last executing test programs: 16.087833217s ago: executing program 3 (id=1322): mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/204, 0xcc}, {&(0x7f0000000200)=""/247, 0xf7}], 0x2, 0xa2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x40, 0x13, 0x5e, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x79}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000480)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x98, {0x98, 0x2d, "50c259b770734b5deadc56392c4fa41119e8609177269aefaeef290f83eefdfdfc559592ab4af69d900be19cd89ed0cabc555e12bdf4c20698b7fdc299d5c10e4d4806762ff665366ca2944826fbd8e6512353d277b2d5be93d72bf31bb9934fa78305e4d6ff83d4d6f98927fba9dc2e1775bf470d77110d224b87c5fd3c171ee801c7f12245b77c67ae9a007fa14c0c1750b7e9b6ae"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f00000004c0)={0x0, 0x16, 0x80, "7030b103e69c8f4d3c9e9c18320b2ede1387cb35b905caabd7eb72cfcc25a88c44b9e194b9459db301f4134c90bd4d0ece0e6e4cd1f01adb539fc80669926bf4ba14301d35dd60155b49863593250103cef6d0da3bc40ab2e4b0ed0df804b9c16861d39c906c8d44a198851357e46754c7a4ab2ac774c8527e6d3a5f3ea0fd20"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x80, 0x1c, {0x6, 0x3, 0x7, 0x0, 0x1, 0x1, 0x0, 0x7, 0x3, 0x9e, 0x6920, 0x1}}, &(0x7f0000000640)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000680)={0x20, 0x83, 0x2}, &(0x7f00000006c0)={0x20, 0x87, 0x2, 0x4000}, &(0x7f0000000700)={0x20, 0x89, 0x2}}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) r4 = landlock_create_ruleset(&(0x7f0000000300)={0xa420, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2040, r0}, 0x0) getsockopt$inet_int(r0, 0x10d, 0xc7, &(0x7f0000000080), &(0x7f0000000000)=0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1f, 0xea, 0x36, 0x10, 0x4fc, 0x504a, 0x33d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x63, 0x64, 0x7f}}]}}]}}, 0x0) 12.578147271s ago: executing program 2 (id=1329): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) gettid() r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="79ef34395d4c410d25e52319c6a502980fd70906f311", 0x16}, {&(0x7f0000000040)="21e86059062c57c14198b24339ac70b26123e39fda5912aba3c6fb5f31a089a6796a63e8cacd18a3d72d99de7b621f1d3074", 0x32}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="c1", 0x1}], 0x1}}], 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1) io_uring_setup(0x26ba, &(0x7f00000002c0)={0x0, 0x4bd3, 0x40, 0x4, 0x364}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000380)={{0xa, 0x4e23, 0x4, @local, 0x9}, {0xa, 0x4e24, 0x6, @mcast1, 0x761}, 0x1, {[0x8, 0x3, 0x7fffffff, 0x200, 0x9, 0x1, 0x1, 0x1]}}, 0x5c) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x3fb]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000440)=@userptr={0x10, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a20283dc"}, 0x0, 0x2, {0x0}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 11.067614646s ago: executing program 2 (id=1331): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000ef7f0000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04060100c800"], 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1f, 0x10, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x10, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fdffffff0000000000000000d7680001ffffffff9500000000fb0000"], &(0x7f0000000040)='GPL\x00', 0x100002, 0x0, 0x0, 0x0, 0x19}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b70533b800b30011611007000000000007000000000000000aecfa6f4090e3534c2f9d0099"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x23) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00'}) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) 10.906375035s ago: executing program 4 (id=1333): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000340)=""/154, 0x9a}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 10.829272321s ago: executing program 3 (id=1334): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x0, 0x400, 0x200, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000, 0x5}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f00000029c0)={0x2, {"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", 0x1000}}, 0x1006) close(0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8) 9.625205555s ago: executing program 3 (id=1335): r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}) socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r4, 0x80044dfd, &(0x7f0000000180)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9.584945422s ago: executing program 1 (id=1336): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0406000000000000005872133b22b9441a168f2463fce7e35d03"], 0x1a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x8000, 0xffffffff, 0x2, 0x8000}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000500)=[{&(0x7f00000002c0)="9a075ca318e24de8bec0a84a1f1e52458435629f54ebbb079bebe85d2921b20531781ea5e22aa5283365785be14453e42515c43218daf5c433e3329f587170835a5db43bc1a48538a000ca22b8f1ceed2e07d3593dcd9c526514f89e3a1a3470983dd112500cee2fe2d9fe54164536ba156a5b3417b959f50b173ee0ba730ed15c6db582eeafde6526181cfe538866a594c9bb2c1d4640ec7fe3de745bb1bf1ee4cf33751cc306290e15d188b486dc9ca78fcbc324fbf26956e777fbd419b34488eff897fd02cf1fc8e73c1543db219dc0114a881c27b53df1bd1277dadedfb26b7a8a83ad96", 0xe6}, {&(0x7f00000003c0)="027a0ef1e86b2d38c9acb26ee8316bfef9b35a2a2512814cc7bd0af4ed3759cdc907af807264ee945e19609f7d52ae56787bf73f764f3885168169d540b94368e3247ecca5d53bf15a8a506f3891ae6d77229e351130c9311c050f26", 0x5c}, {&(0x7f0000000440)="baa84bfb0f029aa26008b22f8e028bc9a4255db8464b70b05bbc2c9cf2f9ddc929b73e5b84ac946210fc67be212faefa5982e7b75ffad38bf08a825a92f48d0783838d75c9c9a0dfe98ccab0bdfb5b888b7e2aef2ce7b8f9c9d6985ce93722b59ac0236c06619b14537063b9a04630c48489e2f61a42da2e56661f449d5c1e3eb42f51c6126c0274a126ccadda209ee128420cebab117094d3e2329268483084af211d6fa1f1383e2497987b6c154dedea26", 0xb2}], 0x3, &(0x7f00000018c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@cipso={0x86, 0x38, 0x2, [{0x1, 0xf, '\x00'/13}, {0xc38badb62120967d, 0x5, "e5e3cc"}, {0x7, 0x3, "ac"}, {0x0, 0x9, "8d1cb8bbce2056"}, {0x2, 0x12, "19b07f1ed356926cfed9c542d796460b"}]}, @end]}}}], 0xb0}}, {{&(0x7f0000000600)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000dc0)=[{&(0x7f00000006c0)="be5c8188ae0178b51215687d36b2c5db2ea14ae9c658e160d1dec8fcb2dff9a1b4bd9a3587b8c0eab623e6e6394dfa3d9dc88b554334fc8856a0e3e1fad5e6009d30d52a868988c9935f5e873bd233512583b3c58f76139e83def83b50fcef99b19a36fef6512955f30f0c39213e5fe256a8ba5db886c5fa4440607312b6045d8e0f50d8a835af678d967820600f1c0e570cb53f723e5c02bcaf67d40f962decad458f2cc17b3cc9df7119559793deb5642eeed36f57025c3249a588382476848ac27d985472bbf3232d9ba79069505e56467ced2f0a10bd26fa1919cbed6dc539cf26a4ff", 0xe5}, {&(0x7f00000007c0)="c1b0a60419e066783c29c744cac5cba3ccf15809aafa7e93c31d4b47658b41c20544aff326d1160a672731c142f1695cd991e10d5372a420667f11827b74c559826f13d92c7c1016a7c3e3b83539736835b132e980dcad02efcd568de00cd821e60ee72e51ab30a32d3a22cf0750b34007efe40a1b9de230b9e3a4e3748acf96863a3df20f", 0x85}, {&(0x7f0000000880)="1b0c2d2b8bfed4ade368d8d6d90128ecad0665b6b941114324336d482c0c80daf5ebf887fb5dcf708bf99dd9bc74638c7111adfc6f37c3e5e4b2c9a9af3ded940cf1e3eb4aff306b1aa68485570c34048112090e72507f44681df5b6f9ccf758b71d2bc6c8d822dd1092cf8ddfcf8de8f7d2b3913b1cf5367075", 0x7a}, {&(0x7f0000000900)="28cff0306a9e388be1f5cbc9fc94f55adf4cfd690dc8ff7e3ebbff047a08debf1e3ab8f434bb80119a9cf783cef565d9099dd9d9bd31f175fd9d55840af2a1424fffc0d8214d32d907821cd5617673f3ddfb2fe9fe564fb70fffb540ccf73ed2b58669aebadf33782a96259163e580bf4590ee00aec2d0d08005c6556f6d1bbde17911d103cc6a3b55eaa1744e36f0d1097ea137b641b4e34be88ad0c94f12", 0x9f}, {&(0x7f0000000640)="c5b4385ca9eab5ca68e40814671d120c1e0bcb157f10842763d0e980d8acefc6881025d63d7283d646c4dcee1aa69ed79e2f43f0da3c7455247b27e0a6c4b6", 0x3f}, {&(0x7f00000009c0)="3c6fc294374ac385c991076cfd2a856707f6d3fb783faf7389b32f9cfcdde5f4ac1125cf971eb1e5d8493baacc147c36c0965fb4c8aad53de2512b893895b12c57e13856819aed48a903410235a2c57b71cc0ff3cc8dbf251f7686cf2a68f42055aa60fb86bbc34f9d23bd8eb015398fffc64dbe2e8c43cd7c6690545a563858b043201482b3cca798d5a23851484a86f90244beb9ed9b6941570b51d550f716327004c139dddf58377dc08d", 0xac}, {&(0x7f0000000a80)="90e38647df01af6d118828636ce21f26641b6f77ee57b41e3c03b3cfeed1d72e920ac63cb6c2d7b076cb3666134db63a582d9a1ccfc4c52e52b4f49c768f1f806bb4084bc742195c8101cffef79319f3aa5c6e7bd81121388d53fdbaa7eca29b9212f22903a67a6ff7f211bd13edd81f71608ef231cbe8caa9106370a400894ef6a2a8815d937d0364af81f9799761206e19ace05fe533c57bc168a937be3c17c336655389d5c5030b3e60fc0dfa8e5ae2a63894e715aa9e52f4ac56555c125fc6d3e7e67cf0bc2c387bb0c2e55ea146a32d37512fb4f955406172c16fa058", 0xdf}, {&(0x7f0000000b80)="afc25fd081b846b07794c073093c7e427a13df5bb1716a5fa73015efaf2ab54723", 0x21}, {&(0x7f0000000bc0)="8e61e94ad8c0108d21da01de155f4f611d84ce87fb1c4167110824bb6a2687ee0cf5ea33418685753b85e9723e3f674de869145b4bf6aca33cb6e81bfe6a9dd48b1b9ebfcfb17defa0f184381f44a0b2e38eaab8f1a108753451a9ec1152", 0x5e}, {&(0x7f0000000c40)="f202dc66218ee7b256d4eebbdddecd0e5e770c5a2ed0200be3eb86df9f76582eb9b42ae90f5f6b889974cddf1b0433d941e053c92898513590635ef4e855b409afec5c672d5f2649e95333f8fa8bd4994bcd9c45cdfa3780f661d97a340c27c51d27062449523341070bd8f9b67d9ba2a20482b75b8ffadad706398dec19d9893638928cfbf90552851726590643fabdca624af179ca633885ae4a", 0x9b}], 0xa, &(0x7f0000000e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}], 0x60}}, {{&(0x7f0000000f00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000f40)="a06ab968db7fa83abab38dc0d579d7cdbfc27febb6fdf955e951aa6b679cccfc9b52e85920c0a47ab3e3521b7f5d137ece31d40a80fe454f1ff417d31b5e84279c996c1963ffa97cdfd7f5b6ac55f2651544619b2b719fb67e852aae736d7c865a631185a3ae633b87816da8c65f9e7febf44e7d18a75e1e8f5a43af51c0bbb144e0ecd2daccf977ed9602ea160f1902c2dbfc465cfca106", 0x98}], 0x1, &(0x7f00000013c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xa2, 0x0, 0xe, [0x7]}, @timestamp_addr={0x44, 0x34, 0x16, 0x1, 0x8, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x8}, {@broadcast}, {@multicast2, 0x1}, {@empty, 0x33}]}, @lsrr={0x83, 0x23, 0x19, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @empty, @remote, @broadcast]}, @cipso={0x86, 0x2b, 0x1, [{0x5, 0xc, "54d73febeeb571ca0b36"}, {0x0, 0xe, "a0db93bf881f92e175a51f11"}, {0x7, 0xb, "83ef5725403d5a434e"}]}, @lsrr={0x83, 0x17, 0x3e, [@rand_addr=0x64010101, @loopback, @multicast2, @private=0xa010102, @local]}, @lsrr={0x83, 0xb, 0xd9, [@private=0xa010100, @local]}, @lsrr={0x83, 0x7, 0xc4, [@rand_addr=0x64010102]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x97, [@loopback, @multicast1, @rand_addr=0x64010101]}, @timestamp={0x44, 0x20, 0x65, 0x0, 0xb, [0x4, 0x1, 0x9, 0xa, 0x10001, 0xd0, 0x2]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x1d8}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000011c0)=[{&(0x7f000001aa80)="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", 0x1000}, {&(0x7f0000001100)="8a233c1344bff229ae72a33b7751f897d8c9d39694596f54b54c7737d4843429469e48d53510882c628ad946455d27b6d1266c9fc535073b0ef0829d42e707856c32df8a49efa3e2a047b7ad2ddb320a8578a06c06e187c39187bd9f514f681ec551c57a7f3920b678d33958bbe64666342c701e062474cc9da4922abb0339ba3997db4f144caafa99f04f80161032ceacb3e65795e0cd3597fa36", 0x9b}, {&(0x7f00000015c0)="3d955068f6e941ea5932548fa5a9136df80e705c3a0f9b02fc8483bed49ffe45781933a7c94e8ddd5ff3cdb8f638aebd799c4790562641d0e16900f181a109ea91f22eab9ffa9751bb2eb59c34781ce68d8906cc9d756d99e1dd3edc56a384573bae1a8f4dc9408e0c7f7689b1be3ebbe4ff4d30da6c1075fccfceb05015b0991de9e6908d0e067f8d5e3a64a70737a8342454c52989897b2a90f620980311077b", 0xa1}], 0x3, &(0x7f0000001680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x41}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x80}}], 0x4, 0x4040844) 9.21918996s ago: executing program 1 (id=1337): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x4c810) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) ioperm(0x0, 0x7, 0x40000000000006) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mknod(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x10040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000180)=[{}, {r3}], 0x2, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000140)=ANY=[], 0xb, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/83}, 0x5b, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000300)={0x1}) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x5d5180, 0x84) getdents(r5, &(0x7f0000000280)=""/110, 0x6e) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8.158437965s ago: executing program 1 (id=1339): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) gettid() r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="79ef34395d4c410d25e52319c6a502980fd70906f311", 0x16}, {&(0x7f0000000040)="21e86059062c57c14198b24339ac70b26123e39fda5912aba3c6fb5f31a089a6796a63e8cacd18a3d72d99de7b621f1d3074", 0x32}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="c1", 0x1}], 0x1}}], 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000380)={{0xa, 0x4e23, 0x4, @local, 0x9}, {0xa, 0x4e24, 0x6, @mcast1, 0x761}, 0x1, {[0x8, 0x3, 0x7fffffff, 0x200, 0x9, 0x1, 0x1, 0x1]}}, 0x5c) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x3fb]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000440)=@userptr={0x10, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a20283dc"}, 0x0, 0x2, {0x0}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 6.966323082s ago: executing program 0 (id=1340): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x30}, {&(0x7f00000007c0)=""/154, 0x3a}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.781717195s ago: executing program 1 (id=1341): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0xffff, 0x2}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x8, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0xd}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}, @jmp={0x5, 0x0, 0xe, 0xb, 0x4, 0xfffffffffffffff8}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6a) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f0000000580)=""/173, 0xad}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000640)=""/131, 0x83}], 0x5, &(0x7f0000000480)=""/10, 0xa}, 0x8001}], 0x1, 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="70008000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000170000005c000680080006000000000008000100000000000800060000000000040002003c00040067636d"], 0x70}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}, @ramp}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000140)=""/183) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x14, 0x1}, 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000018010000f56c6c25000000000020202001000000ebfffffeffb702000008000000b703003b8d44ee03ad654c18b97e00000000008500000071"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.638133246s ago: executing program 0 (id=1342): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5d}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x23, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, r2}, 0x90) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0x0, 0x37}, "be9e68e6a43db4df3048e5bcb825b1de53572638c7b360fa7592b411722aa1463bd45ac702ddaaf7af3d77d84c800e28e1e9bc52c40b30"}, 0x3b) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x48}, {0x6}]}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = dup2(r4, r6) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) unlink(&(0x7f0000000440)='./file0/file1/file0\x00') socket(0x1, 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x93, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xf9, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) 6.343080611s ago: executing program 2 (id=1343): r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) close(r1) r2 = socket$netlink(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000380)={r3, 0x0, 0x5c, 0x0, &(0x7f0000000300)="f92567eb933ac0189405a31856342cabd04a4bee59734bdee09d40e1af132013981a1c887c0e7d3ecc09df43efc9bb81e08c74b043f1bc5cce24dc98ce3d73e51384b8d2b08ea91d4b82c24a785a2d6dc22e3ccc2e8eb0839785c4d2", 0x0, 0x90, 0x0, 0x1e, 0x0, &(0x7f0000000080)="0fce0f3aca62615a07f5e58eebc8173956d6c499cb0f69501e1c43569cd5", 0x0, 0x2, 0x0, 0x6}, 0x50) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x2ecfbe109ace7258, &(0x7f0000000240), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x844) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000009, 0x5d032, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10805) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102373, 0x18fe5}], 0x1, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800cd0c3ec43d9c96b200007b00b77018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f00000021c0)={0x30000019}) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file1', [{0x20, 'bLB\xab^|\xd2F\xce\xe8\xdf\xe7\xb8\xc39*8m\xcc<\xdeb\xff\xed\xe0\x80\x98\xf3\xc0\xef\xd0lcG!\xa8\x7f\xee\x0e\xad{\x1c\x82\b\"\x03\xcc\xd1\x1ao\xba\x19\xdeS2\x94\xd7Y\xad\x9c\x9e\x1a\xda\x875\xf3\xb8\xac0\xb0S\xd9\r\x1d\x82\xcaav\x15h\x1dm\xa6\xa8\xbc\xb2J\xb0\x82\\\x98\x02p\xae\x9eD=\x9do\x9d\xcb\x85\xed\x15|\x9e\x8f\x9c\x94\xf0\xb4\xc5,Q\xf6\xd3\f\xd35\xe3?a\xc0*\xe6\x96\x9b:V\"\xe0(%G\xf1\x02\xdf-\x88\xa5\xf5#W\xcc\x8aq\x9e\xa3\x9a\xac\x95\xba\xc4c\a\x02\xc4'}]}, 0xa9) 6.029960746s ago: executing program 2 (id=1344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x48}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b04feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r7, 0x4048aecb, &(0x7f0000000d80)={{0x0, 0x0, 0x80}}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x8c, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6}, {0x8}}]}, 0x8c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) shmdt(0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="a400000021000f04ff070000fcdbdf250a801401020000020400000008000a000000000014000200ff01000000000000000000000000000114000100fe88000000000000000000000000010114000100fe8800000000000000000000000000010500150001000000140002000000000000000000000000000000000114"], 0xa4}}, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r10, 0x703, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x0}) bind$inet6(r9, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000000200)="08fa", 0x2, 0x4004095, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000019900)=""/102400, 0x19000, 0x1, 0x0}, &(0x7f0000000100)=0x40) 5.978190538s ago: executing program 4 (id=1345): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x68}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) creat(0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) (fail_nth: 2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4048aecb, 0x0) 5.453618894s ago: executing program 1 (id=1346): socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x28}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[], 0x2fe) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x7f83bd0a) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c90012000ec6d61001be95c03f000700"], 0x17) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/55, 0x37) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x40010, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.441937059s ago: executing program 4 (id=1347): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0406000000000000005872133b22b9441a168f2463fce7e35d03"], 0x1a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000500)=[{&(0x7f00000002c0)="9a075ca318e24de8bec0a84a1f1e52458435629f54ebbb079bebe85d2921b20531781ea5e22aa5283365785be14453e42515c43218daf5c433e3329f587170835a5db43bc1a48538a000ca22b8f1ceed2e07d3593dcd9c526514f89e3a1a3470983dd112500cee2fe2d9fe54164536ba156a5b3417b959f50b173ee0ba730ed15c6db582eeafde6526181cfe538866a594c9bb2c1d4640ec7fe3de745bb1bf1ee4cf33751cc306290e15d188b486dc9ca78fcbc324fbf26956e777fbd419b34488eff897fd02cf1fc8e73c1543db219dc0114a881c27b53df1bd1277dadedfb26b7a8a83ad96", 0xe6}, {&(0x7f00000003c0)="027a0ef1e86b2d38c9acb26ee8316bfef9b35a2a2512814cc7bd0af4ed3759cdc907af807264ee945e19609f7d52ae56787bf73f764f3885168169d540b94368e3247ecca5d53bf15a8a506f3891ae6d77229e351130c9311c050f26", 0x5c}, {&(0x7f0000000440)="baa84bfb0f029aa26008b22f8e028bc9a4255db8464b70b05bbc2c9cf2f9ddc929b73e5b84ac946210fc67be212faefa5982e7b75ffad38bf08a825a92f48d0783838d75c9c9a0dfe98ccab0bdfb5b888b7e2aef2ce7b8f9c9d6985ce93722b59ac0236c06619b14537063b9a04630c48489e2f61a42da2e56661f449d5c1e3eb42f51c6126c0274a126ccadda209ee128420cebab117094d3e2329268483084af211d6fa1f1383e2497987b6c154dedea26", 0xb2}], 0x3, &(0x7f00000018c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@cipso={0x86, 0x38, 0x2, [{0x1, 0xf, '\x00'/13}, {0xc38badb62120967d, 0x5, "e5e3cc"}, {0x7, 0x3, "ac"}, {0x0, 0x9, "8d1cb8bbce2056"}, {0x2, 0x12, "19b07f1ed356926cfed9c542d796460b"}]}, @end]}}}], 0xb0}}, {{&(0x7f0000000600)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000dc0)=[{&(0x7f00000006c0)="be5c8188ae0178b51215687d36b2c5db2ea14ae9c658e160d1dec8fcb2dff9a1b4bd9a3587b8c0eab623e6e6394dfa3d9dc88b554334fc8856a0e3e1fad5e6009d30d52a868988c9935f5e873bd233512583b3c58f76139e83def83b50fcef99b19a36fef6512955f30f0c39213e5fe256a8ba5db886c5fa4440607312b6045d8e0f50d8a835af678d967820600f1c0e570cb53f723e5c02bcaf67d40f962decad458f2cc17b3cc9df7119559793deb5642eeed36f57025c3249a588382476848ac27d985472bbf3232d9ba79069505e56467ced2f0a10bd26fa1919cbed6dc539cf26a4ff", 0xe5}, {&(0x7f00000007c0)="c1b0a60419e066783c29c744cac5cba3ccf15809aafa7e93c31d4b47658b41c20544aff326d1160a672731c142f1695cd991e10d5372a420667f11827b74c559826f13d92c7c1016a7c3e3b83539736835b132e980dcad02efcd568de00cd821e60ee72e51ab30a32d3a22cf0750b34007efe40a1b9de230b9e3a4e3748acf96863a3df20f", 0x85}, {&(0x7f0000000880)="1b0c2d2b8bfed4ade368d8d6d90128ecad0665b6b941114324336d482c0c80daf5ebf887fb5dcf708bf99dd9bc74638c7111adfc6f37c3e5e4b2c9a9af3ded940cf1e3eb4aff306b1aa68485570c34048112090e72507f44681df5b6f9ccf758b71d2bc6c8d822dd1092cf8ddfcf8de8f7d2b3913b1cf5367075", 0x7a}, {&(0x7f0000000900)="28cff0306a9e388be1f5cbc9fc94f55adf4cfd690dc8ff7e3ebbff047a08debf1e3ab8f434bb80119a9cf783cef565d9099dd9d9bd31f175fd9d55840af2a1424fffc0d8214d32d907821cd5617673f3ddfb2fe9fe564fb70fffb540ccf73ed2b58669aebadf33782a96259163e580bf4590ee00aec2d0d08005c6556f6d1bbde17911d103cc6a3b55eaa1744e36f0d1097ea137b641b4e34be88ad0c94f12", 0x9f}, {&(0x7f0000000640)="c5b4385ca9eab5ca68e40814671d120c1e0bcb157f10842763d0e980d8acefc6881025d63d7283d646c4dcee1aa69ed79e2f43f0da3c7455247b27e0a6c4b6", 0x3f}, {&(0x7f00000009c0)="3c6fc294374ac385c991076cfd2a856707f6d3fb783faf7389b32f9cfcdde5f4ac1125cf971eb1e5d8493baacc147c36c0965fb4c8aad53de2512b893895b12c57e13856819aed48a903410235a2c57b71cc0ff3cc8dbf251f7686cf2a68f42055aa60fb86bbc34f9d23bd8eb015398fffc64dbe2e8c43cd7c6690545a563858b043201482b3cca798d5a23851484a86f90244beb9ed9b6941570b51d550f716327004c139dddf58377dc08d", 0xac}, {&(0x7f0000000a80)="90e38647df01af6d118828636ce21f26641b6f77ee57b41e3c03b3cfeed1d72e920ac63cb6c2d7b076cb3666134db63a582d9a1ccfc4c52e52b4f49c768f1f806bb4084bc742195c8101cffef79319f3aa5c6e7bd81121388d53fdbaa7eca29b9212f22903a67a6ff7f211bd13edd81f71608ef231cbe8caa9106370a400894ef6a2a8815d937d0364af81f9799761206e19ace05fe533c57bc168a937be3c17c336655389d5c5030b3e60fc0dfa8e5ae2a63894e715aa9e52f4ac56555c125fc6d3e7e67cf0bc2c387bb0c2e55ea146a32d37512fb4f955406172c16fa058", 0xdf}, {&(0x7f0000000b80)="afc25fd081b846b07794c073093c7e427a13df5bb1716a5fa73015efaf2ab54723", 0x21}, {&(0x7f0000000bc0)="8e61e94ad8c0108d21da01de155f4f611d84ce87fb1c4167110824bb6a2687ee0cf5ea33418685753b85e9723e3f674de869145b4bf6aca33cb6e81bfe6a9dd48b1b9ebfcfb17defa0f184381f44a0b2e38eaab8f1a108753451a9ec1152", 0x5e}, {&(0x7f0000000c40)="f202dc66218ee7b256d4eebbdddecd0e5e770c5a2ed0200be3eb86df9f76582eb9b42ae90f5f6b889974cddf1b0433d941e053c92898513590635ef4e855b409afec5c672d5f2649e95333f8fa8bd4994bcd9c45cdfa3780f661d97a340c27c51d27062449523341070bd8f9b67d9ba2a20482b75b8ffadad706398dec19d9893638928cfbf90552851726590643fabdca624af179ca633885ae4a", 0x9b}], 0xa, &(0x7f0000000e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}], 0x60}}, {{&(0x7f0000000f00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000f40)="a06ab968db7fa83abab38dc0d579d7cdbfc27febb6fdf955e951aa6b679cccfc9b52e85920c0a47ab3e3521b7f5d137ece31d40a80fe454f1ff417d31b5e84279c996c1963ffa97cdfd7f5b6ac55f2651544619b2b719fb67e852aae736d7c865a631185a3ae633b87816da8c65f9e7febf44e7d18a75e1e8f5a43af51c0bbb144e0ecd2daccf977ed9602ea160f1902c2dbfc465cfca106", 0x98}], 0x1, &(0x7f00000013c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xa2, 0x0, 0xe, [0x7]}, @timestamp_addr={0x44, 0x34, 0x16, 0x1, 0x8, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x8}, {@broadcast}, {@multicast2, 0x1}, {@empty, 0x33}]}, @lsrr={0x83, 0x23, 0x19, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @empty, @remote, @broadcast]}, @cipso={0x86, 0x2b, 0x1, [{0x5, 0xc, "54d73febeeb571ca0b36"}, {0x0, 0xe, "a0db93bf881f92e175a51f11"}, {0x7, 0xb, "83ef5725403d5a434e"}]}, @lsrr={0x83, 0x17, 0x3e, [@rand_addr=0x64010101, @loopback, @multicast2, @private=0xa010102, @local]}, @lsrr={0x83, 0xb, 0xd9, [@private=0xa010100, @local]}, @lsrr={0x83, 0x7, 0xc4, [@rand_addr=0x64010102]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x97, [@loopback, @multicast1, @rand_addr=0x64010101]}, @timestamp={0x44, 0x20, 0x65, 0x0, 0xb, [0x4, 0x1, 0x9, 0xa, 0x10001, 0xd0, 0x2]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x1d8}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000011c0)=[{&(0x7f000001aa80)="e04110dca936914cb5b2e532973bbef8ab054ed623946366f56600ea293056e825a869fe8ae1b013ff8bf06aea6d9dd4e9a8d9cafe4812711bad0b259d9fd095bb37d2a941c09a6dc21d70467aad6b07097936c40d2e93d581d3896f0730fdcd1d6d6d5fa61fbffe090c10ba33f629c3f148358f6a11058ab0d429c8c81ae5f37d8db01c4f5e76395620c6c4741f312e7c197e7f2eacdb6ac5c7096d5182b295e68f71ff76776fe79daddf1bb7a5b0180cfa0691aabfa74a138de6a50fbf541be152b7d7beeab7d066f14d1e9ddcf468be5eb91c755a43fe4e04e9db26bd58cf81d317b509b39d2826a9580fec87c84b7633d6fd189253f277b640939f688feb6a0ee04b956bd39b65d61af10ff8653ad4ca9d6a8c7824575e211bc444b196477fdceb9a491a1c54354d4c8c53546ba61319a9cd03df779df40ac9f564e803f67eb0fb8b1c9bc49eed43fea530dcc1efc898d401d41c5186a21bec8030e47dcb6ade67b3d7fd8c596bb194de47471beb838e377996e3518a2df40bc75a0e89e84b11da16050f301743ec18a8d8b95b68e2d4b3f159aaa2c578c88ff33135d88b70295491b47f06125ac9b5d66a75243f2b517fe469811c66b3f744a9d3dae17ac872b6a42ab8e9210fcacf5ddb9f00594b90f850ef59c1eca1dbe754a86d3a7f8bfbde1437236ec626cf8392c0c22df9aa7e5f7915d74f882b4619a1c3638e7fc0caff3b4ba8d389e7c6d6343bbb54ef33124254391cf543b0d9be9d8f2dbc25ed9fb87c7c97d60df74894bf3041e5cb593d456373b80aa99789bc5972c3c1a0b4076ef52181fe71c25bc2524bccc80669ff092f22e492be0e3aeab0e75b88a130d9747d3766690638884d84bceedd29d1b8b48b473b6382bf6c9bbd0e9d2f4194ec8dc25a47f650151d5ff535f8e3729025dbd95f18814cc44f12b547a84e16a0b57ef4b2f41764e2e90e09a19d3de204a6ee61c0475587e5e438bd07684342ad99b0260328802673c4b1779ffd9ed3c2fd0121b5304299f639929878c0937ee7fbac48af6692170c67a05b73d99cb6980a7a0cc0138e348d2f3cd415725714881b7ed5f185beed350a61d047747c9a7ac75ca9faf2f2e716cd6be5f38fd63642ebea013ff1ec5b34fef85b7984967b84a6bc2dd6bf952511e123ba7c8811679f71f34f1711e13053ef99a8e03b0e38d48a0587877574752703ef62bbdbb73215494a9e9bf680f894282bfaa94d965d6bce4400f65cbdc728544c913653355d05bc53fda5648f99d00bf8ef127944435a3db990a1d2e4eb5ade13c3de39ee62238cb0f87424b76e8fc2f54292099717af74b65311037aba7fcf6a3eee1f68a8c06c59c65f4ca0c1397ac27f042253c6d1e512470955b2ad1b7f8c0c8529e6eae49d140731e54786860ee16a51d32976539aed05f2512b0adf9c5bd1914c650ce0ec9b2e8cc626e9fd4306a74a3ab283650800e7570dec71e47ab435ab28ee440d316b8761e41302b1e52b4785f4e921c63b3bd95a00de8e371b53a0c9b403217662baf3514586bcf49473e37caa81bbe5feea092666990c776c905c0c6fbace03d3c6502f5bfe5c3cfe382a1d0fcaeb45579e84bb903931d153c6ba27667383fd244ac098cc69b510bd137dd31b1f8f9b4b1fc7b6b00e26228c646ab2d41af84bc933db129f43a7461d315e90a63f57612cbcd3dc07e2c5a87a73dc9e1babc8f023f2eeb97b0ab342cd54262dcc483a6174f7a101c3cf602dd538d01d3464e7b35ea76c8e00a6c7cb7a75c105689c7610c0767420b2320bd598c42913a0eac92bd28f9ffa0ab50df4eda6fc6ecf2e69b2ce4e5b76e24e0bce36010d0f8d7c601c162f0410d733603696f153324afbb0420f5321b7a47d093b447ea3081873d01d7383ea3fed17eaf6d777c67a656a9c2cf16f7b07e07913ec31698956d4be0ad764d4db8fe453cf17d83dd7d0880a3595607dc1422142142aa8e32cb9f4460cd62f59dd75a7eb6d30caaf403fbde1f82aba5121802ef17b9633789005e482be008e9a37d897e16115bb3545a5c00cef835050ba5087156bab3680ec3947d955a1abcb57c95dff77eed4741c29347917963424e84a774233078f5f8a7a63294df6b4729d06905c9f6b26c44a4a6277bf256cef483e73eb00a6de3e54fbf3cbbf03c1b8eb98d720c1cecbdb5733aab7993ee225a0a375c435dd5e2c941bd777efd50c94aea817a3888590b6053063544e452f5d3859c2844ee0c2a2777d1835df4d57168407fe2a03181dafcf76318fc76a0b78763c6af7f78651a80912df714b89c720fc422dc97757f2d8b3c309582312d74c2be87c563849cb0de900bfcd176701e7dfa55523f4fa55ef6920a2160c471108b3dd54352289836a78f442df585be4ada36607ebe6100a17f53a87a068bdea98c09d72a458cea61842b4608f10c349a07f154fe45169e3609efc04321ead403086e7038fd1cab58e9c829db7763be0f5bcb5b42c52f01b0c33a599f2c498167b294d14b77e2cd090771e655ac389584802e8821b321ed73dcefb3b4b2cebbf9495f27b9dc93c42a77972de72a8bc31d0df1bae28070231845a606311d863ccad95717777d05dbd61d43a954a07adec9bec39ff8a50c85684a8e0198f459fc4cb3736390a009cdc47c27060fbba99f9ab7380f278ebe52c4d17d841482419d72396de913898ad58ffe7414069743941dc5c031cdc8cce3b1f4034fb6f1026ba229e83235f5f3878f9f7829473347fcbfc47a0f53e2bf90149e4de5edf0b4aca60b583df1bd71779936ec9f99177cc91c627a5f142bb310b7ee9cbbe962570400be2a158630ef94d0f1a934211084d061ea62dd371bf9b79f5ce5a6495e1308d0276eba72fc28669ab12182858f353334d54c02f75cc3a621536382b54dd13d9139989fdedc6689fc37715d490ecd8b6165ef2f2f38b9db15ed1aeebf508dce01a1a565ee12f9661bbffbe8ab1088cd66ab326cd16e2f62208ac36b25470749c35da5f2500312e07aa7f9babd8920658af640e57fbd9cb77337a6d27fa3a9cbe9a4ee84527554911c169ef4f301e30ae86cbae8119be28645e304a958eaea3977a351f886abd4f71b39c5869dbbd673c3e2a9dae27777de8486f29115bde3ff84139b298ecc57da20b5cc450a968d36ac7a3e24d5772c9ef2d5677221ca44f18bdaea3fb298c873ff57ea898d5fe27581fb138c54c5e63e9b630bdaa4f591a55b9fbfa63f5fa4306f2e91139bdf0c6de30687dd68e3fcc9d5ee699b89015deebf3eac66587447353a4ca97c73b1727b35928e86d4f56a9c83ec07b47f23d2d083cfe6182c3bd402c4de16e656231e9d29dd0cf82b1d24aa3946199b14e4a1e0800b7c8dd4c42b3879a26119075ddc8bc9f1e5d7b571f086bd6a6bae7d8c4529aeda2dfab21371b73f1a658dfcfb66b6d9db6fc104c2a87ce6c22cc012894ebde44f7422552777c8a3898c5959c3b9b3f83b435aad83313d31993b6e7ae7b8133747563a7afc354c4abb8d025cbf5d8ea6cc22b2a84d2f1cabae39d0d74c340f601a5341be504cac9d76e96e09656e62c75c0ca8088f8c7a67f297918a8fcb84af7a3d4972485d65ce138c430decf24179c5af1388feffc8debd048f04507bb2793b44898ada5b8600b28df2b305da7a41298dc0921b850f13c6f892eedac583395fb814c7c49a3b9e3d1028d503f434bae6ad1d2415f3735faa745034793bfec498877fe45373bf6b6ad89f1a4a17d6b5dc1e63eaa87a5c8bed251656e88b7dc56281b4a41c0becce2eb7a4bd3b07a69f8e094d237bee879459f924ee8ac978588f414de40e38c42ce2aac7e0ab46a55926ac45908489a84366e4b190511d7d11ae3d936db063abe53b53f8e7ab5d3319782cd5f807b3b883e18dfca5f68b4723954075280cee3b333aa33cd2ba571c6c1af274ed90e6829f92203258e3aee60629548353ed7697a43d79254d51039f7749551fb0fa16d1fcc0a4a200e1ec866504ff2defd0c9207e9af20f259197282ca76019f0b7795e6b6824afcd080766453b6940695a8f74570e5085f2c140578e4cec0cdaae03359e9a07b51e66a95fd47a8cec7cd8566291f0ce103f40e72f054c75f053e12d599dc4f651a06828d715624266e821eda499356998d7d963c11053e966ba0eb89fc8c5e336d8801b8b7675a62589078eb365bb305f480d27f35555776c6b08b8621a367dbfbc828bd6a0d5a48119cbbd034ab47ffc0f7cece76ef775e3055e47210640e9c1752cc4fc1d3772eee979cee2c2e97f8af81cad651293665547d079d50d500ac5b611784b5bd04d579c55698a1c2bfb8a0602a7a7114973f206851ab830ef9bf41cf5743ad6dd83c01bf636619d79d2f1515e60934287b7977b0efd74deb87bc95b5990f7427fe91e6a4d6416c544d63e153b6aceb241d361cfe5c4f776feafdb05be55efc1bb866e552813c1492aed05a210b82325738e15db6c91251f967fc270aaf3506a49c600dabf772e0c1bb7b9677ad269f09332d4727d21016b81d848739d6c9d20c868b12b543a56cce8feb84adcc4c6722392ca4b7c7aee5dda0b74c873fbec8becd55bcfdeb813cce2d58809d46941a2cf499f29841848e06fdad6e49afaa249f0bc2a0f114b155fcdf5970c7cd3648a1684a65ac801634cbc0e5e05c19505e453e14a637094a6b7a827fb610cc6c1620825dddc260dbcf0f0dd9beb138fb9554eecd1b27a310fe384d883af6a388db2f3a37bd7cfaeca431b7688e7ec959428930cefa4594a20bf71e55e83a275fd1234f4c6bf50cff3b8f5873f11b41170e806d5375f468d7934e023fd2c194dcd3916db47586c0a0091edccfdf79e971d2814a17df6a49d1fb011a5955407d31ff7ca53c6b8440dd29630bb74b16ed127a569e39c2ef1f1880fcc17cb19b3e4eaea0cc5335f2e89d8e0c4ae1d2ef42c99310f000fa291ef1cdf2bfa3ac5af92f12901dd393ced3845d8c33475f022ab7ea3e52631b10728a18e5a08a2b0585c1b0633676628b7a113eb4304ce17180859ea304c0dbdd97b671e8d0b566b3db4ea6b5bc04c431be2aedd2567e47decd377a716894f999939487170fced08c7fafeb0db31e230099b4750cd565db0746645c525d28cf5a6b271a3b2967ea59551b8278ee844b01e2e4780ca479b6ffbedd1dd5f9c812c18dadc1fa47f9d31c96b22ca6c08ebcc79fece68c0e430e2a04414aabce6f74d9edda78a74ef2e5c5821d9a4efbc1c7cf4296bc83bdaf0eef50f159fd0d8ce041c6ad3177c6ec0a02c3d837988dba381f3f96876af972d796fa3b6a6706b2a6b72ffc303ddca502de717521ccf14eb7c33b6feb34efe6ae5b8fffd3aff02a7e8a41b3461908cabe0d29cac11d6b9a8aee218943356927c401cf58ce36ee492ba630e6dfcda0b4f9aebde8a7d7cfa978a38b7d94119f1d3da571a40c730b7902b0b2fbf81b2bd61b8e72e8636e0a5b2c3a1d219b84c47d188037a44ff6cf531037b1efb15465452da83d8f05c49dc3d44f709ff2db210ac303a9b361c08d94bb554b4d5ffa8b5a8a836cd5fda033d78b729d5dbdced305aa0b182c071a74dbb560d79d253415483ab2b3e07184e38ceb6ec5910b3010dd71af1fc5a6cb1cf5075c714d8edad8a5ea364f2214a84a7881ed40013c8aeab8084b19d159a4eb02aea1f6d2e589a9cc336c73cdcdd81b7c386757391b0d0cbb1eeb5043f66ce3d0b800953770058d44272b8c8f7c79eb5bafbf676a1751d154e0ab1fa3205f572e8aa906a18504b11bc30250", 0x1000}, {&(0x7f0000001100)="8a233c1344bff229ae72a33b7751f897d8c9d39694596f54b54c7737d4843429469e48d53510882c628ad946455d27b6d1266c9fc535073b0ef0829d42e707856c32df8a49efa3e2a047b7ad2ddb320a8578a06c06e187c39187bd9f514f681ec551c57a7f3920b678d33958bbe64666342c701e062474cc9da4922abb0339ba3997db4f144caafa99f04f80161032ceacb3e65795e0cd3597fa36", 0x9b}, {&(0x7f00000015c0)="3d955068f6e941ea5932548fa5a9136df80e705c3a0f9b02fc8483bed49ffe45781933a7c94e8ddd5ff3cdb8f638aebd799c4790562641d0e16900f181a109ea91f22eab9ffa9751bb2eb59c34781ce68d8906cc9d756d99e1dd3edc56a384573bae1a8f4dc9408e0c7f7689b1be3ebbe4ff4d30da6c1075fccfceb05015b0991de9e6908d0e067f8d5e3a64a70737a8342454c52989897b2a90f620980311077b", 0xa1}], 0x3, &(0x7f0000001680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x41}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x80}}], 0x4, 0x4040844) 5.398198637s ago: executing program 0 (id=1348): landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="1e", 0x1}], 0x1) shutdown(r3, 0x1) mkdir(0x0, 0x0) chdir(0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x25, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [], 0x0, [0x8], [0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}}]}, 0x3}}, 0x0) 5.248436342s ago: executing program 4 (id=1349): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[], 0x2fe) ioctl$KDSKBLED(r0, 0x4b65, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x7f83bd0a) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x1, @win={{0x0, 0x3, 0x2, 0x80000040}, 0x1, 0x1, &(0x7f0000000000)={{0x1, 0x3, 0x80000000, 0x2}}, 0x1, 0x0, 0x2}}) syz_emit_vhci(0x0, 0x9) syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x40010, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.241469648s ago: executing program 3 (id=1350): bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="fdaae0a25330"]}]}, 0x20}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) 3.855113027s ago: executing program 3 (id=1351): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) gettid() r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="79ef34395d4c410d25e52319c6a502980fd70906f311", 0x16}, {&(0x7f0000000040)="21e86059062c57c14198b24339ac70b26123e39fda5912aba3c6fb5f31a089a6796a63e8cacd18a3d72d99de7b621f1d3074", 0x32}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="c1", 0x1}], 0x1}}], 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000380)={{0xa, 0x4e23, 0x4, @local, 0x9}, {0xa, 0x4e24, 0x6, @mcast1, 0x761}, 0x1, {[0x8, 0x3, 0x7fffffff, 0x200, 0x9, 0x1, 0x1, 0x1]}}, 0x5c) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x3fb]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000440)=@userptr={0x10, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a20283dc"}, 0x0, 0x2, {0x0}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3.759886262s ago: executing program 1 (id=1352): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) setxattr(0x0, &(0x7f0000000100)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x4) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffe0, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x6, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000023c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000002300)='syzkaller\x00', 0x5, 0x34, &(0x7f00000021c0)=""/52, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000022c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002340)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002380)=[{0x4, 0x3, 0x0, 0x1}, {0x3, 0x2, 0x10, 0x3}, {0x2, 0x2, 0x5, 0xb}], 0x10, 0x8}, 0x90) syz_open_pts(0xffffffffffffffff, 0x400040) openat$ppp(0xffffffffffffff9c, &(0x7f0000002140), 0x88000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127c, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x0, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x22040084) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x800}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x90) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05044000000905830391"], 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x20}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x1e, 0x201, 0x0, 0x0, {0x0, 0x0, 0x300}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_open_dev$evdev(&(0x7f0000002480), 0x4, 0x4800) syz_usb_connect(0x2, 0x24, &(0x7f0000002540)=ANY=[@ANYBLOB="6655593364927cfa216323fecc4c2df5d44812b3afb5556cd9d0eb47beb039b43d8938ce119ff32e51a7a941160c75cb265fcbadc41b2d0861b2a7c4c371b84e5554e366f791d79f07f95cd0daac77571c5a959712bfcc948859b0ceb5d01b67018c2449ed7ccfe98058af8661b55efd80b1d48650021bbdfa7b8ca6f92eae6c3f0b55abf619e08c7f0ba912ed5d5d9dd5f411129d53d4", @ANYRES64=r0, @ANYRESHEX], 0x0) 2.579686579s ago: executing program 3 (id=1353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x2, 0x11) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200020000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, "000088beffff0000"}}}}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2.484411529s ago: executing program 0 (id=1354): r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) close(r1) r2 = socket$netlink(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000380)={r3, 0x0, 0x5c, 0x0, &(0x7f0000000300)="f92567eb933ac0189405a31856342cabd04a4bee59734bdee09d40e1af132013981a1c887c0e7d3ecc09df43efc9bb81e08c74b043f1bc5cce24dc98ce3d73e51384b8d2b08ea91d4b82c24a785a2d6dc22e3ccc2e8eb0839785c4d2", 0x0, 0x90, 0x0, 0x1e, 0x0, &(0x7f0000000080)="0fce0f3aca62615a07f5e58eebc8173956d6c499cb0f69501e1c43569cd5", 0x0, 0x2, 0x0, 0x6}, 0x50) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x2ecfbe109ace7258, &(0x7f0000000240), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x844) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10805) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102373, 0x18fe5}], 0x1, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800cd0c3ec43d9c96b200007b00b77018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f00000021c0)={0x30000019}) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file1', [{0x20, 'bLB\xab^|\xd2F\xce\xe8\xdf\xe7\xb8\xc39*8m\xcc<\xdeb\xff\xed\xe0\x80\x98\xf3\xc0\xef\xd0lcG!\xa8\x7f\xee\x0e\xad{\x1c\x82\b\"\x03\xcc\xd1\x1ao\xba\x19\xdeS2\x94\xd7Y\xad\x9c\x9e\x1a\xda\x875\xf3\xb8\xac0\xb0S\xd9\r\x1d\x82\xcaav\x15h\x1dm\xa6\xa8\xbc\xb2J\xb0\x82\\\x98\x02p\xae\x9eD=\x9do\x9d\xcb\x85\xed\x15|\x9e\x8f\x9c\x94\xf0\xb4\xc5,Q\xf6\xd3\f\xd35\xe3?a\xc0*\xe6\x96\x9b:V\"\xe0(%G\xf1\x02\xdf-\x88\xa5\xf5#W\xcc\x8aq\x9e\xa3\x9a\xac\x95\xba\xc4c\a\x02\xc4'}]}, 0xa9) 1.914432586s ago: executing program 2 (id=1355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000023009500000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000019c0), 0xffffffffffffffff) ptrace$peek(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c010}, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000740)=r3) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc) write(r4, &(0x7f0000000080)="2f00000014000f3f03000000120f0af710004003009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x1, r3}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000000580)=""/228}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f90c1a04000a740600053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) 1.848136809s ago: executing program 0 (id=1356): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000080)=0x3ff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r1}, &(0x7f0000000d00), &(0x7f0000000d40)='%ps \x00'}, 0x20) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1.202521712s ago: executing program 4 (id=1357): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0xffff, 0x2}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x8, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0xd}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}, @jmp={0x5, 0x0, 0xe, 0xb, 0x4, 0xfffffffffffffff8}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6a) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f0000000580)=""/173, 0xad}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000640)=""/131, 0x83}], 0x5, &(0x7f0000000480)=""/10, 0xa}, 0x8001}], 0x1, 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="70008000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000170000005c000680080006000000000008000100000000000800060000000000040002003c00040067636d"], 0x70}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}, @ramp}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000140)=""/183) 1.067157061s ago: executing program 2 (id=1358): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5d}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x23, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, r2}, 0x90) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0x0, 0x37}, "be9e68e6a43db4df3048e5bcb825b1de53572638c7b360fa7592b411722aa1463bd45ac702ddaaf7af3d77d84c800e28e1e9bc52c40b30"}, 0x3b) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x48}, {0x6}]}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = dup2(r4, r6) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) unlink(&(0x7f0000000440)='./file0/file1/file0\x00') socket(0x1, 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x93, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xf9, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) 982.247015ms ago: executing program 0 (id=1359): r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) close(r1) r2 = socket$netlink(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000380)={r3, 0x0, 0x5c, 0x0, &(0x7f0000000300)="f92567eb933ac0189405a31856342cabd04a4bee59734bdee09d40e1af132013981a1c887c0e7d3ecc09df43efc9bb81e08c74b043f1bc5cce24dc98ce3d73e51384b8d2b08ea91d4b82c24a785a2d6dc22e3ccc2e8eb0839785c4d2", 0x0, 0x90, 0x0, 0x1e, 0x0, &(0x7f0000000080)="0fce0f3aca62615a07f5e58eebc8173956d6c499cb0f69501e1c43569cd5", 0x0, 0x2, 0x0, 0x6}, 0x50) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x2ecfbe109ace7258, &(0x7f0000000240), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x844) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000009, 0x5d032, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10805) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102373, 0x18fe5}], 0x1, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800cd0c3ec43d9c96b200007b00b77018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f00000021c0)={0x30000019}) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file1', [{0x20, 'bLB\xab^|\xd2F\xce\xe8\xdf\xe7\xb8\xc39*8m\xcc<\xdeb\xff\xed\xe0\x80\x98\xf3\xc0\xef\xd0lcG!\xa8\x7f\xee\x0e\xad{\x1c\x82\b\"\x03\xcc\xd1\x1ao\xba\x19\xdeS2\x94\xd7Y\xad\x9c\x9e\x1a\xda\x875\xf3\xb8\xac0\xb0S\xd9\r\x1d\x82\xcaav\x15h\x1dm\xa6\xa8\xbc\xb2J\xb0\x82\\\x98\x02p\xae\x9eD=\x9do\x9d\xcb\x85\xed\x15|\x9e\x8f\x9c\x94\xf0\xb4\xc5,Q\xf6\xd3\f\xd35\xe3?a\xc0*\xe6\x96\x9b:V\"\xe0(%G\xf1\x02\xdf-\x88\xa5\xf5#W\xcc\x8aq\x9e\xa3\x9a\xac\x95\xba\xc4c\a\x02\xc4'}]}, 0xa9) 0s ago: executing program 4 (id=1360): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0406000000000000005872133b22b9441a168f2463fce7e35d03"], 0x1a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000500)=[{&(0x7f00000002c0)="9a075ca318e24de8bec0a84a1f1e52458435629f54ebbb079bebe85d2921b20531781ea5e22aa5283365785be14453e42515c43218daf5c433e3329f587170835a5db43bc1a48538a000ca22b8f1ceed2e07d3593dcd9c526514f89e3a1a3470983dd112500cee2fe2d9fe54164536ba156a5b3417b959f50b173ee0ba730ed15c6db582eeafde6526181cfe538866a594c9bb2c1d4640ec7fe3de745bb1bf1ee4cf33751cc306290e15d188b486dc9ca78fcbc324fbf26956e777fbd419b34488eff897fd02cf1fc8e73c1543db219dc0114a881c27b53df1bd1277dadedfb26b7a8a83ad96", 0xe6}, {&(0x7f00000003c0)="027a0ef1e86b2d38c9acb26ee8316bfef9b35a2a2512814cc7bd0af4ed3759cdc907af807264ee945e19609f7d52ae56787bf73f764f3885168169d540b94368e3247ecca5d53bf15a8a506f3891ae6d77229e351130c9311c050f26", 0x5c}, {&(0x7f0000000440)="baa84bfb0f029aa26008b22f8e028bc9a4255db8464b70b05bbc2c9cf2f9ddc929b73e5b84ac946210fc67be212faefa5982e7b75ffad38bf08a825a92f48d0783838d75c9c9a0dfe98ccab0bdfb5b888b7e2aef2ce7b8f9c9d6985ce93722b59ac0236c06619b14537063b9a04630c48489e2f61a42da2e56661f449d5c1e3eb42f51c6126c0274a126ccadda209ee128420cebab117094d3e2329268483084af211d6fa1f1383e2497987b6c154dedea26", 0xb2}], 0x3, &(0x7f00000018c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@cipso={0x86, 0x38, 0x2, [{0x1, 0xf, '\x00'/13}, {0xc38badb62120967d, 0x5, "e5e3cc"}, {0x7, 0x3, "ac"}, {0x0, 0x9, "8d1cb8bbce2056"}, {0x2, 0x12, "19b07f1ed356926cfed9c542d796460b"}]}, @end]}}}], 0xb0}}, {{&(0x7f0000000600)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000dc0)=[{&(0x7f00000006c0)="be5c8188ae0178b51215687d36b2c5db2ea14ae9c658e160d1dec8fcb2dff9a1b4bd9a3587b8c0eab623e6e6394dfa3d9dc88b554334fc8856a0e3e1fad5e6009d30d52a868988c9935f5e873bd233512583b3c58f76139e83def83b50fcef99b19a36fef6512955f30f0c39213e5fe256a8ba5db886c5fa4440607312b6045d8e0f50d8a835af678d967820600f1c0e570cb53f723e5c02bcaf67d40f962decad458f2cc17b3cc9df7119559793deb5642eeed36f57025c3249a588382476848ac27d985472bbf3232d9ba79069505e56467ced2f0a10bd26fa1919cbed6dc539cf26a4ff", 0xe5}, {&(0x7f00000007c0)="c1b0a60419e066783c29c744cac5cba3ccf15809aafa7e93c31d4b47658b41c20544aff326d1160a672731c142f1695cd991e10d5372a420667f11827b74c559826f13d92c7c1016a7c3e3b83539736835b132e980dcad02efcd568de00cd821e60ee72e51ab30a32d3a22cf0750b34007efe40a1b9de230b9e3a4e3748acf96863a3df20f", 0x85}, {&(0x7f0000000880)="1b0c2d2b8bfed4ade368d8d6d90128ecad0665b6b941114324336d482c0c80daf5ebf887fb5dcf708bf99dd9bc74638c7111adfc6f37c3e5e4b2c9a9af3ded940cf1e3eb4aff306b1aa68485570c34048112090e72507f44681df5b6f9ccf758b71d2bc6c8d822dd1092cf8ddfcf8de8f7d2b3913b1cf5367075", 0x7a}, {&(0x7f0000000900)="28cff0306a9e388be1f5cbc9fc94f55adf4cfd690dc8ff7e3ebbff047a08debf1e3ab8f434bb80119a9cf783cef565d9099dd9d9bd31f175fd9d55840af2a1424fffc0d8214d32d907821cd5617673f3ddfb2fe9fe564fb70fffb540ccf73ed2b58669aebadf33782a96259163e580bf4590ee00aec2d0d08005c6556f6d1bbde17911d103cc6a3b55eaa1744e36f0d1097ea137b641b4e34be88ad0c94f12", 0x9f}, {&(0x7f0000000640)="c5b4385ca9eab5ca68e40814671d120c1e0bcb157f10842763d0e980d8acefc6881025d63d7283d646c4dcee1aa69ed79e2f43f0da3c7455247b27e0a6c4b6", 0x3f}, {&(0x7f00000009c0)="3c6fc294374ac385c991076cfd2a856707f6d3fb783faf7389b32f9cfcdde5f4ac1125cf971eb1e5d8493baacc147c36c0965fb4c8aad53de2512b893895b12c57e13856819aed48a903410235a2c57b71cc0ff3cc8dbf251f7686cf2a68f42055aa60fb86bbc34f9d23bd8eb015398fffc64dbe2e8c43cd7c6690545a563858b043201482b3cca798d5a23851484a86f90244beb9ed9b6941570b51d550f716327004c139dddf58377dc08d", 0xac}, {&(0x7f0000000a80)="90e38647df01af6d118828636ce21f26641b6f77ee57b41e3c03b3cfeed1d72e920ac63cb6c2d7b076cb3666134db63a582d9a1ccfc4c52e52b4f49c768f1f806bb4084bc742195c8101cffef79319f3aa5c6e7bd81121388d53fdbaa7eca29b9212f22903a67a6ff7f211bd13edd81f71608ef231cbe8caa9106370a400894ef6a2a8815d937d0364af81f9799761206e19ace05fe533c57bc168a937be3c17c336655389d5c5030b3e60fc0dfa8e5ae2a63894e715aa9e52f4ac56555c125fc6d3e7e67cf0bc2c387bb0c2e55ea146a32d37512fb4f955406172c16fa058", 0xdf}, {&(0x7f0000000b80)="afc25fd081b846b07794c073093c7e427a13df5bb1716a5fa73015efaf2ab54723", 0x21}, {&(0x7f0000000bc0)="8e61e94ad8c0108d21da01de155f4f611d84ce87fb1c4167110824bb6a2687ee0cf5ea33418685753b85e9723e3f674de869145b4bf6aca33cb6e81bfe6a9dd48b1b9ebfcfb17defa0f184381f44a0b2e38eaab8f1a108753451a9ec1152", 0x5e}, {&(0x7f0000000c40)="f202dc66218ee7b256d4eebbdddecd0e5e770c5a2ed0200be3eb86df9f76582eb9b42ae90f5f6b889974cddf1b0433d941e053c92898513590635ef4e855b409afec5c672d5f2649e95333f8fa8bd4994bcd9c45cdfa3780f661d97a340c27c51d27062449523341070bd8f9b67d9ba2a20482b75b8ffadad706398dec19d9893638928cfbf90552851726590643fabdca624af179ca633885ae4a", 0x9b}], 0xa, &(0x7f0000000e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}], 0x60}}, {{&(0x7f0000000f00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000f40)="a06ab968db7fa83abab38dc0d579d7cdbfc27febb6fdf955e951aa6b679cccfc9b52e85920c0a47ab3e3521b7f5d137ece31d40a80fe454f1ff417d31b5e84279c996c1963ffa97cdfd7f5b6ac55f2651544619b2b719fb67e852aae736d7c865a631185a3ae633b87816da8c65f9e7febf44e7d18a75e1e8f5a43af51c0bbb144e0ecd2daccf977ed9602ea160f1902c2dbfc465cfca106", 0x98}], 0x1, &(0x7f00000013c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xa2, 0x0, 0xe, [0x7]}, @timestamp_addr={0x44, 0x34, 0x16, 0x1, 0x8, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x8}, {@broadcast}, {@multicast2, 0x1}, {@empty, 0x33}]}, @lsrr={0x83, 0x23, 0x19, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @empty, @remote, @broadcast]}, @cipso={0x86, 0x2b, 0x1, [{0x5, 0xc, "54d73febeeb571ca0b36"}, {0x0, 0xe, "a0db93bf881f92e175a51f11"}, {0x7, 0xb, "83ef5725403d5a434e"}]}, @lsrr={0x83, 0x17, 0x3e, [@rand_addr=0x64010101, @loopback, @multicast2, @private=0xa010102, @local]}, @lsrr={0x83, 0xb, 0xd9, [@private=0xa010100, @local]}, @lsrr={0x83, 0x7, 0xc4, [@rand_addr=0x64010102]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x97, [@loopback, @multicast1, @rand_addr=0x64010101]}, @timestamp={0x44, 0x20, 0x65, 0x0, 0xb, [0x4, 0x1, 0x9, 0xa, 0x10001, 0xd0, 0x2]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x1d8}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000011c0)=[{&(0x7f000001aa80)="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", 0x1000}, {&(0x7f0000001100)="8a233c1344bff229ae72a33b7751f897d8c9d39694596f54b54c7737d4843429469e48d53510882c628ad946455d27b6d1266c9fc535073b0ef0829d42e707856c32df8a49efa3e2a047b7ad2ddb320a8578a06c06e187c39187bd9f514f681ec551c57a7f3920b678d33958bbe64666342c701e062474cc9da4922abb0339ba3997db4f144caafa99f04f80161032ceacb3e65795e0cd3597fa36", 0x9b}, {&(0x7f00000015c0)="3d955068f6e941ea5932548fa5a9136df80e705c3a0f9b02fc8483bed49ffe45781933a7c94e8ddd5ff3cdb8f638aebd799c4790562641d0e16900f181a109ea91f22eab9ffa9751bb2eb59c34781ce68d8906cc9d756d99e1dd3edc56a384573bae1a8f4dc9408e0c7f7689b1be3ebbe4ff4d30da6c1075fccfceb05015b0991de9e6908d0e067f8d5e3a64a70737a8342454c52989897b2a90f620980311077b", 0xa1}], 0x3, &(0x7f0000001680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x41}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x80}}], 0x4, 0x4040844) kernel console output (not intermixed with test programs): : auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8263 comm="syz.4.828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2cc175bd9 code=0x0 [ 290.475566][ T5221] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 290.677868][ T5221] usb 3-1: Using ep0 maxpacket: 32 [ 290.710178][ T5221] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 290.737066][ T5221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.750197][ T5221] usb 3-1: config 0 descriptor?? [ 290.774400][ T5221] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 290.877719][ T29] audit: type=1326 audit(1720541295.153:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8283 comm="syz.1.834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda24375bd9 code=0x0 [ 290.991853][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.834'. [ 291.003357][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.834'. [ 291.436713][ T8287] syzkaller0: entered promiscuous mode [ 291.444109][ T8287] syzkaller0: entered allmulticast mode [ 291.980290][ T5221] gspca_nw80x: reg_w err -71 [ 291.996623][ T5221] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 292.073345][ T5221] usb 3-1: USB disconnect, device number 12 [ 292.380381][ T8309] netlink: 'syz.4.843': attribute type 6 has an invalid length. [ 292.389028][ T8309] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.843'. [ 293.075621][ T5141] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 293.268240][ T29] audit: type=1326 audit(1720541297.543:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8319 comm="syz.4.846" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2cc175bd9 code=0x0 [ 293.296423][ T5141] usb 3-1: Using ep0 maxpacket: 16 [ 293.314473][ T5141] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.353816][ T5141] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 293.365979][ T5141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.374085][ T5141] usb 3-1: Product: syz [ 293.388150][ T5141] usb 3-1: Manufacturer: syz [ 293.392901][ T5141] usb 3-1: SerialNumber: syz [ 293.432136][ T5141] usb 3-1: config 0 descriptor?? [ 293.449571][ T5141] gspca_main: etoms-2.14.0 probing 102c:6151 [ 293.720792][ T5141] usb 3-1: USB disconnect, device number 13 [ 295.121445][ T8347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.855'. [ 295.131514][ T8347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.855'. [ 295.608953][ T8347] serio: Serial port ptm0 [ 295.692273][ T8338] delete_channel: no stack [ 295.997723][ T8351] netlink: 'syz.1.856': attribute type 6 has an invalid length. [ 296.013834][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 296.023587][ T8351] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.856'. [ 297.005672][ T5090] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 297.208783][ T5090] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 297.226955][ T5090] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 297.267940][ T5090] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.322570][ T5090] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 297.340657][ T5090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.349876][ T5090] usb 4-1: Product: syz [ 297.356042][ T5090] usb 4-1: Manufacturer: syz [ 297.363519][ T5090] usb 4-1: SerialNumber: syz [ 297.421948][ T5090] hub 4-1:1.0: bad descriptor, ignoring hub [ 297.455670][ T5090] hub 4-1:1.0: probe with driver hub failed with error -5 [ 297.654114][ T5090] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 298.286503][ T5141] usb 4-1: USB disconnect, device number 16 [ 298.337196][ T5141] usblp0: removed [ 299.479554][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 299.522622][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 300.393526][ T5096] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 301.873459][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 301.915706][ T5135] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 301.943519][ T29] audit: type=1326 audit(1720541306.213:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.4.883" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2cc175bd9 code=0x0 [ 302.125907][ T5135] usb 3-1: Using ep0 maxpacket: 16 [ 302.138062][ T5135] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.157042][ T5135] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 302.176678][ T5135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.196456][ T5135] usb 3-1: Product: syz [ 302.200714][ T5135] usb 3-1: Manufacturer: syz [ 302.250158][ T5135] usb 3-1: SerialNumber: syz [ 302.316736][ T5135] usb 3-1: config 0 descriptor?? [ 302.357952][ T5135] gspca_main: etoms-2.14.0 probing 102c:6151 [ 303.309260][ T8475] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 303.327685][ T5135] usb 3-1: USB disconnect, device number 14 [ 303.398957][ T8475] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 303.444682][ T29] audit: type=1326 audit(1720541307.713:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8472 comm="syz.3.889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc26e175bd9 code=0x0 [ 304.318915][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 305.376002][ T5221] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 305.450439][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 305.546738][ T8524] bond_slave_0: entered promiscuous mode [ 305.552634][ T8524] bond_slave_1: entered promiscuous mode [ 305.577522][ T8523] bond_slave_0: left promiscuous mode [ 305.583170][ T8523] bond_slave_1: left promiscuous mode [ 305.595876][ T5221] usb 3-1: Using ep0 maxpacket: 16 [ 305.685901][ T5221] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.777192][ T5221] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 305.835047][ T5221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.871677][ T5221] usb 3-1: Product: syz [ 305.892106][ T5221] usb 3-1: Manufacturer: syz [ 305.917070][ T5221] usb 3-1: SerialNumber: syz [ 305.956286][ T5221] usb 3-1: config 0 descriptor?? [ 306.007423][ T5221] gspca_main: etoms-2.14.0 probing 102c:6151 [ 306.405813][ T5221] usb 3-1: USB disconnect, device number 15 [ 306.724688][ T5091] Bluetooth: hci1: command 0x0406 tx timeout [ 307.265456][ T5090] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 307.285648][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.913'. [ 307.336236][ T8557] overlay: ./file0 is not a directory [ 307.340363][ T8554] vlan2: entered allmulticast mode [ 307.445484][ T5090] usb 2-1: Using ep0 maxpacket: 8 [ 307.463893][ T5090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 307.523348][ T5090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.559521][ T5090] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.599844][ T5090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 307.618164][ T5090] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 307.639619][ T5090] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 307.649762][ T5090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.683100][ T5090] usb 2-1: config 0 descriptor?? [ 307.729939][ T5096] Bluetooth: hci4: urb ffff88802d9ab400 submission failed (90) [ 307.765199][ T8564] bond_slave_0: entered promiscuous mode [ 307.771118][ T8564] bond_slave_1: entered promiscuous mode [ 307.806398][ T8562] bond_slave_0: left promiscuous mode [ 307.811918][ T8562] bond_slave_1: left promiscuous mode [ 307.954661][ T5090] usb 2-1: USB disconnect, device number 28 [ 308.103211][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 309.728811][ T57] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 310.005383][ T57] usb 2-1: Using ep0 maxpacket: 16 [ 310.028009][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.170730][ T57] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 310.185097][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.193672][ T57] usb 2-1: Product: syz [ 310.198930][ T57] usb 2-1: Manufacturer: syz [ 310.204001][ T57] usb 2-1: SerialNumber: syz [ 310.285010][ T57] usb 2-1: config 0 descriptor?? [ 310.300739][ T57] gspca_main: etoms-2.14.0 probing 102c:6151 [ 311.703468][ T57] usb 2-1: USB disconnect, device number 29 [ 312.280864][ T51] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 312.449934][ T51] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 312.481431][ T8612] bond_slave_0: entered promiscuous mode [ 312.487234][ T8612] bond_slave_1: entered promiscuous mode [ 312.564867][ T8611] bond_slave_0: left promiscuous mode [ 312.570483][ T8611] bond_slave_1: left promiscuous mode [ 312.680828][ T8618] bond_slave_0: entered promiscuous mode [ 312.686601][ T8618] bond_slave_1: entered promiscuous mode [ 312.708502][ T8631] No control pipe specified [ 312.730066][ T8617] bond_slave_0: left promiscuous mode [ 312.735619][ T8617] bond_slave_1: left promiscuous mode [ 313.621663][ T8651] random: crng reseeded on system resumption [ 313.634683][ T8648] netlink: 'syz.3.937': attribute type 6 has an invalid length. [ 313.643076][ T8648] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.937'. [ 314.580680][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 314.607185][ T8665] bond_slave_0: entered promiscuous mode [ 314.613095][ T8665] bond_slave_1: entered promiscuous mode [ 314.620148][ T8663] bond_slave_0: left promiscuous mode [ 314.625665][ T8663] bond_slave_1: left promiscuous mode [ 314.805387][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 315.005359][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 315.020188][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.039533][ T9] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 315.048981][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.058908][ T9] usb 2-1: Product: syz [ 315.065846][ T9] usb 2-1: Manufacturer: syz [ 315.071159][ T9] usb 2-1: SerialNumber: syz [ 315.078859][ T9] usb 2-1: config 0 descriptor?? [ 315.096193][ T9] gspca_main: etoms-2.14.0 probing 102c:6151 [ 315.854201][ T9] usb 2-1: USB disconnect, device number 30 [ 316.251890][ T8700] random: crng reseeded on system resumption [ 316.268696][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.950'. [ 316.310677][ T8697] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.317983][ T8697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.396756][ T8704] netlink: 72 bytes leftover after parsing attributes in process `syz.3.948'. [ 316.911555][ T8714] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 316.946008][ T8714] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 316.958999][ T62] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 316.982955][ T8717] netlink: 68 bytes leftover after parsing attributes in process `syz.1.955'. [ 317.016668][ T8718] bond_slave_0: entered promiscuous mode [ 317.022499][ T8718] bond_slave_1: entered promiscuous mode [ 317.151052][ T8717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.199510][ T8717] team0: Port device bond0 added [ 317.209251][ T8708] bond_slave_0: left promiscuous mode [ 317.214852][ T8708] bond_slave_1: left promiscuous mode [ 317.485738][ T5141] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 317.599040][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.666180][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.695634][ T5141] usb 3-1: Using ep0 maxpacket: 8 [ 317.725554][ T5141] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 317.737452][ T5141] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 317.919026][ T5141] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=f0.c9 [ 318.020366][ T5141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.029506][ T5141] usb 3-1: Product: syz [ 318.085695][ T5141] usb 3-1: Manufacturer: syz [ 318.096932][ T5141] usb 3-1: SerialNumber: syz [ 318.644640][ T5141] snd-usb-6fire 3-1:2.0: unknown device firmware state received from device: [ 318.653687][ T5141] d8 70 a4 ab 2e b6 ee 60 [ 318.659256][ T5141] snd-usb-6fire 3-1:2.0: probe with driver snd-usb-6fire failed with error -5 [ 319.176074][ T5141] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 319.198770][ T9] usb 3-1: USB disconnect, device number 16 [ 319.415511][ T5141] usb 4-1: Using ep0 maxpacket: 8 [ 319.485927][ T5141] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 319.855596][ T5141] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.887094][ T5141] usb 4-1: config 0 has no interface number 0 [ 319.893731][ T5141] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 319.904771][ T5141] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.918521][ T5141] usb 4-1: config 0 interface 52 has no altsetting 0 [ 319.927498][ T5141] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 320.375460][ T29] audit: type=1326 audit(1720541324.643:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8755 comm="syz.0.967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb21b75bd9 code=0x0 [ 320.575915][ T5141] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 320.584269][ T5141] usb 4-1: Product: syz [ 320.588552][ T5141] usb 4-1: SerialNumber: syz [ 320.596962][ T5141] usb 4-1: config 0 descriptor?? [ 320.816884][ T5141] input: syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input16 [ 320.830925][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 320.919436][ T8765] bond_slave_0: entered promiscuous mode [ 320.925327][ T8765] bond_slave_1: entered promiscuous mode [ 320.956422][ T8764] bond_slave_0: left promiscuous mode [ 320.961977][ T8764] bond_slave_1: left promiscuous mode [ 321.782672][ T5091] Bluetooth: hci1: command 0x0406 tx timeout [ 321.977522][ T8783] pim6reg1: entered allmulticast mode [ 322.013167][ T8783] pim6reg1: entered promiscuous mode [ 323.728151][ T8801] FAULT_INJECTION: forcing a failure. [ 323.728151][ T8801] name failslab, interval 1, probability 0, space 0, times 0 [ 323.753035][ T8801] CPU: 1 PID: 8801 Comm: syz.2.979 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 323.763107][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 323.773243][ T8801] Call Trace: [ 323.776544][ T8801] [ 323.779485][ T8801] dump_stack_lvl+0x241/0x360 [ 323.784198][ T8801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.789416][ T8801] ? __pfx__printk+0x10/0x10 [ 323.794029][ T8801] ? __pfx___might_resched+0x10/0x10 [ 323.799365][ T8801] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 323.805404][ T8801] should_fail_ex+0x3b0/0x4e0 [ 323.810120][ T8801] ? sock_kmalloc+0xd7/0x160 [ 323.814736][ T8801] should_failslab+0x9/0x20 [ 323.819254][ T8801] __kmalloc_noprof+0xd8/0x400 [ 323.824070][ T8801] ? __lock_acquire+0x1346/0x1fd0 [ 323.829111][ T8801] sock_kmalloc+0xd7/0x160 [ 323.833550][ T8801] af_alg_alloc_areq+0x90/0x260 [ 323.838418][ T8801] skcipher_recvmsg+0x382/0x1230 [ 323.843386][ T8801] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 323.848772][ T8801] ? __might_fault+0xaa/0x120 [ 323.853467][ T8801] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 323.858767][ T8801] ? security_socket_recvmsg+0x90/0xb0 [ 323.864242][ T8801] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 323.869631][ T8801] sock_recvmsg+0x22f/0x280 [ 323.874152][ T8801] ____sys_recvmsg+0x1db/0x470 [ 323.878938][ T8801] ? __pfx_____sys_recvmsg+0x10/0x10 [ 323.884255][ T8801] do_recvmmsg+0x474/0xae0 [ 323.888692][ T8801] ? __pfx_lock_release+0x10/0x10 [ 323.893727][ T8801] ? __pfx_do_recvmmsg+0x10/0x10 [ 323.898694][ T8801] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 323.904622][ T8801] ? ksys_write+0x23e/0x2c0 [ 323.909157][ T8801] ? __pfx_lock_release+0x10/0x10 [ 323.914217][ T8801] ? vfs_write+0x7c4/0xc90 [ 323.918665][ T8801] ? __mutex_unlock_slowpath+0x21d/0x750 [ 323.924336][ T8801] ? __fget_files+0x3f6/0x470 [ 323.929038][ T8801] __x64_sys_recvmmsg+0x199/0x250 [ 323.934081][ T8801] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 323.939647][ T8801] ? do_syscall_64+0x100/0x230 [ 323.944427][ T8801] ? do_syscall_64+0xb6/0x230 [ 323.949129][ T8801] do_syscall_64+0xf3/0x230 [ 323.953652][ T8801] ? clear_bhb_loop+0x35/0x90 [ 323.958439][ T8801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.964385][ T8801] RIP: 0033:0x7f8b54175bd9 [ 323.968808][ T8801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.988428][ T8801] RSP: 002b:00007f8b54ee1048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 323.996858][ T8801] RAX: ffffffffffffffda RBX: 00007f8b54303f60 RCX: 00007f8b54175bd9 [ 324.004843][ T8801] RDX: 0000000000000001 RSI: 0000000020000680 RDI: 0000000000000004 [ 324.012833][ T8801] RBP: 00007f8b54ee10a0 R08: 0000000000000000 R09: 0000000000000000 [ 324.020844][ T8801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.028855][ T8801] R13: 000000000000000b R14: 00007f8b54303f60 R15: 00007ffc017413f8 [ 324.036974][ T8801] [ 324.124174][ T5221] usb 4-1: USB disconnect, device number 17 [ 325.011049][ T8810] bond_slave_0: entered promiscuous mode [ 325.016875][ T8810] bond_slave_1: entered promiscuous mode [ 325.033118][ T8809] bond_slave_0: left promiscuous mode [ 325.038696][ T8809] bond_slave_1: left promiscuous mode [ 325.818185][ T8833] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 327.080480][ T5096] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 328.196208][ T8855] Bluetooth: MGMT ver 1.22 [ 328.995666][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 329.265500][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 329.277521][ T9] usb 2-1: config 0 has no interfaces? [ 329.285526][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 329.297352][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.317537][ T9] usb 2-1: config 0 descriptor?? [ 329.349917][ T8868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.383704][ T8868] FAULT_INJECTION: forcing a failure. [ 329.383704][ T8868] name failslab, interval 1, probability 0, space 0, times 0 [ 329.425737][ T8868] CPU: 0 PID: 8868 Comm: syz.2.998 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 329.435794][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 329.445890][ T8868] Call Trace: [ 329.449205][ T8868] [ 329.452169][ T8868] dump_stack_lvl+0x241/0x360 [ 329.456905][ T8868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.462167][ T8868] ? __pfx__printk+0x10/0x10 [ 329.466819][ T8868] ? __pfx___might_resched+0x10/0x10 [ 329.472160][ T8868] ? prepend_path+0x2f/0xbe0 [ 329.476804][ T8868] should_fail_ex+0x3b0/0x4e0 [ 329.481544][ T8868] ? tomoyo_encode+0x26f/0x540 [ 329.486353][ T8868] should_failslab+0x9/0x20 [ 329.490898][ T8868] __kmalloc_noprof+0xd8/0x400 [ 329.495696][ T8868] tomoyo_encode+0x26f/0x540 [ 329.500442][ T8868] tomoyo_realpath_from_path+0x59e/0x5e0 [ 329.506104][ T8868] tomoyo_path_number_perm+0x23a/0x880 [ 329.511590][ T8868] ? tomoyo_path_number_perm+0x208/0x880 [ 329.517243][ T8868] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 329.523276][ T8868] ? __fget_files+0x29/0x470 [ 329.527879][ T8868] ? __fget_files+0x3f6/0x470 [ 329.532568][ T8868] ? __fget_files+0x29/0x470 [ 329.537178][ T8868] security_file_ioctl+0x75/0xb0 [ 329.542131][ T8868] __se_sys_ioctl+0x47/0x170 [ 329.546744][ T8868] do_syscall_64+0xf3/0x230 [ 329.551288][ T8868] ? clear_bhb_loop+0x35/0x90 [ 329.556041][ T8868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.561965][ T8868] RIP: 0033:0x7f8b54175bd9 [ 329.566394][ T8868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.586041][ T8868] RSP: 002b:00007f8b54ee1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.594580][ T8868] RAX: ffffffffffffffda RBX: 00007f8b54303f60 RCX: 00007f8b54175bd9 [ 329.602573][ T8868] RDX: 00000000200012c0 RSI: 0000000000003b8a RDI: 0000000000000003 [ 329.610559][ T8868] RBP: 00007f8b54ee10a0 R08: 0000000000000000 R09: 0000000000000000 [ 329.618563][ T8868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.626542][ T8868] R13: 000000000000000b R14: 00007f8b54303f60 R15: 00007ffc017413f8 [ 329.634570][ T8868] [ 329.666683][ T8868] ERROR: Out of memory at tomoyo_realpath_from_path. [ 329.753681][ T51] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 329.773650][ T8869] bond_slave_0: entered promiscuous mode [ 329.779569][ T8869] bond_slave_1: entered promiscuous mode [ 329.816562][ T8867] bond_slave_0: left promiscuous mode [ 329.822361][ T8867] bond_slave_1: left promiscuous mode [ 329.922358][ T57] usb 2-1: USB disconnect, device number 31 [ 331.295961][ T5141] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 331.515548][ T5141] usb 4-1: Using ep0 maxpacket: 8 [ 331.570448][ T5141] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 331.640503][ T5096] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 331.645355][ T5141] usb 4-1: config 0 has no interface number 0 [ 331.682107][ T5141] usb 4-1: too many endpoints for config 0 interface 32 altsetting 32: 32, using maximum allowed: 30 [ 331.717219][ T5141] usb 4-1: config 0 interface 32 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 331.747835][ T5141] usb 4-1: config 0 interface 32 has no altsetting 0 [ 331.755500][ T8894] FAULT_INJECTION: forcing a failure. [ 331.755500][ T8894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.765400][ T5141] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 331.768845][ T8894] CPU: 0 PID: 8894 Comm: syz.0.1006 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 331.787837][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 331.795332][ T5141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.797901][ T8894] Call Trace: [ 331.797915][ T8894] [ 331.812140][ T8894] dump_stack_lvl+0x241/0x360 [ 331.816870][ T8894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.822120][ T8894] ? __pfx__printk+0x10/0x10 [ 331.826766][ T8894] ? __pfx_lock_release+0x10/0x10 [ 331.831843][ T8894] should_fail_ex+0x3b0/0x4e0 [ 331.836575][ T8894] _copy_from_user+0x2f/0xe0 [ 331.841215][ T8894] copy_msghdr_from_user+0xae/0x680 [ 331.846471][ T8894] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 331.852351][ T8894] __sys_sendmsg+0x23d/0x3a0 [ 331.856997][ T8894] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.862148][ T8894] ? vfs_write+0x7c4/0xc90 [ 331.866666][ T8894] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 331.873038][ T8894] ? do_syscall_64+0x100/0x230 [ 331.877859][ T8894] ? do_syscall_64+0xb6/0x230 [ 331.882588][ T8894] do_syscall_64+0xf3/0x230 [ 331.887144][ T8894] ? clear_bhb_loop+0x35/0x90 [ 331.891900][ T8894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.897813][ T8894] RIP: 0033:0x7ffb21b75bd9 [ 331.902281][ T8894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.921895][ T8894] RSP: 002b:00007ffb229fa048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.930323][ T8894] RAX: ffffffffffffffda RBX: 00007ffb21d04038 RCX: 00007ffb21b75bd9 [ 331.938306][ T8894] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000008 [ 331.946310][ T8894] RBP: 00007ffb229fa0a0 R08: 0000000000000000 R09: 0000000000000000 [ 331.954307][ T8894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.962285][ T8894] R13: 000000000000006e R14: 00007ffb21d04038 R15: 00007ffd7a1fb5f8 [ 331.970297][ T8894] [ 331.984170][ T5141] usb 4-1: config 0 descriptor?? [ 331.986212][ T5091] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.001696][ T5091] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.011933][ T5091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.021710][ T5091] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.034768][ T5091] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.044734][ T5091] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.633384][ T8907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.690553][ T8907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.204662][ T5141] asix 4-1:0.32 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 333.228610][ T5141] asix 4-1:0.32: probe with driver asix failed with error -71 [ 333.273956][ T5141] usb 4-1: USB disconnect, device number 18 [ 333.553178][ T8913] FAULT_INJECTION: forcing a failure. [ 333.553178][ T8913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.805843][ T8913] CPU: 1 PID: 8913 Comm: syz.2.1010 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 333.816010][ T8913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 333.826101][ T8913] Call Trace: [ 333.829393][ T8913] [ 333.832340][ T8913] dump_stack_lvl+0x241/0x360 [ 333.837056][ T8913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.842308][ T8913] ? __pfx__printk+0x10/0x10 [ 333.846921][ T8913] ? __pfx_lock_release+0x10/0x10 [ 333.851971][ T8913] should_fail_ex+0x3b0/0x4e0 [ 333.856672][ T8913] _copy_from_user+0x2f/0xe0 [ 333.861273][ T8913] keyctl_dh_compute+0xb7/0x160 [ 333.866146][ T8913] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 333.871626][ T8913] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.877618][ T8913] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.883965][ T8913] __se_sys_keyctl+0x3f3/0xa50 [ 333.888746][ T8913] ? irqentry_exit+0x63/0x90 [ 333.893356][ T8913] ? __pfx___se_sys_keyctl+0x10/0x10 [ 333.898658][ T8913] ? fput+0x45/0x210 [ 333.902567][ T8913] ? fput+0x22/0x210 [ 333.906475][ T8913] ? fput+0x18e/0x210 [ 333.910478][ T8913] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.916471][ T8913] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.922811][ T8913] ? do_syscall_64+0x100/0x230 [ 333.927595][ T8913] ? __x64_sys_keyctl+0x20/0xc0 [ 333.932462][ T8913] do_syscall_64+0xf3/0x230 [ 333.936987][ T8913] ? clear_bhb_loop+0x35/0x90 [ 333.941685][ T8913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.947600][ T8913] RIP: 0033:0x7f8b54175bd9 [ 333.952026][ T8913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.971643][ T8913] RSP: 002b:00007f8b54ee1048 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 333.980070][ T8913] RAX: ffffffffffffffda RBX: 00007f8b54303f60 RCX: 00007f8b54175bd9 [ 333.988052][ T8913] RDX: 0000000020000380 RSI: 0000000020000000 RDI: 0000000000000017 [ 333.996031][ T8913] RBP: 00007f8b54ee10a0 R08: 0000000020000340 R09: 0000000000000000 [ 334.004005][ T8913] R10: 0000000000000029 R11: 0000000000000246 R12: 0000000000000001 [ 334.011985][ T8913] R13: 000000000000000b R14: 00007f8b54303f60 R15: 00007ffc017413f8 [ 334.019981][ T8913] [ 334.109414][ T8895] chnl_net:caif_netlink_parms(): no params data found [ 334.229864][ T5091] Bluetooth: hci4: command tx timeout [ 335.725720][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.727187][ T932] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 335.926602][ T8895] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.047470][ T8895] bridge_slave_0: entered allmulticast mode [ 336.067769][ T8895] bridge_slave_0: entered promiscuous mode [ 336.105550][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 336.116262][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.124245][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.159798][ T8895] bridge_slave_1: entered allmulticast mode [ 336.178130][ T8895] bridge_slave_1: entered promiscuous mode [ 336.246309][ T8895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.263624][ T8895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.285652][ T5091] Bluetooth: hci4: command tx timeout [ 336.307942][ T932] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 336.331538][ T8895] team0: Port device team_slave_0 added [ 336.339967][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 336.354366][ T8895] team0: Port device team_slave_1 added [ 336.360716][ T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 336.387535][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.438037][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 336.466006][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.489171][ T8895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.505330][ T45] usb 4-1: Product: syz [ 336.512152][ T45] usb 4-1: Manufacturer: syz [ 336.521024][ T8895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.551815][ T45] usb 4-1: SerialNumber: syz [ 336.561666][ T8895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.580689][ T8895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.600933][ T45] hub 4-1:1.0: bad descriptor, ignoring hub [ 336.620176][ T45] hub 4-1:1.0: probe with driver hub failed with error -5 [ 336.635828][ T8895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.672901][ T8895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.811992][ T932] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 336.822088][ T932] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.829303][ T45] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 336.838048][ T932] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 336.861574][ T932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.865822][ T8895] hsr_slave_0: entered promiscuous mode [ 336.875593][ T932] usb 1-1: Product: syz [ 336.879799][ T932] usb 1-1: Manufacturer: syz [ 336.884675][ T932] usb 1-1: SerialNumber: syz [ 336.893937][ T8895] hsr_slave_1: entered promiscuous mode [ 336.917007][ T932] hub 1-1:1.0: bad descriptor, ignoring hub [ 336.923007][ T932] hub 1-1:1.0: probe with driver hub failed with error -5 [ 336.931171][ T8895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.938899][ T8895] Cannot create hsr debugfs directory [ 337.146113][ T932] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 337.317485][ T8895] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.421682][ T5091] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 337.505924][ T5141] usb 1-1: USB disconnect, device number 23 [ 337.533284][ T5141] usblp1: removed [ 337.548150][ T8895] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.551897][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 337.577622][ T932] usb 4-1: USB disconnect, device number 19 [ 337.599905][ T932] usblp0: removed [ 337.741965][ T8895] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.783689][ T8945] bond_slave_0: entered promiscuous mode [ 337.789519][ T8945] bond_slave_1: entered promiscuous mode [ 337.861425][ T8895] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.884961][ T8943] bond_slave_0: left promiscuous mode [ 337.890451][ T8943] bond_slave_1: left promiscuous mode [ 338.258976][ T8952] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1019'. [ 338.396534][ T5091] Bluetooth: hci4: command tx timeout [ 339.141955][ T8895] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 339.167753][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'. [ 339.189799][ T8895] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 339.334850][ T8895] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 339.504108][ T8895] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.268536][ T8957] sched: RT throttling activated [ 340.475381][ T5091] Bluetooth: hci4: command tx timeout [ 341.895938][ T57] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 341.926659][ T8895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.006993][ T8895] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.064076][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.071425][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.079501][ T57] usb 3-1: device descriptor read/64, error -71 [ 342.525524][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 342.552350][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.559606][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.716193][ T57] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 342.729459][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 342.753241][ T8895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.805780][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 342.825621][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.861858][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 342.875417][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.875720][ T57] usb 3-1: device descriptor read/64, error -71 [ 342.883454][ T9] usb 4-1: Product: syz [ 342.883478][ T9] usb 4-1: Manufacturer: syz [ 342.883496][ T9] usb 4-1: SerialNumber: syz [ 342.993328][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 343.016477][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 343.077368][ T57] usb usb3-port1: attempt power cycle [ 343.084219][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.111784][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.121223][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.141936][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 343.192571][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.205811][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 343.233527][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 343.251207][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.279505][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.313001][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.337432][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.363879][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 343.381593][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.405128][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.452864][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.484012][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.515770][ T57] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 343.533354][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.542747][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.552456][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.573452][ T8895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.583465][ T57] usb 3-1: device descriptor read/8, error -71 [ 343.592376][ T5141] usb 4-1: USB disconnect, device number 20 [ 343.612358][ T5141] usblp0: removed [ 343.624526][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.634760][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.648537][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.658146][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.667331][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.678438][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.686479][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.694358][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.704342][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.712283][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.732918][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.777452][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.802331][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.822878][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.844564][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.870190][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.891898][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 343.900021][ T57] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 343.947913][ T57] usb 3-1: device descriptor read/8, error -71 [ 343.956328][ T45] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 344.086611][ T57] usb usb3-port1: unable to enumerate USB device [ 344.427049][ T8895] veth0_vlan: entered promiscuous mode [ 344.489543][ T8895] veth1_vlan: entered promiscuous mode [ 344.595924][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 344.650476][ T8895] veth0_macvtap: entered promiscuous mode [ 344.690567][ T8895] veth1_macvtap: entered promiscuous mode [ 344.739631][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.760383][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.774701][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.787389][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.825457][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 344.839326][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.851901][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.863001][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.874730][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.886050][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.920188][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.944115][ T5221] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 344.954384][ T9] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 344.966385][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.974559][ T9] usb 4-1: Product: syz [ 344.979452][ T9] usb 4-1: Manufacturer: syz [ 344.984144][ T9] usb 4-1: SerialNumber: syz [ 344.988983][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.003958][ T9] usb 4-1: config 0 descriptor?? [ 345.012305][ T8895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.022380][ T9] gspca_main: etoms-2.14.0 probing 102c:6151 [ 345.042620][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.107807][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.144596][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.156397][ T5221] usb 3-1: too many configurations: 156, using maximum allowed: 8 [ 345.176574][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.218153][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.266990][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.267379][ T5221] usb 3-1: New USB device found, idVendor=7de0, idProduct=5373, bcdDevice=21.62 [ 345.325378][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.334084][ T5221] usb 3-1: New USB device strings: Mfr=196, Product=150, SerialNumber=13 [ 345.360602][ T5221] usb 3-1: Product: syz [ 345.377786][ T9] usb 4-1: USB disconnect, device number 21 [ 345.388132][ T5221] usb 3-1: Manufacturer: syz [ 345.394941][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.417611][ T5221] usb 3-1: SerialNumber: syz [ 345.462107][ T5221] usb 3-1: config 0 descriptor?? [ 345.462524][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.482026][ T5221] usb 3-1: bad CDC descriptors [ 345.575537][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.650376][ T8895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.705087][ T8895] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.740047][ T9005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.755806][ T9005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.762821][ T8895] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.841620][ T8895] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.851784][ T8895] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.032354][ T2421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.065516][ T2421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.123280][ T2421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.133809][ T2421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.440519][ T5090] usb 3-1: USB disconnect, device number 21 [ 348.214686][ T9027] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 348.468092][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 348.667822][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 348.691470][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 348.802604][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.907256][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 348.946710][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.975442][ T9] usb 3-1: Product: syz [ 349.008598][ T9] usb 3-1: Manufacturer: syz [ 349.058757][ T9] usb 3-1: SerialNumber: syz [ 349.099800][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 349.138239][ T9044] FAULT_INJECTION: forcing a failure. [ 349.138239][ T9044] name failslab, interval 1, probability 0, space 0, times 0 [ 349.172837][ T9044] CPU: 1 PID: 9044 Comm: syz.0.1043 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 349.182994][ T9044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 349.193075][ T9044] Call Trace: [ 349.196389][ T9044] [ 349.199339][ T9044] dump_stack_lvl+0x241/0x360 [ 349.204063][ T9044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.209298][ T9044] ? __pfx__printk+0x10/0x10 [ 349.213906][ T9044] ? tcp_established_options+0x3c1/0x800 [ 349.219559][ T9044] should_fail_ex+0x3b0/0x4e0 [ 349.224252][ T9044] ? __alloc_skb+0x1c3/0x440 [ 349.228872][ T9044] should_failslab+0x9/0x20 [ 349.233385][ T9044] kmem_cache_alloc_node_noprof+0x71/0x320 [ 349.239221][ T9044] ? tcp_current_mss+0x29b/0x4d0 [ 349.244177][ T9044] __alloc_skb+0x1c3/0x440 [ 349.248609][ T9044] ? __pfx___alloc_skb+0x10/0x10 [ 349.253614][ T9044] ? validate_chain+0x11e/0x5900 [ 349.258662][ T9044] ? lock_downgrade+0x8d0/0x900 [ 349.263531][ T9044] tcp_stream_alloc_skb+0x3d/0x310 [ 349.268658][ T9044] tcp_sendmsg_locked+0xd6a/0x4e10 [ 349.273791][ T9044] ? __lock_acquire+0x1346/0x1fd0 [ 349.278840][ T9044] ? mark_lock+0x9a/0x350 [ 349.283196][ T9044] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 349.288751][ T9044] ? __local_bh_enable_ip+0x168/0x200 [ 349.294135][ T9044] ? do_raw_spin_unlock+0x13c/0x8b0 [ 349.299371][ T9044] tcp_sendmsg+0x30/0x50 [ 349.303664][ T9044] __sock_sendmsg+0x1a6/0x270 [ 349.308392][ T9044] ____sys_sendmsg+0x525/0x7d0 [ 349.313221][ T9044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.318584][ T9044] __sys_sendmsg+0x2b0/0x3a0 [ 349.323223][ T9044] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.328381][ T9044] ? vfs_write+0x7c4/0xc90 [ 349.332906][ T9044] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.339301][ T9044] ? do_syscall_64+0x100/0x230 [ 349.344307][ T9044] ? do_syscall_64+0xb6/0x230 [ 349.349137][ T9044] do_syscall_64+0xf3/0x230 [ 349.353702][ T9044] ? clear_bhb_loop+0x35/0x90 [ 349.358462][ T9044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.364430][ T9044] RIP: 0033:0x7ffb21b75bd9 [ 349.368901][ T9044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.388572][ T9044] RSP: 002b:00007ffb22a1b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.397044][ T9044] RAX: ffffffffffffffda RBX: 00007ffb21d03f60 RCX: 00007ffb21b75bd9 [ 349.405070][ T9044] RDX: 0000000000000000 RSI: 00000000200015c0 RDI: 0000000000000003 [ 349.413090][ T9044] RBP: 00007ffb22a1b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 349.421109][ T9044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.429127][ T9044] R13: 000000000000000b R14: 00007ffb21d03f60 R15: 00007ffd7a1fb5f8 [ 349.437172][ T9044] [ 349.442099][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 349.454580][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 349.785810][ T5221] usb 3-1: USB disconnect, device number 22 [ 349.793652][ T5221] usblp0: removed [ 351.108480][ T9066] syz.2.1052: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 351.182050][ T9075] bond_slave_0: entered promiscuous mode [ 351.187893][ T9075] bond_slave_1: entered promiscuous mode [ 351.207633][ T9066] CPU: 0 PID: 9066 Comm: syz.2.1052 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 351.217791][ T9066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 351.228016][ T9066] Call Trace: [ 351.231333][ T9066] [ 351.234270][ T9066] dump_stack_lvl+0x241/0x360 [ 351.238967][ T9066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.244182][ T9066] ? __pfx__printk+0x10/0x10 [ 351.248789][ T9066] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 351.255231][ T9066] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 351.261741][ T9066] warn_alloc+0x278/0x410 [ 351.266098][ T9066] ? __pfx_warn_alloc+0x10/0x10 [ 351.270997][ T9066] ? hash_netport_create+0x356/0x1040 [ 351.276410][ T9066] ? __get_vm_area_node+0x23d/0x270 [ 351.281625][ T9066] __vmalloc_node_range_noprof+0x69f/0x1460 [ 351.287547][ T9066] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 351.293879][ T9066] ? rcu_is_watching+0x15/0xb0 [ 351.298657][ T9066] ? trace_kmalloc+0x1f/0xd0 [ 351.303247][ T9066] ? __kmalloc_node_noprof+0x247/0x440 [ 351.308722][ T9066] ? kvmalloc_node_noprof+0x72/0x190 [ 351.314011][ T9066] kvmalloc_node_noprof+0x142/0x190 [ 351.319229][ T9066] ? hash_netport_create+0x356/0x1040 [ 351.324609][ T9066] hash_netport_create+0x356/0x1040 [ 351.329827][ T9066] ? __pfx_hash_netport_create+0x10/0x10 [ 351.335485][ T9066] ip_set_create+0xa5c/0x1900 [ 351.340164][ T9066] ? ip_set_create+0x45e/0x1900 [ 351.345035][ T9066] ? trace_raw_output_contention_end+0x32/0xd0 [ 351.346595][ T9074] bond_slave_0: left promiscuous mode [ 351.351230][ T9066] ? __pfx_ip_set_create+0x10/0x10 [ 351.356777][ T9074] bond_slave_1: left promiscuous mode [ 351.361702][ T9066] ? trace_contention_end+0x3c/0x120 [ 351.372463][ T9066] ? nfnetlink_rcv_msg+0x225/0x1180 [ 351.377713][ T9066] nfnetlink_rcv_msg+0xbec/0x1180 [ 351.382779][ T9066] ? nfnetlink_rcv_msg+0x225/0x1180 [ 351.388012][ T9066] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 351.393503][ T9066] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 351.399536][ T9066] ? __schedule+0x179e/0x49d0 [ 351.404268][ T9066] netlink_rcv_skb+0x1e3/0x430 [ 351.409071][ T9066] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 351.414546][ T9066] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.419856][ T9066] ? safesetid_security_capable+0xb2/0x1d0 [ 351.425673][ T9066] ? bpf_lsm_capable+0x9/0x10 [ 351.430533][ T9066] ? security_capable+0x90/0xb0 [ 351.435407][ T9066] nfnetlink_rcv+0x297/0x2a80 [ 351.440128][ T9066] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 351.446128][ T9066] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 351.452524][ T9066] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 351.458538][ T9066] ? lockdep_hardirqs_on+0x99/0x150 [ 351.463766][ T9066] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 351.468923][ T9066] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 351.474852][ T9066] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.481227][ T9066] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 351.487880][ T9066] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 351.494878][ T9066] ? rcu_is_watching+0x15/0xb0 [ 351.499678][ T9066] ? rcu_read_unlock_special+0x470/0x550 [ 351.505335][ T9066] ? skb_clone+0x240/0x390 [ 351.509805][ T9066] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 351.515862][ T9066] ? __netlink_deliver_tap+0x77e/0x7c0 [ 351.521398][ T9066] ? __rcu_read_unlock+0xa1/0x110 [ 351.526480][ T9066] netlink_unicast+0x7ea/0x980 [ 351.531307][ T9066] ? __pfx_netlink_unicast+0x10/0x10 [ 351.536653][ T9066] ? __virt_addr_valid+0x183/0x520 [ 351.541834][ T9066] ? __check_object_size+0x49c/0x900 [ 351.547254][ T9066] ? bpf_lsm_netlink_send+0x9/0x10 [ 351.552430][ T9066] netlink_sendmsg+0x8db/0xcb0 [ 351.557268][ T9066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.562613][ T9066] ? __import_iovec+0x536/0x820 [ 351.567501][ T9066] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 351.572793][ T9066] ? security_socket_sendmsg+0x87/0xb0 [ 351.578288][ T9066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.583634][ T9066] __sock_sendmsg+0x221/0x270 [ 351.588369][ T9066] ____sys_sendmsg+0x525/0x7d0 [ 351.593207][ T9066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.598573][ T9066] __sys_sendmsg+0x2b0/0x3a0 [ 351.603227][ T9066] ? __pfx___sys_sendmsg+0x10/0x10 [ 351.608454][ T9066] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 351.614840][ T9066] ? do_syscall_64+0x100/0x230 [ 351.619685][ T9066] ? do_syscall_64+0xb6/0x230 [ 351.624409][ T9066] do_syscall_64+0xf3/0x230 [ 351.628953][ T9066] ? clear_bhb_loop+0x35/0x90 [ 351.633753][ T9066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.639797][ T9066] RIP: 0033:0x7f8b54175bd9 [ 351.644224][ T9066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.663932][ T9066] RSP: 002b:00007f8b54ec0048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.672362][ T9066] RAX: ffffffffffffffda RBX: 00007f8b54304038 RCX: 00007f8b54175bd9 [ 351.680362][ T9066] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 351.688350][ T9066] RBP: 00007f8b541e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 351.696330][ T9066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.704327][ T9066] R13: 000000000000000b R14: 00007f8b54304038 R15: 00007ffc017413f8 [ 351.712344][ T9066] [ 351.715440][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.034698][ T9066] Mem-Info: [ 352.053257][ T9066] active_anon:236 inactive_anon:7206 isolated_anon:0 [ 352.053257][ T9066] active_file:4827 inactive_file:35637 isolated_file:0 [ 352.053257][ T9066] unevictable:768 dirty:203 writeback:0 [ 352.053257][ T9066] slab_reclaimable:8935 slab_unreclaimable:98604 [ 352.053257][ T9066] mapped:21023 shmem:4231 pagetables:822 [ 352.053257][ T9066] sec_pagetables:0 bounce:0 [ 352.053257][ T9066] kernel_misc_reclaimable:0 [ 352.053257][ T9066] free:1393671 free_pcp:900 free_cma:0 [ 352.255355][ T9066] Node 0 active_anon:944kB inactive_anon:28824kB active_file:19236kB inactive_file:142548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84092kB dirty:812kB writeback:0kB shmem:15388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10324kB pagetables:3288kB sec_pagetables:0kB all_unreclaimable? no [ 352.306423][ T9066] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 352.343331][ T9066] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.393328][ T9066] lowmem_reserve[]: 0 2571 2571 0 0 [ 352.465413][ T9066] Node 0 DMA32 free:1612944kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:940kB inactive_anon:28876kB active_file:18976kB inactive_file:142496kB unevictable:1536kB writepending:812kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:1768kB local_pcp:456kB free_cma:0kB [ 352.505413][ T9066] lowmem_reserve[]: 0 0 0 0 0 [ 352.520754][ T9066] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:260kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.547662][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.712798][ T9066] lowmem_reserve[]: 0 0 0 0 0 [ 352.767140][ T9066] Node 1 Normal free:3946508kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:752kB free_cma:0kB [ 352.875312][ T9066] lowmem_reserve[]: 0 0 0 0 0 [ 352.880875][ T9066] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 352.918701][ T9066] Node 0 DMA32: 18*4kB (UE) 19*8kB (ME) 2*16kB (UE) 140*32kB (UME) 55*64kB (UME) 39*128kB (UME) 33*256kB (UME) 14*512kB (UM) 8*1024kB (UME) 7*2048kB (UME) 381*4096kB (M) = 1611968kB [ 352.965331][ T9066] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 352.996891][ T9066] Node 1 Normal: 6*4kB (UM) 9*8kB (UM) 14*16kB (UM) 4*32kB (UM) 6*64kB (U) 0*128kB 7*256kB (UM) 5*512kB (UM) 3*1024kB (U) 3*2048kB (U) 960*4096kB (M) = 3946560kB [ 353.035920][ T9066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.055421][ T9066] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 353.064796][ T9066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.095056][ T9066] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 353.115408][ T9066] 45846 total pagecache pages [ 353.124795][ T9066] 0 pages in swap cache [ 353.133834][ T9066] Free swap = 124400kB [ 353.147351][ T9066] Total swap = 124996kB [ 353.175313][ T9066] 2097051 pages RAM [ 353.179212][ T9066] 0 pages HighMem/MovableOnly [ 353.214409][ T9066] 400873 pages reserved [ 353.232209][ T9066] 0 pages cma reserved [ 354.683082][ T9114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1064'. [ 355.074661][ T9120] No control pipe specified [ 356.309233][ T5096] Bluetooth: Unexpected start frame (len 18) [ 356.984679][ T9137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1070'. [ 357.014879][ T9137] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1070'. [ 357.844799][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1074'. [ 358.739331][ T5221] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 359.994948][ T5096] Bluetooth: hci4: unexpected event 0x06 length: 23 > 3 [ 360.041417][ T5221] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 360.060632][ T5221] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 360.069649][ T5221] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 360.083818][ T5221] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 360.094335][ T5221] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 360.106589][ T5221] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 360.117018][ T5221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.465643][ T57] usb 4-1: USB disconnect, device number 22 [ 361.184684][ T9183] FAULT_INJECTION: forcing a failure. [ 361.184684][ T9183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.202865][ T9183] CPU: 1 PID: 9183 Comm: syz.3.1084 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 361.212991][ T9183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 361.223073][ T9183] Call Trace: [ 361.226399][ T9183] [ 361.229342][ T9183] dump_stack_lvl+0x241/0x360 [ 361.234063][ T9183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.239318][ T9183] ? __pfx__printk+0x10/0x10 [ 361.243928][ T9183] ? __pfx_lock_release+0x10/0x10 [ 361.248995][ T9183] should_fail_ex+0x3b0/0x4e0 [ 361.253693][ T9183] _copy_from_user+0x2f/0xe0 [ 361.258311][ T9183] copy_msghdr_from_user+0xae/0x680 [ 361.263541][ T9183] ? _parse_integer_limit+0x1b5/0x200 [ 361.268944][ T9183] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 361.274808][ T9183] __sys_sendmmsg+0x374/0x740 [ 361.279514][ T9183] ? __pfx___sys_sendmmsg+0x10/0x10 [ 361.284749][ T9183] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 361.290654][ T9183] ? ksys_write+0x23e/0x2c0 [ 361.295195][ T9183] ? __pfx_lock_release+0x10/0x10 [ 361.300256][ T9183] ? vfs_write+0x7c4/0xc90 [ 361.304685][ T9183] ? __mutex_unlock_slowpath+0x21d/0x750 [ 361.310326][ T9183] ? __pfx_vfs_write+0x10/0x10 [ 361.315118][ T9183] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 361.321105][ T9183] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 361.327459][ T9183] ? do_syscall_64+0x100/0x230 [ 361.332253][ T9183] __x64_sys_sendmmsg+0xa0/0xb0 [ 361.337126][ T9183] do_syscall_64+0xf3/0x230 [ 361.341668][ T9183] ? clear_bhb_loop+0x35/0x90 [ 361.346408][ T9183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.352338][ T9183] RIP: 0033:0x7fc26e175bd9 [ 361.356787][ T9183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.376424][ T9183] RSP: 002b:00007fc26eeed048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 361.384875][ T9183] RAX: ffffffffffffffda RBX: 00007fc26e303f60 RCX: 00007fc26e175bd9 [ 361.392903][ T9183] RDX: 00000000000003ef RSI: 0000000020000180 RDI: 0000000000000003 [ 361.400899][ T9183] RBP: 00007fc26eeed0a0 R08: 0000000000000000 R09: 0000000000000000 [ 361.408886][ T9183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.416949][ T9183] R13: 000000000000000b R14: 00007fc26e303f60 R15: 00007ffdd514cb58 [ 361.424989][ T9183] [ 361.428118][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.342871][ T9196] Illegal XDP return value 4294967274 on prog (id 227) dev N/A, expect packet loss! [ 362.343770][ T5096] Bluetooth: Unexpected start frame (len 18) [ 363.914345][ T9211] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 364.195438][ T5091] Bluetooth: Unexpected start frame (len 12) [ 364.289508][ T5091] Bluetooth: min 0 < 6 [ 364.379685][ T9216] 9pnet_fd: Insufficient options for proto=fd [ 365.166020][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 365.385432][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 365.422144][ T8] usb 2-1: config 1 interface 0 altsetting 14 bulk endpoint 0x1 has invalid maxpacket 8 [ 365.458051][ T8] usb 2-1: config 1 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 365.509983][ T8] usb 2-1: config 1 interface 0 has no altsetting 0 [ 365.548686][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 365.600155][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.630553][ T8] usb 2-1: Product: syz [ 365.642623][ T8] usb 2-1: Manufacturer: ㊲볚ᛊ跮⧊䶍ʼ볕蓰⻭䂠ﷆ별묹⏫꜌益ඒ䡻߭ଆ‣垒繬ቻ뱒⽏䷬쨮켞聁躿쫂拘Ꚅﺠ㦒鬒ꭗ駛ỵ഍㪓 [ 365.673627][ T8] usb 2-1: SerialNumber: syz [ 365.693345][ T9226] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 365.705748][ T9226] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 366.186990][ T8] usb 2-1: USB disconnect, device number 32 [ 366.355834][ T5091] Bluetooth: hci3: command 0x0406 tx timeout [ 366.833894][ T9247] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1106'. [ 366.855826][ T9247] netlink: 'syz.3.1106': attribute type 9 has an invalid length. [ 367.017954][ T9254] FAULT_INJECTION: forcing a failure. [ 367.017954][ T9254] name failslab, interval 1, probability 0, space 0, times 0 [ 367.043496][ T9254] CPU: 0 PID: 9254 Comm: syz.3.1109 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 367.053646][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 367.063747][ T9254] Call Trace: [ 367.067077][ T9254] [ 367.070051][ T9254] dump_stack_lvl+0x241/0x360 [ 367.074794][ T9254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.080055][ T9254] ? __pfx__printk+0x10/0x10 [ 367.084715][ T9254] ? __lock_acquire+0x1346/0x1fd0 [ 367.089801][ T9254] should_fail_ex+0x3b0/0x4e0 [ 367.094558][ T9254] ? __alloc_skb+0x1c3/0x440 [ 367.099180][ T9254] should_failslab+0x9/0x20 [ 367.103805][ T9254] kmem_cache_alloc_node_noprof+0x71/0x320 [ 367.109647][ T9254] __alloc_skb+0x1c3/0x440 [ 367.114105][ T9254] ? __pfx___alloc_skb+0x10/0x10 [ 367.119076][ T9254] ? __mutex_trylock_common+0x183/0x2e0 [ 367.124653][ T9254] netlink_dump+0x233/0xe50 [ 367.129191][ T9254] ? rcu_is_watching+0x15/0xb0 [ 367.133999][ T9254] ? trace_contention_end+0x3c/0x120 [ 367.139326][ T9254] ? __pfx_netlink_dump+0x10/0x10 [ 367.144412][ T9254] ? __pfx_lock_acquire+0x10/0x10 [ 367.149470][ T9254] __netlink_dump_start+0x59d/0x780 [ 367.154703][ T9254] rtnetlink_rcv_msg+0xda2/0x1180 [ 367.159756][ T9254] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 367.165067][ T9254] ? rtnetlink_rcv_msg+0x208/0x1180 [ 367.170292][ T9254] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 367.175775][ T9254] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 367.181772][ T9254] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 367.188135][ T9254] ? __local_bh_enable_ip+0x168/0x200 [ 367.193540][ T9254] ? lockdep_hardirqs_on+0x99/0x150 [ 367.198762][ T9254] ? __local_bh_enable_ip+0x168/0x200 [ 367.204145][ T9254] ? dev_hard_start_xmit+0x773/0x7e0 [ 367.209445][ T9254] ? __dev_queue_xmit+0x2d2/0x3d30 [ 367.214573][ T9254] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 367.220313][ T9254] ? __dev_queue_xmit+0x2d2/0x3d30 [ 367.225455][ T9254] ? __dev_queue_xmit+0x16c9/0x3d30 [ 367.230694][ T9254] ? __dev_queue_xmit+0x2d2/0x3d30 [ 367.235827][ T9254] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 367.241134][ T9254] ? ref_tracker_free+0x643/0x7e0 [ 367.246194][ T9254] netlink_rcv_skb+0x1e3/0x430 [ 367.250981][ T9254] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 367.256464][ T9254] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 367.261792][ T9254] ? netlink_deliver_tap+0x2e/0x1b0 [ 367.267009][ T9254] netlink_unicast+0x7ea/0x980 [ 367.271799][ T9254] ? __pfx_netlink_unicast+0x10/0x10 [ 367.277207][ T9254] ? __virt_addr_valid+0x183/0x520 [ 367.282340][ T9254] ? __check_object_size+0x49c/0x900 [ 367.287639][ T9254] ? bpf_lsm_netlink_send+0x9/0x10 [ 367.292771][ T9254] netlink_sendmsg+0x8db/0xcb0 [ 367.297590][ T9254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.302901][ T9254] ? __import_iovec+0x536/0x820 [ 367.307769][ T9254] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 367.313064][ T9254] ? security_socket_sendmsg+0x87/0xb0 [ 367.318563][ T9254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.323905][ T9254] __sock_sendmsg+0x221/0x270 [ 367.328634][ T9254] ____sys_sendmsg+0x525/0x7d0 [ 367.333461][ T9254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.338810][ T9254] __sys_sendmsg+0x2b0/0x3a0 [ 367.343446][ T9254] ? __pfx___sys_sendmsg+0x10/0x10 [ 367.348593][ T9254] ? vfs_write+0x7c4/0xc90 [ 367.353126][ T9254] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 367.359488][ T9254] ? do_syscall_64+0x100/0x230 [ 367.364280][ T9254] ? do_syscall_64+0xb6/0x230 [ 367.369001][ T9254] do_syscall_64+0xf3/0x230 [ 367.373528][ T9254] ? clear_bhb_loop+0x35/0x90 [ 367.378229][ T9254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.384160][ T9254] RIP: 0033:0x7fc26e175bd9 [ 367.388585][ T9254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.408204][ T9254] RSP: 002b:00007fc26eeed048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.416657][ T9254] RAX: ffffffffffffffda RBX: 00007fc26e303f60 RCX: 00007fc26e175bd9 [ 367.424649][ T9254] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 367.432646][ T9254] RBP: 00007fc26eeed0a0 R08: 0000000000000000 R09: 0000000000000000 [ 367.440631][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.448614][ T9254] R13: 000000000000000b R14: 00007fc26e303f60 R15: 00007ffdd514cb58 [ 367.456611][ T9254] [ 367.865821][ T5091] Bluetooth: Unexpected start frame (len 18) [ 367.966796][ T5091] Bluetooth: Unexpected start frame (len 18) [ 370.342900][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.520026][ T9286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1119'. [ 370.542052][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.590574][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1120'. [ 370.612213][ T9290] netlink: 'syz.1.1119': attribute type 9 has an invalid length. [ 370.759246][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.845137][ T5096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.859901][ T5096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.869772][ T5096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.889270][ T5096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.900766][ T5096] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 370.911553][ T5096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 370.917902][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.429862][ T51] bridge_slave_1: left allmulticast mode [ 371.445908][ T51] bridge_slave_1: left promiscuous mode [ 371.451788][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.473559][ T51] bridge_slave_0: left allmulticast mode [ 371.495358][ T51] bridge_slave_0: left promiscuous mode [ 371.505808][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.605749][ T5090] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 371.830679][ T5090] usb 2-1: Using ep0 maxpacket: 16 [ 371.839921][ T5090] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.881339][ T5090] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 371.911100][ T5090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.923586][ T5091] Bluetooth: Unexpected start frame (len 18) [ 371.940688][ T5090] usb 2-1: Product: syz [ 371.975595][ T5090] usb 2-1: Manufacturer: syz [ 372.002450][ T5090] usb 2-1: SerialNumber: syz [ 372.104371][ T5090] usb 2-1: config 0 descriptor?? [ 372.166112][ T5090] gspca_main: etoms-2.14.0 probing 102c:6151 [ 372.549040][ T5090] usb 2-1: USB disconnect, device number 33 [ 372.995563][ T5091] Bluetooth: hci5: command tx timeout [ 373.287026][ T9337] tmpfs: Unknown parameter 'usrquota@' [ 373.625702][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.070593][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.252711][ T51] bond0 (unregistering): Released all slaves [ 374.677948][ T9295] chnl_net:caif_netlink_parms(): no params data found [ 374.948923][ T9371] ufs: You didn't specify the type of your ufs filesystem [ 374.948923][ T9371] [ 374.948923][ T9371] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 374.948923][ T9371] [ 374.948923][ T9371] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 375.022636][ T9371] ufs: ufstype=old is supported read-only [ 375.058337][ T57] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 375.064326][ T9371] ufs: ufs_fill_super(): bad magic number [ 375.075414][ T5091] Bluetooth: hci5: command tx timeout [ 375.247955][ T9384] tmpfs: Unknown parameter 'usrquota@' [ 375.255339][ T57] usb 1-1: Using ep0 maxpacket: 8 [ 375.263673][ T57] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 375.275604][ T57] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 375.296824][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.316428][ T57] usb 1-1: config 0 descriptor?? [ 375.329521][ T57] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 375.344100][ T57] usb 1-1: Detected SIO [ 375.350073][ T57] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 375.363294][ T57] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 375.512691][ T9391] No control pipe specified [ 375.785413][ T9295] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.836437][ T9295] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.865807][ T9295] bridge_slave_0: entered allmulticast mode [ 375.909833][ T9295] bridge_slave_0: entered promiscuous mode [ 375.949805][ T9295] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.993393][ T9295] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.329989][ T9295] bridge_slave_1: entered allmulticast mode [ 377.173918][ T5091] Bluetooth: hci5: command tx timeout [ 377.454305][ T45] usb 1-1: USB disconnect, device number 24 [ 377.488297][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 377.522361][ T45] ftdi_sio 1-1:0.0: device disconnected [ 377.525432][ T9295] bridge_slave_1: entered promiscuous mode [ 377.943943][ T51] hsr_slave_0: left promiscuous mode [ 377.986070][ T51] hsr_slave_1: left promiscuous mode [ 378.004689][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.024863][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.933190][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.015509][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.022049][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.031081][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.108152][ T51] veth1_macvtap: left promiscuous mode [ 379.113974][ T51] veth0_macvtap: left promiscuous mode [ 379.122241][ T51] veth1_vlan: left promiscuous mode [ 379.132532][ T51] veth0_vlan: left promiscuous mode [ 379.235981][ T5091] Bluetooth: hci5: command tx timeout [ 379.405491][ T5221] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 379.456332][ T5090] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 379.610824][ T5221] usb 2-1: Using ep0 maxpacket: 8 [ 379.623778][ T5221] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 379.634874][ T5221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.644402][ T5090] usb 1-1: Using ep0 maxpacket: 8 [ 379.654585][ T5090] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 379.666518][ T5221] usb 2-1: config 0 descriptor?? [ 379.680218][ T5090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.714843][ T5090] usb 1-1: config 0 descriptor?? [ 379.859029][ T51] team0 (unregistering): Port device team_slave_1 removed [ 379.921868][ T51] team0 (unregistering): Port device team_slave_0 removed [ 380.493247][ T9295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.551392][ T9295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.708023][ T9425] random: crng reseeded on system resumption [ 380.747558][ T9295] team0: Port device team_slave_0 added [ 380.774167][ T9295] team0: Port device team_slave_1 added [ 380.853307][ T9295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.861068][ T9295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.887458][ T9295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.935624][ T9295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.954459][ T9295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.982822][ T9295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.280174][ T9295] hsr_slave_0: entered promiscuous mode [ 381.289928][ T9295] hsr_slave_1: entered promiscuous mode [ 381.301557][ T9295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.381507][ T9295] Cannot create hsr debugfs directory [ 381.670201][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.685674][ T9416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.686219][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.726745][ T9416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.753319][ T5221] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 381.775723][ T5221] asix 2-1:0.0: probe with driver asix failed with error -71 [ 381.818508][ T5221] usb 2-1: USB disconnect, device number 34 [ 381.849256][ T5090] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 381.896135][ T5090] asix 1-1:0.0: probe with driver asix failed with error -71 [ 381.946800][ T5090] usb 1-1: USB disconnect, device number 25 [ 382.376568][ T9443] ufs: You didn't specify the type of your ufs filesystem [ 382.376568][ T9443] [ 382.376568][ T9443] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 382.376568][ T9443] [ 382.376568][ T9443] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 382.464625][ T9443] ufs: ufstype=old is supported read-only [ 382.496293][ T9443] ufs: ufs_fill_super(): bad magic number [ 384.146414][ T5091] Bluetooth: Unexpected start frame (len 18) [ 384.798485][ T9295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 384.849968][ T9295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 384.905193][ T9295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 385.448992][ T9295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 386.154968][ T9485] random: crng reseeded on system resumption [ 386.572156][ T9295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.686889][ T9295] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.742235][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.749450][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.812099][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.819528][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.759246][ T9295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.905825][ T8] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 388.047113][ T9295] veth0_vlan: entered promiscuous mode [ 388.080980][ T9295] veth1_vlan: entered promiscuous mode [ 388.118121][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 388.146935][ T8] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 388.169137][ T8] usb 2-1: config 0 has no interface number 0 [ 388.205391][ T8] usb 2-1: too many endpoints for config 0 interface 32 altsetting 32: 32, using maximum allowed: 30 [ 388.237785][ T8] usb 2-1: config 0 interface 32 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 388.261318][ T8] usb 2-1: config 0 interface 32 has no altsetting 0 [ 388.295438][ T8] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 388.330662][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.370543][ T9295] veth0_macvtap: entered promiscuous mode [ 388.380340][ T8] usb 2-1: config 0 descriptor?? [ 388.403681][ T9295] veth1_macvtap: entered promiscuous mode [ 388.484114][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.509693][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.553809][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.573229][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.583773][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.632611][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.657879][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.684759][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.703221][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.726580][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.801629][ T9295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.874381][ T9510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.887103][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.930700][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.931339][ T9510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.971469][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.991528][ T8] usb 2-1: string descriptor 0 read error: -71 [ 389.007785][ T8] asix 2-1:0.32 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 389.010142][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.038394][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.049665][ T8] asix 2-1:0.32: probe with driver asix failed with error -71 [ 389.054411][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.075870][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.090484][ T8] usb 2-1: USB disconnect, device number 35 [ 389.097044][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.115827][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.128578][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.202488][ T9295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.254237][ T9295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.326820][ T9295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.379322][ T9295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.440766][ T9295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.821235][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.859167][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.898219][ T9543] No control pipe specified [ 389.999791][ T2421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.067240][ T2421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.077131][ T5091] Bluetooth: Unexpected start frame (len 18) [ 390.571376][ T5221] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 390.765449][ T5221] usb 1-1: Using ep0 maxpacket: 8 [ 390.774471][ T5221] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.818289][ T5221] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 390.862142][ T5221] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 390.915999][ T5221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.941339][ T5221] usb 1-1: config 0 descriptor?? [ 391.564631][ T29] audit: type=1326 audit(1720541395.833:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9567 comm="syz.3.1170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc26e175bd9 code=0x0 [ 392.154255][ T29] audit: type=1326 audit(1720541396.423:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9582 comm="syz.1.1171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda24375bd9 code=0x0 [ 392.624316][ T9592] random: crng reseeded on system resumption [ 393.796496][ T45] usb 1-1: USB disconnect, device number 26 [ 394.152617][ T9603] ufs: You didn't specify the type of your ufs filesystem [ 394.152617][ T9603] [ 394.152617][ T9603] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 394.152617][ T9603] [ 394.152617][ T9603] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 394.292239][ T9603] ufs: ufstype=old is supported read-only [ 394.325178][ T9603] ufs: ufs_fill_super(): bad magic number [ 394.413379][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1180'. [ 394.623157][ T29] audit: type=1326 audit(1720541398.883:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9625 comm="syz.3.1182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc26e175bd9 code=0x0 [ 394.915393][ T5141] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 395.005422][ T5090] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 395.125522][ T5141] usb 2-1: Using ep0 maxpacket: 32 [ 395.136913][ T5141] usb 2-1: config 0 has no interfaces? [ 395.149187][ T5141] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 395.191101][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.198255][ T5090] usb 3-1: Using ep0 maxpacket: 16 [ 395.233273][ T5090] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.237988][ T5141] usb 2-1: config 0 descriptor?? [ 395.280407][ T5090] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 395.315089][ T5090] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.351124][ T5090] usb 3-1: Product: syz [ 395.367728][ T5090] usb 3-1: Manufacturer: syz [ 395.381367][ T5090] usb 3-1: SerialNumber: syz [ 395.403714][ T5090] usb 3-1: config 0 descriptor?? [ 395.422061][ T5090] gspca_main: etoms-2.14.0 probing 102c:6151 [ 395.769928][ T5090] usb 3-1: USB disconnect, device number 23 [ 395.994267][ T5141] usb 2-1: USB disconnect, device number 36 [ 397.154844][ T9671] misc userio: Invalid payload size [ 397.160749][ T9673] misc userio: No port type given on /dev/userio [ 397.211433][ T9670] ufs: You didn't specify the type of your ufs filesystem [ 397.211433][ T9670] [ 397.211433][ T9670] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 397.211433][ T9670] [ 397.211433][ T9670] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 397.275022][ T9670] ufs: ufstype=old is supported read-only [ 397.334035][ T9670] ufs: ufs_fill_super(): bad magic number [ 397.573101][ T29] audit: type=1326 audit(1720541401.843:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9677 comm="syz.2.1196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9049375bd9 code=0x0 [ 400.292575][ T9693] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1198'. [ 400.860414][ T9707] netlink: 'syz.2.1204': attribute type 6 has an invalid length. [ 400.892566][ T9707] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1204'. [ 400.916865][ T9714] futex_wake_op: syz.3.1207 tries to shift op by -1; fix this program [ 401.216208][ T9722] misc userio: No port type given on /dev/userio [ 401.499002][ T29] audit: type=1326 audit(1720541405.773:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9723 comm="syz.0.1210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb21b75bd9 code=0x0 [ 401.640214][ T9730] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1212'. [ 401.716743][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'. [ 402.195502][ T5090] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 402.405730][ T5090] usb 3-1: Using ep0 maxpacket: 32 [ 402.423732][ T5090] usb 3-1: config 0 has no interfaces? [ 402.450314][ T5090] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 402.464465][ T5090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.487314][ T5090] usb 3-1: config 0 descriptor?? [ 402.705527][ T5141] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 402.906008][ T5141] usb 1-1: Using ep0 maxpacket: 8 [ 402.928299][ T5141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 403.049930][ T5141] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 403.195890][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.662198][ T9763] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1225'. [ 403.674623][ T5141] usb 1-1: config 0 descriptor?? [ 403.700661][ T5141] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 403.726549][ T5141] usb 1-1: Detected SIO [ 403.741370][ T9765] misc userio: No port type given on /dev/userio [ 403.746937][ T5141] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 403.758390][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 403.781481][ T5141] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 403.790614][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 403.827243][ T5090] usb 3-1: USB disconnect, device number 24 [ 404.008330][ T9771] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1227'. [ 404.223525][ T9751] random: crng reseeded on system resumption [ 404.511765][ T9774] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1228'. [ 405.705731][ T5141] usb 1-1: USB disconnect, device number 27 [ 405.729379][ T5141] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 405.750808][ T5141] ftdi_sio 1-1:0.0: device disconnected [ 405.978502][ T9778] syz.3.1229 (9778) used obsolete PPPIOCDETACH ioctl [ 406.049207][ T29] audit: type=1326 audit(1720541410.323:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9780 comm="syz.4.1230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa840775bd9 code=0x0 [ 406.673190][ T9801] No control pipe specified [ 407.018868][ T9806] misc userio: No port type given on /dev/userio [ 407.711046][ T9822] overlayfs: failed to resolve './file0': -2 [ 408.023060][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1250'. [ 408.940150][ T29] audit: type=1326 audit(1720541413.213:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9843 comm="syz.4.1252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa840775bd9 code=0x0 [ 409.212459][ T9853] netlink: 'syz.2.1254': attribute type 6 has an invalid length. [ 409.223793][ T9853] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1254'. [ 409.285363][ T5141] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 409.489145][ T5141] usb 1-1: Using ep0 maxpacket: 8 [ 409.497803][ T5141] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 409.520999][ T5141] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 409.552325][ T5141] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 409.577986][ T5141] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 409.593199][ T5141] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.606698][ T5141] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 409.618165][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.998331][ T5141] usb 1-1: GET_CAPABILITIES returned 0 [ 410.003866][ T5141] usbtmc 1-1:16.0: can't read capabilities [ 411.478663][ T9878] overlayfs: failed to resolve './file0': -2 [ 413.492039][ T9893] overlayfs: failed to resolve './file0': -2 [ 414.274240][ T8] usb 1-1: USB disconnect, device number 28 [ 414.383476][ T9907] FAULT_INJECTION: forcing a failure. [ 414.383476][ T9907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.408736][ T29] audit: type=1326 audit(1720541418.683:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.4.1269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa840775bd9 code=0x0 [ 414.425473][ T9907] CPU: 0 PID: 9907 Comm: syz.0.1272 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 414.439729][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 414.449904][ T9907] Call Trace: [ 414.453195][ T9907] [ 414.456134][ T9907] dump_stack_lvl+0x241/0x360 [ 414.460854][ T9907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.466099][ T9907] ? __pfx__printk+0x10/0x10 [ 414.470702][ T9907] ? smk_access+0x4ab/0x4e0 [ 414.475246][ T9907] ? __pfx_lock_release+0x10/0x10 [ 414.480315][ T9907] should_fail_ex+0x3b0/0x4e0 [ 414.485022][ T9907] _copy_from_user+0x2f/0xe0 [ 414.489636][ T9907] vhost_vsock_dev_ioctl+0x18f/0xfa0 [ 414.494942][ T9907] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 414.500766][ T9907] ? __fget_files+0x3f6/0x470 [ 414.505474][ T9907] ? __fget_files+0x29/0x470 [ 414.510098][ T9907] ? bpf_lsm_file_ioctl+0x9/0x10 [ 414.515062][ T9907] ? security_file_ioctl+0x87/0xb0 [ 414.520284][ T9907] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 414.526131][ T9907] __se_sys_ioctl+0xfc/0x170 [ 414.530790][ T9907] do_syscall_64+0xf3/0x230 [ 414.535325][ T9907] ? clear_bhb_loop+0x35/0x90 [ 414.540029][ T9907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.545938][ T9907] RIP: 0033:0x7ffb21b75bd9 [ 414.550365][ T9907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.569979][ T9907] RSP: 002b:00007ffb22a1b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.578405][ T9907] RAX: ffffffffffffffda RBX: 00007ffb21d03f60 RCX: 00007ffb21b75bd9 [ 414.586395][ T9907] RDX: 0000000020000000 RSI: 000000004004af61 RDI: 0000000000000003 [ 414.594376][ T9907] RBP: 00007ffb22a1b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 414.602355][ T9907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.610336][ T9907] R13: 000000000000000b R14: 00007ffb21d03f60 R15: 00007ffd7a1fb5f8 [ 414.618440][ T9907] [ 414.795629][ T932] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 414.915416][ T5090] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 414.985392][ T932] usb 3-1: Using ep0 maxpacket: 32 [ 414.993676][ T932] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 415.003631][ T932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.014234][ T932] usb 3-1: config 0 descriptor?? [ 415.023847][ T932] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 415.040531][ T45] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 415.095537][ T5090] usb 4-1: Using ep0 maxpacket: 8 [ 415.106799][ T5090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 415.116916][ T5090] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 415.127186][ T5090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.147222][ T5090] usb 4-1: config 0 descriptor?? [ 415.154811][ T5090] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 415.183283][ T5090] usb 4-1: Detected SIO [ 415.187906][ T5090] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 415.202245][ T5090] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 415.258137][ T45] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 415.274145][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.302444][ T45] usb 1-1: config 0 descriptor?? [ 415.509788][ T9910] random: crng reseeded on system resumption [ 415.882992][ T45] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 415.903527][ T9916] 9pnet_fd: Insufficient options for proto=fd [ 415.927004][ T45] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 415.935897][ T45] [drm:udl_init] *ERROR* Selecting channel failed [ 416.712369][ T45] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 416.797255][ T45] [drm] Initialized udl on minor 2 [ 416.904592][ T45] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 417.058651][ T5136] usb 4-1: USB disconnect, device number 23 [ 417.086556][ T45] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 417.104814][ T5136] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 417.119159][ T5141] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 417.151711][ T5136] ftdi_sio 4-1:0.0: device disconnected [ 417.167975][ T45] usb 1-1: USB disconnect, device number 29 [ 417.196011][ T5141] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 417.241038][ T932] gspca_nw80x: reg_w err -71 [ 417.261420][ T932] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 417.310506][ T932] usb 3-1: USB disconnect, device number 25 [ 417.857001][ T9939] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1281'. [ 417.884875][ T5091] Bluetooth: hci3: unexpected event 0x06 length: 23 > 3 [ 417.907410][ T9939] FAULT_INJECTION: forcing a failure. [ 417.907410][ T9939] name failslab, interval 1, probability 0, space 0, times 0 [ 417.962282][ T9939] CPU: 1 PID: 9939 Comm: syz.0.1281 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 417.972435][ T9939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 417.982624][ T9939] Call Trace: [ 417.985956][ T9939] [ 417.988929][ T9939] dump_stack_lvl+0x241/0x360 [ 417.993662][ T9939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.998915][ T9939] ? __pfx__printk+0x10/0x10 [ 418.003576][ T9939] should_fail_ex+0x3b0/0x4e0 [ 418.008352][ T9939] ? __alloc_skb+0x1c3/0x440 [ 418.013003][ T9939] should_failslab+0x9/0x20 [ 418.017034][ T5096] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 418.017531][ T9939] kmem_cache_alloc_node_noprof+0x71/0x320 [ 418.028280][ T5096] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 418.030492][ T9939] __alloc_skb+0x1c3/0x440 [ 418.041640][ T5096] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 418.041890][ T9939] ? __pfx___alloc_skb+0x10/0x10 [ 418.050475][ T5096] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 418.053759][ T9939] xfrm_send_policy_notify+0x5b7/0x2360 [ 418.065581][ T5096] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 418.066244][ T9939] ? __local_bh_enable_ip+0x168/0x200 [ 418.073921][ T5096] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 418.078531][ T9939] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 418.078575][ T9939] ? xfrm_policy_bysel_ctx+0x2bb/0xb30 [ 418.078602][ T9939] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 418.102918][ T9939] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 418.108974][ T9939] km_policy_notify+0x126/0x210 [ 418.113857][ T9939] ? km_policy_notify+0x2e/0x210 [ 418.118816][ T9939] km_policy_expired+0xff/0x1a0 [ 418.123686][ T9939] ? __pfx_km_policy_expired+0x10/0x10 [ 418.129170][ T9939] xfrm_add_pol_expire+0x587/0xb60 [ 418.134321][ T9939] ? cap_capable+0x1b4/0x250 [ 418.138920][ T9939] ? __pfx_xfrm_add_pol_expire+0x10/0x10 [ 418.144566][ T9939] ? safesetid_security_capable+0xb2/0x1d0 [ 418.150591][ T9939] ? __nla_parse+0x40/0x60 [ 418.155044][ T9939] xfrm_user_rcv_msg+0x75d/0xa80 [ 418.160002][ T9939] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 418.165499][ T9939] ? bpf_trace_run2+0x1fc/0x540 [ 418.170370][ T9939] ? bpf_trace_run2+0x36e/0x540 [ 418.175260][ T9939] ? __pfx_bpf_trace_run2+0x10/0x10 [ 418.180493][ T9939] netlink_rcv_skb+0x1e3/0x430 [ 418.185282][ T9939] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 418.190758][ T9939] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.196086][ T9939] xfrm_netlink_rcv+0x79/0x90 [ 418.200775][ T9939] netlink_unicast+0x7ea/0x980 [ 418.205564][ T9939] ? __pfx_netlink_unicast+0x10/0x10 [ 418.210905][ T9939] ? __virt_addr_valid+0x183/0x520 [ 418.216061][ T9939] ? __check_object_size+0x49c/0x900 [ 418.221381][ T9939] ? bpf_lsm_netlink_send+0x9/0x10 [ 418.226522][ T9939] netlink_sendmsg+0x8db/0xcb0 [ 418.231315][ T9939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.236710][ T9939] ? __import_iovec+0x536/0x820 [ 418.241576][ T9939] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 418.246870][ T9939] ? security_socket_sendmsg+0x87/0xb0 [ 418.252353][ T9939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.257666][ T9939] __sock_sendmsg+0x221/0x270 [ 418.262357][ T9939] ____sys_sendmsg+0x525/0x7d0 [ 418.267143][ T9939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.272471][ T9939] __sys_sendmsg+0x2b0/0x3a0 [ 418.277080][ T9939] ? __pfx___sys_sendmsg+0x10/0x10 [ 418.282209][ T9939] ? vfs_write+0x7c4/0xc90 [ 418.286710][ T9939] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.293141][ T9939] ? do_syscall_64+0x100/0x230 [ 418.297926][ T9939] ? do_syscall_64+0xb6/0x230 [ 418.302627][ T9939] do_syscall_64+0xf3/0x230 [ 418.307150][ T9939] ? clear_bhb_loop+0x35/0x90 [ 418.311868][ T9939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.317782][ T9939] RIP: 0033:0x7ffb21b75bd9 [ 418.322210][ T9939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.341852][ T9939] RSP: 002b:00007ffb22a1b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.350300][ T9939] RAX: ffffffffffffffda RBX: 00007ffb21d03f60 RCX: 00007ffb21b75bd9 [ 418.358307][ T9939] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 418.366314][ T9939] RBP: 00007ffb22a1b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 418.374300][ T9939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.382287][ T9939] R13: 000000000000000b R14: 00007ffb21d03f60 R15: 00007ffd7a1fb5f8 [ 418.390285][ T9939] [ 418.855328][ T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 418.859020][ T45] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 418.937701][ T9944] chnl_net:caif_netlink_parms(): no params data found [ 419.180090][ T45] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 419.189935][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.195511][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 419.201871][ T45] usb 3-1: config 0 descriptor?? [ 419.217564][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 419.228323][ T8] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 419.242166][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.256519][ T8] usb 4-1: config 0 descriptor?? [ 419.294426][ T8] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 419.322487][ T8] usb 4-1: Detected SIO [ 419.340731][ T8] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 419.374315][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.386729][ T8] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 419.408538][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.476901][ T9944] bridge_slave_0: entered allmulticast mode [ 419.484471][ T9944] bridge_slave_0: entered promiscuous mode [ 419.557420][ T45] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 419.579853][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.587773][ T45] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 419.610430][ T45] [drm:udl_init] *ERROR* Selecting channel failed [ 419.647339][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.647473][ T45] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 419.647500][ T45] [drm] Initialized udl on minor 2 [ 419.647578][ T9944] bridge_slave_1: entered allmulticast mode [ 419.649226][ T9944] bridge_slave_1: entered promiscuous mode [ 419.652028][ T45] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 419.654081][ T45] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 419.672719][ T5136] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 419.672938][ T5136] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 419.675956][ T45] usb 3-1: USB disconnect, device number 26 [ 419.805928][ T9953] random: crng reseeded on system resumption [ 421.172472][ T5091] Bluetooth: hci6: command tx timeout [ 421.194900][ T8] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 421.234752][ T5136] usb 4-1: USB disconnect, device number 24 [ 421.249988][ T5136] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 421.251150][ T5136] ftdi_sio 4-1:0.0: device disconnected [ 421.395630][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 421.402617][ T9950] tty tty24: ldisc open failed (-12), clearing slot 23 [ 421.457356][ T8] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 421.468912][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.502813][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.546944][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.565197][ T8] usb 1-1: config 0 descriptor?? [ 421.584140][ T8] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 421.690727][ T9944] team0: Port device team_slave_0 added [ 421.722049][ T9944] team0: Port device team_slave_1 added [ 421.913881][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.934069][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.015530][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.055727][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.062750][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.097048][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.272983][ T9944] hsr_slave_0: entered promiscuous mode [ 422.312645][ T9944] hsr_slave_1: entered promiscuous mode [ 422.329483][ T9944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.354884][ T9944] Cannot create hsr debugfs directory [ 422.652465][ T9995] misc userio: Invalid payload size [ 422.821213][ T8] gspca_nw80x: reg_w err -71 [ 422.827649][ T8] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 422.897636][ T8] usb 1-1: USB disconnect, device number 30 [ 422.919576][ T9944] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.108781][ T9944] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.241201][ T5091] Bluetooth: hci6: command tx timeout [ 423.274639][ T9944] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.379472][ T9944] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.796242][ T9944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 423.802883][T10014] No control pipe specified [ 423.837890][ T9944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 423.880127][ T9944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 423.914175][ T9944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 424.035428][ T45] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 424.250586][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 424.272426][ T45] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 424.294086][ T45] usb 4-1: config 0 has no interface number 0 [ 424.317533][ T45] usb 4-1: too many endpoints for config 0 interface 32 altsetting 32: 32, using maximum allowed: 30 [ 424.320064][ T9944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.365723][ T45] usb 4-1: config 0 interface 32 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 424.424908][ T45] usb 4-1: config 0 interface 32 has no altsetting 0 [ 424.436723][ T45] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 424.447994][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.467410][T10017] netlink: 'syz.4.1306': attribute type 29 has an invalid length. [ 424.473792][ T9944] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.497188][ T45] usb 4-1: config 0 descriptor?? [ 424.539216][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.546504][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.586998][T10017] netlink: 'syz.4.1306': attribute type 29 has an invalid length. [ 424.621941][T10018] netlink: 'syz.4.1306': attribute type 29 has an invalid length. [ 424.700470][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.707829][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.771426][ T5091] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 424.829662][ T5091] Bluetooth: Unexpected start frame (len 18) [ 424.961357][T10012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.993346][T10012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.067021][ T45] usb 4-1: string descriptor 0 read error: -71 [ 425.070995][ T9944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.090347][ T45] asix 4-1:0.32 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 425.134199][ T45] asix 4-1:0.32: probe with driver asix failed with error -71 [ 425.218007][ T45] usb 4-1: USB disconnect, device number 25 [ 425.316034][ T5091] Bluetooth: hci6: command tx timeout [ 425.987337][T10038] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.343703][ T9944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.396270][ T5091] Bluetooth: hci6: command tx timeout [ 427.588938][T10061] No control pipe specified [ 427.641029][ T5091] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 427.788764][ T9944] veth0_vlan: entered promiscuous mode [ 428.363441][ T9944] veth1_vlan: entered promiscuous mode [ 428.552321][ T9944] veth0_macvtap: entered promiscuous mode [ 428.563367][ T5091] Bluetooth: Unexpected start frame (len 18) [ 428.691455][ T9944] veth1_macvtap: entered promiscuous mode [ 428.826099][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.914909][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.001640][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.028755][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.040143][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.052559][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.062747][ T932] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 429.074183][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.100173][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.110819][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.136019][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.182669][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.235666][ T932] usb 3-1: device descriptor read/64, error -71 [ 429.242224][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.321939][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.525442][ T932] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 429.557847][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.609226][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.624433][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.636342][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.656147][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.682383][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.696919][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.708000][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.719108][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.735419][ T932] usb 3-1: device descriptor read/64, error -71 [ 429.756178][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.786730][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.822986][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.845679][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.860685][ T9944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.876698][ T932] usb usb3-port1: attempt power cycle [ 429.892953][ T9944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.904411][ T9944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.925830][ T9944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.116313][ T2421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.124213][ T2421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.167277][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.178139][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.195906][ T57] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 430.263885][ T5138] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 430.409023][ T57] usb 4-1: Using ep0 maxpacket: 8 [ 430.426989][ T57] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 430.435143][ T57] usb 4-1: config 0 has no interface number 0 [ 430.454254][ T57] usb 4-1: too many endpoints for config 0 interface 32 altsetting 32: 32, using maximum allowed: 30 [ 430.455186][ T932] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 430.488929][ T5138] usb 1-1: Using ep0 maxpacket: 16 [ 430.503981][ T57] usb 4-1: config 0 interface 32 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 430.518160][ T932] usb 3-1: device descriptor read/8, error -71 [ 430.527635][ T57] usb 4-1: config 0 interface 32 has no altsetting 0 [ 430.534449][ T57] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 430.543836][ T5138] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.819086][ T932] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 430.928506][ T932] usb 3-1: device descriptor read/8, error -71 [ 431.067795][ T932] usb usb3-port1: unable to enumerate USB device [ 431.405107][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.414133][ T5138] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 431.426390][ T5138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.436385][ T5138] usb 1-1: Product: syz [ 431.440603][ T5138] usb 1-1: Manufacturer: syz [ 431.445766][ T57] usb 4-1: config 0 descriptor?? [ 431.450981][ T5138] usb 1-1: SerialNumber: syz [ 431.464957][ T5138] usb 1-1: config 0 descriptor?? [ 431.484127][ T5138] gspca_main: etoms-2.14.0 probing 102c:6151 [ 431.619687][ T5091] Bluetooth: hci5: unexpected event 0x06 length: 23 > 3 [ 431.761582][ T5138] usb 1-1: USB disconnect, device number 31 [ 432.221922][T10079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.403984][T10079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.006745][ T57] usb 4-1: string descriptor 0 read error: -71 [ 433.071550][ T57] asix 4-1:0.32 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 433.093804][ T57] asix 4-1:0.32: probe with driver asix failed with error -71 [ 433.114592][ T5091] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 433.141589][ T57] usb 4-1: USB disconnect, device number 26 [ 433.381283][T10110] overlayfs: failed to resolve './file1': -2 [ 436.195667][ T5091] Bluetooth: hci6: unexpected event 0x06 length: 23 > 3 [ 436.315491][ T29] audit: type=1326 audit(1720541440.583:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10126 comm="syz.3.1335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc26e175bd9 code=0x0 [ 436.705769][ T5138] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 437.432124][ T5138] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 437.453106][ T5138] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 437.485754][ T5138] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.528678][ T5138] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 437.558751][ T5138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.590737][ T5138] usb 4-1: Product: syz [ 437.611484][ T5138] usb 4-1: Manufacturer: syz [ 437.760441][ T5138] usb 4-1: SerialNumber: syz [ 438.057397][ T5138] hub 4-1:1.0: bad descriptor, ignoring hub [ 438.151748][ T5138] hub 4-1:1.0: probe with driver hub failed with error -5 [ 438.452147][ T5138] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 439.397272][ T5091] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 439.680107][T10172] FAULT_INJECTION: forcing a failure. [ 439.680107][T10172] name failslab, interval 1, probability 0, space 0, times 0 [ 439.700667][T10172] CPU: 0 PID: 10172 Comm: syz.4.1345 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 439.710861][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 439.720935][T10172] Call Trace: [ 439.724226][T10172] [ 439.727164][T10172] dump_stack_lvl+0x241/0x360 [ 439.731993][T10172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.737316][T10172] ? __pfx__printk+0x10/0x10 [ 439.741927][T10172] ? netlink_insert+0x10b7/0x14b0 [ 439.746971][T10172] should_fail_ex+0x3b0/0x4e0 [ 439.751778][T10172] ? __alloc_skb+0x1c3/0x440 [ 439.756390][T10172] should_failslab+0x9/0x20 [ 439.760929][T10172] kmem_cache_alloc_node_noprof+0x71/0x320 [ 439.766752][T10172] __alloc_skb+0x1c3/0x440 [ 439.771191][T10172] ? __pfx___alloc_skb+0x10/0x10 [ 439.776165][T10172] ? netlink_autobind+0xd6/0x2f0 [ 439.781144][T10172] ? netlink_autobind+0x2b0/0x2f0 [ 439.786190][T10172] netlink_sendmsg+0x631/0xcb0 [ 439.790981][T10172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.796284][T10172] ? __import_iovec+0x536/0x820 [ 439.801150][T10172] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 439.806459][T10172] ? security_socket_sendmsg+0x87/0xb0 [ 439.811966][T10172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.817278][T10172] __sock_sendmsg+0x221/0x270 [ 439.821989][T10172] ____sys_sendmsg+0x525/0x7d0 [ 439.826797][T10172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.832107][T10172] __sys_sendmsg+0x2b0/0x3a0 [ 439.836712][T10172] ? __pfx___sys_sendmsg+0x10/0x10 [ 439.841831][T10172] ? vfs_write+0x7c4/0xc90 [ 439.846318][T10172] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 439.852655][T10172] ? do_syscall_64+0x100/0x230 [ 439.857446][T10172] ? do_syscall_64+0xb6/0x230 [ 439.862150][T10172] do_syscall_64+0xf3/0x230 [ 439.866697][T10172] ? clear_bhb_loop+0x35/0x90 [ 439.871420][T10172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.877457][T10172] RIP: 0033:0x7fa840775bd9 [ 439.881904][T10172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.901534][T10172] RSP: 002b:00007fa84150c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.909997][T10172] RAX: ffffffffffffffda RBX: 00007fa840903f60 RCX: 00007fa840775bd9 [ 439.917976][T10172] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 439.925979][T10172] RBP: 00007fa84150c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 439.933978][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.941959][T10172] R13: 000000000000000b R14: 00007fa840903f60 R15: 00007ffe205e5978 [ 439.949951][T10172] [ 440.154153][T10171] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 440.261435][ T5091] Bluetooth: hci4: unexpected event 0x06 length: 23 > 3 [ 440.362384][ T5091] Bluetooth: Unexpected start frame (len 18) [ 440.446370][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.452918][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.463609][ T5221] usb 4-1: USB disconnect, device number 27 [ 440.472454][ T5221] usblp0: removed [ 443.435499][ T57] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 443.655367][ T57] usb 2-1: Using ep0 maxpacket: 8 [ 443.703422][ T57] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 443.755048][ T57] usb 2-1: config 179 has no interface number 0 [ 443.764920][ T57] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 443.818449][ T57] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 443.833117][ T57] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 443.846330][ T57] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 443.863520][ T57] usb 2-1: config 179 interface 65 has no altsetting 0 [ 443.874083][ T57] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 443.927226][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.988312][T10204] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 444.151777][ T57] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input17 [ 444.315865][ T4519] input input17: unable to receive magic message: -110 [ 444.414355][T10204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.436841][ T4519] input input17: unable to receive magic message: -32 [ 444.548072][ T4519] input input17: unable to receive magic message: -32 [ 444.562851][T10204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.574593][ T4519] input input17: unable to receive magic message: -32 [ 445.681364][ T5091] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 445.734542][ T4519] input input17: unable to receive magic message: -32 [ 445.838481][ T5091] Bluetooth: hci4: unexpected event 0x06 length: 23 > 3 [ 445.862921][ T4519] input input17: unable to receive magic message: -32 [ 445.888852][ C1] ------------[ cut here ]------------ [ 445.895009][ C1] WARNING: CPU: 1 PID: 10230 at kernel/kcov.c:871 kcov_remote_start+0x5a2/0x7e0 [ 445.904118][ C1] Modules linked in: [ 445.908023][ C1] CPU: 1 PID: 10230 Comm: syz.4.1360 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 445.918184][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 445.928248][ C1] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 445.933980][ C1] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 56 1e e7 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 445.953597][ C1] RSP: 0018:ffffc90000a18250 EFLAGS: 00010002 [ 445.959677][ C1] RAX: 0000000000010101 RBX: ffff88802d490000 RCX: 0000000000000002 [ 445.967662][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1f15c0 [ 445.975641][ C1] RBP: 0100000000000002 R08: ffffffff92f715f7 R09: 1ffffffff25ee2be [ 445.983724][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2bf R12: ffffffff8196306e [ 445.991743][ C1] R13: ffff88801a2a4200 R14: 0000000000000006 R15: ffff8880b952d4c8 [ 445.999742][ C1] FS: 00007fa84150c6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 446.008704][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.015316][ C1] CR2: 00005642e317d120 CR3: 000000006d0a4000 CR4: 00000000003506f0 [ 446.023336][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 446.031345][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 446.039347][ C1] Call Trace: [ 446.042629][ C1] [ 446.045483][ C1] ? __warn+0x163/0x4e0 [ 446.049667][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 446.054787][ C1] ? report_bug+0x2b3/0x500 [ 446.059302][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 446.064449][ C1] ? handle_bug+0x3e/0x70 [ 446.068901][ C1] ? exc_invalid_op+0x1a/0x50 [ 446.073586][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 446.078642][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 446.083710][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 446.088833][ C1] ? usb_unanchor_urb+0x7d/0xc0 [ 446.093715][ C1] __usb_hcd_giveback_urb+0x405/0x6e0 [ 446.099105][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 446.105010][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 446.110227][ C1] dummy_timer+0x830/0x45d0 [ 446.114747][ C1] ? __pfx_lock_release+0x10/0x10 [ 446.119794][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 446.126139][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 446.131199][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 446.136444][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 446.141392][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 446.146421][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 446.151646][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 446.157383][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 446.163566][ C1] hrtimer_interrupt+0x396/0x990 [ 446.168579][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 446.174592][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 446.180246][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 446.186248][ C1] RIP: 0010:kcov_remote_start+0x2e/0x7e0 [ 446.192157][ C1] Code: 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 65 48 8b 1c 25 80 d4 03 00 48 b8 00 00 00 00 ff ff ff 00 48 85 c7 74 17 90 0f 0b 90 <48> 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 89 fd [ 446.211790][ C1] RSP: 0018:ffffc90000a189f0 EFLAGS: 00000206 [ 446.217882][ C1] RAX: 15cbd1c4f05ce900 RBX: ffff88802d490000 RCX: ffffffff8172d97a [ 446.225887][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c1f15c0 [ 446.233909][ C1] RBP: ffff8880b952d4c8 R08: ffffffff92f7163f R09: 1ffffffff25ee2c7 [ 446.241911][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2c8 R12: 0000000000040000 [ 446.249909][ C1] R13: ffff88805991c780 R14: 0000000000000206 R15: ffff88801cbccf00 [ 446.257900][ C1] ? mark_lock+0x9a/0x350 [ 446.262532][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 446.267595][ C1] ieee80211_rx_list+0x797/0x3780 [ 446.272689][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 446.277770][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 446.283260][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 446.288339][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 446.294421][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 446.300774][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 446.305827][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 446.310793][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 446.317187][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 446.322678][ C1] ? skb_dequeue+0x113/0x150 [ 446.327290][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 446.333339][ C1] tasklet_action_common+0x321/0x4d0 [ 446.338692][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 446.344515][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 446.350862][ C1] ? workqueue_softirq_action+0xca/0x140 [ 446.356538][ C1] handle_softirqs+0x2c4/0x970 [ 446.361325][ C1] ? do_softirq+0x11b/0x1e0 [ 446.365865][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 446.371185][ C1] do_softirq+0x11b/0x1e0 [ 446.375592][ C1] [ 446.378549][ C1] [ 446.381489][ C1] ? __pfx_do_softirq+0x10/0x10 [ 446.386366][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 446.392012][ C1] ? rcu_is_watching+0x15/0xb0 [ 446.396784][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 446.402009][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 446.407322][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 446.412461][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 446.418198][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 446.423435][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 446.428604][ C1] __dev_queue_xmit+0x16c9/0x3d30 [ 446.433678][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 446.438829][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 446.444230][ C1] ? mark_lock+0x9a/0x350 [ 446.448585][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 446.454639][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 446.460995][ C1] ? ip_finish_output2+0xa14/0x1380 [ 446.466210][ C1] ? ip_finish_output2+0x45f/0x1380 [ 446.471417][ C1] ip_finish_output2+0xd41/0x1380 [ 446.476476][ C1] ? ip_finish_output2+0x45f/0x1380 [ 446.481712][ C1] ? __pfx_ip_finish_output+0x10/0x10 [ 446.487094][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 446.492576][ C1] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 446.497447][ C1] ? __ip_finish_output+0x347/0x400 [ 446.502654][ C1] __ip_queue_xmit+0x118c/0x1b70 [ 446.507633][ C1] ? __ip_queue_xmit+0x5f/0x1b70 [ 446.512587][ C1] ? xfrm_lookup_route+0xff/0x1c0 [ 446.517626][ C1] l2tp_ip_sendmsg+0x63b/0x1670 [ 446.522492][ C1] ? l2tp_ip_sendmsg+0x3fe/0x1670 [ 446.527547][ C1] __sock_sendmsg+0x1a6/0x270 [ 446.532252][ C1] ____sys_sendmsg+0x525/0x7d0 [ 446.537122][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.542427][ C1] __sys_sendmmsg+0x3b2/0x740 [ 446.547212][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 446.552466][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 446.557515][ C1] ? futex_hash+0x1e/0x1f0 [ 446.561961][ C1] ? futex_wait+0x285/0x360 [ 446.566567][ C1] ? __pfx_futex_wait+0x10/0x10 [ 446.571435][ C1] ? do_sock_setsockopt+0x3e2/0x720 [ 446.576665][ C1] ? do_futex+0x33b/0x560 [ 446.581129][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 446.587133][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 446.593464][ C1] ? do_syscall_64+0x100/0x230 [ 446.598244][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 446.603107][ C1] do_syscall_64+0xf3/0x230 [ 446.607630][ C1] ? clear_bhb_loop+0x35/0x90 [ 446.612338][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.618277][ C1] RIP: 0033:0x7fa840775bd9 [ 446.622712][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.642425][ C1] RSP: 002b:00007fa84150c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 446.651053][ C1] RAX: ffffffffffffffda RBX: 00007fa840903f60 RCX: 00007fa840775bd9 [ 446.659052][ C1] RDX: 0000000000000004 RSI: 0000000020001700 RDI: 0000000000000007 [ 446.667028][ C1] RBP: 00007fa8407e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 446.675019][ C1] R10: 0000000004040844 R11: 0000000000000246 R12: 0000000000000000 [ 446.683025][ C1] R13: 000000000000000b R14: 00007fa840903f60 R15: 00007ffe205e5978 [ 446.691041][ C1] [ 446.694092][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 446.701379][ C1] CPU: 1 PID: 10230 Comm: syz.4.1360 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 446.711537][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 446.721621][ C1] Call Trace: [ 446.724900][ C1] [ 446.727749][ C1] dump_stack_lvl+0x241/0x360 [ 446.732448][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.737661][ C1] ? __pfx__printk+0x10/0x10 [ 446.742255][ C1] ? _printk+0xd5/0x120 [ 446.746429][ C1] ? vscnprintf+0x5d/0x90 [ 446.750760][ C1] panic+0x349/0x860 [ 446.754666][ C1] ? __warn+0x172/0x4e0 [ 446.758839][ C1] ? __pfx_panic+0x10/0x10 [ 446.763277][ C1] ? show_trace_log_lvl+0x4e6/0x520 [ 446.768504][ C1] __warn+0x346/0x4e0 [ 446.772491][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 446.777694][ C1] report_bug+0x2b3/0x500 [ 446.782041][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 446.787260][ C1] handle_bug+0x3e/0x70 [ 446.791418][ C1] exc_invalid_op+0x1a/0x50 [ 446.795922][ C1] asm_exc_invalid_op+0x1a/0x20 [ 446.800805][ C1] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 446.806530][ C1] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 56 1e e7 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 446.826253][ C1] RSP: 0018:ffffc90000a18250 EFLAGS: 00010002 [ 446.832325][ C1] RAX: 0000000000010101 RBX: ffff88802d490000 RCX: 0000000000000002 [ 446.840302][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1f15c0 [ 446.848317][ C1] RBP: 0100000000000002 R08: ffffffff92f715f7 R09: 1ffffffff25ee2be [ 446.856306][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2bf R12: ffffffff8196306e [ 446.864289][ C1] R13: ffff88801a2a4200 R14: 0000000000000006 R15: ffff8880b952d4c8 [ 446.872279][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 446.877372][ C1] ? usb_unanchor_urb+0x7d/0xc0 [ 446.882284][ C1] __usb_hcd_giveback_urb+0x405/0x6e0 [ 446.887710][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 446.893627][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 446.898850][ C1] dummy_timer+0x830/0x45d0 [ 446.903370][ C1] ? __pfx_lock_release+0x10/0x10 [ 446.908429][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 446.914794][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 446.919850][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 446.925159][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 446.930143][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 446.935084][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 446.940330][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 446.946170][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 446.952255][ C1] hrtimer_interrupt+0x396/0x990 [ 446.957225][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 446.963256][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 446.968938][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 446.974936][ C1] RIP: 0010:kcov_remote_start+0x2e/0x7e0 [ 446.980592][ C1] Code: 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 65 48 8b 1c 25 80 d4 03 00 48 b8 00 00 00 00 ff ff ff 00 48 85 c7 74 17 90 0f 0b 90 <48> 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 89 fd [ 447.000217][ C1] RSP: 0018:ffffc90000a189f0 EFLAGS: 00000206 [ 447.006336][ C1] RAX: 15cbd1c4f05ce900 RBX: ffff88802d490000 RCX: ffffffff8172d97a [ 447.014408][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c1f15c0 [ 447.022565][ C1] RBP: ffff8880b952d4c8 R08: ffffffff92f7163f R09: 1ffffffff25ee2c7 [ 447.030544][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2c8 R12: 0000000000040000 [ 447.038532][ C1] R13: ffff88805991c780 R14: 0000000000000206 R15: ffff88801cbccf00 [ 447.046530][ C1] ? mark_lock+0x9a/0x350 [ 447.050875][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 447.056000][ C1] ieee80211_rx_list+0x797/0x3780 [ 447.061038][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 447.066167][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 447.071646][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 447.076686][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 447.082689][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 447.089081][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 447.094180][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 447.099253][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 447.105617][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 447.111144][ C1] ? skb_dequeue+0x113/0x150 [ 447.115757][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 447.121812][ C1] tasklet_action_common+0x321/0x4d0 [ 447.127115][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 447.132931][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 447.139272][ C1] ? workqueue_softirq_action+0xca/0x140 [ 447.144968][ C1] handle_softirqs+0x2c4/0x970 [ 447.149755][ C1] ? do_softirq+0x11b/0x1e0 [ 447.154291][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 447.159604][ C1] do_softirq+0x11b/0x1e0 [ 447.163940][ C1] [ 447.166895][ C1] [ 447.169858][ C1] ? __pfx_do_softirq+0x10/0x10 [ 447.174713][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 447.180360][ C1] ? rcu_is_watching+0x15/0xb0 [ 447.185230][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 447.190470][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 447.195802][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 447.200942][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 447.206670][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 447.211885][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 447.217008][ C1] __dev_queue_xmit+0x16c9/0x3d30 [ 447.222054][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 447.227180][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 447.232564][ C1] ? mark_lock+0x9a/0x350 [ 447.236903][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 447.242902][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 447.249239][ C1] ? ip_finish_output2+0xa14/0x1380 [ 447.254444][ C1] ? ip_finish_output2+0x45f/0x1380 [ 447.259648][ C1] ip_finish_output2+0xd41/0x1380 [ 447.264676][ C1] ? ip_finish_output2+0x45f/0x1380 [ 447.269900][ C1] ? __pfx_ip_finish_output+0x10/0x10 [ 447.275292][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 447.280800][ C1] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 447.285664][ C1] ? __ip_finish_output+0x347/0x400 [ 447.290887][ C1] __ip_queue_xmit+0x118c/0x1b70 [ 447.295839][ C1] ? __ip_queue_xmit+0x5f/0x1b70 [ 447.300779][ C1] ? xfrm_lookup_route+0xff/0x1c0 [ 447.305810][ C1] l2tp_ip_sendmsg+0x63b/0x1670 [ 447.310678][ C1] ? l2tp_ip_sendmsg+0x3fe/0x1670 [ 447.315714][ C1] __sock_sendmsg+0x1a6/0x270 [ 447.320399][ C1] ____sys_sendmsg+0x525/0x7d0 [ 447.325179][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.330502][ C1] __sys_sendmmsg+0x3b2/0x740 [ 447.335209][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 447.340476][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 447.345610][ C1] ? futex_hash+0x1e/0x1f0 [ 447.350040][ C1] ? futex_wait+0x285/0x360 [ 447.354572][ C1] ? __pfx_futex_wait+0x10/0x10 [ 447.359468][ C1] ? do_sock_setsockopt+0x3e2/0x720 [ 447.364681][ C1] ? do_futex+0x33b/0x560 [ 447.369062][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 447.375084][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 447.381520][ C1] ? do_syscall_64+0x100/0x230 [ 447.386307][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 447.391173][ C1] do_syscall_64+0xf3/0x230 [ 447.395704][ C1] ? clear_bhb_loop+0x35/0x90 [ 447.400400][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.406340][ C1] RIP: 0033:0x7fa840775bd9 [ 447.410776][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.430410][ C1] RSP: 002b:00007fa84150c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 447.438942][ C1] RAX: ffffffffffffffda RBX: 00007fa840903f60 RCX: 00007fa840775bd9 [ 447.446943][ C1] RDX: 0000000000000004 RSI: 0000000020001700 RDI: 0000000000000007 [ 447.454951][ C1] RBP: 00007fa8407e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 447.462938][ C1] R10: 0000000004040844 R11: 0000000000000246 R12: 0000000000000000 [ 447.470922][ C1] R13: 000000000000000b R14: 00007fa840903f60 R15: 00007ffe205e5978 [ 447.479010][ C1] [ 447.482349][ C1] Kernel Offset: disabled [ 447.486808][ C1] Rebooting in 86400 seconds..