last executing test programs: 55.80695737s ago: executing program 4 (id=4022): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000100)={'team0\x00', {0x2, 0x0, @multicast2}}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) connect$netlink(0xffffffffffffffff, &(0x7f0000000240)=@unspec, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00'}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0x2, 0x4}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'veth1_vlan\x00'}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000240)="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", 0x1000, 0x1) r8 = dup(r7) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r8, 0xae80, 0x0) unshare(0x22020400) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, 0x0) 55.219046695s ago: executing program 4 (id=4025): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000008000000bf08fffff900000055090100000000009500000000ec0000bf916a0000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x3}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x10, &(0x7f0000000640)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r8, r7, 0x2, 0x6, 0x4000}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301080008ff0000000002000020d3"]) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001800dd8d00000000000000000200000000000006000000000600150006000000100016800c0002a008000100211e80524c995d4dc42278c093b04313084a83a5eaf1d6596adfacebcff9500946fd8158f8b053cea43b8c3029852c834078", @ANYRES32, @ANYBLOB], 0x34}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16=r2, @ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 55.123067067s ago: executing program 4 (id=4026): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020}, 0x2020) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=0x60) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) 54.766957802s ago: executing program 4 (id=4029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r2}, 0x10) r3 = syz_usb_connect(0x0, 0xd5c, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000dc0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r5, @ANYRESDEC=r4, @ANYRES32=r3, @ANYRES16=r1, @ANYRESHEX]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xb4c41, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0x10) socket$inet(0x2, 0x80001, 0x84) r10 = syz_open_dev$video4linux(&(0x7f00000003c0), 0x7, 0x161040) ioctl$VIDIOC_SUBDEV_S_CROP(r10, 0xc038563c, &(0x7f00000004c0)={0x0, 0x0, {0x2, 0x63, 0x2, 0x3}}) 36.44073048s ago: executing program 4 (id=4029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r2}, 0x10) r3 = syz_usb_connect(0x0, 0xd5c, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000dc0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r5, @ANYRESDEC=r4, @ANYRES32=r3, @ANYRES16=r1, @ANYRESHEX]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xb4c41, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0x10) socket$inet(0x2, 0x80001, 0x84) r10 = syz_open_dev$video4linux(&(0x7f00000003c0), 0x7, 0x161040) ioctl$VIDIOC_SUBDEV_S_CROP(r10, 0xc038563c, &(0x7f00000004c0)={0x0, 0x0, {0x2, 0x63, 0x2, 0x3}}) 14.532978759s ago: executing program 4 (id=4029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r2}, 0x10) r3 = syz_usb_connect(0x0, 0xd5c, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000dc0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r5, @ANYRESDEC=r4, @ANYRES32=r3, @ANYRES16=r1, @ANYRESHEX]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xb4c41, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0x10) socket$inet(0x2, 0x80001, 0x84) r10 = syz_open_dev$video4linux(&(0x7f00000003c0), 0x7, 0x161040) ioctl$VIDIOC_SUBDEV_S_CROP(r10, 0xc038563c, &(0x7f00000004c0)={0x0, 0x0, {0x2, 0x63, 0x2, 0x3}}) 10.864776259s ago: executing program 0 (id=4171): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xa5, 0x3e}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x5, &(0x7f0000000b80)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffed, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102372, 0x18fe4}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x3a}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000040)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt(r5, 0x84, 0x65, 0x0, 0x0) 8.142903688s ago: executing program 0 (id=4180): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_FIEMAP(r3, 0x80086301, &(0x7f0000000100)=ANY=[@ANYBLOB="2000000100000000030000000000000006000000000000e5dff4c85b"]) 7.958657796s ago: executing program 0 (id=4181): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="2ab8555b231822f4867cd9db7ca51ec2ee02de05a31e5e259c1772de8e2a5e4ad891fe34984bfae2491406cdb562116b7d2e88ac3b2ba9b0e85470bff4a5f0eae4c2be852157dfd5e64156a0f1cf5ab25852bbc35db5d2ef4447eb0fd0d4fef49132e4937cad81fede6509d87171da6878ffdff0ed7bb113cebde9dc2d2df63776fef50b86485584ffcad7b5617ff90619c688f6770bb720a9b70fc257c0dbe3c898ef226597363ea04da25ccc0c", 0xae, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x980, @private0}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000400)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xd, @remote}, 0x1c) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000780)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r3, &(0x7f0000000380)=[{&(0x7f00000010c0)="aabf75aa76c3ada74bf44ac8955581057e1778604df77693559ffad6cc78741642e0f21c507a79c29daba641a268ce55abe36b0fa2268a6fffbb8016b62549418cd3f951d1850854ec210ea8034faf1626e616a36c6bc0c9b4372b0e28213019e3db182fd0858a17e87ff7a5dddc89594225d78441a533082ed3e8047f12269778c40721cacf71f32543874a345938224419dce2fd44b7a62c1d0d98a0cf23c2fc16894ba549a2edfb7e300f14c30f64429d25ea9b26b9fbf839fb039e46bc8dcf12d7ce62c8cbc9f0d5ffff56a577edd86949d10e6e37e31297ce4e5585bc3d3ac00acbeec51d8164359204a918b4d1de4514705d55e2105084aece8a83f28fb3e46eb4f24b966af622fcf31c4cb601f5a2b82d42a2172ad0b1939c585891940b81aa9c5c6cdb0676b998025ea4ac0fc18aa24fd5d562b1dd4f23e3ac63f0233fb4465c5e5a96599ecc0fd8dd7e7d48a8b96db03630613905fd610ceec2eb9b6962645bd959cb08493806bb6d0ccb067a048c7ec34cc3ab4aec1b8e4253de22949b0c9a9d1dec77d903d6018eafd0e81dc7090ea108057e631003da3104c2eb839bc8428be6a497a051b03b80c02d8f8efc20330853a81ba6e36c41fcbc63e2345075a99164f8108452c298a49da500c16ecd20fca9577814e657a767c5f310d0c8a71b134a995e40c7924ec6ffe956ab10ff39e3a07b28af2a668df944869bffd39494fa0150a7a46491659c0afb122c91a50d08bd50e014bc4c1f7c9ff3fd2d1d813cd0cdd381510380c967aed0133055370c29cbf1b3e5d10ed2ae103de7dfa77e76ff55f41f1e1804e4f06bd013ce28511e3469817b0154e58378345928071d63e474e4d8ac2d50c5f7626fc769b2e1c3b2534fec20a8440fd333e2220de76c21ddf83c0e6156f12dbef610a98a0500aaafc0278ceb32591a8c27d7f05cbb1718da94a95df19f72b8072ae01be8d19a3e34ae4cb059cecc5fd95cb1d9116ba62bf1b8926a919a9d88491e8516a5070cd5b74fc46d26e36c5742aaca351dc5c98f97f06e9d7cbc9c318b00a0e73829acaba560cbf0c67c4e60321eeac2e56d355ca483868e76a7e0397a5009a8c83825be2fbbb4fd48e1a0682fab5997ca24046008d5d48740b614bba2c4f48ccc6777ee90ab07b0e6181f52d64f24ec0ad43b2125d2464d55e977d6b7eb62e11c2cf418dccbe16644a3cce78f68e3fa83f73cdd4369cbd3789efe4802d02f364ecac04aa6868b0fa95ec1ed1d50f403d2ea5c7e201e2e5563d940466d77e0f1e3988abcf6b25aeeebb079d4da21e633e83e4b5c090957812ab84232f70ba420981628c74f0bf5e363ef017fa6c9157b844b36f6188e7955f992d587cde528b85315f825ee3d7c3db57db62bca9dfca8ab4014a672d43c3c462aba6de5f17ab252e5ced731a0f5ed018cbf766290c28b6ad4f1ef378c056291172c8ae0f24b7a50e28e6964f72ca1345a13223637b4ebdc19aecf4f93b4c4819ba4380ccd51595938f2255cb22d4d9b270ebb2367b8045d950e9201da4466f1adaa6d19d6387b971ad37505c64e6ffd7f4f04cffb72fde1f0c08912de1c890ba83532839963f527149d4ae501baabe834eb1dc4a2c42c646c4cfc1b735a0c60acdf8a54cc200733282169a8ec10e23b34e713f47eb5c8d18b1700bb4ca77a0c04b55ec546f1f90211906a90738bd3827e9ec5aa2b64cc28b67a0d3b33e4a210b3b4f9e115907f2e660ee849677a99fd3ea2a8bbaf07369fc036d51d2b4bdd94a6ab7421db4686aeabebc3679960286ea0444694bde2d76e69fda96bdbfde78d7345c7a143abab5d0412269d833c5e315d7705e691cc5ce6f70d7f22f762bd3cd2e25d40bc4e5af3e9ee651e1400daa8edf2e6e3d7026f1e22c88a15cb4fa909375999bcc34ef12d0a40b3f3cdcb0be3400edd8c04991ee8cd7778f88b54c517deb9c955d8a43a3606aeef44c6db656bab1164dddc312d1a2b74a520b988fb62fcf08de1b82e9093db5adca8222340257fffb5da79b82adb6f49473cef3a65cbb20a9ffe5760d1f4c6a3f3cc9db3eb1dd9eb44c6a84074f13feed4d45b47037280c7a096da61b397e8002093c6428d00d2a0d249d518636a8ae42f0778bddd723e8410209ca1ebce297d2d88781a378d0e7b8695080f2ec5f907f5cdbf1a8ae0b0d23b5239dd7bed96304cb561be61d68ff3ec90b6bf30f693fa2bb416d935f107e445eb0f492071df1cfcbc9e34173bf3feadfa3d64f99b078f603a5a504704625bd8d85e8a5454edfaf92b0ab95036c8aebc297f4fb8c51ff97740f82f5c220fcaeed0d77ee9007636dc70252d891f2a00ef010ac48153e5d5fd83f88b5c0010e41d312f368a660c50d1574d07242270b814f59abc8c25a26e5cb6ed8915eed0ed188c13f45045afe44e0d8a5e37e51bb7da9b715541c2b54fb5d2e827be94530b6fdd299d67898e89d3d68e0730375d9e8b425b06c61fe3e41b93eed3a239df5df59e6add4c8b8cf48c1b175bf9125a51798ed5647377e52a38792ff2263c426c40cc8602113f5664986858939d097f767d67b706053268a36c7f9903cf148a88d4012136ed96057c43922fafd67393afa0f4f245e9e1a8b53a27087bc8bde767208841c412a487cbf7fa9a83bee749a8f095bb35f8bd519766d428f246c47b8f50ffd52aacbdd84696fb7c5761b99a15b0809c3465e10ef658d3d2e26a5b018740ab4f64b76a414bf41184d3334af3f7c7f5349e55ad2e96669da6f6105b7c0a74d8448bea966656612982f86c55fcad791c2532dc1dbd27ddda624f75159ee40cb33fab8b4770a4947cad4d936aa5b7e94c0e57b793fe33aa8d5e896a2c28eb804471eb9aa17abf8c3eb72ef8223995376e5795b9bcd5d3307b557d27ab1cfa50d0eea759391ad9f6d62d1b1000278633e90cfbf3502e2a39f3b05b051ed1200d57c96a9eed32883733c22604a1b45dd2aa1a85a0777b3484bc500d2215f8a3d03c96de14125ed53db3413f08d7396dfd2897708a0cac7c98b61525646fb984fb2a7237238fee9e4cc7938ac8d5b7672007be062040b703fbadd4b249689edf00c0cabda644fd0ab2f608e91e5d59af827d0f48ffbffaa2854f62cbd895a6ccd0267f88f343a727c27156f72cd80a3834f327fd500a8fde965a59de1a7c1fea7d519b0e33535499970307eb6ea0158de51677c1ff711d6e288d070a4ea34fc3e9188398bdc4e4cf8bf79482acdae43ce11a01fd113c0fd67679c8cc1cc81051214a62a8da68a123e1bbda8d624262f795c1252f690e89d0abdefdecb0630b97635d87748581da0101c8fbe09362bc5d62685e8f8a81d24e1c25066460e4fea9fc3d8767112c6b084f9c17491f7d667132a5a00a55f93c974f6da6687b4b437a3a842aa9b0e07144e5f04ab32fe3e637ecb23078698b325b1de6ca629e535e8b69423dab9d25bcfb962b5dab26dc183ed4f305b39f4ef93832bb72d1a705c57937c34222ed878af19c20d220b2213e96618b5b784644da0dfceb639cbba8685a38091dd4ba285026d912b2ba97b592d06a1a8600f04149ac6c69e5714670275639357b2f2b40bc1180ac613a54429a17b81eb7d845ec5b4a6d31eea4de29e4591425a6ec94789370fff872352118768a6e477c3fc5978f7ffd430a50a201276faad56db177dab31e4d592c9156551bf4e472b43f0783b5848f5f51650dbc4e3da1d454f93004415f8dd454ff87997a351853d24123e6ff9c84a4193ef53c77b742204cf94370d3336d7c88b768a3d2766346801efade0baa37964c4fd10003f48fb51ccf669c146a8edf0ccf0353b0313684c7dd23185940b8e6387fc01e80e87a6bd219c5fd2437eb74fa7aa8e172c2a2cf33cc2e990323a8b14636906ca639c0d4c37f0735e227d48f752b72720f8961f60f3e14722b4cd3adc5fb233595929035d82d45ee4cfca3745303cea020aad4487e7bee26e34260e2783ad0fb0e6a3d38a6aa1ced141dbbc3291a7de961184c3c22f7f6235629cb59d68db14103f4db0956af921a312782052e79f0b88e0d8621966c229449dbac54637a34a519050d670b7203eb53407c24e2fe3ff2f82f57a3d266363fdab8d955a070c897eb9c807afcaca9c50ae0575e327c8158330c786750b608cd407e116b68391a743b36d3eabb05a0d4df0c723376dfb28e5d665cee44a75038ea309094446db302fcac6ebeebd8098f21a9dccf3058fc2790b28e1b752713029473a491dd76c6eb5bac47cc78e3aca0dde814f265751977a492ebf14c2c0b3a90000d9ff2137ed0fe79cc9fa2ac64d06dc1773058ebd83b746a8696e8777b3f267eb71545fb099419576d166b6b0279187f6233032b5c0e9170f699b1edeef6fa10081e5fe4c3e64499226a10dd1f474a2f3c7d136e4243116e0f620a46f1dcc69d90677675ea180fc7420150c2acdfa5c9880e8fb8bdcfbcd223c440515e5f35c0726ac8c027244b0d54fe8f66dec9b0dab14b8ac2893f2159e3fdb9c2443944072462afd57da8c7dde2e619c790bbec8dd73dfcbf8e366820a88829c28856596f6cc498849b00cbff", 0xcaa}], 0x1, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x14, &(0x7f0000000540)=@raw=[@jmp={0x5, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], &(0x7f0000000280)='GPL\x00'}, 0x90) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000080), 0x40) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000300)) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 6.210554966s ago: executing program 0 (id=4183): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = eventfd2(0x0, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x3, &(0x7f0000001b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000240)="fa450d99ec70f349", 0x8}, 0x0, 0x0]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000010c0)=ANY=[], 0x1a3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) 5.508690048s ago: executing program 2 (id=4187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000000)=0xf3e, 0x5b) sendto$packet(r4, &(0x7f00000000c0)="3f030278a8900100db901e0089e9aaa911d7c2290f2b86dd1327c9167c64294a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xdc59, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="1401000016000100000000000000000000000000000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000285500000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026bd7000000000a45200000000000000000000000500000005"], 0x114}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0x8000001, 0x1}, 0x8) close(r6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x8) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2020) 4.843969204s ago: executing program 0 (id=4188): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000079b7040000000000008500000003000000850000000f00000095"], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10300, 0xd0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r9, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000001040)={0xfffffffffffffeb3, 0x0, &(0x7f00000010c0)={0x0, 0x3, 0x4, @string={0x0, 0x3, "ccda42effe3d28211e0cfdc696757f4ccf5965d63b11b781a318f96cdba59e8943826868c86bc65f6476cf2efcab9efd454fc89fecd837c6cae9b1a4138375223b81769c367cbec2a3f8cfcf27c68e5f6d07f65297631df324f90a03e870e220f0eda45114b5e43eae3e9cf06fb06effbbc25e7be61acb8616966f617a5779f8400e0c3f8772b933fadd0d0fdc5e5e7cff5df5bfcc9ac07a1c811cc8be413757ccc4c3b53cbb89490d4d6e5f11708e0b10784428ebd91f010e66d47766e4cd06918b7fb2"}}, 0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={0xa8, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x72, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3, {0x0, 0xc2}}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1ada}}}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0xa8}}, 0x0) 3.745275229s ago: executing program 3 (id=4193): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 3.579200621s ago: executing program 3 (id=4195): ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ae492b86142e0629cc1a9f9f12b1271946341fbbbb561a5ae26b2cf77dedb8a08bf922700e99eb8c4cba4b287385e72be4320cd0b4a1adf3d553f60a1b7cb31c", "06233f1a10c8c11173a2777a89819ca037046cea72aa61718e7bde2d8d53fdd1f36e2c63915d2b2000fdffffff00000000000000000800", "02111fc63066453481bb7c9aed024967bcda1babc98d13dd897bef2878d25a0a"}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, 0x0) 3.537990871s ago: executing program 1 (id=4196): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000007e40), 0x4000000000000aa, 0x810) 3.487441589s ago: executing program 3 (id=4197): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000007e40), 0x4000000000000aa, 0x0) (fail_nth: 8) 3.219206552s ago: executing program 1 (id=4198): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = eventfd2(0x0, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x3, &(0x7f0000001b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000240)="fa450d99ec70f349", 0x8}, 0x0, 0x0]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000010c0)=ANY=[], 0x1a3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) 3.078405077s ago: executing program 3 (id=4199): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRESHEX=r3, @ANYBLOB="24842f0b6fcdd34fb090905a3967f452a575218c4f37ff11933b4583c599de2c4284c8c16582e94e41778f427525ccdeee9bb2140f8df147bc16203e26da45ea0b4608cd21cabd639d6b19ed88e26d7b901b710482a625e4095aa4afc50c8ba8575151bf586aa282587a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYBLOB="e3b0a15abfd1f9095e24971a0ffb30077bab7bc6f145b6cc852468d05a2d8466926d7e05df0fc0877ec1d332cc8d1d1a4edaa3f26239fe29b18fe4b65786e883c5bc7a09ee0ea256af45a3d332cb3e0b21accd01088143ad0e44ae976647e8229b3893d708c9d07f12569032fa49e89792dec7bc53f5d3e69ddb3d7ecf9269226ca50ea3832c2433f30fb9ea6addb6a91048266606ebe13a6519b210fd6f47794e"], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640), 0x48) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='sysv\x00', 0x1008000, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x11) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000a00)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2002, 0xae, &(0x7f0000000380)=""/174, 0x0, 0xaf, '\x00', 0x0, 0x0, r6}, 0x90) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2.127225594s ago: executing program 3 (id=4200): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x21, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@private}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00054000000000000000000900010073797a30"], 0x534}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)) socket$inet_tcp(0x2, 0x1, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) epoll_create1(0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0) r7 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040), &(0x7f00000003c0)) r9 = syz_io_uring_setup(0x6a4e, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000400), &(0x7f0000000140)) r10 = syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000500)=0x0, &(0x7f0000000380)) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r8, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2000, @fd=r10, 0x7f, 0x0, 0x0, 0x11, 0x1, {0x2, r12}}) io_uring_enter(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r13}, 0x10) r14 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r14}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.11872704s ago: executing program 1 (id=4201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f00000001c0)="26262e0f01ca360f23e90f20e06635000040000f22e064660f388153020f2114660fae740e0f011a0f01546866b9800000c00f320f30670f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.907363002s ago: executing program 2 (id=4202): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x2) 1.798695118s ago: executing program 2 (id=4203): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x40010000) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000002c0)=0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (fail_nth: 19) 1.767767445s ago: executing program 1 (id=4204): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001a9b92000000000000000c00000c0c0000000400000000000000040000130000000000005f006dff47c59dcb487aa467d5ea517201ee4537aaf6da0145b20be96c6e92327ea9682e8e118d7cdef474d50768c7cc3b2731"], &(0x7f0000000240)=""/220, 0x28, 0xdc, 0xa}, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="a6bea8a120e5f8320c30e4500806", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1.259057895s ago: executing program 3 (id=4205): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x7, 0x0, 0x0, &(0x7f0000001300)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x8, 0x0, 0x0, 0x10}, 0x143, &(0x7f0000001580)={0x5, 0xf, 0x143, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x8, 0xb, 0x2, 0x9}, @generic={0x93, 0x10, 0x2, "c02bc8f4d346f46e297264065a2e60dfb39f8af0b1516bc734740b53de8471736c7896ce363a4b321b5a2b7255f74f592f70976fe0356cf1487229e92caa65e95396e7291c410f2abbdd57064a984d125c32bd700498b9b18ade8121ae2aed9251465bc841a7d31dd5a84180c011e708293967c862f563bfa68430af976a620132d4b80fcdc62e0fee91c2593bf42e9e"}, @ss_container_id={0x14, 0x10, 0x4, 0xf5, "746a1b6cde4e09988c0cd88b41b3ca9c"}, @ptm_cap={0x3}, @generic={0x7e, 0x10, 0x2, "639bdde62d0f70f955e985b6922d13cdea0a9224eac33a3087332361e66537e93c9313e8905b66f0abd8fdc38c1ca369d3cb3b4e9a94d5120adedca4f3ec50a0a290f669d649687349fdc53b3c6c06350b32a0a7101e98b8274d76fea691a2b4ef05ffab53cb3fa944106e8dc184775dd4907a5ad500e31c139219"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x7f, 0x6, 0xa7}]}}) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)) (async) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, &(0x7f0000000740)={0x0, 0x0, 0xf5, {0xf5, 0x4, "22752cb751bb781bd91a53eb7596af16e415f7ca258173b6416314bb2a5c3ded2c18db430d1eff2d9e86239f253020af5c6d85ea68dd8071c1225272878310de87d2d94b50284b81c8669707103ab13cf33bd0a68a08d5a6c2ff4078fc7e86aafef55d5709fa64be700bf6ba11032685614b55a4817094cd0c96ebdcbb5ab260676bf8985886250678053b12b0453c0a4cf9b54c5e67d01e73cca06da0d7c5ad1f69ade36968740ba6b34288c3c43b0467dbf74059652de66d5d13fdfb8e2ca8f2ac929417fd3a750918a75168ba057559cd4d0918633128127ed9af5da4cc497d7caca887609826ffad94148bad7b30f2df10"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000880)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "01bbfeab"}]}}, 0x0}, &(0x7f0000000b40)={0x2c, &(0x7f0000000940)={0x0, 0x0, 0xe, "8c09290fbfb5de7c0a07b10cba94"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000a00)={0x20, 0x1, 0xce, "b21e66500d271788ad13fce9975536d815aebf43f5e559df850246c703a2bdd439582376ec441ee322932cf8db48bf57141e75ab29f1630ae12449a0e328989ba517a894b7f5cb71ff884a14f4b05676cd3b77892d733379f89550518f4a6778776e2736c07af5a9edfdbfe4fa2cbc3282b6ae9cb150d9a7493706e25232c3cb31d491e2730edb2951caecc9d9502c58956ff0dcb6d71c80fd8d0ed5d05cb918184895043d9aaeb82e3555c0b815db3c77b73caf3b5aec953487061ed648bdd753c8bc037c4d19ba0c23a9990c48"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x5}}) (async) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x20, 0x20, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x3, 0x2e, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x10, 0x3, 0x6}}}}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x97b5a2c9e882cc20, 0x0, 0x9, 0x2, 0x40, 0x40}, 0x8, &(0x7f0000000c00)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x1}]}, 0x3, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}, {0x2, &(0x7f0000000d40)=@string={0x2}}, {0x0, 0x0}]}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) io_uring_setup(0x0, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0x40405515, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.227551709s ago: executing program 1 (id=4206): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r6, 0x200004) read$FUSE(r5, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r5, r6, 0x0, 0x80001d00c0d1) setsockopt(r5, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 1.186517707s ago: executing program 2 (id=4207): ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ae492b86142e0629cc1a9f9f12b1271946341fbbbb561a5ae26b2cf77dedb8a08bf922700e99eb8c4cba4b287385e72be4320cd0b4a1adf3d553f60a1b7cb31c", "06233f1a10c8c11173a2777a89819ca037046cea72aa61718e7bde2d8d53fdd1f36e2c63915d2b2000fdffffff00000000000000000800", "02111fc63066453481bb7c9aed024967bcda1babc98d13dd897bef2878d25a0a"}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) 923.345958ms ago: executing program 2 (id=4208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}], {0x14, 0x10}}, 0x84}}, 0x0) (fail_nth: 10) 445.726267ms ago: executing program 2 (id=4209): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r0, &(0x7f0000000200)=""/49, 0x31) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)) 262.603522ms ago: executing program 1 (id=4210): mknod$loop(0x0, 0x0, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRESHEX=r3, @ANYBLOB="24842f0b6fcdd34fb090905a3967f452a575218c4f37ff11933b4583c599de2c4284c8c16582e94e41778f427525ccdeee9bb2140f8df147bc16203e26da45ea0b4608cd21cabd639d6b19ed88e26d7b901b710482a625e4095aa4afc50c8ba8575151bf586aa282587a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYBLOB="e3b0a15abfd1f9095e24971a0ffb30077bab7bc6f145b6cc852468d05a2d8466926d7e05df0fc0877ec1d332cc8d1d1a4edaa3f26239fe29b18fe4b65786e883c5bc7a09ee0ea256af45a3d332cb3e0b21accd01088143ad0e44ae976647e8229b3893d708c9d07f12569032fa49e89792dec7bc53f5d3e69ddb3d7ecf9269226ca50ea3832c2433f30fb9ea6addb6a91048266606ebe13a6519b210fd6f47794e"], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640), 0x48) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='sysv\x00', 0x1008000, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x11) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000a00)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2002, 0xae, &(0x7f0000000380)=""/174, 0x0, 0xaf, '\x00', 0x0, 0x0, r6}, 0x90) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=4211): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000580)=ANY=[@ANYRES16=0x0], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = eventfd2(0x0, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x3, &(0x7f0000001b00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000240)="fa450d99ec70f349", 0x8}, 0x0, 0x0]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000010c0)=ANY=[], 0x1a3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) kernel console output (not intermixed with test programs): ae/0x250 [ 1044.797529][T19882] __x64_sys_setsockopt+0xb5/0xd0 [ 1044.802558][T19882] do_syscall_64+0xf3/0x230 [ 1044.807062][T19882] ? clear_bhb_loop+0x35/0x90 [ 1044.811737][T19882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.817622][T19882] RIP: 0033:0x7f2d67f75bd9 [ 1044.822027][T19882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.841622][T19882] RSP: 002b:00007f2d68dce048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1044.850027][T19882] RAX: ffffffffffffffda RBX: 00007f2d68104038 RCX: 00007f2d67f75bd9 [ 1044.857988][T19882] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000008 [ 1044.865959][T19882] RBP: 00007f2d68dce0a0 R08: 0000000000000020 R09: 0000000000000000 [ 1044.873932][T19882] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1044.881892][T19882] R13: 000000000000006e R14: 00007f2d68104038 R15: 00007ffd80ac6c58 [ 1044.889866][T19882] [ 1044.966033][T19891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3674'. [ 1045.428846][ T8] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 1045.659133][ T8] usb 3-1: No LPM exit latency info found, disabling LPM. [ 1045.672461][ T8] usb 3-1: string descriptor 0 read error: -22 [ 1045.686952][ T8] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1045.711911][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.728319][ T8] usb 3-1: config 0 descriptor?? [ 1045.845906][ T5133] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1046.079129][ T5133] usb 2-1: Using ep0 maxpacket: 16 [ 1046.145362][ T5133] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 1046.175026][ T5133] usb 2-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 1046.211765][ T5133] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1046.242474][ T5133] usb 2-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 1046.265819][ T5133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.284021][ T5133] usb 2-1: Product: syz [ 1046.305240][ T5133] usb 2-1: Manufacturer: syz [ 1046.335640][ T5133] usb 2-1: SerialNumber: syz [ 1046.347663][ T5133] usb 2-1: config 0 descriptor?? [ 1046.366967][ T5133] sierra 2-1:0.0: Sierra USB modem converter detected [ 1046.392622][ T8] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1046.419999][ T8] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1046.445844][ T8] dib0700: firmware download failed at 7 with -22 [ 1046.494148][ T8] usb 3-1: USB disconnect, device number 85 [ 1046.904918][ T5133] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1046.947481][ T5133] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 1047.016365][ T5133] usb 2-1: USB disconnect, device number 76 [ 1047.066500][ T5133] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1047.125048][ T5133] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1047.156714][ T5133] sierra 2-1:0.0: device disconnected [ 1047.401669][T19935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3689'. [ 1047.518609][T19934] netlink: 273 bytes leftover after parsing attributes in process `syz.2.3690'. [ 1047.591901][T19937] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3690'. [ 1047.637657][T19934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3690'. [ 1048.371827][T19951] tipc: Failed to obtain node identity [ 1048.386709][T19951] tipc: Enabling of bearer rejected, failed to enable media [ 1048.528434][T13420] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1048.777725][T13420] usb 2-1: Using ep0 maxpacket: 16 [ 1048.835979][T13420] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1048.898065][T13420] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1048.979180][T13420] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1049.024781][T13420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.063343][T13420] usb 2-1: config 0 descriptor?? [ 1049.280063][T19972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3702'. [ 1049.507862][T19980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3701'. [ 1049.612916][T19956] sp0: Synchronizing with TNC [ 1049.730161][T19979] Falling back ldisc for ptm1. [ 1050.303446][T19956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.343518][T19956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.361815][T13420] hid (null): report_id 0 is invalid [ 1050.374678][T13420] hid-generic 0003:0158:0100.0034: unknown main item tag 0x1 [ 1050.385037][T13420] hid-generic 0003:0158:0100.0034: unexpected long global item [ 1050.401614][T13420] hid-generic 0003:0158:0100.0034: probe with driver hid-generic failed with error -22 [ 1050.589524][ T5133] usb 2-1: USB disconnect, device number 77 [ 1051.426821][T20007] tipc: Failed to obtain node identity [ 1051.452759][T20007] tipc: Enabling of bearer rejected, failed to enable media [ 1052.121211][T20042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3719'. [ 1052.923628][T20053] loop7: detected capacity change from 0 to 49152 [ 1053.045817][T20059] loop7: detected capacity change from 49152 to 49088 [ 1053.582248][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.629037][T20066] pimreg: entered allmulticast mode [ 1053.638566][T20067] dvmrp1: entered allmulticast mode [ 1053.658509][T20065] pimreg: left allmulticast mode [ 1053.665397][T20065] dvmrp1: left allmulticast mode [ 1053.675918][ T784] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1053.915940][ T784] usb 3-1: Using ep0 maxpacket: 16 [ 1053.933659][ T784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1053.966066][ T784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1054.016517][ T784] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1054.038189][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.061172][ T784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.092465][ T784] usb 3-1: config 0 descriptor?? [ 1054.194925][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.306897][T19643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1054.319044][T19643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1054.329441][T19643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1054.340055][T19643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1054.353813][T19643] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1054.354899][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.373436][T19643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1054.458279][T20063] sp0: Synchronizing with TNC [ 1054.576241][T20063] Falling back ldisc for ptm1. [ 1054.710617][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.719833][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.800838][ T784] hid (null): report_id 0 is invalid [ 1054.843127][ T784] hid-generic 0003:0158:0100.0035: unknown main item tag 0x1 [ 1054.870967][ T62] bridge_slave_1: left allmulticast mode [ 1054.878133][ T62] bridge_slave_1: left promiscuous mode [ 1054.883343][ T784] hid-generic 0003:0158:0100.0035: unexpected long global item [ 1054.914949][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.928686][ T784] hid-generic 0003:0158:0100.0035: probe with driver hid-generic failed with error -22 [ 1054.964363][ T62] bridge_slave_0: left allmulticast mode [ 1054.990904][ T62] bridge_slave_0: left promiscuous mode [ 1055.003243][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.046037][ T784] usb 3-1: USB disconnect, device number 86 [ 1055.759848][T20110] loop7: detected capacity change from 0 to 49152 [ 1055.864307][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.874480][T20111] loop7: detected capacity change from 49152 to 49088 [ 1055.898003][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.954447][ T62] bond0 (unregistering): Released all slaves [ 1056.485890][T20117] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1056.492450][T20117] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1056.500328][T20117] vhci_hcd vhci_hcd.0: Device attached [ 1056.508356][T20117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3742'. [ 1056.520094][ T5090] Bluetooth: hci4: command tx timeout [ 1056.980509][T20118] vhci_hcd: connection closed [ 1056.981762][ T1033] vhci_hcd: stop threads [ 1057.038311][ T1033] vhci_hcd: release socket [ 1057.059476][ T1033] vhci_hcd: disconnect device [ 1057.069144][T20081] chnl_net:caif_netlink_parms(): no params data found [ 1057.334970][ T62] hsr_slave_0: left promiscuous mode [ 1057.343416][ T62] hsr_slave_1: left promiscuous mode [ 1057.351515][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.360427][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.368892][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.377012][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.432734][ T62] veth1_macvtap: left promiscuous mode [ 1057.464308][ T62] veth0_macvtap: left promiscuous mode [ 1057.478499][ T62] veth1_vlan: left promiscuous mode [ 1057.575367][ T62] veth0_vlan: left promiscuous mode [ 1057.836243][ T9] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 1058.055075][ T9] usb 2-1: string descriptor 0 read error: -22 [ 1058.076214][ T9] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1058.106732][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.127520][ T9] usb 2-1: config 0 descriptor?? [ 1058.458937][ T29] audit: type=1326 audit(1720350869.375:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20145 comm="syz.2.3752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7452175bd9 code=0x0 [ 1058.545890][ T5090] Bluetooth: hci4: command tx timeout [ 1058.560881][T20150] ufs: Invalid option: "€: " or missing value [ 1058.580911][T20150] ufs: wrong mount options [ 1058.663433][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1058.761412][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1059.609300][T20160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3755'. [ 1059.663302][ T9] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1059.729051][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1059.766144][ T9] dib0700: firmware download failed at 7 with -22 [ 1059.812820][ T9] usb 2-1: USB disconnect, device number 78 [ 1059.967914][T20081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.999077][T20081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.018043][T20081] bridge_slave_0: entered allmulticast mode [ 1060.031506][T20081] bridge_slave_0: entered promiscuous mode [ 1060.103752][T20173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3757'. [ 1060.635310][T20172] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1060.641873][T20172] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1060.647950][ T5090] Bluetooth: hci4: command tx timeout [ 1060.649663][T20172] vhci_hcd vhci_hcd.0: Device attached [ 1060.665872][T20174] vhci_hcd: connection closed [ 1060.674457][ T7929] vhci_hcd: stop threads [ 1060.699493][ T7929] vhci_hcd: release socket [ 1060.703956][ T7929] vhci_hcd: disconnect device [ 1060.711495][T20081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.732279][T20081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.741311][T20081] bridge_slave_1: entered allmulticast mode [ 1060.751268][T20081] bridge_slave_1: entered promiscuous mode [ 1060.816078][T20081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.837277][T20081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.931122][T20081] team0: Port device team_slave_0 added [ 1060.952523][T20081] team0: Port device team_slave_1 added [ 1061.019001][T20183] FAULT_INJECTION: forcing a failure. [ 1061.019001][T20183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.037565][T20081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.055085][T20081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.084048][T20081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.162030][T20183] CPU: 0 PID: 20183 Comm: syz.1.3761 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1061.168665][T20081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.172202][T20183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1061.172219][T20183] Call Trace: [ 1061.172228][T20183] [ 1061.172237][T20183] dump_stack_lvl+0x241/0x360 [ 1061.200178][T20183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1061.205392][T20183] ? __pfx__printk+0x10/0x10 [ 1061.210076][T20183] ? snprintf+0xda/0x120 [ 1061.214338][T20183] should_fail_ex+0x3b0/0x4e0 [ 1061.219030][T20183] _copy_to_user+0x2f/0xb0 [ 1061.223452][T20183] simple_read_from_buffer+0xca/0x150 [ 1061.228829][T20183] proc_fail_nth_read+0x1e9/0x250 [ 1061.234029][T20183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1061.239577][T20183] ? rw_verify_area+0x520/0x6b0 [ 1061.244428][T20183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1061.249983][T20183] vfs_read+0x204/0xbc0 [ 1061.254141][T20183] ? __pfx_lock_release+0x10/0x10 [ 1061.259175][T20183] ? __pfx_vfs_read+0x10/0x10 [ 1061.263853][T20183] ? __fget_files+0x29/0x470 [ 1061.268442][T20183] ? __fget_files+0x3f6/0x470 [ 1061.273120][T20183] ksys_read+0x1a0/0x2c0 [ 1061.277363][T20183] ? __pfx_ksys_read+0x10/0x10 [ 1061.282125][T20183] ? do_syscall_64+0x100/0x230 [ 1061.286899][T20183] ? do_syscall_64+0xb6/0x230 [ 1061.291573][T20183] do_syscall_64+0xf3/0x230 [ 1061.296074][T20183] ? clear_bhb_loop+0x35/0x90 [ 1061.300750][T20183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.306636][T20183] RIP: 0033:0x7f2d67f746bc [ 1061.311044][T20183] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1061.330665][T20183] RSP: 002b:00007f2d68def040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1061.339085][T20183] RAX: ffffffffffffffda RBX: 00007f2d68103f60 RCX: 00007f2d67f746bc [ 1061.347056][T20183] RDX: 000000000000000f RSI: 00007f2d68def0b0 RDI: 0000000000000004 [ 1061.355034][T20183] RBP: 00007f2d68def0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1061.363012][T20183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.370990][T20183] R13: 000000000000000b R14: 00007f2d68103f60 R15: 00007ffd80ac6c58 [ 1061.378975][T20183] [ 1061.390072][T20081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.421610][T20185] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1061.480308][T20081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.609089][ T29] audit: type=1326 audit(1720350872.525:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20188 comm="syz.4.3763" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cc0f75bd9 code=0x0 [ 1061.684806][T20197] ufs: Invalid option: "€: " or missing value [ 1061.691201][T20197] ufs: wrong mount options [ 1061.737369][T20081] hsr_slave_0: entered promiscuous mode [ 1061.783713][T20081] hsr_slave_1: entered promiscuous mode [ 1061.815616][T20081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1061.842004][T20081] Cannot create hsr debugfs directory [ 1061.914363][T20202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3767'. [ 1061.965368][T20204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3768'. [ 1062.706060][ T5090] Bluetooth: hci4: command tx timeout [ 1064.064491][T20081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1064.163777][T20081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1064.231007][T20081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1064.249076][T20081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1064.418129][T20081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.447374][T20081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.462603][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.469783][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.491545][T18494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.498745][T18494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.537912][ T5182] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1064.749617][T20081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1064.997158][ T5182] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1065.007292][ T5182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.018798][ T5182] usb 3-1: config 0 descriptor?? [ 1065.031098][ T5182] cp210x 3-1:0.0: cp210x converter detected [ 1065.316509][T20081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.395578][T20081] veth0_vlan: entered promiscuous mode [ 1065.473115][T20081] veth1_vlan: entered promiscuous mode [ 1065.519233][ T5182] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1065.526120][ T784] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1065.582987][T20081] veth0_macvtap: entered promiscuous mode [ 1065.594546][T20081] veth1_macvtap: entered promiscuous mode [ 1065.620202][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.631308][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.646555][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.668770][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.696229][ T5136] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 1065.703881][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.724514][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.739279][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.746104][ T784] usb 2-1: Using ep0 maxpacket: 16 [ 1065.760474][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.766704][ T784] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 1065.776116][ T5182] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1065.792177][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.798977][ T784] usb 2-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 1065.806601][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.836015][T19643] Bluetooth: hci4: command 0x0405 tx timeout [ 1065.849136][T20081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.855153][ T784] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1065.864412][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.899452][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.922944][ T784] usb 2-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 1065.929766][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.939007][ T784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.956124][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.976079][ T5136] usb 1-1: No LPM exit latency info found, disabling LPM. [ 1065.988721][ T5136] usb 1-1: string descriptor 0 read error: -22 [ 1065.995029][ T5136] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1065.996224][ T784] usb 2-1: Product: syz [ 1066.015888][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.026480][ T5136] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.028732][ T784] usb 2-1: Manufacturer: syz [ 1066.039388][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.039412][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.039429][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.039445][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.039461][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.040955][T20081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.126315][ T5136] usb 1-1: config 0 descriptor?? [ 1066.129465][ T784] usb 2-1: SerialNumber: syz [ 1066.167512][T20081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.177259][T20081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.184596][ T784] usb 2-1: config 0 descriptor?? [ 1066.191378][T20081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.199113][ T784] sierra 2-1:0.0: Sierra USB modem converter detected [ 1066.207573][T20081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.701262][ T5133] usb 3-1: USB disconnect, device number 87 [ 1066.733804][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.757945][ T5133] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1066.765970][ T929] usb 5-1: new low-speed USB device number 65 using dummy_hcd [ 1066.811344][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.873702][ T5133] cp210x 3-1:0.0: device disconnected [ 1066.941912][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.951242][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.986705][ T929] usb 5-1: string descriptor 0 read error: -22 [ 1067.011612][ T929] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1067.025356][ T5136] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1067.054009][ T929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.062582][ T784] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1067.063463][ T5136] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1067.080197][ T784] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 1067.093588][ T929] usb 5-1: config 0 descriptor?? [ 1067.100971][ T5136] dib0700: firmware download failed at 7 with -22 [ 1067.120222][ T784] usb 2-1: USB disconnect, device number 79 [ 1067.162962][ T5136] usb 1-1: USB disconnect, device number 58 [ 1067.187503][ T784] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1067.223317][ T784] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1067.242062][ T784] sierra 2-1:0.0: device disconnected [ 1067.676941][ T929] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1067.711712][ T929] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1067.730350][ T929] dib0700: firmware download failed at 7 with -22 [ 1067.767546][ T929] usb 5-1: USB disconnect, device number 65 [ 1068.093348][T20293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'. [ 1069.055947][T18494] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1069.248200][T18494] usb 2-1: config 0 has no interfaces? [ 1069.256166][T18494] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1069.277140][T18494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.294850][T18494] usb 2-1: config 0 descriptor?? [ 1069.523813][T18494] usb 2-1: USB disconnect, device number 80 [ 1069.913253][T20319] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3798'. [ 1069.923802][ T29] audit: type=1326 audit(1720350880.835:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20320 comm="syz.0.3800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f398e575bd9 code=0x0 [ 1069.923863][T20319] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1069.961234][T20319] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1070.586368][ T5133] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1070.608711][ T5136] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1070.777418][ T5133] usb 3-1: Using ep0 maxpacket: 16 [ 1070.789432][ T5133] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 1070.797678][ T5133] usb 3-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 1070.807742][ T5136] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1070.810767][ T5133] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1070.831668][ T5133] usb 3-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 1070.841235][ T5136] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.845032][ T5133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.861233][ T5133] usb 3-1: Product: syz [ 1070.865482][ T5133] usb 3-1: Manufacturer: syz [ 1070.870007][ T5136] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.870861][ T5133] usb 3-1: SerialNumber: syz [ 1070.898966][ T5133] usb 3-1: config 0 descriptor?? [ 1070.908238][ T5136] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1070.909117][ T5133] sierra 3-1:0.0: Sierra USB modem converter detected [ 1070.930123][ T5136] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1070.951114][ T5136] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1070.965811][ T5136] usb 2-1: Manufacturer: syz [ 1070.974591][ T5136] usb 2-1: config 0 descriptor?? [ 1071.005859][ T784] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1071.198857][ T784] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1071.217849][ T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.255210][ T784] usb 1-1: config 0 descriptor?? [ 1071.315425][T20347] 9pnet: p9_errstr2errno: server reported unknown error /kernel/yama/ptrace_scope [ 1071.350397][ T5133] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 1071.373131][ T5133] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 1071.395388][ T5136] appleir 0003:05AC:8243.0036: unknown main item tag 0x0 [ 1071.405413][ T5133] usb 3-1: USB disconnect, device number 88 [ 1071.425316][ T5136] appleir 0003:05AC:8243.0036: No inputs registered, leaving [ 1071.444853][ T5133] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1071.468776][ T5136] appleir 0003:05AC:8243.0036: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1071.498401][ T5133] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1071.509136][T20340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.534694][ T5133] sierra 3-1:0.0: device disconnected [ 1071.537543][T20340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.953458][ T5133] usb 2-1: USB disconnect, device number 81 [ 1072.544313][ T29] audit: type=1326 audit(1720350883.455:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20373 comm="syz.4.3813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cc0f75bd9 code=0x0 [ 1072.607909][T20340] sch_tbf: burst 0 is lower than device bridge_slave_1 mtu (1514) ! [ 1072.629635][ T784] usb 1-1: Cannot set autoneg [ 1072.634491][ T784] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 1072.756633][ T784] usb 1-1: USB disconnect, device number 59 [ 1072.882759][T13420] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1073.045222][T20374] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3811'. [ 1073.115803][T20374] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1073.135251][T13420] usb 4-1: config 0 has no interfaces? [ 1073.151115][T13420] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1073.184624][T20374] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1073.203653][T13420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.233754][T13420] usb 4-1: config 0 descriptor?? [ 1073.596948][T18494] usb 4-1: USB disconnect, device number 79 [ 1074.782373][ T29] audit: type=1326 audit(1720350885.695:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20422 comm="syz.3.3825" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f990af75bd9 code=0x0 [ 1074.895916][T13420] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1074.907576][T20428] ufs: Invalid option: "€: " or missing value [ 1074.914625][T20428] ufs: wrong mount options [ 1074.996022][ T5136] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1075.126014][T13420] usb 1-1: Using ep0 maxpacket: 8 [ 1075.140787][T13420] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1075.163168][T13420] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1075.199460][T13420] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1075.230096][T13420] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1075.230272][ T5136] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1075.252630][T13420] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1075.270696][ T5136] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1075.285939][T13420] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1075.296849][ T5136] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1075.306391][T13420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.322006][ T5136] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1075.332074][ T5136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.375311][T13420] usbtmc 1-1:16.0: bulk endpoints not found [ 1075.387899][ T5136] usb 5-1: Product: à°š [ 1075.398251][ T5136] usb 5-1: Manufacturer: 她蕋멳î ï¤‡Ø”ë›ê¦†ë—®é½”㗘మᆤ幽åŸïŠœîª£ïŸ¾ç€·î­¹ì¬Žë£±çª›í½é»±è¦îŒè½¤ã´“犂讯à£ä‰™ë…’ⶇ扚邆镻㢗濇蕃é혣☲밉庙랸袰৽夂憬芣ç¨å½•ë¹¬æ—Ÿê¹¿ê¦‡å©žã˜³à¯´îŠ‘ﺋ࣊绾鸓ᬪ哴s [ 1075.453888][ T5136] usb 5-1: SerialNumber: 抡֨顼ì¼âƒ‰ê«ã§¨ã™˜Ü“슪ꀡ⚃⶟墔蓼༣鴾êšå„§í™³Ú‹ìª—鸎 [ 1075.867969][ T5136] usb 5-1: 0:2 : does not exist [ 1075.896486][ T5136] usb 5-1: USB disconnect, device number 66 [ 1076.150144][T18342] udevd[18342]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1077.143976][ T29] audit: type=1326 audit(1720350888.035:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20467 comm="syz.3.3838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f990af75bd9 code=0x0 [ 1077.233326][T20470] ufs: Invalid option: "€: " or missing value [ 1077.249249][T20470] ufs: wrong mount options [ 1077.554767][T20466] ufs: Invalid option: "¼6—ö" or missing value [ 1077.580285][T20466] ufs: wrong mount options [ 1078.524088][ T5135] usb 1-1: USB disconnect, device number 60 [ 1079.103748][ T29] audit: type=1326 audit(1720350890.015:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20515 comm="syz.1.3854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d67f75bd9 code=0x0 [ 1079.129297][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3856'. [ 1079.149926][T20522] macvlan2: entered promiscuous mode [ 1079.215481][T20525] ufs: Invalid option: "€: " or missing value [ 1079.242554][T20525] ufs: wrong mount options [ 1079.287011][T20528] FAULT_INJECTION: forcing a failure. [ 1079.287011][T20528] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.321565][T20528] CPU: 1 PID: 20528 Comm: syz.4.3859 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1079.331760][T20528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1079.341839][T20528] Call Trace: [ 1079.345140][T20528] [ 1079.348085][T20528] dump_stack_lvl+0x241/0x360 [ 1079.352798][T20528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1079.358017][T20528] ? __pfx__printk+0x10/0x10 [ 1079.363044][T20528] should_fail_ex+0x3b0/0x4e0 [ 1079.367731][T20528] ? sctp_add_bind_addr+0x89/0x3a0 [ 1079.372862][T20528] should_failslab+0x9/0x20 [ 1079.377375][T20528] kmalloc_trace_noprof+0x6c/0x2c0 [ 1079.382515][T20528] sctp_add_bind_addr+0x89/0x3a0 [ 1079.387478][T20528] sctp_copy_local_addr_list+0x311/0x500 [ 1079.393122][T20528] ? sctp_copy_local_addr_list+0xab/0x500 [ 1079.398877][T20528] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1079.405022][T20528] ? sctp_v4_is_any+0x35/0x60 [ 1079.409721][T20528] sctp_bind_addr_copy+0xad/0x3b0 [ 1079.414741][T20528] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 1079.421062][T20528] sctp_connect_new_asoc+0x2f3/0x6c0 [ 1079.426358][T20528] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1079.432198][T20528] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 1079.437997][T20528] __sctp_connect+0x66d/0xe30 [ 1079.442684][T20528] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1079.448671][T20528] ? __pfx___sctp_connect+0x10/0x10 [ 1079.453892][T20528] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1079.460225][T20528] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1079.465787][T20528] ? security_sctp_bind_connect+0x90/0xb0 [ 1079.471516][T20528] sctp_setsockopt_connectx+0x184/0x2a0 [ 1079.477069][T20528] ? __pfx_sctp_setsockopt_connectx+0x10/0x10 [ 1079.483144][T20528] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1079.488355][T20528] sctp_setsockopt+0x709/0x11c0 [ 1079.493214][T20528] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1079.499108][T20528] do_sock_setsockopt+0x3af/0x720 [ 1079.504128][T20528] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1079.509664][T20528] ? __fget_files+0x29/0x470 [ 1079.514243][T20528] ? __fget_files+0x3f6/0x470 [ 1079.518916][T20528] __sys_setsockopt+0x1ae/0x250 [ 1079.523796][T20528] __x64_sys_setsockopt+0xb5/0xd0 [ 1079.528824][T20528] do_syscall_64+0xf3/0x230 [ 1079.533355][T20528] ? clear_bhb_loop+0x35/0x90 [ 1079.538058][T20528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.543973][T20528] RIP: 0033:0x7f7cc0f75bd9 [ 1079.548392][T20528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1079.567990][T20528] RSP: 002b:00007f7cc1e12048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1079.576398][T20528] RAX: ffffffffffffffda RBX: 00007f7cc1103f60 RCX: 00007f7cc0f75bd9 [ 1079.584362][T20528] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000004 [ 1079.592335][T20528] RBP: 00007f7cc1e120a0 R08: 0000000000000010 R09: 0000000000000000 [ 1079.600314][T20528] R10: 0000000020009200 R11: 0000000000000246 R12: 0000000000000002 [ 1079.608277][T20528] R13: 000000000000000b R14: 00007f7cc1103f60 R15: 00007ffd22a01368 [ 1079.616259][T20528] [ 1081.011650][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3869'. [ 1081.037426][T20550] macvlan2: entered promiscuous mode [ 1081.179047][T20558] netlink: 'syz.4.3870': attribute type 9 has an invalid length. [ 1081.194093][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3870'. [ 1081.234345][T20558] netlink: 'syz.4.3870': attribute type 9 has an invalid length. [ 1081.266866][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3870'. [ 1081.344135][T20569] loop7: detected capacity change from 0 to 49152 [ 1081.416147][ T5133] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1081.521393][ T29] audit: type=1326 audit(1720350892.425:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20573 comm="syz.2.3877" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7452175bd9 code=0x0 [ 1081.721080][ T5133] usb 1-1: Using ep0 maxpacket: 16 [ 1081.930421][ T5133] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 1082.062684][ T5133] usb 1-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 1082.171153][ T5133] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1082.233195][ T5133] usb 1-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 1082.263232][ T5133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.284532][ T5133] usb 1-1: Product: syz [ 1082.292764][ T5133] usb 1-1: Manufacturer: syz [ 1082.320172][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3880'. [ 1082.329383][ T5133] usb 1-1: SerialNumber: syz [ 1082.356773][ T5133] usb 1-1: config 0 descriptor?? [ 1082.497504][ T5133] sierra 1-1:0.0: Sierra USB modem converter detected [ 1082.594782][T20588] macvlan3: entered promiscuous mode [ 1083.398559][ T29] audit: type=1326 audit(1720350894.315:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20593 comm="syz.3.3882" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f990af75bd9 code=0x0 [ 1083.674773][T20613] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3888'. [ 1083.695463][T20613] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1083.755329][ T5133] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 1083.760993][T20617] hfsplus: unable to find HFS+ superblock [ 1083.814074][ T5133] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 1083.845451][ T5133] usb 1-1: USB disconnect, device number 61 [ 1083.972209][ T5133] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1084.606006][T20626] loop7: detected capacity change from 49152 to 49088 [ 1084.783415][ T5133] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1084.799169][ T5133] sierra 1-1:0.0: device disconnected [ 1085.124508][T20638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3895'. [ 1086.027360][T20647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3895'. [ 1086.397444][T20638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1087.086828][ T29] audit: type=1326 audit(1720350898.005:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20660 comm="syz.1.3903" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d67f75bd9 code=0x0 [ 1087.116139][ T5133] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1087.206392][T20666] Illegal XDP return value 4294967294 on prog (id 894) dev N/A, expect packet loss! [ 1087.859853][T20652] ufs: Invalid option: "¼6—ö" or missing value [ 1087.873160][T20652] ufs: wrong mount options [ 1087.970214][ T5133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.992554][ T5133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42208, setting to 1024 [ 1088.055845][ T5133] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1088.064934][ T5133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.107541][ T5133] usb 1-1: config 0 descriptor?? [ 1088.116928][T20658] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1088.580452][ T5133] appletouch 1-1:0.0: Geyser mode initialized. [ 1088.599653][ T5133] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input34 [ 1088.620911][ C1] appletouch 1-1:0.0: atp_complete: usb_submit_urb failed with result -1 [ 1088.734847][ T8] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1088.985916][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 1089.199602][ T8] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1089.216782][ T8] usb 5-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 1089.259308][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1089.287800][ T8] usb 5-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 1089.309530][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.324077][ T8] usb 5-1: Product: syz [ 1089.330913][ T8] usb 5-1: Manufacturer: syz [ 1089.335707][ T8] usb 5-1: SerialNumber: syz [ 1089.595901][ T5136] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 1089.880142][ T5136] usb 2-1: string descriptor 0 read error: -22 [ 1089.899295][ T5136] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1089.929183][ T5136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.980597][ T5136] usb 2-1: config 0 descriptor?? [ 1090.086642][ T8] usb 5-1: config 0 descriptor?? [ 1090.096675][ T8] sierra 5-1:0.0: Sierra USB modem converter detected [ 1090.287620][ T929] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1090.495898][ T929] usb 4-1: Using ep0 maxpacket: 16 [ 1090.523282][ T929] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 1090.535428][ T929] usb 4-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 1090.566630][ T929] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1090.597025][ T929] usb 4-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 1090.614492][ T929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.651246][ T5136] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1090.660581][ T929] usb 4-1: Product: syz [ 1090.664768][ T929] usb 4-1: Manufacturer: syz [ 1090.675925][ T929] usb 4-1: SerialNumber: syz [ 1090.681253][ T5136] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1090.696676][ T929] usb 4-1: config 0 descriptor?? [ 1090.701989][ T5136] dib0700: firmware download failed at 7 with -22 [ 1090.712749][ T929] sierra 4-1:0.0: Sierra USB modem converter detected [ 1090.726181][ T5136] usb 2-1: USB disconnect, device number 82 [ 1090.805092][ T8] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 1090.835186][T13420] usb 1-1: USB disconnect, device number 62 [ 1090.855305][ T8] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 1090.893161][ T8] usb 5-1: USB disconnect, device number 67 [ 1090.912989][T13420] appletouch 1-1:0.0: input: appletouch disconnected [ 1090.917366][ T8] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1090.974106][ T8] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1091.015084][ T8] sierra 5-1:0.0: device disconnected [ 1091.280798][T20719] ufs: Invalid option: "¼6—ö" or missing value [ 1091.303197][T20719] ufs: wrong mount options [ 1091.320714][ T929] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 1091.373720][ T929] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 1091.436237][ T929] usb 4-1: USB disconnect, device number 80 [ 1091.487595][ T929] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1091.703173][ T929] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1091.712680][ T929] sierra 4-1:0.0: device disconnected [ 1092.931590][T20759] FAULT_INJECTION: forcing a failure. [ 1092.931590][T20759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1092.960310][T20759] CPU: 0 PID: 20759 Comm: syz.4.3929 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1092.970514][T20759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1092.980669][T20759] Call Trace: [ 1092.983958][T20759] [ 1092.986901][T20759] dump_stack_lvl+0x241/0x360 [ 1092.991611][T20759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1092.996835][T20759] ? __pfx__printk+0x10/0x10 [ 1093.001449][T20759] ? __pfx_lock_release+0x10/0x10 [ 1093.006493][T20759] should_fail_ex+0x3b0/0x4e0 [ 1093.011193][T20759] _copy_from_user+0x2f/0xe0 [ 1093.015796][T20759] copy_msghdr_from_user+0xae/0x680 [ 1093.021016][T20759] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1093.026846][T20759] __sys_sendmsg+0x23d/0x3a0 [ 1093.031427][T20759] ? __pfx___sys_sendmsg+0x10/0x10 [ 1093.036611][T20759] ? vfs_write+0x7c4/0xc90 [ 1093.041035][T20759] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1093.047346][T20759] ? do_syscall_64+0x100/0x230 [ 1093.052100][T20759] ? do_syscall_64+0xb6/0x230 [ 1093.056765][T20759] do_syscall_64+0xf3/0x230 [ 1093.061273][T20759] ? clear_bhb_loop+0x35/0x90 [ 1093.065969][T20759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.071885][T20759] RIP: 0033:0x7f7cc0f75bd9 [ 1093.076292][T20759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1093.096159][T20759] RSP: 002b:00007f7cc1e12048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1093.104568][T20759] RAX: ffffffffffffffda RBX: 00007f7cc1103f60 RCX: 00007f7cc0f75bd9 [ 1093.112544][T20759] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 1093.120527][T20759] RBP: 00007f7cc1e120a0 R08: 0000000000000000 R09: 0000000000000000 [ 1093.128515][T20759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.136472][T20759] R13: 000000000000000b R14: 00007f7cc1103f60 R15: 00007ffd22a01368 [ 1093.144447][T20759] [ 1093.185218][T20761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3930'. [ 1093.202831][T20761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3930'. [ 1093.341986][T20767] Bluetooth: MGMT ver 1.22 [ 1093.395126][T20755] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3927'. [ 1093.456068][T20755] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1093.473086][T20755] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1093.538675][T20778] ufs: Invalid option: "¼6—ö" or missing value [ 1093.553875][T20778] ufs: wrong mount options [ 1093.898603][T13420] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1094.498671][T13420] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1094.509780][T13420] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1094.520637][T13420] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 1094.532530][T13420] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1094.646322][T13420] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1094.686968][T13420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1094.699146][T13420] usb 5-1: SerialNumber: syz [ 1094.745693][T20770] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1094.755347][T20770] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1094.805417][T13420] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1095.034385][T13420] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 1095.064605][T13420] usb 5-1: USB disconnect, device number 68 [ 1095.426039][T19643] Bluetooth: hci0: command 0x041b tx timeout [ 1095.432133][ T5090] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1095.597466][T20807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3946'. [ 1100.286128][T13420] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1100.467239][T13420] usb 1-1: Using ep0 maxpacket: 16 [ 1100.486556][T13420] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 1100.501575][T13420] usb 1-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 1100.515559][T13420] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1101.187794][T13420] usb 1-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 1101.197963][T13420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.213733][T13420] usb 1-1: Product: syz [ 1101.218363][T13420] usb 1-1: Manufacturer: syz [ 1101.226151][T13420] usb 1-1: SerialNumber: syz [ 1101.243520][T13420] usb 1-1: config 0 descriptor?? [ 1101.261309][T13420] sierra 1-1:0.0: Sierra USB modem converter detected [ 1101.685850][ T5136] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1101.865590][T20929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3982'. [ 1101.908001][ T5136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.919402][ T5136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42208, setting to 1024 [ 1101.941152][ T5136] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1101.960890][T13420] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 1101.970824][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.988642][T13420] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 1102.002258][ T5136] usb 5-1: config 0 descriptor?? [ 1102.013720][T20919] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1102.023766][T13420] usb 1-1: USB disconnect, device number 63 [ 1102.038062][T13420] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1102.075059][T13420] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1102.147133][T13420] sierra 1-1:0.0: device disconnected [ 1103.029453][ T5136] appletouch 5-1:0.0: Geyser mode initialized. [ 1103.040111][ T5136] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35 [ 1103.295724][ C1] appletouch 5-1:0.0: atp_complete: usb_submit_urb failed with result -1 [ 1103.752847][T20952] bond_slave_0: entered promiscuous mode [ 1103.759259][T20952] bond_slave_1: entered promiscuous mode [ 1103.883040][T20956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3989'. [ 1104.448336][T20966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1104.532218][T20950] bond_slave_0: left promiscuous mode [ 1104.538028][T20950] bond_slave_1: left promiscuous mode [ 1104.800141][ T784] usb 5-1: USB disconnect, device number 69 [ 1104.947874][ T784] appletouch 5-1:0.0: input: appletouch disconnected [ 1107.306129][ T5136] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1108.245856][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 1108.264429][ T5136] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1108.309817][ T5136] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1108.342972][ T5136] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1108.373974][ T5136] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1108.428713][ T5136] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1108.543782][ T5136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1108.614488][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.705319][ T5136] usbtmc 3-1:16.0: bulk endpoints not found [ 1110.616232][ T784] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1110.826125][ T784] usb 5-1: Using ep0 maxpacket: 8 [ 1110.862255][ T784] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1110.895247][ T784] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1110.907184][ T784] usb 5-1: can't read configurations, error -71 [ 1110.957043][ T929] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 1111.164727][ T929] usb 2-1: string descriptor 0 read error: -22 [ 1111.186030][ T929] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1111.195096][ T929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.218263][ T929] usb 2-1: config 0 descriptor?? [ 1111.305904][ T5136] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1111.463843][ T9] usb 3-1: USB disconnect, device number 89 [ 1111.506184][ T5136] usb 4-1: Using ep0 maxpacket: 16 [ 1111.516266][T21056] fuse: Bad value for 'rootmode' [ 1111.539162][ T5136] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 1111.576470][ T5136] usb 4-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 1111.603335][ T5136] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1111.632923][ T5136] usb 4-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 1111.660420][ T5136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.670504][ T5136] usb 4-1: Product: syz [ 1111.676011][ T5136] usb 4-1: Manufacturer: syz [ 1111.680771][ T5136] usb 4-1: SerialNumber: syz [ 1111.694223][ T5136] usb 4-1: config 0 descriptor?? [ 1111.752020][ T5136] sierra 4-1:0.0: Sierra USB modem converter detected [ 1111.855901][ T929] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1111.938581][ T929] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1111.986614][ T929] dib0700: firmware download failed at 7 with -22 [ 1112.022347][ T929] usb 2-1: USB disconnect, device number 83 [ 1112.486604][ T5136] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 1112.515978][ T5136] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 1112.570984][ T5136] usb 4-1: USB disconnect, device number 81 [ 1112.618393][ T5136] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1112.675907][ T5136] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1112.696490][ T5136] sierra 4-1:0.0: device disconnected [ 1112.886072][ T5133] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1113.067951][ T5133] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1113.096769][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.128612][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.159026][ T5133] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1113.189974][ T5133] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1113.203039][ T5133] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1113.215515][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.220202][ T5133] usb 2-1: Manufacturer: syz [ 1113.251109][ T5133] usb 2-1: config 0 descriptor?? [ 1113.436729][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.596950][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.671201][ T5133] appleir 0003:05AC:8243.0037: unknown main item tag 0x0 [ 1113.699679][ T5133] appleir 0003:05AC:8243.0037: No inputs registered, leaving [ 1113.751783][ T5133] appleir 0003:05AC:8243.0037: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1113.837712][ T62] team0: Port device netdevsim0 removed [ 1113.875668][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.942589][T19643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1113.963790][T19643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1113.983060][T19643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1113.998292][T19643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1114.006182][T19643] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1114.016086][T19643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1114.468908][ T5136] usb 2-1: USB disconnect, device number 84 [ 1114.716943][ T62] bridge_slave_1: left allmulticast mode [ 1114.722780][ T62] bridge_slave_1: left promiscuous mode [ 1114.736355][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.767533][ T62] bridge_slave_0: left allmulticast mode [ 1114.783399][ T62] bridge_slave_0: left promiscuous mode [ 1114.796091][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.196927][ T5136] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 1115.393593][ T5136] usb 4-1: string descriptor 0 read error: -22 [ 1115.417240][ T5136] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1115.433373][ T5136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.462326][ T5136] usb 4-1: config 0 descriptor?? [ 1115.485882][ T784] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1115.699881][ T784] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1115.710870][ T784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.738761][ T784] usb 1-1: Product: syz [ 1115.743102][ T784] usb 1-1: Manufacturer: syz [ 1115.772817][ T784] usb 1-1: SerialNumber: syz [ 1115.796419][ T784] usb 1-1: config 0 descriptor?? [ 1115.811672][ T784] ch341 1-1:0.0: ch341-uart converter detected [ 1116.037261][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1116.061022][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1116.072854][ T5090] Bluetooth: hci1: command tx timeout [ 1116.087418][ T784] usb 1-1: failed to send control message: -71 [ 1116.097141][ T784] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1116.108807][ T784] usb 1-1: USB disconnect, device number 64 [ 1116.116700][ T784] ch341 1-1:0.0: device disconnected [ 1116.132797][ T62] bond0 (unregistering): Released all slaves [ 1116.152936][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.160076][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.355112][T21138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1117.415999][ T5136] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1117.448884][ T5136] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1117.478737][ T5136] dib0700: firmware download failed at 7 with -22 [ 1117.505873][ T5136] usb 4-1: USB disconnect, device number 82 [ 1117.772741][T21101] chnl_net:caif_netlink_parms(): no params data found [ 1118.047745][T21156] bridge0: entered allmulticast mode [ 1118.097625][T21154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4042'. [ 1118.128897][T21160] pim6reg: entered allmulticast mode [ 1118.156105][ T5090] Bluetooth: hci1: command tx timeout [ 1118.275025][ T62] hsr_slave_0: left promiscuous mode [ 1118.296399][ T62] hsr_slave_1: left promiscuous mode [ 1118.304953][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1118.313816][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.330534][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.355710][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.412512][ T62] veth1_macvtap: left promiscuous mode [ 1118.418557][ T62] veth0_macvtap: left promiscuous mode [ 1118.425590][ T62] veth0_vlan: left promiscuous mode [ 1118.616050][ T5133] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1118.808317][ T5133] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1118.835929][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.875866][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.908417][ T5133] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1118.932493][ T5133] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1118.953846][ T5133] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1118.983374][ T5133] usb 4-1: Manufacturer: syz [ 1118.992853][ T5133] usb 4-1: config 0 descriptor?? [ 1119.898775][ T5133] appleir 0003:05AC:8243.0038: unknown main item tag 0x0 [ 1119.925824][ T5133] appleir 0003:05AC:8243.0038: No inputs registered, leaving [ 1120.423580][ T5090] Bluetooth: hci1: command tx timeout [ 1120.447787][ T5133] appleir 0003:05AC:8243.0038: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1120.914460][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1120.974374][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1121.417179][T21191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1122.241218][T21101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.261350][T21101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.271065][T21101] bridge_slave_0: entered allmulticast mode [ 1122.290412][T21101] bridge_slave_0: entered promiscuous mode [ 1122.309238][T21101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.322967][T21101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.347164][T21101] bridge_slave_1: entered allmulticast mode [ 1122.367306][T21101] bridge_slave_1: entered promiscuous mode [ 1122.468255][T19643] Bluetooth: hci1: command tx timeout [ 1122.546756][ T784] usb 4-1: reset high-speed USB device number 83 using dummy_hcd [ 1122.603014][T21101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.654094][T21101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.806964][T21101] team0: Port device team_slave_0 added [ 1122.848124][T21101] team0: Port device team_slave_1 added [ 1122.916721][T21101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.944211][T21101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.026007][T21101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.069965][T21101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.095865][T21101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.183349][T21101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.306866][T21101] hsr_slave_0: entered promiscuous mode [ 1123.313767][T21101] hsr_slave_1: entered promiscuous mode [ 1123.333785][T21101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1123.365828][T21101] Cannot create hsr debugfs directory [ 1123.417614][ T5133] usb 4-1: USB disconnect, device number 83 [ 1124.215647][ T29] audit: type=1326 audit(1720350935.125:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21227 comm="syz.2.4061" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7452175bd9 code=0x0 [ 1124.470539][T21101] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1124.500322][T21101] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1124.534153][T21101] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1124.546529][T21101] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1124.554621][T21237] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 1124.646045][T13420] usb 4-1: new low-speed USB device number 84 using dummy_hcd [ 1124.696159][T21101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.735066][T21101] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.751563][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.758791][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.783171][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.790350][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.835341][T21101] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1124.844404][T13420] usb 4-1: string descriptor 0 read error: -22 [ 1124.851965][T21101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1124.855658][T13420] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1124.908261][T13420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.936552][T13420] usb 4-1: config 0 descriptor?? [ 1125.085089][T21101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.492320][T13420] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1125.536625][T13420] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1125.555405][T13420] dib0700: firmware download failed at 7 with -22 [ 1125.580846][T13420] usb 4-1: USB disconnect, device number 84 [ 1125.623096][T21101] veth0_vlan: entered promiscuous mode [ 1125.683173][T21101] veth1_vlan: entered promiscuous mode [ 1125.762172][T21101] veth0_macvtap: entered promiscuous mode [ 1125.784922][T21101] veth1_macvtap: entered promiscuous mode [ 1125.824257][T21101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.841595][T21101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.857197][T21101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.875076][T21101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.886648][T21101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.903217][T21101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.920502][T21101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.942478][T21101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.971317][T21101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.991551][T21101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.013075][T21101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1126.017627][ T29] audit: type=1326 audit(1720350936.935:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21259 comm="syz.1.4067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d67f75bd9 code=0x0 [ 1126.034984][T21101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.058366][T21101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.073454][T21101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.084488][T21101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.098197][T21101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.109682][T21101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.124729][T21101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.167079][T21101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.177618][T21101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.188611][T21101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.201775][T21101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1126.272989][T21101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.300626][T21101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.318888][T21101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.350126][T21101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.611853][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.640899][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.766277][ T2827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.792652][ T2827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.035434][ T5136] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1127.109343][T21286] tipc: Failed to obtain node identity [ 1127.120221][T21286] tipc: Enabling of bearer rejected, failed to enable media [ 1127.245865][ T5136] usb 1-1: Using ep0 maxpacket: 16 [ 1127.261497][ T5136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1127.278327][ T5136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1127.303114][ T5136] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1127.326016][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.349353][ T5136] usb 1-1: config 0 descriptor?? [ 1127.833454][T21281] sp0: Synchronizing with TNC [ 1127.923615][T21281] Falling back ldisc for ptm1. [ 1128.382263][ T5136] hid (null): report_id 0 is invalid [ 1128.404802][ T5136] hid-generic 0003:0158:0100.0039: unknown main item tag 0x1 [ 1128.415801][ T5136] hid-generic 0003:0158:0100.0039: unexpected long global item [ 1128.425204][ T5136] hid-generic 0003:0158:0100.0039: probe with driver hid-generic failed with error -22 [ 1128.429005][T21309] tipc: Started in network mode [ 1128.771068][T21309] tipc: Node identity , cluster identity 4711 [ 1128.900317][T13420] usb 1-1: USB disconnect, device number 65 [ 1129.016499][T21309] tipc: Failed to set node id, please configure manually [ 1129.102080][T21309] tipc: Enabling of bearer rejected, failed to enable media [ 1129.726548][T21340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4088'. [ 1129.775563][T21340] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1130.057060][T21345] fuseblk: Unknown parameter 'rootmode [00000000000000020000' [ 1131.722540][ T5090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1131.734231][ T5090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1131.786164][ T5090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1131.817923][ T7935] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.841743][ T5090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1131.854241][ T5090] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1131.864154][ T5090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1132.235175][T19643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1132.264286][T19643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1132.278345][T19643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1132.299151][T19643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1132.307848][T19643] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1132.315663][T19643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1132.748684][T21374] tipc: Started in network mode [ 1132.753589][T21374] tipc: Node identity , cluster identity 4711 [ 1132.795926][T21374] tipc: Failed to set node id, please configure manually [ 1132.803029][T21374] tipc: Enabling of bearer rejected, failed to enable media [ 1132.932096][ T7935] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.151851][ T7935] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.217751][T21357] chnl_net:caif_netlink_parms(): no params data found [ 1133.362825][ T7935] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.634065][T21395] fuseblk: Unknown parameter 'rootmode [00000000000000020000' [ 1133.907724][T19643] Bluetooth: hci1: command tx timeout [ 1134.386954][T19643] Bluetooth: hci2: command tx timeout [ 1134.442014][T21357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.462062][T21357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.474611][T21357] bridge_slave_0: entered allmulticast mode [ 1134.484551][T21357] bridge_slave_0: entered promiscuous mode [ 1134.544625][T21415] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1134.551183][T21415] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1134.559118][T21415] vhci_hcd vhci_hcd.0: Device attached [ 1134.570238][T21415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4102'. [ 1134.676211][T13420] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 1134.737747][T21357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.799869][T21357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.854461][T21357] bridge_slave_1: entered allmulticast mode [ 1134.906177][ T5136] usb 15-1: new low-speed USB device number 4 using vhci_hcd [ 1134.927071][T21357] bridge_slave_1: entered promiscuous mode [ 1135.051856][T21365] chnl_net:caif_netlink_parms(): no params data found [ 1135.068615][T21416] vhci_hcd: connection reset by peer [ 1135.090848][ T2855] vhci_hcd: stop threads [ 1135.100416][ T2855] vhci_hcd: release socket [ 1135.124257][ T2855] vhci_hcd: disconnect device [ 1135.195314][T21357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.214199][T21413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.225308][T21413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.246528][T21357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.372847][T21413] netlink: 'syz.0.4103': attribute type 16 has an invalid length. [ 1135.525152][T13420] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1135.557733][T13420] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1135.567087][T13420] usb 1-1: can't read configurations, error -71 [ 1135.667167][T21357] team0: Port device team_slave_0 added [ 1135.731930][T21357] team0: Port device team_slave_1 added [ 1135.843590][ T7935] bridge_slave_1: left allmulticast mode [ 1135.856026][ T7935] bridge_slave_1: left promiscuous mode [ 1135.863498][ T7935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.877792][ T7935] bridge_slave_0: left allmulticast mode [ 1135.886086][ T7935] bridge_slave_0: left promiscuous mode [ 1135.895208][ T7935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.067727][T19643] Bluetooth: hci1: command tx timeout [ 1136.972984][T19643] Bluetooth: hci2: command tx timeout [ 1137.343063][ T7935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.366518][ T7935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.382940][ T7935] bond0 (unregistering): Released all slaves [ 1137.431239][T21357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.438592][T21357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.540219][T21357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.597803][T21357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.630862][T21357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.672188][T21357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.701197][T21365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.725077][T21365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.736300][T21365] bridge_slave_0: entered allmulticast mode [ 1137.743927][T21365] bridge_slave_0: entered promiscuous mode [ 1137.751466][T21432] tipc: Started in network mode [ 1137.757077][T21432] tipc: Node identity , cluster identity 4711 [ 1137.763190][T21432] tipc: Failed to set node id, please configure manually [ 1137.770309][T21432] tipc: Enabling of bearer rejected, failed to enable media [ 1137.890950][T21365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.907272][T21365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.934530][T21365] bridge_slave_1: entered allmulticast mode [ 1137.957284][T21365] bridge_slave_1: entered promiscuous mode [ 1138.053626][T21365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.080359][T21365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.146290][T19643] Bluetooth: hci1: command tx timeout [ 1138.314212][T21357] hsr_slave_0: entered promiscuous mode [ 1138.346497][T21357] hsr_slave_1: entered promiscuous mode [ 1138.365452][T21357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1138.384308][T21357] Cannot create hsr debugfs directory [ 1138.404855][T21454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4113'. [ 1138.435618][T21457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4114'. [ 1138.518723][T21365] team0: Port device team_slave_0 added [ 1138.577251][T21365] team0: Port device team_slave_1 added [ 1138.607680][ T7935] hsr_slave_0: left promiscuous mode [ 1138.633095][ T7935] hsr_slave_1: left promiscuous mode [ 1138.651567][ T7935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.670747][ T7935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.691748][ T7935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.712132][ T7935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.771937][ T7935] veth1_macvtap: left promiscuous mode [ 1138.782164][ T7935] veth0_macvtap: left promiscuous mode [ 1138.788024][ T7935] veth1_vlan: left promiscuous mode [ 1138.793431][ T7935] veth0_vlan: left promiscuous mode [ 1139.026323][T19643] Bluetooth: hci2: command tx timeout [ 1139.454290][ T7935] team0 (unregistering): Port device team_slave_1 removed [ 1139.500305][ T7935] team0 (unregistering): Port device team_slave_0 removed [ 1140.067027][ T5136] vhci_hcd: vhci_device speed not set [ 1140.227447][T19643] Bluetooth: hci1: command tx timeout [ 1140.900740][T21365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.908346][T21365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.945994][T21365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.962872][T21365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.996143][T21365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.057999][T21365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.106265][T19643] Bluetooth: hci2: command tx timeout [ 1141.286237][T21491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4124'. [ 1141.407402][T21365] hsr_slave_0: entered promiscuous mode [ 1141.426558][T21365] hsr_slave_1: entered promiscuous mode [ 1141.455847][T21365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1141.463462][T21365] Cannot create hsr debugfs directory [ 1141.599586][T21357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.646149][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1141.890600][T21357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.170650][T21357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.284938][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1142.298110][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1142.315676][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1142.326244][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1142.336633][ T9] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1142.356216][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1142.395801][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1142.408689][T21357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.419777][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.519344][T21507] fuse: Bad value for 'rootmode' [ 1142.522038][ T9] usbtmc 2-1:16.0: bulk endpoints not found [ 1143.471580][T21515] overlay: ./file0 is not a directory [ 1143.584938][T21357] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1143.661547][T21357] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1143.683318][T21357] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1143.747288][T21520] syz.3.4134[21520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1143.747448][T21520] syz.3.4134[21520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1144.042246][T21357] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1144.375980][ T25] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1144.427431][ T5136] usb 2-1: USB disconnect, device number 85 [ 1144.565665][T21365] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1144.614561][T21357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.627317][T21365] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1144.807458][T21365] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1144.933184][T21365] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1145.188654][T21357] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.219780][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.226971][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.277460][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.284657][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.333401][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.355811][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.365599][ T25] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1145.379449][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.399869][ T25] usb 1-1: config 0 descriptor?? [ 1145.668393][T21365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.718395][T21365] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.754928][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.764300][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.794358][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.801683][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.829020][ T25] isku 0003:1E7D:319C.003A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 1146.025955][T21357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.192107][T21357] veth0_vlan: entered promiscuous mode [ 1146.219956][T21357] veth1_vlan: entered promiscuous mode [ 1146.223336][T13420] usb 1-1: USB disconnect, device number 68 [ 1146.346093][T21357] veth0_macvtap: entered promiscuous mode [ 1146.378257][T21357] veth1_macvtap: entered promiscuous mode [ 1146.473409][T21357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.515814][T21357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.525668][T21357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.557102][T21357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.575857][T21357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.593117][T21357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.603424][T21357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.614253][T21357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.625013][T21357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.636593][T21357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.654889][T21357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.673482][T21365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.688878][T21357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.716512][T21357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.730980][T21357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.745940][T21357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.772851][T21357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.794127][T21357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.804814][T21357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.816181][T21357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.826692][T21357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.838501][T21357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.851791][T21357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.874450][T21357] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.884409][T21357] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.896766][T21357] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.905491][T21357] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.916584][ T5133] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1147.100772][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.117898][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.123441][ T5133] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1147.145509][ T5133] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1147.156080][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.164719][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.180100][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.215278][ T5133] usb 2-1: config 0 descriptor?? [ 1147.266162][ T784] usb 1-1: new low-speed USB device number 69 using dummy_hcd [ 1147.283777][T21365] veth0_vlan: entered promiscuous mode [ 1147.319157][T21365] veth1_vlan: entered promiscuous mode [ 1147.358985][T21365] veth0_macvtap: entered promiscuous mode [ 1147.380322][T21365] veth1_macvtap: entered promiscuous mode [ 1147.456365][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.475953][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.484262][ T784] usb 1-1: string descriptor 0 read error: -22 [ 1147.486497][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.508983][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.518285][ T784] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1147.519299][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.542755][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.544425][ T784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.562616][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.576171][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.586046][ T784] usb 1-1: config 0 descriptor?? [ 1147.601393][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.620051][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.639442][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.651764][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.685004][T21365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.729300][T21581] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4141'. [ 1147.767362][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.811169][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.814237][ T5133] video4linux radio32: keene_cmd_main failed (-71) [ 1147.829370][ T5133] radio-keene 2-1:0.0: V4L2 device registered as radio32 [ 1147.868302][ T5133] usb 2-1: USB disconnect, device number 86 [ 1147.937226][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.987814][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1148.019985][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1148.081760][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1148.153207][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1148.197865][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1148.208230][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1148.228095][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1148.255870][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1148.266641][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1148.285450][T21365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1148.310627][T21365] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.324873][ T784] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1148.344071][T21365] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.355902][ T784] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1148.359259][T21365] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.371817][ T784] dib0700: firmware download failed at 7 with -22 [ 1148.373335][T21365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.397014][ T784] usb 1-1: USB disconnect, device number 69 [ 1148.611222][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.630131][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.658098][ T29] audit: type=1326 audit(1720350959.575:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21592 comm="syz.2.4145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1ba175bd9 code=0x0 [ 1148.671909][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.693202][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.932524][T21600] netlink: 209848 bytes leftover after parsing attributes in process `syz.3.4148'. [ 1148.945339][T21600] openvswitch: netlink: Message has 2 unknown bytes. [ 1152.299772][T21613] FAULT_INJECTION: forcing a failure. [ 1152.299772][T21613] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.328517][T21613] CPU: 0 PID: 21613 Comm: syz.2.4151 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1152.338717][T21613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1152.348796][T21613] Call Trace: [ 1152.352093][T21613] [ 1152.355039][T21613] dump_stack_lvl+0x241/0x360 [ 1152.359747][T21613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1152.364974][T21613] ? __pfx__printk+0x10/0x10 [ 1152.369594][T21613] ? __pfx___might_resched+0x10/0x10 [ 1152.374902][T21613] ? __kasan_kmalloc+0x98/0xb0 [ 1152.379691][T21613] ? __genradix_ptr_alloc+0x196/0x460 [ 1152.385088][T21613] should_fail_ex+0x3b0/0x4e0 [ 1152.389789][T21613] ? sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 1152.395704][T21613] should_failslab+0x9/0x20 [ 1152.400222][T21613] kmalloc_trace_noprof+0x6c/0x2c0 [ 1152.405359][T21613] sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 1152.411113][T21613] sctp_association_new+0x15aa/0x23f0 [ 1152.416520][T21613] sctp_connect_new_asoc+0x2d8/0x6c0 [ 1152.421828][T21613] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1152.427649][T21613] ? sctp_sendmsg+0xbb9/0x3520 [ 1152.432435][T21613] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1152.438002][T21613] ? security_sctp_bind_connect+0x90/0xb0 [ 1152.443730][T21613] sctp_sendmsg+0x219a/0x3520 [ 1152.448442][T21613] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1152.453477][T21613] ? __pfx_lock_release+0x10/0x10 [ 1152.458514][T21613] ? inet_sendmsg+0x330/0x390 [ 1152.463200][T21613] __sock_sendmsg+0x1a6/0x270 [ 1152.467875][T21613] ____sys_sendmsg+0x525/0x7d0 [ 1152.472645][T21613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1152.477940][T21613] __sys_sendmmsg+0x3b2/0x740 [ 1152.482626][T21613] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1152.487863][T21613] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1152.493760][T21613] ? ksys_write+0x23e/0x2c0 [ 1152.498262][T21613] ? __pfx_lock_release+0x10/0x10 [ 1152.503283][T21613] ? vfs_write+0x7c4/0xc90 [ 1152.507726][T21613] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1152.513393][T21613] ? __pfx_vfs_write+0x10/0x10 [ 1152.518204][T21613] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1152.524220][T21613] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1152.530550][T21613] ? do_syscall_64+0x100/0x230 [ 1152.535324][T21613] __x64_sys_sendmmsg+0xa0/0xb0 [ 1152.540189][T21613] do_syscall_64+0xf3/0x230 [ 1152.544703][T21613] ? clear_bhb_loop+0x35/0x90 [ 1152.549388][T21613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.555297][T21613] RIP: 0033:0x7fd1ba175bd9 [ 1152.559708][T21613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1152.579309][T21613] RSP: 002b:00007fd1bae93048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1152.587805][T21613] RAX: ffffffffffffffda RBX: 00007fd1ba303f60 RCX: 00007fd1ba175bd9 [ 1152.595773][T21613] RDX: 0000000000000002 RSI: 0000000020000180 RDI: 0000000000000003 [ 1152.603743][T21613] RBP: 00007fd1bae930a0 R08: 0000000000000000 R09: 0000000000000000 [ 1152.611709][T21613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1152.619669][T21613] R13: 000000000000000b R14: 00007fd1ba303f60 R15: 00007fffc8fd7568 [ 1152.627652][T21613] [ 1152.820316][ T29] audit: type=1326 audit(1720350963.735:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21623 comm="syz.1.4154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d67f75bd9 code=0x0 [ 1153.557947][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.015927][ T9] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 1154.199758][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1154.210648][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1154.218807][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1154.229708][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1154.232528][ T9] usb 4-1: string descriptor 0 read error: -22 [ 1154.244858][ T5090] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1154.252638][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1154.269977][ T9] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1154.316016][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.338488][ T9] usb 4-1: config 0 descriptor?? [ 1154.436054][ T5136] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1154.526446][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.639988][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.657758][ T5136] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1154.707877][ T5136] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.774210][ T5136] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1154.802110][ T5136] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.849720][ T9] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1154.863610][ T5136] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1154.874626][ T5136] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1154.882762][ T5136] usb 1-1: Product: syz [ 1154.887083][ T5136] usb 1-1: Manufacturer: syz [ 1154.895214][ T5136] cdc_wdm 1-1:1.0: skipping garbage [ 1154.900673][ T5136] cdc_wdm 1-1:1.0: skipping garbage [ 1154.908005][ T5136] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1154.914010][ T5136] cdc_wdm 1-1:1.0: Unknown control protocol [ 1154.940134][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.987916][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1155.009960][ T9] dib0700: firmware download failed at 7 with -22 [ 1155.026849][ T5136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.033709][ T9] usb 4-1: USB disconnect, device number 85 [ 1155.116425][ T5133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.313832][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1155.320755][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1155.328680][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1155.335402][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1155.341722][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1155.348337][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1155.354684][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1155.361297][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1155.367694][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1155.374271][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1155.380502][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1155.387079][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1155.393303][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1155.399900][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1155.406234][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1155.412836][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1155.419157][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1155.425773][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1155.432039][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1155.438620][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1155.517757][ T5136] usb 1-1: USB disconnect, device number 70 [ 1155.523723][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1155.533299][T21655] chnl_net:caif_netlink_parms(): no params data found [ 1155.582793][ T62] bridge_slave_1: left allmulticast mode [ 1155.594065][ T62] bridge_slave_1: left promiscuous mode [ 1155.610720][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.648493][ T62] bridge_slave_0: left allmulticast mode [ 1155.660911][ T62] bridge_slave_0: left promiscuous mode [ 1155.680845][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.269283][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.401579][T19643] Bluetooth: hci2: command tx timeout [ 1156.804712][T21694] ufs: Invalid option: "€: " or missing value [ 1156.811331][T21694] ufs: wrong mount options [ 1157.084653][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.109171][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.124272][ T62] bond0 (unregistering): Released all slaves [ 1157.158830][T21680] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1157.298814][T18494] usb 1-1: new low-speed USB device number 71 using dummy_hcd [ 1157.350154][ T5133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.503208][T18494] usb 1-1: No LPM exit latency info found, disabling LPM. [ 1157.512739][T18494] usb 1-1: string descriptor 0 read error: -22 [ 1157.512876][T18494] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1157.512905][T18494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.526466][T18494] usb 1-1: config 0 descriptor?? [ 1157.685363][ T62] hsr_slave_0: left promiscuous mode [ 1157.694782][ T62] hsr_slave_1: left promiscuous mode [ 1157.696840][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1157.696899][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1157.697927][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1157.697983][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1157.782915][ T62] veth1_macvtap: left promiscuous mode [ 1157.783006][ T62] veth0_macvtap: left promiscuous mode [ 1157.783240][ T62] veth1_vlan: left promiscuous mode [ 1157.786797][ T62] veth0_vlan: left promiscuous mode [ 1158.423572][ T5133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.567566][T19643] Bluetooth: hci2: command tx timeout [ 1158.701992][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.897061][T18494] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1158.898444][T18494] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1158.970793][T18494] dib0700: firmware download failed at 7 with -22 [ 1158.981851][T18494] usb 1-1: USB disconnect, device number 71 [ 1159.427569][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.505518][T18494] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 1159.735021][T18494] usb 3-1: string descriptor 0 read error: -22 [ 1159.741810][T18494] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1159.794074][T18494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.824540][T18494] usb 3-1: config 0 descriptor?? [ 1160.466124][ T5133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.593537][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1160.629866][T19643] Bluetooth: hci2: command tx timeout [ 1160.666512][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1161.275004][T21655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.282578][T21655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.294616][T21655] bridge_slave_0: entered allmulticast mode [ 1161.306479][T21655] bridge_slave_0: entered promiscuous mode [ 1161.331683][T21655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.353818][T21655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.369086][T21655] bridge_slave_1: entered allmulticast mode [ 1161.382149][T21655] bridge_slave_1: entered promiscuous mode [ 1161.393835][T21734] tipc: Failed to obtain node identity [ 1161.400090][T21734] tipc: Enabling of bearer rejected, failed to enable media [ 1161.448362][T21742] netlink: 'syz.3.4174': attribute type 5 has an invalid length. [ 1161.466609][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4174'. [ 1161.476893][T18494] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1161.507686][ T5133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.510785][T18494] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1161.542729][T18494] dib0700: firmware download failed at 7 with -22 [ 1161.588256][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.609728][T18494] usb 3-1: USB disconnect, device number 90 [ 1161.750501][T21655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.760626][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.795338][T21655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.923360][T21655] team0: Port device team_slave_0 added [ 1161.981199][T21655] team0: Port device team_slave_1 added [ 1162.064513][T21655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.080729][T21655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.297066][T21655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.716075][T19643] Bluetooth: hci2: command tx timeout [ 1162.789437][ T784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.836748][T21655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.854017][T21655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.880441][T21764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4187'. [ 1162.922310][T21655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.941160][T21748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.950666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.189601][T21655] hsr_slave_0: entered promiscuous mode [ 1163.216008][T21655] hsr_slave_1: entered promiscuous mode [ 1163.234439][T21655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1163.244088][T21655] Cannot create hsr debugfs directory [ 1163.465925][ T25] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1163.512651][T21777] Process accounting resumed [ 1163.557277][T21777] FAULT_INJECTION: forcing a failure. [ 1163.557277][T21777] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.572669][T21777] CPU: 0 PID: 21777 Comm: syz.3.4191 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1163.582838][T21777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1163.592882][T21777] Call Trace: [ 1163.596152][T21777] [ 1163.599073][T21777] dump_stack_lvl+0x241/0x360 [ 1163.603749][T21777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1163.608938][T21777] ? __pfx__printk+0x10/0x10 [ 1163.613540][T21777] should_fail_ex+0x3b0/0x4e0 [ 1163.618219][T21777] ? __alloc_skb+0x1c3/0x440 [ 1163.622796][T21777] should_failslab+0x9/0x20 [ 1163.627284][T21777] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1163.633090][T21777] __alloc_skb+0x1c3/0x440 [ 1163.637498][T21777] ? __pfx___alloc_skb+0x10/0x10 [ 1163.642436][T21777] quota_send_warning+0xa5/0x620 [ 1163.647381][T21777] ? __dquot_free_space+0x96c/0xeb0 [ 1163.652576][T21777] ? __pfx_quota_send_warning+0x10/0x10 [ 1163.658107][T21777] ? do_raw_spin_lock+0x14f/0x370 [ 1163.663124][T21777] ? __pfx_lock_release+0x10/0x10 [ 1163.668146][T21777] __dquot_free_space+0xbe5/0xeb0 [ 1163.673164][T21777] ? __dquot_free_space+0x1f3/0xeb0 [ 1163.678352][T21777] ? __pfx___dquot_free_space+0x10/0x10 [ 1163.683893][T21777] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1163.689104][T21777] shmem_inode_unacct_blocks+0xbb/0x230 [ 1163.694643][T21777] shmem_undo_range+0x19d7/0x1df0 [ 1163.699670][T21777] ? __pfx_shmem_undo_range+0x10/0x10 [ 1163.705068][T21777] ? unmap_mapping_range+0xf8/0x290 [ 1163.710254][T21777] ? __pfx_unmap_mapping_range+0x10/0x10 [ 1163.715880][T21777] shmem_truncate_range+0x33/0x90 [ 1163.720897][T21777] shmem_setattr+0xb57/0xec0 [ 1163.725479][T21777] ? __pfx_shmem_setattr+0x10/0x10 [ 1163.730578][T21777] notify_change+0xb9d/0xe70 [ 1163.735164][T21777] do_truncate+0x220/0x310 [ 1163.739577][T21777] ? __pfx_do_truncate+0x10/0x10 [ 1163.744514][T21777] path_openat+0x2db0/0x35f0 [ 1163.749113][T21777] ? __lock_acquire+0x1346/0x1fd0 [ 1163.754125][T21777] ? __pfx_path_openat+0x10/0x10 [ 1163.759062][T21777] do_filp_open+0x235/0x490 [ 1163.763557][T21777] ? __pfx_do_filp_open+0x10/0x10 [ 1163.768589][T21777] ? _raw_spin_unlock+0x28/0x50 [ 1163.773428][T21777] ? alloc_fd+0x5a1/0x640 [ 1163.777750][T21777] do_sys_openat2+0x13e/0x1d0 [ 1163.782448][T21777] ? __pfx_do_sys_openat2+0x10/0x10 [ 1163.787640][T21777] __x64_sys_creat+0x123/0x170 [ 1163.792392][T21777] ? __pfx___x64_sys_creat+0x10/0x10 [ 1163.797666][T21777] ? do_syscall_64+0x100/0x230 [ 1163.802422][T21777] ? do_syscall_64+0xb6/0x230 [ 1163.807090][T21777] do_syscall_64+0xf3/0x230 [ 1163.811583][T21777] ? clear_bhb_loop+0x35/0x90 [ 1163.816260][T21777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.822146][T21777] RIP: 0033:0x7f990af75bd9 [ 1163.826553][T21777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1163.846156][T21777] RSP: 002b:00007f990bd94048 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1163.854572][T21777] RAX: ffffffffffffffda RBX: 00007f990b103f60 RCX: 00007f990af75bd9 [ 1163.862531][T21777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020002040 [ 1163.870489][T21777] RBP: 00007f990bd940a0 R08: 0000000000000000 R09: 0000000000000000 [ 1163.878448][T21777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.886436][T21777] R13: 000000000000000b R14: 00007f990b103f60 R15: 00007ffdd531e2a8 [ 1163.894418][T21777] [ 1163.904664][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.983732][T21777] VFS: Not enough memory to send quota warning. [ 1164.011995][ T25] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1164.033209][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.044836][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.075048][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1164.124076][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1164.167832][ T25] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1164.191959][ T25] usb 1-1: Manufacturer: syz [ 1164.197933][T21784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.206975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.225688][ T25] usb 1-1: config 0 descriptor?? [ 1164.442054][T21655] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1164.457263][T21791] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1164.481595][T21655] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1164.521780][T21655] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1164.597319][T21655] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1164.655218][ T25] appleir 0003:05AC:8243.003B: unknown main item tag 0x0 [ 1164.678430][ T25] appleir 0003:05AC:8243.003B: No inputs registered, leaving [ 1164.703101][ T25] appleir 0003:05AC:8243.003B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1165.591975][T21655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.705647][T21655] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.728711][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.735908][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.778801][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.786050][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.880913][T21655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1165.998623][ T5133] net_ratelimit: 2 callbacks suppressed [ 1165.998645][ T5133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.127172][T21815] FAULT_INJECTION: forcing a failure. [ 1166.127172][T21815] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.140980][T21815] CPU: 1 PID: 21815 Comm: syz.2.4203 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1166.151164][T21815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1166.161213][T21815] Call Trace: [ 1166.164486][T21815] [ 1166.167410][T21815] dump_stack_lvl+0x241/0x360 [ 1166.172097][T21815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1166.177292][T21815] ? __pfx__printk+0x10/0x10 [ 1166.181877][T21815] ? __pfx___might_resched+0x10/0x10 [ 1166.187157][T21815] ? stack_depot_save_flags+0x29/0x830 [ 1166.192615][T21815] should_fail_ex+0x3b0/0x4e0 [ 1166.197297][T21815] should_failslab+0x9/0x20 [ 1166.201811][T21815] kmalloc_node_track_caller_noprof+0xda/0x440 [ 1166.207977][T21815] ? parse_opts+0x17e/0x690 [ 1166.212486][T21815] ? legacy_get_tree+0xee/0x190 [ 1166.217354][T21815] ? vfs_get_tree+0x90/0x2a0 [ 1166.221947][T21815] kstrdup+0x3a/0x80 [ 1166.225840][T21815] parse_opts+0x17e/0x690 [ 1166.230172][T21815] ? __pfx_parse_opts+0x10/0x10 [ 1166.235038][T21815] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1166.241032][T21815] p9_fd_create+0x91/0x530 [ 1166.245470][T21815] ? lockdep_hardirqs_on+0x99/0x150 [ 1166.250683][T21815] ? __pfx_p9_fd_create+0x10/0x10 [ 1166.255716][T21815] ? kfree+0x149/0x360 [ 1166.259787][T21815] p9_client_create+0x860/0x1040 [ 1166.264731][T21815] ? __pfx_p9_client_create+0x10/0x10 [ 1166.270200][T21815] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1166.276148][T21815] ? __raw_spin_lock_init+0x45/0x100 [ 1166.281480][T21815] v9fs_session_init+0x1e4/0x1b80 [ 1166.286528][T21815] ? __pfx_v9fs_session_init+0x10/0x10 [ 1166.291991][T21815] ? __kasan_kmalloc+0x98/0xb0 [ 1166.296754][T21815] ? v9fs_mount+0xb2/0xa90 [ 1166.301166][T21815] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 1166.306535][T21815] v9fs_mount+0xcf/0xa90 [ 1166.310774][T21815] ? __kasan_kmalloc+0x98/0xb0 [ 1166.315532][T21815] ? __pfx_v9fs_mount+0x10/0x10 [ 1166.320374][T21815] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 1166.325746][T21815] ? cap_capable+0x1b4/0x250 [ 1166.330329][T21815] legacy_get_tree+0xee/0x190 [ 1166.334998][T21815] ? __pfx_v9fs_mount+0x10/0x10 [ 1166.339844][T21815] vfs_get_tree+0x90/0x2a0 [ 1166.344255][T21815] do_new_mount+0x2be/0xb40 [ 1166.348762][T21815] ? __pfx_do_new_mount+0x10/0x10 [ 1166.353794][T21815] __se_sys_mount+0x2d9/0x3c0 [ 1166.358469][T21815] ? __pfx___se_sys_mount+0x10/0x10 [ 1166.363659][T21815] ? do_syscall_64+0x100/0x230 [ 1166.368422][T21815] ? __x64_sys_mount+0x20/0xc0 [ 1166.373176][T21815] do_syscall_64+0xf3/0x230 [ 1166.377674][T21815] ? clear_bhb_loop+0x35/0x90 [ 1166.382348][T21815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.388233][T21815] RIP: 0033:0x7fd1ba175bd9 [ 1166.392638][T21815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1166.412236][T21815] RSP: 002b:00007fd1bae93048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1166.420644][T21815] RAX: ffffffffffffffda RBX: 00007fd1ba303f60 RCX: 00007fd1ba175bd9 [ 1166.428607][T21815] RDX: 00000000200002c0 RSI: 0000000020000180 RDI: 0000000000000000 [ 1166.436573][T21815] RBP: 00007fd1bae930a0 R08: 00000000200000c0 R09: 0000000000000000 [ 1166.444537][T21815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1166.452498][T21815] R13: 000000000000000b R14: 00007fd1ba303f60 R15: 00007fffc8fd7568 [ 1166.460495][T21815] [ 1166.475884][ T5136] usb 1-1: reset high-speed USB device number 72 using dummy_hcd [ 1166.609966][T21655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.675986][ T5136] usb 1-1: device descriptor read/64, error -32 [ 1166.954868][T21834] FAULT_INJECTION: forcing a failure. [ 1166.954868][T21834] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.968627][T21834] CPU: 0 PID: 21834 Comm: syz.2.4208 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1166.978814][T21834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1166.988886][T21834] Call Trace: [ 1166.992183][T21834] [ 1166.995131][T21834] dump_stack_lvl+0x241/0x360 [ 1166.999843][T21834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1167.005071][T21834] ? __pfx__printk+0x10/0x10 [ 1167.009686][T21834] ? __pfx___might_resched+0x10/0x10 [ 1167.015005][T21834] should_fail_ex+0x3b0/0x4e0 [ 1167.019709][T21834] ? nft_trans_table_add+0x53/0x270 [ 1167.024929][T21834] should_failslab+0x9/0x20 [ 1167.029449][T21834] kmalloc_trace_noprof+0x6c/0x2c0 [ 1167.034575][T21834] ? rhashtable_init_noprof+0x748/0xa60 [ 1167.040141][T21834] nft_trans_table_add+0x53/0x270 [ 1167.045193][T21834] nf_tables_newtable+0x10f6/0x1dc0 [ 1167.050426][T21834] ? __pfx_nf_tables_newtable+0x10/0x10 [ 1167.056000][T21834] ? __nla_parse+0x40/0x60 [ 1167.060528][T21834] nfnetlink_rcv+0x1427/0x2a80 [ 1167.065319][T21834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1167.071700][T21834] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1167.076851][T21834] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1167.082007][T21834] ? netlink_deliver_tap+0x2e/0x1b0 [ 1167.087202][T21834] ? skb_clone+0x240/0x390 [ 1167.091612][T21834] ? __pfx_lock_release+0x10/0x10 [ 1167.096642][T21834] ? netlink_deliver_tap+0x2e/0x1b0 [ 1167.101932][T21834] netlink_unicast+0x7ea/0x980 [ 1167.106709][T21834] ? __pfx_netlink_unicast+0x10/0x10 [ 1167.111999][T21834] ? __virt_addr_valid+0x183/0x520 [ 1167.117210][T21834] ? __check_object_size+0x49c/0x900 [ 1167.122486][T21834] ? bpf_lsm_netlink_send+0x9/0x10 [ 1167.127594][T21834] netlink_sendmsg+0x8db/0xcb0 [ 1167.132366][T21834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1167.137650][T21834] ? __import_iovec+0x536/0x820 [ 1167.142495][T21834] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1167.147771][T21834] ? security_socket_sendmsg+0x87/0xb0 [ 1167.153226][T21834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1167.158505][T21834] __sock_sendmsg+0x221/0x270 [ 1167.163176][T21834] ____sys_sendmsg+0x525/0x7d0 [ 1167.167941][T21834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1167.173234][T21834] __sys_sendmsg+0x2b0/0x3a0 [ 1167.177820][T21834] ? __pfx___sys_sendmsg+0x10/0x10 [ 1167.182922][T21834] ? vfs_write+0x7c4/0xc90 [ 1167.187368][T21834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1167.193689][T21834] ? do_syscall_64+0x100/0x230 [ 1167.198459][T21834] ? do_syscall_64+0xb6/0x230 [ 1167.203132][T21834] do_syscall_64+0xf3/0x230 [ 1167.207633][T21834] ? clear_bhb_loop+0x35/0x90 [ 1167.212309][T21834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.218197][T21834] RIP: 0033:0x7fd1ba175bd9 [ 1167.222605][T21834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.242209][T21834] RSP: 002b:00007fd1bae93048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1167.250621][T21834] RAX: ffffffffffffffda RBX: 00007fd1ba303f60 RCX: 00007fd1ba175bd9 [ 1167.258585][T21834] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1167.266546][T21834] RBP: 00007fd1bae930a0 R08: 0000000000000000 R09: 0000000000000000 [ 1167.274506][T21834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1167.282466][T21834] R13: 000000000000000b R14: 00007fd1ba303f60 R15: 00007fffc8fd7568 [ 1167.290440][T21834] [ 1167.313610][ T5133] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1167.324936][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.410556][T21655] veth0_vlan: entered promiscuous mode [ 1167.422903][T21655] veth1_vlan: entered promiscuous mode [ 1167.452435][T21655] veth0_macvtap: entered promiscuous mode [ 1167.463477][T21655] veth1_macvtap: entered promiscuous mode [ 1167.491720][T21655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1167.503120][T21655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.520052][T21655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1167.533989][T21655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.544384][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.555657][T21655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1167.574706][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.575833][T21655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.600108][ T5133] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1167.603307][T21655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1167.617195][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.620414][T21655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.640459][T21655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1167.655106][T21655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.665069][T21655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1167.676702][T21655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.689368][T21655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.761818][T21655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1167.788106][ T5131] usb 1-1: USB disconnect, device number 72 [ 1167.809266][T21655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.831797][ T5133] usb 4-1: config 0 descriptor?? [ 1167.838039][T21655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1167.848971][T21655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.862256][T21655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1167.872895][T21655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.885772][T21655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1167.896987][T21655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.907338][T21655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1167.920085][T21655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.988056][ T30] INFO: task syz.3.3538:19444 blocked for more than 144 seconds. [ 1168.029936][ T30] Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1168.099176][T21655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1168.182083][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1168.249985][T13420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.260752][T21655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.262452][ T30] task:syz.3.3538 state:D stack:23928 pid:19444 tgid:19442 ppid:17619 flags:0x00004006 [ 1168.280902][ T30] Call Trace: [ 1168.284196][ T30] [ 1168.300205][T21849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.304216][ T30] __schedule+0x1796/0x49d0 [ 1168.318657][T21655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1168.325824][ T30] ? __pfx___schedule+0x10/0x10 [ 1168.326687][T21849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.340942][ T30] ? __pfx_lock_release+0x10/0x10 [ 1168.345943][T21655] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.367757][T21655] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.369686][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1168.396311][ T30] ? schedule+0x90/0x320 [ 1168.397302][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.400617][ T30] schedule+0x14b/0x320 [ 1168.400651][ T30] schedule_timeout+0xb0/0x310 [ 1168.400678][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1168.400701][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1168.424001][T21655] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.466186][ T5133] usb 4-1: string descriptor 0 read error: -71 [ 1168.478829][ T5133] uclogic 0003:256C:006D.003C: failed retrieving string descriptor #200: -71 [ 1168.485622][ T30] ? wait_for_completion+0x2fe/0x620 [ 1168.493648][ T30] ? wait_for_completion+0x2fe/0x620 [ 1168.505876][T21655] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.508240][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.525079][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1168.525210][ T5133] uclogic 0003:256C:006D.003C: failed retrieving pen parameters: -71 [ 1168.535276][ T30] ? wait_for_completion+0x2fe/0x620 [ 1168.558643][ T30] wait_for_completion+0x355/0x620 [ 1168.562558][ T5133] uclogic 0003:256C:006D.003C: failed probing pen v2 parameters: -71 [ 1168.564669][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 1168.587443][ T30] ? flush_workqueue_prep_pwqs+0x45c/0x4c0 [ 1168.593269][ T5133] uclogic 0003:256C:006D.003C: failed probing parameters: -71 [ 1168.593364][ T5133] uclogic 0003:256C:006D.003C: probe with driver uclogic failed with error -71 [ 1168.601207][ T30] ? check_flush_dependency+0xb2/0x390 [ 1168.614925][ T5133] usb 4-1: USB disconnect, device number 86 [ 1168.641719][ T30] __flush_workqueue+0x7d6/0x1710 [ 1168.648985][ T30] ? __pfx_dd_has_work+0x10/0x10 [ 1168.667828][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 1168.674097][ T30] ? __pfx_blk_mq_run_hw_queues+0x10/0x10 [ 1168.694185][ T30] ? blk_mq_unquiesce_queue+0xc0/0x120 [ 1168.703899][ T30] nbd_ioctl+0xbd1/0xf40 [ 1168.719999][ T30] ? __pfx_nbd_ioctl+0x10/0x10 [ 1168.724915][ T30] ? __asan_memset+0x23/0x50 [ 1168.729785][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1168.740252][ T30] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1168.745682][ T30] ? file_to_blk_mode+0xd5/0x140 [ 1168.750761][ T30] ? __pfx_nbd_ioctl+0x10/0x10 [ 1168.755565][ T30] blkdev_ioctl+0x580/0x6b0 [ 1168.760638][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1168.765704][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1168.771988][ T30] ? security_file_ioctl+0x87/0xb0 [ 1168.777182][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1168.782226][ T30] __se_sys_ioctl+0xfc/0x170 [ 1168.787013][ T30] do_syscall_64+0xf3/0x230 [ 1168.791540][ T30] ? clear_bhb_loop+0x35/0x90 [ 1168.796285][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.802238][ T30] RIP: 0033:0x7fb4f5575bd9 [ 1168.806797][ T30] RSP: 002b:00007fb4f4fff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1168.815225][ T30] RAX: ffffffffffffffda RBX: 00007fb4f5703f60 RCX: 00007fb4f5575bd9 [ 1168.823587][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 1168.831678][ T30] RBP: 00007fb4f55e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 1168.839729][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.848327][ T30] R13: 000000000000000b R14: 00007fb4f5703f60 R15: 00007fffc34fc4b8 [ 1168.856401][ T30] [ 1168.932116][ T30] [ 1168.932116][ T30] Showing all locks held in the system: [ 1168.971206][ T30] 1 lock held by khungtaskd/30: [ 1168.976990][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1168.988826][ T30] 2 locks held by kworker/u8:2/35: [ 1168.994001][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1169.007206][ T30] #1: ffffc90000ab7d00 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1169.018026][ T30] 3 locks held by kworker/0:2/784: [ 1169.023137][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1169.034207][ T30] #1: ffffc900032a7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1169.047037][ T30] #2: ffff88801e2b4240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 1169.057251][ T30] 3 locks held by kworker/u8:9/2827: [ 1169.062535][ T30] #0: ffff88802a05b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1169.074190][ T30] #1: ffffc9000945fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1169.087209][ T30] #2: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1169.096734][ T30] 2 locks held by getty/4833: [ 1169.101425][ T30] #0: ffff88802aa6b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1169.111311][ T30] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1169.122581][ T30] 2 locks held by kworker/u9:2/5085: [ 1169.127989][ T30] #0: ffff8880202db948 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1169.142226][ T30] #1: ffffc900042bfd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1169.154832][ T30] 3 locks held by syz-executor/21655: [ 1169.163941][ T30] #0: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1169.174246][ T30] #1: ffff888065809408 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x22d/0x420 [ 1169.184248][ T30] #2: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1169.201424][ T30] [ 1169.208873][ T30] ============================================= [ 1169.208873][ T30] [ 1169.246967][T21655] ieee80211 phy69: Selected rate control algorithm 'minstrel_ht' [ 1169.269637][ T30] NMI backtrace for cpu 0 [ 1169.274003][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1169.283997][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1169.294065][ T30] Call Trace: [ 1169.297357][ T30] [ 1169.300303][ T30] dump_stack_lvl+0x241/0x360 [ 1169.301040][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.304989][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1169.305021][ T30] ? __pfx__printk+0x10/0x10 [ 1169.322576][ T30] ? vprintk_emit+0x631/0x770 [ 1169.327283][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1169.329810][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.332314][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1169.332348][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1169.350000][ T30] ? _printk+0xd5/0x120 [ 1169.354171][ T30] ? __pfx__printk+0x10/0x10 [ 1169.358869][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1169.363732][ T30] ? __pfx__printk+0x10/0x10 [ 1169.368330][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1169.373364][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1169.379348][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1169.385335][ T30] watchdog+0xfde/0x1020 [ 1169.389578][ T30] ? watchdog+0x1ea/0x1020 [ 1169.393995][ T30] ? __pfx_watchdog+0x10/0x10 [ 1169.398663][ T30] kthread+0x2f0/0x390 [ 1169.402730][ T30] ? __pfx_watchdog+0x10/0x10 [ 1169.407402][ T30] ? __pfx_kthread+0x10/0x10 [ 1169.411984][ T30] ret_from_fork+0x4b/0x80 [ 1169.416394][ T30] ? __pfx_kthread+0x10/0x10 [ 1169.420979][ T30] ret_from_fork_asm+0x1a/0x30 [ 1169.425755][ T30] [ 1169.429649][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1169.434893][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 1169.446853][ T5133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.453915][T21655] ieee80211 phy70: Selected rate control algorithm 'minstrel_ht' [ 1169.463490][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1169.470355][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1169.480257][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1169.490320][ T30] Call Trace: [ 1169.493600][ T30] [ 1169.496533][ T30] dump_stack_lvl+0x241/0x360 [ 1169.501249][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1169.506460][ T30] ? __pfx__printk+0x10/0x10 [ 1169.511040][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1169.517026][ T30] ? vscnprintf+0x5d/0x90 [ 1169.521377][ T30] panic+0x349/0x860 [ 1169.525292][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1169.531463][ T30] ? __pfx_panic+0x10/0x10 [ 1169.535875][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1169.541236][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1169.546767][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1169.552136][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1169.558284][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1169.564430][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1169.570585][ T30] watchdog+0x101d/0x1020 [ 1169.574916][ T30] ? watchdog+0x1ea/0x1020 [ 1169.579328][ T30] ? __pfx_watchdog+0x10/0x10 [ 1169.584006][ T30] kthread+0x2f0/0x390 [ 1169.588095][ T30] ? __pfx_watchdog+0x10/0x10 [ 1169.592762][ T30] ? __pfx_kthread+0x10/0x10 [ 1169.597347][ T30] ret_from_fork+0x4b/0x80 [ 1169.601755][ T30] ? __pfx_kthread+0x10/0x10 [ 1169.606338][ T30] ret_from_fork_asm+0x1a/0x30 [ 1169.611104][ T30] [ 1169.614330][ T30] Kernel Offset: disabled [ 1169.618643][ T30] Rebooting in 86400 seconds..