1/0x710 [ 819.374993][T15293] __x64_sys_setsockopt+0x1ee/0x280 [ 819.380748][T15293] do_syscall_64+0xf3/0x230 [ 819.385780][T15293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.392200][T15293] [ 819.392200][T15293] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 819.399445][T15293] validate_chain+0xa69/0x24e0 [ 819.404761][T15293] __lock_acquire+0xad5/0xd80 [ 819.409976][T15293] lock_acquire+0x116/0x2f0 [ 819.415022][T15293] __mutex_lock+0x1a5/0x10c0 [ 819.420173][T15293] start_sync_thread+0xde/0x2d60 [ 819.425657][T15293] do_ip_vs_set_ctl+0x48e/0xe50 [ 819.431038][T15293] nf_setsockopt+0x295/0x2c0 [ 819.436169][T15293] smc_setsockopt+0x25c/0xd50 [ 819.441378][T15293] do_sock_setsockopt+0x3b1/0x710 [ 819.446931][T15293] __x64_sys_setsockopt+0x1ee/0x280 [ 819.452657][T15293] do_syscall_64+0xf3/0x230 [ 819.457693][T15293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.464114][T15293] [ 819.464114][T15293] other info that might help us debug this: [ 819.464114][T15293] [ 819.474347][T15293] Chain exists of: [ 819.474347][T15293] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 819.474347][T15293] [ 819.487922][T15293] Possible unsafe locking scenario: [ 819.487922][T15293] [ 819.495374][T15293] CPU0 CPU1 [ 819.500736][T15293] ---- ---- [ 819.506108][T15293] lock(&smc->clcsock_release_lock); [ 819.511493][T15293] lock(sk_lock-AF_INET); [ 819.518454][T15293] lock(&smc->clcsock_release_lock); [ 819.526362][T15293] lock(rtnl_mutex); [ 819.530355][T15293] [ 819.530355][T15293] *** DEADLOCK *** [ 819.530355][T15293] [ 819.538496][T15293] 1 lock held by syz.1.3020/15293: [ 819.543609][T15293] #0: ffff88807e48fda8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 819.554172][T15293] [ 819.554172][T15293] stack backtrace: [ 819.560064][T15293] CPU: 0 UID: 0 PID: 15293 Comm: syz.1.3020 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 819.560087][T15293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 819.560099][T15293] Call Trace: [ 819.560109][T15293] [ 819.560118][T15293] dump_stack_lvl+0x241/0x360 [ 819.560150][T15293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 819.560175][T15293] ? __pfx__printk+0x10/0x10 [ 819.560200][T15293] ? print_lock+0x171/0x1a0 [ 819.560222][T15293] print_circular_bug+0x2e1/0x300 [ 819.560248][T15293] check_noncircular+0x142/0x160 [ 819.560273][T15293] validate_chain+0xa69/0x24e0 [ 819.560305][T15293] __lock_acquire+0xad5/0xd80 [ 819.560326][T15293] lock_acquire+0x116/0x2f0 [ 819.560344][T15293] ? start_sync_thread+0xde/0x2d60 [ 819.560372][T15293] __mutex_lock+0x1a5/0x10c0 [ 819.560394][T15293] ? start_sync_thread+0xde/0x2d60 [ 819.560418][T15293] ? __lock_acquire+0xad5/0xd80 [ 819.560438][T15293] ? start_sync_thread+0xde/0x2d60 [ 819.560462][T15293] ? __pfx___mutex_lock+0x10/0x10 [ 819.560486][T15293] ? finish_task_switch+0x1e5/0x870 [ 819.560502][T15293] ? lockdep_hardirqs_on+0x9d/0x150 [ 819.560523][T15293] ? rcu_is_watching+0x15/0xb0 [ 819.560546][T15293] start_sync_thread+0xde/0x2d60 [ 819.560589][T15293] ? __pfx_start_sync_thread+0x10/0x10 [ 819.560625][T15293] do_ip_vs_set_ctl+0x48e/0xe50 [ 819.560644][T15293] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 819.560666][T15293] ? __mutex_unlock_slowpath+0x229/0x800 [ 819.560692][T15293] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 819.560717][T15293] ? __pfx___mutex_lock+0x10/0x10 [ 819.560739][T15293] ? futex_wake+0x525/0x5d0 [ 819.560759][T15293] nf_setsockopt+0x295/0x2c0 [ 819.560786][T15293] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 819.560812][T15293] smc_setsockopt+0x25c/0xd50 [ 819.560834][T15293] ? __pfx_aa_sk_perm+0x10/0x10 [ 819.560856][T15293] ? __pfx_smc_setsockopt+0x10/0x10 [ 819.560877][T15293] ? aa_sock_opt_perm+0x79/0x120 [ 819.560905][T15293] ? __pfx_smc_setsockopt+0x10/0x10 [ 819.560925][T15293] do_sock_setsockopt+0x3b1/0x710 [ 819.560945][T15293] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 819.560962][T15293] ? __fget_files+0x2a/0x420 [ 819.560980][T15293] ? __fget_files+0x39d/0x420 [ 819.560994][T15293] ? __fget_files+0x2a/0x420 [ 819.561011][T15293] __x64_sys_setsockopt+0x1ee/0x280 [ 819.561032][T15293] do_syscall_64+0xf3/0x230 [ 819.561054][T15293] ? clear_bhb_loop+0x45/0xa0 [ 819.561075][T15293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.561092][T15293] RIP: 0033:0x7fc38e78d169 [ 819.561111][T15293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.561126][T15293] RSP: 002b:00007fc38f550038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 819.561146][T15293] RAX: ffffffffffffffda RBX: 00007fc38e9a5fa0 RCX: 00007fc38e78d169 [ 819.561159][T15293] RDX: 000000000000048b RSI: 0000000000000000 RDI: 000000000000000a [ 819.561170][T15293] RBP: 00007fc38e80e990 R08: 0000000000000018 R09: 0000000000000000 [ 819.561182][T15293] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 819.561193][T15293] R13: 0000000000000000 R14: 00007fc38e9a5fa0 R15: 00007fc38eacfa28 [ 819.561212][T15293] [ 819.941959][T15293] IPVS: Unknown mcast interface: