last executing test programs: 1m2.655688756s ago: executing program 1 (id=1515): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r5, r1, 0x26}, 0x10) 1m2.35983294s ago: executing program 1 (id=1517): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2000000, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) 1m2.287388248s ago: executing program 1 (id=1518): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002a00)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0], 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) symlinkat(&(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='cramfs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000099c0)=[{{&(0x7f0000002480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002980)=[{&(0x7f0000002500)="0dba3b5f474762c926e62d0bd7e813855ad970570aa1db49cac0b1c0014ccded60b1470c1b0f5775141a1d0e2e02c48356fce6c43f114c2d8c1e789cb52697a7a2d91e15506187b0b511fb208570b2be5f7bb98b2083e8df80ad6e1eb32dda498483436c706de667103d2c76c39ad17166c194e3ce7f1e75f5b35191d42efb0540c25a0484c45d1aa8fff8a453feb1a6c85a508adbcfc28c053e6baf2a08b9a7d056ba8b09cbd8fca043befb8dc5b9d02ec53c5c3dab69476f678e6880ea4da59e514c3a50bef0c0221cb622b290c03dbdd6820163f8f30a8cb7c729d4072fbe650e629ee975040a85c4180f742b6a7942e6b87b3bf864", 0xf7}, {&(0x7f0000002600)="39c40e9460e10c9115089fee7e5c3ddf10c2d1cc1dc201b307f10b16432a179b92c29dbb5e2395eccc9bf403f09e6aa7c7673d3a5fba4295b5a915bd5b9944524ec6307f1b25b437903813a3b7c7a9f473358ea0345009221645d824c762bd887b7127ac5c6c7b59920b1f887956ee89cd", 0x71}, {&(0x7f0000002680)="7e2b15fd3689f8f73888153fc389e68982cc116eb1b2dcaa0a099a4063928ad2e91030e9447a0fe42dc3b43f93c41b02035079aeedf2fe5fdb5f125189711432277da75d174b18e86166667182c6a6f395453b8ba2d1897de52aa96de19e55282beca121381b457a4b1d3846794bcd4a9738067ef0536e21479025846d7a681b518fdf592e4282d58636b07dab63fba010499c9534b83b9b99f0d03bb980c7ca276c5db3e799cd22fef6019dd2080c9f21", 0xb1}, {&(0x7f0000002740)="b706d016e494e80d3f06e900f38d3adbac289d41a0d8596cec10fba09cb48ee6894962d25d0e4df1a5d9ac430c6832c7d4ad1668f9c051a4d0b1c24597410a44815d8c3aedee49ea93535a3b32b745ecb19cadfbd143179f4acebfb99fdedd5d0a51984f6d4da3334df18baa0dd9c8f833f1c328d8962713dc18b9227a8be94efe94db9694e3d4af5f1834cdc162cc33390e75", 0x93}, {&(0x7f0000002800)="0d81703d9fee7bac00ebc988b8ff4f72a393e745607765fb06cf6f7050a8f2dadefaffb5cc502e6caefb25bcdfa395f31d30ebcd497ff05f925608cc2330ad4dce9033988222c322e599e4370d5bd227796f793928b5713e0fd9f272", 0x5c}, {&(0x7f0000002880)="09575ea33a6b1570c6bdaaee3757bee22012b8bf8499ccdcde90e3951afec421714bb037140d19be599b9d79959da24c269c727b613c651ade9a4661c442c7d42b8087b6b46e0d2519f948cf749c95c437a06267a17edf0799f412368d73d0650589dbac300eb95fc8a41288a59f9d9a3cebde0787091f73e27393061f0ff3e9b1a0f1f97e71a7d0c110593146947bf0818b9b486bb8ed7284adff94d7b8a2f8516b502187c591393dbc5e3e5996ef3c2de6daf45cee1d1a91aa3674c17ff18765b2671ccdcfe344766ab8824b1b5ab18d1b418d8988b5615e55f27534a00d664933b0", 0xe3}], 0x6, &(0x7f0000002b00), 0x0, 0x50}}, {{0xfffffffffffffffe, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002bc0)="77589aa76dfccbf666bd182ed12ee73d06ebc68a3c325afaf69379bd5184fbdfd801bbf425d396d9abe466de7e678a267f851b920dab06ebc60227d0ee89cf0e419c454b83323c28f32d64c0902acf29aa70b903e05c7ce33939f4957fad63650847cb3421a54d9c446c8c9547e38ca2ae2c884b1ccbce8cef049e216c028fd134cc842df4578113e6426fed3442cbe5648f2bd610b777ea7f57090447216d69321a92ee6a2dbee68b3d37e72502b9ffba4bf8d82ec6a23f81662b6b3cbcfcf1895f4d019383d7295716704906523a006ff72c5a0387cec610b92ee8d7549a34a59a684b15f8b84737d04ede2d", 0xed}, {&(0x7f0000002cc0)="201343617ee2b403b83c9b711f55f1ee6b5e96d9998b207aece26d93a02c2e1d37b88e3f21b7353d19a6d0ff26532613bf4a2ae36a0b269663cb5b1e975d0d44dee54e406283363d6d8c7bae169b4f5e63b896adc2be0f8ce2de791055620ae22e8db7e22991526a75f3384f1945535c3da057b1addacf3a09f762b2689727a7cc5b8341f42a5ae64741ae24514e63907842eec9629af88bc293621d7456befd33f69dd164d9efa870b6feeb928fbd5f07", 0xb1}, {&(0x7f0000005280)="de3cb43e47e1cd422bd8efa23e76a59ef63f3c904b052d59c152883b3673fb6e7687482d53996ad3af4f813ac83524def488b9288e21097d01825a48042a93e408d4c5ce82b4b436647700a9884fa9158a0305cbae1f2c8bdc75e31694d4fc756886bf8dea6451a64465009a79412003a101e2d5d4768e1561b968cfc09540eb9b98d682b6cd24db4c7f6b94109c90ee332b4b718d58df2c335f5f48e7eb66b22901cc110c83df8bc136b57132d126290a9accbb3af03de8e515c395aa25e789aa41089caca0b6ca2f9400cbf6a06daf8e6c62be5130e9f2a3f7e4ed99f4ea9f2c4c564026310999d2b9a9b125ae184463cd6d5d632242b5d42657456076a6e3d44567778b5dab1c6092491308c21aa8cc2674848c250e1077ddf803e59ff58752faf7782bbc25834ab0bde6d2100c878ff0742b9ae73a9702cc8739c90756dc1331a15ff88d485da41442a472e7949f0a9e389129a14c1143a855e5f7c9b22d4cc87192465d36c8db3ad89bad4196ba85f5689e07fbb9b3b026938e525b6bb1560c77d60e2390d369bef7082772431bbad5a2cee46936bb02f44cc6185291bb491a738c1fb2a92d8fc3d7a136b14e00abb4c35f732af8364abe69ab0e0436ff18b20a82b92583cda5441c55f539449d26f2044040da89d02d7cd9693b3f86fcb6926d24559bd7a6a2be578437804f5e7c39bab8b4af626e1a76674de3f7379f29dc997166083b7214daa4a61c32a9fe6c18e803e6331fd6ea11f7fb158a92a07e4d40bd497c0f073b197e14bfbe29015d2df5bd450792eda29c896a6b929cb09cd6e34d67fd815f7e5000a2dc250ed533d28e1633c053a7011cb4b9a921fb73dcbfdc8073f6e378e9334a935c9c67a96c8858bc9874b6f81a63760f0ea8b00c42ce22bc3871ce680332615cc377395f3a0f3405f818a19256c307fb33bb564bf080a42483999f9b32029dd416c1671cbe4ee521ac4c3d85a273da6b753327b7876a42aec4c4d13c9b4b59e2ed2e07d801fb88def9473be5860e14ddeb3624df36fd75ba0e64b5d6509810e906cc2eb9270103fb7c34c80a0501063f6f9e33795f484ac73b943b23a4cfe79a1e09214239f697d362a4f02187d86f4ecc04bc534074b594a49cfe4e6aebddee9b823a200ce10b92ee336eb3ff1f061809a95e564eb36e1bee4ea164a64c4daf1984d6ff7e0a33466faab25585d69560198308e21a9a491974dedcb4394a2fbc7bc3cac899504369a682075b56e23730335124baa364018479bdf701a8d74a48201a2f3ffcb6f9bda37209d1348a6c2b631a534d91dc6f2d93417646a7986879e2c85a61ea2912cdc5cfaae34387e8949dc8eeb3e430e12b7fe21518c07b0e87ad0bedacacef0949a97d7881632fd9ab3e58e05ee478d296028a1aa4a37e173c4f2f52deb5d8cb5a244420b7ca9c5f283b978777d39b8e23ad266258cddca23df1bd9fde2e23a8bef133ca86e20e7bf69e55093af5437950f9e5719665a42d658710a1e24644b4f56e2d6c2bca4354182e217ef0b37a06602ec5d9107157a33d995908da8f096b23cb51bcbbdb0e9930a6512300dc177b9a4fab1dc72f2a7cb293c38175fb039d304c93b4c7c5314545460e634915da0e8de5b68a4274d4f7f6ee5c5381e89921468b0baa9a9d3242b6dbbccbcc15df0361bb24d18721352d495071ef871f1ff2a2eee6e877635b52119bde3c3620c6a986c3a94894178e1b443105715b3c3dec799f35da2f7c368b1d2f5d18307bceab41bb78e67bb4c58b9c2277b81a6d197dcaaea41c7068aa794af7a57a425f59fd4ef3c3e052ba677075eaa3b446c6b9bd3a70eaab05cba84817701874264971d16c83c27066d13bf06924a62d0a367d21739834caf8a47a81199bacefd8dfbbffc25a2304bcc4db2d5be55cdba6f2b6758295f6cfde12789713dcccd36822d9d0a7b70775618ac3a9b83ac8935df673eadd3e3fcca59f9f7948b64f16c2e9b09742cc4be21eb2a31fe0c7812f702a206dfcc0536989617aed01a04cb3a13557b410952d7051e6eae15b3ab1bc49d64926730c6d79575db79547cc59540a2269386680ca9b22c29217cdd465a6d687642f5008ca049e774ebe4e9656c015bf3dc1663796378307c67fab385f9c14e6758b4fb4c4491b0621f0efb676c44af6dc46100b25eac409d0245c135107646b7126c31e9ea723daa3fc0e3dd8569976a7e43c1d85036b80d92ff5235ec5201552ba7beafb44d495aae72fc205041182081424fdb2d96e76bbb6d148ed8aa4b0aa1523077adbce59230469f36cd4af4180da22a8f84e9dbab5b588d07baa028bca98c2db818d576f06b9470d430289a070c4e3c3b0d63249cc04005858315d069ea6066f3976ad6207bc4e024672e2ea30819bc19964dae005b8865ba82742aaa17a7f6252e84b607f1b87ac5eb1986052e4751e2a35a981da69290a4ece4f0dc09985fa3592605308d85edc37aebbb195f11506920d78736e45adabe9d7a9aee1834d72e230d4b5497c5a67032bb2f4ead64773854c6a50336a4061a6fde46ae97f34f7f39c4d1f5be2c03a4f87272b15f8ea6c6632bfb2f5e82e14af3393d662218471f8b47fa20bf65f523b8e40efc19376f3d077f999204709a67b1f722bffd2c3c819234119f006ad77c32feafdadf909e7e8cd9636ca99ee0ca7b29a68feba4a0d54fd194503cd26a145a2f3735d361b844ce75e936070deee3b4e3807c2e35c188da87baccae69fac483011190661012a74f53b889062a1aaddec64995fb3169190777752781895522e11491c7b483186d7b3730e0938565040bba80c4b3022b4eacfd448fa221f782010b700a50266d0dc54450473e8a0df0ca7d9db1e91b1696f1c6ef36070e5fa5e8b0d0063f2197ae23417be96a5b70c244c02fc1a5de3b4eddda922e67a3799b5b11f4da350ffff92165fe03729b625e0260e8b5b6600b57004aa0d71437e84d5c4f3d098c9581aa87bbc4622b72ebfef5075b67b10473a3ceb7d1a8a0ffe806bc5164f7110dee8b3dd2d123d4c1aff7e289b5c247017a78f0ca73932d8d7c7634028424c3ad8d011c07df375f8f0856766b8452ed92116c9207d097a8f32e3f34dd0401be6e00ff1fc1f37639c2e8d37ede0bc2f29697c06424e5f8cf9560d7f8c2ee474825c0fe02d322c0800e810fc319d13b43d24b3142f2379c751459952c95c19d12ff3d38b1d18a04dfb7b78aa7e1756a7ab729f4789b74cc0c1eae652ef92095dba524acd4afd74ace6cb8e21a036ae7ae3546b622d9496da1e5115bebcad54e08f7c0de9975e848b0f85866705bedfe7284a3591f36967b99506eed49cd7a47c706c93c2e87719521fee685c7e73d454e53b3b4b7d3105c27c1e32eaa245608cc284cd86a73cb185ca70a57e4f2fffcea608d28501fd88f5fe866a87a553b1540edc7dda4ebe9c2260ed86fbf6178b64d0acd085916289ead44b2c13a85579d9a4ccf18ec3ba9d518436ad036578d013dfaffa3333150f3d1013f2bd22eb8eb5381151499c7918f87b05fdbf1af52c9fbf90b00cfa7235f92ea22eb3f0a4fa4acfc2709b73c383e9a54081e88bd01efc2e48817c06c9e387eca8c4a8bb971db7a8d6e695821247af616cc8d3b688f2bc744ce3c1459c758c4138f99f6bbdb1f6ab6a2c1ed63c9ece306e92d167c9f984034467ddbedf59a7ab87a5971f0664e14df92689d6f7dd4f59751296ad78f5352dd9dcaf31dcd78937194cf4697ed6c66d601d6f623cc7aa7989437fed9e5fbe707771aa30c9222cbd6426569e9dd250cda59ae8e4e234b2ac2367909631af1754c34c82845b2fe0a0e4c24beec7af54bdeb554c41d7854019943a7d895ed18a21df09dd0bdd44ad5005a17219b5e9e1f2c763d86146535c570f911a587e0ffecde0a05df1d6abf1cf42693ee85d4167788fa1708aede82eeab40a946b36d3d36ce68c91187d3e121c8933ceb8ccec05dd3d397d9b3d2d80b67ae0b18978c6472024dc29e3e29f41066feb55019bfd7418832c10f471a5767552352a3c7f72ef1a5f7e5b414f04ef14cac15b2d809a2877d6cf84f65f2d5423233223ae75ad1053ec41b04023b89e3a40c70128b7d5b08777a726ada588be54c53bed2a17f8b91ad9c34a04f916e6fc8f47ff2d427fef3a7e610809b45432b143cc2b157d85fb9a03378e524b9bc9b89af803673aad1f83e88635f99dae4ece094041bfc21b958ff837d27d469a025f4b7fdcc2e9eb940eef66b01abd630f1ef583f1a2198390e9c54c64d6e93b51e3c296376e0ad21eda4abaee1b8ef80cdf563d5f5673c11213481432d313d7bc7916c7b2eae40f78a05d744f4cb5cec249c98c994689e0cbb5d8716d92ab7b3e93a837029c172dfe59726e79a2fcda1a47032f064a2e3bbc04c98f2683296ad418a30526cf37ca42b18bfaf11ec539aa3095b24c2c4b7dc870f953d54edae619fde7cceebbcc2d55e63a81c4c387d3190b03137e8a1a7449fc6a39ecc32231caf74e65a7abdc0da42346f79987a2c847548f60aec926c68333a15b1fe8625c00ba57daeb31795fd2f5c18c0e852f9bf43fca31a67b5d6fdbf96098b712d126e6681bfdaabf958889f6ac689a0e45f1138ba2cb6c7b21a75c0c8099977a3dea2073444c218f7569513584ad31460a9be8754a522c681d2127e227cc3f4a4b6e99f1a1a12b2605c77ffe6894560a5854f151b4935011bc6e3158a93b802c91631ec7ea3ca64e2f6ad39318b0d2b4e608d34e25c28f80ac15fadef9cf5f4f4deea95cb04217638c95b34ba6391a136b5754882337705ca30b36283e1d126e5cd8563363636b1918515a06aa76ef137b5a9c93dd99556681144e7ac26365a662c9d989f7581519878f8dcc287b2d5d6898a61c2c78a1261dcc2803a2a239e98b92dd1116eb8d2f634f3e5a0226527e15b67f23ec7b8961de89b3bf3672cc313dced53406cb5a5d500df752a186455c9b8f7baca40928c1b84fa362b9f76c93252beea3d3a2f8aefb10e1da6e89a34ccf6f9b633f70619f147004546d12007ce2d454836d4db967153da50f685dc6ddf99a3da232e260ee429b5677353b129da45ab33dd0915639fd507d20be5a553e8fa081144bdcdec0d1bf5498df7d87bcf037eb95e55c319a52caf04599e8ebee485acd009910988a259ea8fc60d90d2deb28d16b50d622556c1bab939d8d69c83d1f211fbffdaaf4f9e406337818089b8eb9ed45cbdf356d93806dc0e83b0562807c10ddb8fda343554394565c4ffe57c83cb14a225348d8f05f7eb4fe93c0ff2335c272c36317d9ac2cc037add8742c652fb366f0da36568e346fee41fa35540557d9d948845575d29a09618c8e49688e6586c9114bb405cf5d73ea5a527e0e5b6c807d03816b1e757e4483368d7105a8cf29f33e2ba1dbffe765c5e07b973017d6131eb414c917d6f03605a71f6f9704df0358a0dca2f676cb9103e0cf4a578eb7e656083c0c77e0595dfdba55d59228b014c5606c6b542923f5d84611c49158d8ac35e712c44ebb79ac1812d833375ce24b6fa1c5369e52a49d1191b6e36582dd7985ffa0e7dec39d7355cf1eb9fa2b5ce70c5c664bd95fcc771fe34bccefa3610812075b5fe2838e5f6790488b53502ad8c01fd0602fd8098f3b9076636aaf1dc5d58292afebe32688bcd110021dd7796826d62f7c302b07336aad9cebf08601c391ff4640b86bdcae3251a7a1971ddee1d1325d9edc055f6732ddbaecb2013582b342b271d2d1f760158c943b09a0387d976991b1cf6d", 0x1000}, {&(0x7f0000002e40)="a9880c87bc27f3166ec78d8065b2a69c38adadd5feed0b19ea0e711a24cd43d88bec7c0a277f8ba761c99d5a451a2d4bfa4c636f837d5bb9f900eb0888c233cb865da1a401c413", 0x47}, {&(0x7f0000002ec0)="0b80c42e7762ea468da666ac5b1a83a179da8b61891575d9b52cd299857d5102b3793aa81cd24ca35387c0361a491655dae42f41be31b0245c499aac7032e83b261d99b465569d6a08bc268ef6ed6f39f5b2ac73d4f8507b36d3ad1e2a72d0b85a85ce8105f0149da44f92808815aba4e71c068eba25493ad83f3cf998282380247614323aab83b63779aa74478e7035b3d438d99d976d560922132dbc99ced5a1f32099b5c381db11b4eeb27fa4068a8a62314fac5fa84d935e3f63ab41fa806b5d", 0xc2}, {&(0x7f0000002fc0)="851f1eb572b7708de3f1a51e1bb5d5a0e8976d02b32dd8c7549e408444b42e2fd066d5550a70ad489cf316ce6cb7b904889d795bbedc04fb5f3b641f6086cd466a58f86349732bb7517fd79d0a672af458de8276a57d79cb0f2e4cb84fcbc2663035e571b90bd5f22559f4f92a44cbabfca297fbe23fa68c228623cdbb3d8c3e798785b784f9af72d19e548f50418f8cab6862fc6095d3c4ddff3487b02c598ce7d183b393b6f88dcc380757ad2a6b9296a7f803262c0c0587b69283abb97ae489430335049b2305f48f6f5a84438b511ef74fa6dadbb2864fe9d017366397402de0f8aa5a4deceedc692f", 0xeb}], 0x6, &(0x7f0000003140)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x38, 0x1, 0x1, [r9, r5, r4, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8, 0x4722631ff4125a16}}, {{&(0x7f0000006280)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000006880)=[{&(0x7f0000003200)="cfeccdd99622b520bcf2cb76f198715b6f4c", 0x12}, {&(0x7f0000006300)="76adb13351365a487596a5956dfed006a0a51d154800ab1d00f860349be250bfe3a128e73685d9eaff2b406a6c53d6637d29ef6e8cfe0622743b034f9fabdf5b525b8bd3d08a40c03428eb3f45b6636688793b4950b203bcaf2fa479999943716cb86e78364b2e0a36291edb2974aecf7fa27d73bd8c5940a330da11c130fb936c37bca95001363d9584503b16be64e6873c9eaa2b3030b18854115f39f3b2", 0x9f}, {&(0x7f00000063c0)="84fa47cf972527eb53791e052c2d6c693f161d3b54645bf687a58e6fb493d7b13c90e7062404b69de44b24de228f82f6abc2f2ea840a519bb8d7ecc916b7bc08e823eeddbc397099f90f17d5bf7a4707b34184bec8157ae95a6a46df020590709f3a14080fa939d23cb3cb7ff662d2ddce2d0ba0889372b36f745f856a32286685a881bbb7e70bed1d1cd152ac9364281cca1fac79c3c0b33e725b769f5dca12c2a5bd8900cc5f825031cffeffc193a4788759fad0bce422002720d1bbc4c0fe2d7ee90d3aa5e7e992f1fd21948a74fc092188963ab241499fb61a301472653dcb99de373626c6af342fc6262a15a18934f556328f31", 0xf6}, {&(0x7f00000064c0)="511c4095de81c57437bf4cf932bc5d42d67bdeba602aef09ea5c1f56f6d681a9cf832a697a749b", 0x27}, {&(0x7f0000006500)="ac81cf774dc09339fddf74655e1e591e2362aa0af94720f60b72363dafbb29dc9249f59cf747305dc5168c2a9d7db6a31d1c3ca3453ab637807ea3b9aa15", 0x3e}, {&(0x7f0000006540)="100d38", 0x3}, {&(0x7f0000006580)="111a5d50fd2e43cb60cc8208add425f043783e7a8bb6fda93f3ee918b2aea851f8e6ac21c0e825f1c6d2d2976c06d36468b2cc33ef6d2aaa8438c09035d2832a3f340dc212eaceb471337a993ebbf29c2b9a9d756e45d8c9beb44346528ab76e25f0d75b69de14757f942b3a9e471e2ed44de0772c9de340", 0x78}, {&(0x7f0000006600)="3add82b30b09f193929b54ab5898e559ab62caffd3dba6817d702c5d057f96f2c45a6b486d087fa61d57bd0ec4e9c209a86161d7db6fbf4f2618986740358a2a8d1ff45cd34332fae81cf10ed22498ed24ff515f82c334904bac22076f5a5560f72e5b345ede5bf1f973dc5ae65a0d44d149ad5681240f586e82ae98c4853a4243", 0x81}, {&(0x7f00000066c0)="59bc63aeeb0df8c03241d4676c03bfa27ee7c6ad340139be2bd285d039a6911f4acf6608c1703679f093c3483ab36a86951a0e9e6929a80c14cf820b42306516ea3a272c133ba2afae684c4d3b7a903dc90a423a9e32b225e3bc81dcb46b7a6fbe1c21fd70533c73e46a4648b5fac2fe17f4902200c2ef869531377c3628bb63ef8180e144a0496703ed202641ed1cf40f82a94e5da45df968e199b1b92db2fbced1da671522e9b4b6ff5053d6e65b92683ec444671c843cf8d22468f092f4", 0xbf}, {&(0x7f0000006780)="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", 0xfd}], 0xa, &(0x7f0000006a00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0, 0x4000000}}, {{&(0x7f0000006ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008d00)=[{&(0x7f0000006b40)="47942a76e47066c12c4df39d392b71e2f27a473a9f79f3426206703e26afe51d", 0x20}, {&(0x7f0000006b80)="d8cd9b5e361830d23268f1948d17872e7bec8df29bbc375726d3c8f83809553ef04008e573327a0dbe85e5199aa9fbb792d8a50cb6062e34b72632f7f330d8c99fef37223a7c49cb6bdd8b8d6958d9ca6f3e2c44b94ee80bdac560d0cb93406605a5c3194f874065a26c2c89b5627f8833c90825477e63cd8f210ffbed2924a95f11053bead05ff0b516cf9b28de7ea4813087dfb941a93c1c0516ee52c788e9dce95a18ff4eb8c82f2c321416ac855f9b2724039efa59edbd02f10502be4108f2bc814cd04a328436a38e31e2ac4beea8eb4996a33e8f70067e2226489d2272e9a54c01028fa0433b", 0xe9}, {&(0x7f0000006c80)="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", 0x1000}, {&(0x7f0000007c80)="019a564905249bee12cb36b2af03a6e92779e5c10eb882ef17cec5587d44df68ca777276e1bb0d6c062d405eb1b0292695aff39a70dcc40956cdb0bd9c0e39aa5b2b1b114912a51aa77ee071aecfdecfc022bfbd78ab407c028ee744b11c2b3303774acb75db6c3d6f8259fcbc09e49fbaba2881c3f43a6dd40fa3569e073b67ca4ae840092dad26a491d6ffd12cc26a16ffd7f0f2c79a4f653c89d43fd9677b927b9ad28778f9444ad03a96f270e8ff03c9cc7bac61c174497fe3703be2f42da33667298ee1125617f1bf097fc3d845185c400aff5eed419590e0f69816c8e675862a22fcd70f7762a1bee2509a3c4939bab3c52e07b2f2518751b4da796efeabdb22af1387829359142935b65bc0fd771a500454d3c6893404a26dacd16cd940365292335dd663757ad257fe6cedbae720edee47d391f6359f507c247246d0c0890b3e22d5333a6c556059cd173e56239c9e7f6a6ad576fbb0a8facc523b1002d26a893a67791e2122676bece69ad20f311d3d9574eb12e4b6a9b2da2f32ffd81fe677851a9a43a1abe8553a06d66fc57a8c9cfb2a97420983db2faecec6b3d50bc8497f00d65979eaa920eadfc68e50cb72255e3ac314478e3bc2389bbc4897716ba791baae723331ae8ff17117e5f5126f914a916a2d6a5032f2c8fffaf12badff85ce5d7692192969cf1c88fd017f123e86e23c1c52e5a81065c9670d734ab41b3112bf25276dfb0e47ee5172bf2e2b3b0b80a5fd0c337612e5b226db74f9b9e664713f966ab79606f87209a18d6d8fb21e55d99cdda076297845504fe7b548fe9c3b6bb5e14fa4d42230079245a10d80f9f458990390cff4fc8e0c2e3ff07ae5a3a40659e841326258fe723c6289e7937941bd5691ece67be4afcc4f644a82a7fef8a3e0f24024145b630356c7afcbb957534924f1105169846373b1319ae08cd6aea1443fc0eaf58afe8c9d87d594c940f4c07dd8e8612f5a3d1512ca069a96e700ca783297a08af7cb1d3b7603bff22f9ccb278282d7884c972dd9e130dd5378bff8b80fbf4150031e8b6a10f1029df14c69acdbcea2fea8a98404907d19e5c6ffdb806622203e02d5b167103d172fc893d3336ea6516c4a2ae37e16f69655c9ed92fb15fdf28092a88b6cf4d139c4e6c25f812cfa978d9f0e3bef171398b2aff66550ff7e5e587913829a88a2690d2ca4ee5d0769a058af9b9e063d20c4bc948077ecf318ba04ab574e09a55a417f3a776a8f8eece49f0e296b4b7c98db7ac7d61720cc0bbf3e79519c8636853770efd28a9a169190a138ceaad31750ba0adb2d8684904771ab379ca2cad5ce3960f641841840ef69e5c1dd3a9da0593f1d04a76ede9efb4fcc1b41d7e822fc24d82c5cebdd5ce941536426fe1d1395e937784a370ec92e6a2cc3526d9c9e5bbd7a4ea3563ac1929b70fed2e43e3f1cb94c1df223c226c677c3e8887013545bf03e4300c3f0c7f45de2779e91fafe82a9bfc082414567a055e15dbb41c9742965279f5a57c066662fe44991a27c98a1d0bf934338f19a566367a9270c3d6f29521e95eb12b736a78ec322e120f5e53cbe9a1febc915cb0278e847000e5e35695cd03d397e831f6a2a9fb7d233c3035e40a6f17a0dd44724f3dc1218cbf8b90c4bfad0a173f5c042353783caa0843c7e83d4ab5a886ce9ba65b3d14060ef7525d1b4ff34c68a14603b6d3944cae1bb4fb4dc04fd9a6c597352c1e333199c2688edb85fc1feffcb8577337ce7903c32a4a423d1d03ddd1d81fd9cb7677dc5ccdf4f418ac26f291f1b98ee9037039f377fe79329f0e795faac87256f8b6f6c13d3e6fa41dd70fbaa87f5d201fe9a3b1aeff2d73f0e79f587677f54ae94d908fdbe75d85b8caac4c73e28a1788a9522f9527cdde69712667fa7b63303d4fbb36d9a3fc20cfcf014c03d540c112e2c9dba880f181e706c79d956e69199d4483032fd6c862df21f38bc1d6ec2132b7f2454cbbe25bdcf34948112eabc47423e27943d23276950fb39cfdfb292eb4d08e20b51befbf035f272731e9baf4a05652927a58cb07899b890d58a13154e70469e1039e265357620baa2ce65e6c5884d703cfdcfee546f8d28593e1261ea4f7f95350202b48f77e1ca0b8ac3f085196ec7c26a1593f55b6a536eae23366a613b941687ea2b6e1146ff7090c6cf8b3201d86e70e0ded5ae08288564914802a92810c552f1eaa2afbb0ff7f9541114d8e6bd373ec81f342bebd6dfc8bbe37aacb2ed9de7f5ed23939b73f2326bebf4e627337eb6cccb803dd2d4f91a18b406e7123ad027e75cb42fbe17da38013d94814181f9aac65219e160346e36395d302bce47b3dbbc2d096f3886d811fecc7d54f4f34ebaf35e80158f9bfab1f7334eeabfd6c865fcb66ba242968f32475cbaf88a770c5e7053e703ed281902e2bd906afb4a66e540ab9c41af84924d725a165dcf7c076d0a1f9eb4f93f24cd6e1cb8f84c51cf7da3c0686144d44d4d1b2479b64738a281fdd355026ca20c40c147bb269daa45463ec0ee7ec7530ed461f577cb51b1b9e73be95f349c5b5facfe00135614bc28224de4db701b629bd825757c1b464e98b30b50aba0ae87946e2dd0f8a5151961db6199ef71080958dc65724bf8727ecded287faf92bcba8f8b21fb22f7865eb3654af6bb68d3cd81814087407653250eb721283a252b699fd00a023c2fbc5b70eb82066092d7e79ced8ae7f20a33cc0528b418b9b33300c501b277571377ed45ca97daf6937c0f43b1e5fa074a9e2d71072709b25cb602d3e43e588ae79545ff1b768fc4547cc67eff947b91d99b2e47d26c6e9ebb7a6ba1010f858595822348c692c7eed3487b520e89b55ff71fe08ef2a40c11649b13b400e006718198538a607ded094874e0c1a8f00c4d204fc450d1f6b75aa70e9ddd21e9b065be6962eb9b4d715f80ef3e29c593c38961c650baf710a154689974a0ae3910c4fbb17c519b689bc88d6aba11585fb3e9666cd783776f57f45ac577b87b13d0d3868c8805b7189691f5922d4b555aac2e24d0f4cf93441fa4c391583112ca433168861978ffa1c4d7f6342363f3e11fdb23ecf399390bb7314c68b6b057d00594a4f8d1b3fa15d8ab5527263231eca65d7e46f5a312961818c868752a5b66ebe119846f545864dc397173913ad422d3dacb688ef0c66e8f702488eafdb75dc5a660204e09030076ddd641527ca0ce8dda7989d0de3c2412dd7e6f432c4942d89f1fcee8458ba80fae53fa2b46fb5c9bfffcf8a5b1fbb464f0f6708ee3a3658077486ab5aa907d93f90a2ba1eb507bff0d343a71cff5baeb2559c0130c97e24bbbd5b295cd5db87903983de6c2bbd2b3c60c3453fd4e6ebe9e353077fad3a01bd98711b21ec2385ed5bcadd34c19708a9b2537466f41a178cb2d50f2d949566e0243e1f9171d781f8fbf252d305688465f77b71fcc844f4d64867dc99190c4dac5f03d4ecffbd2fb283a55c09315c91bfd0623c5bedc7ac56a6810b6b1532d0f9ee4ddfa5bed085181eb95e9f76ae3a661353f922676809f0164da126145d75f029627d97a73ccce22480c25d7879f4fcfda2c2677be1bba2911d607532e1726a05167cf9b76161aa5598eb2f411434a223e4c3ff06c945a6b6555cd108454e7829541f8c1288a78b86dbdef8e781ff75a1376b28816ff1b4e7375cda3fbd501958f58823761bda9bf6dd41222964d4143dab64188726acadd9eacf1e7a2c244345f5fbeb47a3c78061315f21feadfed3c284c628415799305e45a8bf436c9d648058722e1bcb200f8ba6c7ab76c0de0cfc9939bf128becc882834c5db6a664c4210f308ba341f18dbce408e21f144ae4132c8c0c63f52c755eeb10d3ca6e69da28a8f297dd7720cbafc955b0c0c005b336ed9ac8d9f0dac151344c6fbc1ad140ee74fb792c83a589535873d064365b282ef8ac012852afd1a8afebd7ca88d34f4c7abe0218c96c70f5138093840d575a4e7470ae2318f2ee20dcfb80d5bfd2564a7ada1985448cecbdff690a232582eb3ea2431be2fb8fb9d4157baa7eb3dc5577a6280b5888cddf290c5f16e7189b07b1f6036be5b749a282eb1015b656eed6111c3fbcc3082191ed8c9f2ed443dc1402d0511ba69df2c6e76a1f995856b5736a7def6f302a8739d318546db7036d70a827656189ca8d85ab8ce781299b8c8b5825f61f9aaa1c265c60ff681ae1d2d587664f15729f3bd4d0c463b61c20c1d3552e4e783fe9d278403c1fe27ac3181c2dad0fe6a1e4f3e390bee6ea5637b029e1568f0c905bf9d6c3a41741c83080d8cc6071c3be1159fde12ff19cecb1d2aa2bf3e5abbe5805337704b92d346c48b3b178d6abc9b51012f1f08ea5d6550735a82e1a2f8ea82101a77f6c623f1015e5ba33ad31719f34a32a6f258d579925bc4dac49ea48afeda43aa662f42473b0ca084a0d93ed142b6eec997192085982a01e2eefbacd5761af4b6e1a6139eaf902bad51b368618bee7e74a6d977412bc0578225c63944e298992b652f71b57cc56aac59660df21df6e612ff2841b171cb676305aeb8d54568462ecaf00e60dbfba36bc3e7d463747f6012b8f79943f2528cb835196c93a2f9d163fe652641af484582b469fcfd91a20bdf8eb534f18279874afdb1bb1d1f48f9a685a6dbb3434acc32b0591888d247c6a0001cdf83d04a1d7fcec2515bfaf16e1fa1210a12795e5c6b8004990dacd641e97e8739b9e46715ca410b412fa80cfdc57b14f65dc183e2332e6f41069798245e3ef287d1051046aa5bcc9b52718980bae4f99b3a2b144b4f9bd724cf8818654268e3d8cf7b30d44b64c265d599520827d2cf59f6fb3c1148edd02d3b045828c36fee0110c31337d94ee908b12f57cd7504480ccf6fdfab7bb3e4f5f24080daf1e50d1bae7bd440cc2d0fee9acf1086ac046d9aca61eceac79ac4092d706d97f73026567d4d3c0d66679017567d92582a04a53bd705338091caef824bc0106f725c94ea9199e5ef2478a86ba4702ed491256a256ac88dfcfda1154d63f67900c71f983f937cf9cd2b94a903ba4a380ed59781cafcb129c1827026eb441947fdb45a03e3172fafb141520403363530d902e7a5346a3ba642e6c9ac2a916de117ec332178725f5f984b23f87500a303d265d35b7690de91d64dc796aeb1f2509b7fd4b2c4b864ced489aa56bca522bf88b1d43b2a9d5ab74861b5205db7d6c97210112f35a96a55bef3ebe5bbb04c1ed01f8993e0036e1eb771ac6603fbfb62fdc0cddac29e2a34b96f1a586ef4cc832a4121275457bb1b58e1a66ce03150bed91ec625f332f563ced9c3469980476424789d43c4050d79e95e1ad0f1a244fc07fe047ce767975cb5a658043464e45a3cd5a2cd4967570392498a869a899b5740d3ba661b973630f002ab59eb93cc3ca8cbb82ef81b8f1f649012680d773aab4ac6cd30c5bd4f3ee1f69bddb98d3deaaafc1980449360753166aa4f0194d9410f68b81c96b6e4c2f13f9884c949d967889d920fd4bcbc2c9249a43c81484869a4d382b2df46dafc11a50f18f2a8a3606f3da0dfc53d17c13a558e4364687b63a907380ef50e047081896cf64f06c3d48eed25088cf62d4d88ed632ceb5248717d0e111165e614b5c9123d48b975857c1de1b96914eeb3758455463e27f70c32c59324f9f7cf878f66bca30c427a8459e5acee1f1bee6f07abbba9f0829dd86f2793679f53881945523848228121f912710b46104b574742d8698a4ef674e4be4b21e2be7cc43b97d0c0587920", 0x1000}, {&(0x7f0000008c80)="03454055317d8321f78ac6b5875b006333d9f10fab46579c86cc202abf8a0a92d54f", 0x22}, {&(0x7f0000008cc0)="caf0cfd0ace61d28", 0x8}], 0x6, &(0x7f0000008d80)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x800}}, {{&(0x7f0000008dc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000091c0)=[{&(0x7f0000008e40)}, {&(0x7f0000008e80)="ac6d7830b546564b359688bde7dbc0c20e9d7aec56c698ace6d82d8f561bd7506988a14377eb0290a9ecfaabc520fbf1947d2179bd88ff2eac03e449b695e39ace4f965287cff11cdd01c31843f669f6db23c985432efa96a164a0cfbca98fb12647a3c2a7d0b7ff9e4c1e7d83f7d23fe509af768c01b2f2c1f942c2f80fff6d49361538df9378762c39aa71277341c9", 0x90}, {&(0x7f0000008f40)="26e051fabbd16035cebf25dbd11cb614b9bf41fba09c12cd04861190d9cc53709f27a57528b01a820dd3da8200d4d96b69e10b992430a8a090c803818e9bee75bd9034e46bec4179b4fc6ca6e8d52eed32701a1b6a8f001f3177cb1d0c6c1a0affce51921a5f85899af69a9d2e4a8517576b1e2eaddc5a2654dca9bd1dac43235df2a686efcfffe0", 0x88}, {&(0x7f0000009000)="7953d1e3593719e8103de9672076f8fbee590348ce7c40899012a99b949d0b355e9cd15abb383bf7de8e72106b5fad5f9c1ca8c45d9bc208585d132c0787ecd1e48eff6819f7d3cc1c5dc38db7e84139b7a1c28c2db77771e2f54757c1a3f9a1d98ca8faf762ec1056f931e9f04ff4be", 0x70}, {&(0x7f0000009080)="40069cc746501b826eb32fca0d1f2fe98522f82d8c0da4ab54fd0e3ee7b842716f3f2dfe127a44c21e33c617f81dd7ea18abb7e2ff0eff77a68f66cb1ffc65be519ea601b2ccf19d501239b2cc49c2e3cd6bf8df87bfaa21739c7a18304597f7817545cff6e63c", 0x67}, {&(0x7f0000009100)="2ac34d1b891574e5fbce9efd783888fe274853a12d325c6390a705c83cc4d0cce902afde8ffb33a2673fb238dcd5b8bfa43b5317af2574330fc1700f02e4e033a1cd373744a6b3d93e18bf0c5c0d06a7833e1fff9e20c84fa8013e843720ecab05b412f0498921f412e219538df49beaef62ad93f22c795570be6b790236f01c0e03188a212964cfa5a2", 0x8a}], 0x6, &(0x7f0000009380)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}}, {{&(0x7f00000093c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000009740)=[{&(0x7f0000009440)="c13aadf395b3f66cf44b4ad943910a57425c9ff301624e0b3a3487cb97834e6153113c5326e7dd85140da144c7ad93bb95d202ca5376079ec6449b4129f8e4646095ed833d7a7d71", 0x48}, {&(0x7f00000094c0)="231e241d4e6dbb10e13cedde13a6a329dcda9f030411ab6cea44a35fb1b2a790aada6ce196a19d1edb4d4923371fbbc72fec6192474088ae71309d8cad7fe6b86808238dd5fc0e5fdb0065d586b06e58cea8626a56671409f2718e6af8e1102e338bab2775de0ebb229164c8c503afacc97ab1136875e00681f40135d1995596c417765a24cd74c709c202636caadf334286e63bc13465f46f6f5c6b", 0x9c}, {&(0x7f0000009580)="57e0aa5970518495589876e0fdd8fc7a480e8e23bae8085e4518f0f486a27051c58a95ab67de778b47cc227f39186422d8577eeee508668044583673d18d393847010f5aa182286a0a5a2b11ff893cf70db0433e54222161f2fe3012c7a645c7f76833c648f79e136136462147e969d0ba5bcd4097bac985eb5679336f5358759a10186fee8e2fd4f88774591844ac81468d2212f4dfbee9f0bf0880a686c7c7c08f6bb0325f304238", 0xa9}, {&(0x7f0000009640)="d02f15be99f145dedb4c793862778b26d9099572df68d18d439df7344c403618414336f9cf3b8f99b2cef91c", 0x2c}, {&(0x7f0000009680)="b12d186d04ed31019b9dbe6d2af3f7ca7d2229e37b6fea510b12441330215bfcee7cb9dc694aac45bcd757cf387d7e9198c03b5c6e23596c8b9b73d8488aec067faa728de86787108b39ee8fed369e8a63f21930db0a28b8b2f2efd49cbf4bc77532457e8b4bfb05873a0ac31e4edd38bf87037437ee581aa03b3d39e654425d0bab8ec0f48cff803cf8bda9982c7f44cce651257f4120615e0e0a314b07f7e93c8d3c35b3a9fdedd898da176879edb8c83ea988e040319367d0419f6b281f6f", 0xc0}], 0x5, &(0x7f0000009880)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=r4, @ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=r9, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="39890000000000000000001bc6776800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x40}}], 0x6, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000023c0)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000002400)={0x2800, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), {0x32}, &(0x7f0000000380)=""/4096, 0x1000, &(0x7f0000001380)=""/4096, &(0x7f0000002380)=[r7, r7, r7], 0x3, {r10}}, 0x58) 1m0.806589077s ago: executing program 1 (id=1523): syz_emit_ethernet(0x13b5, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @gre={{0x3d, 0x4, 0x0, 0x3c, 0x13a7, 0x65, 0x0, 0x7, 0x2f, 0x0, @local, @remote, {[@noop, @ssrr={0x89, 0xb, 0xc9, [@private=0xa010101, @rand_addr=0x64010100]}, @end, @timestamp_prespec={0x44, 0x4c, 0x78, 0x3, 0x2, [{@broadcast, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0xb}, {@multicast2, 0xc80}, {@local, 0x1}, {@multicast2, 0x80}, {@loopback, 0xfffffc7e}, {@empty, 0xd81}, {@local, 0x400}]}, @timestamp_prespec={0x44, 0x54, 0x94, 0x3, 0x3, [{@empty, 0xff}, {@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x4, 0x0}}, {@loopback, 0x7}, {@empty, 0x7}, {@broadcast, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@multicast2, 0x7}, {@empty, 0xff}, {@rand_addr=0x64010101, 0x2b2}]}, @timestamp={0x44, 0x18, 0x24, 0x0, 0x1, [0x4, 0x2, 0x1, 0xf, 0x1]}, @timestamp_addr={0x44, 0xc, 0x3, 0x1, 0x2, [{@private=0xa010100, 0x5}]}, @rr={0x7, 0xb, 0x63, [@private=0xa010102, @private=0xa010102]}, @ssrr={0x89, 0x3, 0x52}, @end]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1000, 0x3, [0x400, 0xa800], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x15, 0xc8be, 0x9], "3b89f3eeb6924b73589e7d211d0ae85710551cfbed2481ab00d6c5d1d92112a424acdf78745c814e93f205df83b30370d5eb42b22cd4a13ca86967c190b952215bfcf09cf874f0f2d27e36480fcc7d73551968b5b1da3ab7ba13645cf71ad80813c4514fab927295602751a173e388ffeb0ea4872702149c8ed192b0822f8523888366e999ddc9262fcc9d"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x5, 0x7ff], "575fb072087ab7b0fca65462b9ad909efc31fb88db32ec59d28d084f8201ee1573e3a2b548c889e1fb90f12d63dae6a3e47d1710ffdaaa00896df6374839006deba902d4c73a22896b9786cc624f12d95c39eabe38ce5ffe6429d3d61b78cde6be369b23a232004719b08425f431d2e4f678cdf337b389516987b27e34d886ddcfa71664d09ce2a717c894b5f962560ef65905224e393dc836a039e3bce0344b8ebaebcf1ab3a9d72ee1f2ae7e2f33a27e6024c7bd3d8ee57db504d684517552ceab8ae8b0c2e1ebc6fc80e7ccfd06c4b95ba7180718a7c03b8d2f8fb2"}, {0x8, 0x88be, 0x1, {{0xb, 0x1, 0xff, 0x2, 0x0, 0x3, 0x0, 0x32}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x0, {{0xd, 0x2, 0x13, 0x2, 0x1, 0x0, 0x2, 0x8}, 0x2, {0xa0, 0x7ff, 0x2, 0x11, 0x1, 0x0, 0x3}}}, {0x8, 0x6558, 0x3, "9981ef2d50828e1e257fefd487a209b0f2bcca930fe8b07446e30d53c468d67ef8762577e702f8dade364b6cba2a7a43bd8623c386392a109e554626a773b7a3ee76ba6e760ba4a6978ec12c65061cac54c088497bd8135989d3a136b0d65b17472cefbe2f0d5da25a5f237dcf7bbf02e6486c5e18edf25a59ec102f6b371cbdd0eb11371ac6d262698e4efd2a48bdcce0945d9a68388493be7c4e19b4e01ac9db046f6d71eceb9d4f5bc0701c1503b54d976de784adcfb11d82c0c8ce756fec4ce7b586d02af0122ae6458662c112f9abd0179ebf34adf60714ca1b8b492f5681b166d285255a4a988c73745421fbe078147d936050d2f6aa"}}}}}}, 0x0) 1m0.275848395s ago: executing program 1 (id=1526): prlimit64(0x0, 0xe, &(0x7f00000014c0)={0x8, 0x8b}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) sendmsg$can_raw(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20008000) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(&(0x7f0000000080)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0xee01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) 17.455564107s ago: executing program 2 (id=1633): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = dup(0xffffffffffffffff) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000040)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r3, 0x80084524, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r6 = syz_open_pts(r2, 0x141601) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7823d5f2fd71a6a76177920ea7e60c0ac7a4a5"}) syz_usbip_server_init(0x3) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001439) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PPPIOCATTACH(r8, 0x4004743d, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000080a01040000000000000000020000000900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000a6e8c24b1c14d43b579abd1f1f369e64e34b38c6d6a58af6e27ad690bd09371183e772e61a4d30337279dc4fe4f33ce463955462238b811bfa63122a6e41a54a972b30848e4242666f3d43c7c376b80f714f7b6e3ca7748a3d6fa297945b2640347b3a0df5892bfb8e90413e6c4aeb9b8a2c877a534c44de8b8ac02e232aad57e81116362130c82f6fdbfc9c57995bb4366e58a514afbca3224fcf1a522ea798691"], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x8, 0xc, 0x1, 0x9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 11.820081441s ago: executing program 2 (id=1635): syz_emit_ethernet(0x7e, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@mpls_mc={0x8848, {[{0x1ff, 0x0, 0x1}, {0x200}, {0x1000, 0x0, 0x1}], @llc={@snap={0x1, 0xaa, '}H', "41f684", 0xc, "9d9b3e46457bdce635432e1c9275a96e52eeff05a044589209e6e40e56488995f15b5a8bf5c7879ed4fb3046dc0240b37be267d3fd58095bf47cbb456c709a8cda791e7765bc592b2fda59b794489007be5e992d16bcddc17b3253"}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x9c) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)=ANY=[@ANYRESOCT=r0], 0x24}], 0x1}, 0x0) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) getsockname(r4, &(0x7f0000000140)=@vsock, &(0x7f00000000c0)=0x80) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r8, 0x6a98047402e98331, 0x0, 0x0, {0x6}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000005f40)={r6}, &(0x7f0000005e80)=0xfc9e) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24008811) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000017060a0b040000000000000000020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000005000740f10000001400000011000100000000"], 0x78}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={0x0, 0x1054}, 0x1, 0x0, 0x0, 0x1}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="66c3ab000000000061118d00000000009500000000800000"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$kcm(0x10, 0x2, 0x0) 10.450632256s ago: executing program 0 (id=1636): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) iopl(0x3) 10.282706846s ago: executing program 0 (id=1638): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357", @ANYRES32=0x0, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r1, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x2f, 0x9, 0x1, 0x8, 0x1, @private1, @private0, 0x40, 0x1, 0x5, 0x100}}) r3 = socket(0x10, 0x803, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000140)) socket(0x26, 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_dccp_int(r3, 0x21, 0x6, &(0x7f0000000100)=0x8, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0xac, 0x0, &(0x7f0000000800)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000740)={@ptr={0x70742a85, 0x1, &(0x7f0000000640)=""/244, 0xf4, 0x1, 0xf}, @fda={0x66646185, 0x8}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/83, 0x53}}, &(0x7f00000007c0)={0x0, 0x28, 0x48}}, 0x400}, @release, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@handle={0x73682a85, 0x1000, 0x1}, @fd, @fda={0x66646185, 0xb, 0x0, 0x6}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}}, @exit_looper, @enter_looper, @enter_looper], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r6, 0x4038ae7a, &(0x7f0000000380)={[{0x2, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x7, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 9.692355789s ago: executing program 2 (id=1640): syz_emit_ethernet(0x62, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xe, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @multicast1, @dev, {[@end, @ra={0x94, 0x4}, @generic={0x0, 0xa, "83dc61b1ce570743"}, @timestamp={0x44, 0xc, 0x3b, 0x0, 0x8, [0x3, 0x9]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) (fail_nth: 5) 9.676924183s ago: executing program 3 (id=1641): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x24f5, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x20000000}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) 8.267674713s ago: executing program 4 (id=1642): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f000000a980)='./file0\x00', &(0x7f000000a9c0), 0x8, &(0x7f000000aa00)={'trans=tcp,', {'port', 0x3d, 0x91ffffff}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x24000408) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x42000, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "d569e85f0000fa44966222631e8ac11e00f30020000100000000000000009100"}) setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=0xc3, 0x8, 0x3) 8.134814549s ago: executing program 0 (id=1643): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000026006bab9a1fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038000a004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb64f69853362ac34071", 0x59}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x94, 0x4}]}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x44001033, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000005cc0)={&(0x7f00000009c0), 0x18, &(0x7f0000000d40)={&(0x7f0000004cc0)="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", 0x6fffff9}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x16, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$can_bcm(0x1d, 0x2, 0x2) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x58) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1}, 0x24}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 8.132022125s ago: executing program 3 (id=1644): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x80001, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90) 8.007765693s ago: executing program 2 (id=1645): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f000000a980)='./file0\x00', &(0x7f000000a9c0), 0x8, &(0x7f000000aa00)={'trans=tcp,', {'port', 0x3d, 0x91ffffff}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x24000408) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x42000, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x0, "d569e85f0000fa44966222631e8ac11e00f30020000100000000000000009100"}) setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=0xc3, 0x8, 0x3) 7.977739741s ago: executing program 3 (id=1646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) dup(0xffffffffffffffff) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 7.905161749s ago: executing program 1 (id=1563): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000c40)=ANY=[], 0x0}, 0x90) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r4 = dup(r3) writev(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)="86b3ce7a88416462b41e2946b0bf03baaeb4a5d2dcca21b2fa52707ef2fffff11830258b05e68ce98ed452283b0f4900080000000000000000bb0000", 0x3c}], 0x1) 7.108586885s ago: executing program 0 (id=1647): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) iopl(0x3) 6.876993127s ago: executing program 4 (id=1648): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0xfffffffe}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0xc}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000000ffffffffffffffffffffffe7ee00000000000000000200", 0x57}], 0x1) 6.799280701s ago: executing program 0 (id=1649): syz_open_dev$admmidi(&(0x7f0000000200), 0xd7f3, 0x50600) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050401c9"], 0x7) add_key(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) syz_emit_ethernet(0xfdef, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000070000000000001cecaf7a3b588e32b84352932b2a4907864010100ac1414aa0b009078030000004500000000000000008900000000"], 0x0) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x400480, 0x239) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000240)=0x2) connect$vsock_stream(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(r2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x19}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0)=0x560, 0x4) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0x28) recvmsg(r5, &(0x7f0000000080)={0x0, 0xfffffdf4, 0x0, 0x0, 0x0, 0x0, 0x36}, 0x40002000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) 6.797546951s ago: executing program 3 (id=1650): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x18ffa}], 0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0x0, 0x0, 0x1daf6}, 0x10) memfd_create(0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3801000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000000006c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000480003006465666c61746500"/226], 0x138}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) 6.63848349s ago: executing program 2 (id=1651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8000000) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000100)={0x3, 0x0, 0x2}) unshare(0x8040080) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x61) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x8000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x40042, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="fc", 0xa}]) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, '\x00', 0x100}) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) userfaultfd(0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000000801dda26a0bebe1fb8e1a115a0a1b44defb3636ebda9c1adbc4c318ae1de72707a3a063d48067465e7f56f99c82edd2878a684ca7964b7cc2407069b7e8e44d9a9a84096af7bf61fe40e4332cc2903b7316d1dfdeb4dcb5a06c6e9add90eddff207e870d304e16f3d995907f043f03ff7751381efb07585b7acfd54219ebe736db3540df02b36f948c75b"], 0x30}}, 0x0) socket(0x1d, 0x0, 0x4) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 6.530259318s ago: executing program 4 (id=1652): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000003c0)={0x0, 0x4, 0x1d}) (fail_nth: 7) 2.431921254s ago: executing program 4 (id=1653): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x24f5, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x20000000}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) 2.399056294s ago: executing program 0 (id=1654): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x40, 0x20, 0x4, 0xc}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000033d2a4084020007379db010203010902120001000000000904"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x20048800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffcb8}]}) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) modify_ldt$read(0x0, &(0x7f00000000c0)=""/4122, 0x101a) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000001140)='./file0/../file0/../file0/../file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') rt_sigprocmask(0x0, &(0x7f0000000180), 0xffffffffffffffff, 0x8) write$binfmt_script(r2, &(0x7f0000001180)={'#! ', './file0/../file0/../file0/../file0', [{0x20, 'gh\x049\xce\xad<\xa8\x84rus\xd8\xeb\xb4\xd2j0\x00'}, {0x20, '*'}, {0x20, 'gre0\x00X\x03\xfe\b~\x95\xec3\x8f\x1d\x82X\xcb7\x13\xbf^&\xdb\xb5\xbc\xe9\x9a9v\xe4\a\xfd\x9e\xde\t\x8bHn%\xd5B>\xf1\"\xa6\xb5Bp\xbcE\xa5\xa0Dj\xcc\x1c\xd1\xc4J\x12\x0f#\x84\x9f\xaer^[\xd8.\"\xc8;{\xb6\\JZ\xf5F\xa7[B\xf4\x8fX\xfe'}, {0x20, '\x00\x00)\x88\x00\xf1'}, {0x20, '%{{'}, {0x20, 'aI\xff\xff\xff\xff'}], 0xa, "ef1f164ff163dc0600000034cdc59a73adf3bfde79dbfb7d8b027be9b949cc3aacb000de282a50264e79bb5de19c196df472b9e9b2598ac5bcbd39515ad9330829a34f3071f025e463f2d36e7b72520a75ffc41fee14ee608b0fb46ad3c7be4b98fe90e0dd2f67592e45fbf7e5"}, 0x114) dup3(r0, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r6, &(0x7f00000001c0)=[{&(0x7f00000000c0)="8a", 0x1}], 0x1) openat$dsp(0xffffffffffffff9c, 0x0, 0x802, 0x0) 2.329373665s ago: executing program 3 (id=1655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x63) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000080)=0xe8) chown(&(0x7f0000000040)='./file0\x00', r6, 0xee00) clock_gettime(0x5, &(0x7f0000000000)) 2.227702591s ago: executing program 4 (id=1656): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000001280)='net/udp\x00') socket$inet_udp(0x2, 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_pwait2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x41, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) prlimit64(r4, 0x5, &(0x7f0000000100)={0x3}, 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0x0, 0x2000000) 2.116152555s ago: executing program 2 (id=1657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061112c0000000000b4ef1ceb00c186b69500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$usbmon(0x0, 0x0, 0x10c00) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r9 = dup3(r8, r7, 0x0) preadv(r9, &(0x7f0000000300)=[{&(0x7f0000000000)=""/24, 0x18}, {0x0}], 0x1000000000000374, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="00000000a9321ca0cf00"/20, @ANYRESDEC=r5, @ANYBLOB="0300000000000000640012800b00010067726574617000005400028006000f000200000006000f0008000000060003000200000005001700010000000500170000000000050009000700000005000a00010000000500160001000000050016000200000008000100d20e8fc819fb42575b4afc5f3c327b94b954a9a9e690c6bdf1f652fc90ecd0ef93162a89cef114adce0d48160a776765ab0c4f60db6a9af0df5511cc4f47a54cba1eb03b8160f9ac2db358bedf9c13e12b42887b6b0dce3860aed43ff99830148c19010450563c86345e1922b91b846c90482e186ede6e0170f5a1156d4b11e625", @ANYRES32=r2], 0x8c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000041000701fcffffff00000000017c0000080001"], 0x1c}}, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000019c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001700)={0x264, r10, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff0000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x379f}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d0a3e09}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x53f2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x480}, 0x4000000) 1.954068974s ago: executing program 4 (id=1658): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102370, 0x18fe2}], 0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x1d, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100bd9100000000000006241a00001008241c0000000000090581030002000000090401", @ANYBLOB="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"], 0x0) 0s ago: executing program 3 (id=1659): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) iopl(0x3) kernel console output (not intermixed with test programs): 60 would solve the problem. [ 658.894016][T10372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.909380][T10372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.917080][T10372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.943551][T10372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.325384][T10553] FAULT_INJECTION: forcing a failure. [ 660.325384][T10553] name failslab, interval 1, probability 0, space 0, times 0 [ 660.379108][T10553] CPU: 0 UID: 0 PID: 10553 Comm: syz.1.1234 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 660.389955][T10553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 660.400026][T10553] Call Trace: [ 660.403353][T10553] [ 660.406294][T10553] dump_stack_lvl+0x241/0x360 [ 660.411026][T10553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.416251][T10553] ? __pfx__printk+0x10/0x10 [ 660.420865][T10553] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 660.426544][T10553] ? __pfx___might_resched+0x10/0x10 [ 660.431853][T10553] should_fail_ex+0x3b0/0x4e0 [ 660.436576][T10553] ? security_file_alloc+0x28/0x130 [ 660.441797][T10553] should_failslab+0xac/0x100 [ 660.446495][T10553] ? security_file_alloc+0x28/0x130 [ 660.451713][T10553] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 660.457111][T10553] security_file_alloc+0x28/0x130 [ 660.462243][T10553] init_file+0x99/0x200 [ 660.466424][T10553] alloc_empty_file+0xb8/0x1d0 [ 660.471211][T10553] alloc_file_pseudo+0x1da/0x290 [ 660.476170][T10553] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 660.481655][T10553] ? __local_bh_enable_ip+0x168/0x200 [ 660.487052][T10553] ? bpf_link_prime+0x7a/0x240 [ 660.491838][T10553] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 660.497593][T10553] anon_inode_getfile+0xc8/0x180 [ 660.502559][T10553] bpf_link_prime+0xff/0x240 [ 660.507168][T10553] bpf_raw_tp_link_attach+0x3c4/0x6e0 [ 660.512597][T10553] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 660.518543][T10553] bpf_raw_tracepoint_open+0x1c2/0x240 [ 660.524047][T10553] __sys_bpf+0x3c0/0x810 [ 660.528313][T10553] ? __pfx___sys_bpf+0x10/0x10 [ 660.533108][T10553] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 660.539201][T10553] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 660.545655][T10553] ? do_syscall_64+0x100/0x230 [ 660.550446][T10553] __x64_sys_bpf+0x7c/0x90 [ 660.554883][T10553] do_syscall_64+0xf3/0x230 [ 660.559499][T10553] ? clear_bhb_loop+0x35/0x90 [ 660.564197][T10553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.570108][T10553] RIP: 0033:0x7fb891b779f9 [ 660.574543][T10553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.594167][T10553] RSP: 002b:00007fb892930038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 660.602602][T10553] RAX: ffffffffffffffda RBX: 00007fb891d05f80 RCX: 00007fb891b779f9 [ 660.610638][T10553] RDX: 0000000000000010 RSI: 0000000020000480 RDI: 0000000000000011 [ 660.618650][T10553] RBP: 00007fb892930090 R08: 0000000000000000 R09: 0000000000000000 [ 660.626662][T10553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.634652][T10553] R13: 0000000000000000 R14: 00007fb891d05f80 R15: 00007ffcb809e7e8 [ 660.642663][T10553] [ 660.660869][T10372] hsr_slave_0: entered promiscuous mode [ 660.699482][T10372] hsr_slave_1: entered promiscuous mode [ 660.714451][T10372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.722227][T10372] Cannot create hsr debugfs directory [ 660.728137][T10556] FAULT_INJECTION: forcing a failure. [ 660.728137][T10556] name failslab, interval 1, probability 0, space 0, times 0 [ 660.754830][T10556] CPU: 1 UID: 0 PID: 10556 Comm: syz.2.1236 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 660.765674][T10556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 660.775834][T10556] Call Trace: [ 660.779156][T10556] [ 660.782123][T10556] dump_stack_lvl+0x241/0x360 [ 660.786868][T10556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.792127][T10556] ? __pfx__printk+0x10/0x10 [ 660.796877][T10556] ? __kmalloc_noprof+0xb0/0x400 [ 660.801874][T10556] ? __pfx___might_resched+0x10/0x10 [ 660.807308][T10556] should_fail_ex+0x3b0/0x4e0 [ 660.812041][T10556] ? nf_tables_newrule+0x15e2/0x2960 [ 660.817400][T10556] should_failslab+0xac/0x100 [ 660.822126][T10556] ? nf_tables_newrule+0x15e2/0x2960 [ 660.827468][T10556] __kmalloc_noprof+0xd8/0x400 [ 660.832295][T10556] nf_tables_newrule+0x15e2/0x2960 [ 660.837492][T10556] ? __pfx_nf_tables_newrule+0x10/0x10 [ 660.843204][T10556] ? __nla_parse+0x40/0x60 [ 660.847674][T10556] nfnetlink_rcv+0x1427/0x2a90 [ 660.852522][T10556] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 660.857838][T10556] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.863091][T10556] ? skb_clone+0x240/0x390 [ 660.867524][T10556] ? __pfx_lock_release+0x10/0x10 [ 660.872732][T10556] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.878080][T10556] netlink_unicast+0x7f0/0x990 [ 660.882916][T10556] ? __pfx_netlink_unicast+0x10/0x10 [ 660.888262][T10556] ? __virt_addr_valid+0x183/0x530 [ 660.893432][T10556] ? __check_object_size+0x49c/0x900 [ 660.898775][T10556] ? bpf_lsm_netlink_send+0x9/0x10 [ 660.903945][T10556] netlink_sendmsg+0x8e4/0xcb0 [ 660.908787][T10556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.914139][T10556] ? __import_iovec+0x536/0x820 [ 660.919050][T10556] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 660.924390][T10556] ? security_socket_sendmsg+0x87/0xb0 [ 660.929905][T10556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.935222][T10556] __sock_sendmsg+0x221/0x270 [ 660.939923][T10556] ____sys_sendmsg+0x525/0x7d0 [ 660.944707][T10556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.950017][T10556] __sys_sendmsg+0x2b0/0x3a0 [ 660.954640][T10556] ? __pfx___sys_sendmsg+0x10/0x10 [ 660.959804][T10556] ? vfs_write+0x7c4/0xc90 [ 660.964271][T10556] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 660.970793][T10556] ? do_syscall_64+0x100/0x230 [ 660.975572][T10556] ? do_syscall_64+0xb6/0x230 [ 660.980277][T10556] do_syscall_64+0xf3/0x230 [ 660.984834][T10556] ? clear_bhb_loop+0x35/0x90 [ 660.989558][T10556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.995516][T10556] RIP: 0033:0x7f0b0d3779f9 [ 660.999992][T10556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.019620][T10556] RSP: 002b:00007f0b0e071038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.028063][T10556] RAX: ffffffffffffffda RBX: 00007f0b0d505f80 RCX: 00007f0b0d3779f9 [ 661.036063][T10556] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 661.044050][T10556] RBP: 00007f0b0e071090 R08: 0000000000000000 R09: 0000000000000000 [ 661.052032][T10556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.060035][T10556] R13: 0000000000000000 R14: 00007f0b0d505f80 R15: 00007ffcad6c4688 [ 661.068032][T10556] [ 661.090196][ T29] audit: type=1326 audit(1723390543.236:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10562 comm="syz.1.1238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb891b779f9 code=0x0 [ 662.065819][T10566] veth1_macvtap: mtu greater than device maximum [ 662.956011][T10587] 9pnet_fd: Insufficient options for proto=fd [ 664.101849][T10599] can: request_module (can-proto-5) failed. [ 664.257207][ T5269] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 664.257638][T10606] FAULT_INJECTION: forcing a failure. [ 664.257638][T10606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.311294][T10606] CPU: 0 UID: 0 PID: 10606 Comm: syz.0.1245 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 664.322323][T10606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 664.332427][T10606] Call Trace: [ 664.335744][T10606] [ 664.338712][T10606] dump_stack_lvl+0x241/0x360 [ 664.343509][T10606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 664.348771][T10606] ? __pfx__printk+0x10/0x10 [ 664.353430][T10606] ? snprintf+0xda/0x120 [ 664.357730][T10606] should_fail_ex+0x3b0/0x4e0 [ 664.362564][T10606] _copy_to_user+0x2f/0xb0 [ 664.367037][T10606] simple_read_from_buffer+0xca/0x150 [ 664.372475][T10606] proc_fail_nth_read+0x1e9/0x250 [ 664.377569][T10606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.383183][T10606] ? rw_verify_area+0x520/0x6b0 [ 664.388097][T10606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.393711][T10606] vfs_read+0x204/0xbc0 [ 664.397946][T10606] ? __pfx_lock_release+0x10/0x10 [ 664.403033][T10606] ? __pfx_vfs_read+0x10/0x10 [ 664.407781][T10606] ? __fget_files+0x29/0x470 [ 664.412426][T10606] ? __fget_files+0x3f6/0x470 [ 664.417172][T10606] ksys_read+0x1a0/0x2c0 [ 664.421476][T10606] ? __pfx_ksys_read+0x10/0x10 [ 664.426298][T10606] ? do_syscall_64+0x100/0x230 [ 664.431201][T10606] ? do_syscall_64+0xb6/0x230 [ 664.436022][T10606] do_syscall_64+0xf3/0x230 [ 664.440573][T10606] ? clear_bhb_loop+0x35/0x90 [ 664.445280][T10606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.451199][T10606] RIP: 0033:0x7f8c32f7643c [ 664.455632][T10606] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 664.475255][T10606] RSP: 002b:00007f8c33d2b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 664.483704][T10606] RAX: ffffffffffffffda RBX: 00007f8c33105f80 RCX: 00007f8c32f7643c [ 664.491690][T10606] RDX: 000000000000000f RSI: 00007f8c33d2b0a0 RDI: 0000000000000005 [ 664.500206][T10606] RBP: 00007f8c33d2b090 R08: 0000000000000000 R09: 0000000000000000 [ 664.508187][T10606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.516172][T10606] R13: 0000000000000000 R14: 00007f8c33105f80 R15: 00007ffc752ee0e8 [ 664.524168][T10606] [ 664.563179][ T5269] usb 4-1: config 0 has an invalid interface number: 124 but max is 0 [ 664.591432][ T5269] usb 4-1: config 0 has no interface number 0 [ 664.597628][ T5269] usb 4-1: config 0 interface 124 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 664.914612][ T5269] usb 4-1: config 0 interface 124 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 664.932086][ T5269] usb 4-1: config 0 interface 124 altsetting 0 endpoint 0xD has invalid maxpacket 1552, setting to 64 [ 664.944083][ T5269] usb 4-1: config 0 interface 124 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 664.957859][ T5269] usb 4-1: config 0 interface 124 altsetting 0 endpoint 0x86 has invalid maxpacket 59461, setting to 64 [ 664.970209][ T5269] usb 4-1: config 0 interface 124 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 664.986836][ T5269] usb 4-1: New USB device found, idVendor=058f, idProduct=9720, bcdDevice=ec.28 [ 665.032603][ T5269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.108961][ T5269] usb 4-1: Product: syz [ 665.113544][ T5269] usb 4-1: Manufacturer: syz [ 665.118190][ T5269] usb 4-1: SerialNumber: syz [ 665.136283][ T5269] usb 4-1: config 0 descriptor?? [ 665.159014][T10602] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 665.176302][T10602] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 665.352814][T10602] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 665.652798][T10626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.676911][T10626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.389106][ T5269] pl2303 4-1:0.124: required interrupt-in endpoint missing [ 666.509707][ T5269] usb 4-1: USB disconnect, device number 39 [ 666.711933][ T29] audit: type=1326 audit(1723390548.826:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10630 comm="syz.3.1250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f998e1779f9 code=0x0 [ 667.601924][ T5268] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 667.703816][T10372] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 667.848138][T10372] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 667.878375][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 667.927735][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 96, setting to 64 [ 667.973287][T10372] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 667.980661][ T5268] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 668.016078][ T5268] usb 3-1: New USB device found, idVendor=84bd, idProduct=0909, bcdDevice= 0.00 [ 668.041672][ T5268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.069414][ T5268] usb 3-1: config 0 descriptor?? [ 668.075105][T10372] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 668.116982][T10635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 668.942194][ T5268] usbhid 3-1:0.0: can't add hid device: -71 [ 668.974822][ T5268] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 669.025548][T10372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.058193][ T5268] usb 3-1: USB disconnect, device number 21 [ 669.180514][T10372] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.277567][ T8739] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.285467][ T8739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.388341][ T8739] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.395669][ T8739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.975136][T10674] ufs: You didn't specify the type of your ufs filesystem [ 670.975136][T10674] [ 670.975136][T10674] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 670.975136][T10674] [ 670.975136][T10674] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 671.067240][T10674] syz.2.1257: attempt to access beyond end of device [ 671.067240][T10674] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 671.493804][T10687] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 672.603453][ T5218] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 673.114954][T10372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.343346][T10708] FAULT_INJECTION: forcing a failure. [ 673.343346][T10708] name failslab, interval 1, probability 0, space 0, times 0 [ 673.356937][T10708] CPU: 0 UID: 0 PID: 10708 Comm: syz.2.1263 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 673.367742][T10708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 673.377827][T10708] Call Trace: [ 673.381117][T10708] [ 673.384492][T10708] dump_stack_lvl+0x241/0x360 [ 673.389206][T10708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 673.394433][T10708] ? __pfx__printk+0x10/0x10 [ 673.399045][T10708] ? __kmalloc_noprof+0xb0/0x400 [ 673.404004][T10708] ? __pfx___might_resched+0x10/0x10 [ 673.409312][T10708] should_fail_ex+0x3b0/0x4e0 [ 673.414096][T10708] ? ctnl_timeout_parse_policy+0x5a/0x1d0 [ 673.419844][T10708] should_failslab+0xac/0x100 [ 673.424545][T10708] ? ctnl_timeout_parse_policy+0x5a/0x1d0 [ 673.430282][T10708] __kmalloc_noprof+0xd8/0x400 [ 673.435064][T10708] ? cttimeout_new_timeout+0x276/0x760 [ 673.440539][T10708] ctnl_timeout_parse_policy+0x5a/0x1d0 [ 673.446114][T10708] cttimeout_new_timeout+0x2dd/0x760 [ 673.451422][T10708] ? nfnetlink_rcv_msg+0x225/0x1180 [ 673.456640][T10708] nfnetlink_rcv_msg+0xbec/0x1180 [ 673.461686][T10708] ? nfnetlink_rcv_msg+0x225/0x1180 [ 673.466916][T10708] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 673.472421][T10708] ? __pfx___schedule+0x10/0x10 [ 673.477295][T10708] netlink_rcv_skb+0x1e3/0x430 [ 673.482085][T10708] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 673.487577][T10708] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.492942][T10708] ? safesetid_security_capable+0xb2/0x1d0 [ 673.498777][T10708] ? bpf_lsm_capable+0x9/0x10 [ 673.503472][T10708] ? security_capable+0x90/0xb0 [ 673.508353][T10708] nfnetlink_rcv+0x297/0x2a90 [ 673.513061][T10708] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 673.519080][T10708] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 673.525441][T10708] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 673.531367][T10708] ? lockdep_hardirqs_on+0x99/0x150 [ 673.536598][T10708] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 673.541734][T10708] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 673.547642][T10708] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 673.553999][T10708] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 673.560622][T10708] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 673.567581][T10708] ? rcu_is_watching+0x15/0xb0 [ 673.572368][T10708] ? rcu_read_unlock_special+0x470/0x550 [ 673.578026][T10708] ? skb_clone+0x240/0x390 [ 673.582459][T10708] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 673.588454][T10708] ? __netlink_deliver_tap+0x77e/0x7c0 [ 673.593952][T10708] ? __rcu_read_unlock+0xa1/0x110 [ 673.598996][T10708] netlink_unicast+0x7f0/0x990 [ 673.603802][T10708] ? __pfx_netlink_unicast+0x10/0x10 [ 673.609105][T10708] ? __virt_addr_valid+0x183/0x530 [ 673.614238][T10708] ? __check_object_size+0x49c/0x900 [ 673.619541][T10708] ? bpf_lsm_netlink_send+0x9/0x10 [ 673.624673][T10708] netlink_sendmsg+0x8e4/0xcb0 [ 673.629459][T10708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.634766][T10708] ? __import_iovec+0x536/0x820 [ 673.639634][T10708] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 673.644933][T10708] ? security_socket_sendmsg+0x87/0xb0 [ 673.650407][T10708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.655700][T10708] __sock_sendmsg+0x221/0x270 [ 673.660404][T10708] ____sys_sendmsg+0x525/0x7d0 [ 673.665200][T10708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.670529][T10708] __sys_sendmsg+0x2b0/0x3a0 [ 673.675143][T10708] ? __pfx___sys_sendmsg+0x10/0x10 [ 673.680265][T10708] ? vfs_write+0x7c4/0xc90 [ 673.684738][T10708] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 673.691112][T10708] ? do_syscall_64+0x100/0x230 [ 673.695901][T10708] ? do_syscall_64+0xb6/0x230 [ 673.700623][T10708] do_syscall_64+0xf3/0x230 [ 673.705185][T10708] ? clear_bhb_loop+0x35/0x90 [ 673.709893][T10708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.715805][T10708] RIP: 0033:0x7f0b0d3779f9 [ 673.720234][T10708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.739853][T10708] RSP: 002b:00007f0b0cdde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.748307][T10708] RAX: ffffffffffffffda RBX: 00007f0b0d506130 RCX: 00007f0b0d3779f9 [ 673.756315][T10708] RDX: 0000000000000000 RSI: 0000000020000980 RDI: 0000000000000009 [ 673.764316][T10708] RBP: 00007f0b0cdde090 R08: 0000000000000000 R09: 0000000000000000 [ 673.772305][T10708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.780295][T10708] R13: 0000000000000000 R14: 00007f0b0d506130 R15: 00007ffcad6c4688 [ 673.788297][T10708] [ 673.841209][ T5218] usb 1-1: device descriptor read/64, error -71 [ 674.111736][ T5218] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 674.555491][ T5218] usb 1-1: device descriptor read/64, error -71 [ 674.587377][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1264'. [ 674.713144][ T5218] usb usb1-port1: attempt power cycle [ 674.951662][ T942] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 675.181634][ T5218] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 675.227742][ T942] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 675.303279][ T942] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 675.368781][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.399650][ T942] usb 2-1: config 0 descriptor?? [ 675.446607][ T942] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 675.479832][ T5218] usb 1-1: device not accepting address 47, error -71 [ 675.645024][T10717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.707283][T10717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.760947][T10372] veth0_vlan: entered promiscuous mode [ 675.789431][ T4654] bcm5974 2-1:0.0: could not read from device [ 675.921649][ T5218] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 675.944704][T10372] veth1_vlan: entered promiscuous mode [ 675.960098][ T942] usb 2-1: USB disconnect, device number 33 [ 676.055421][ T5218] usb 1-1: Using ep0 maxpacket: 8 [ 676.084050][ T5218] usb 1-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=db.79 [ 676.155993][ T5218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.199415][ T5218] usb 1-1: Product: syz [ 676.228358][ T5218] usb 1-1: Manufacturer: syz [ 676.268080][ T5218] usb 1-1: SerialNumber: syz [ 676.344724][ T5218] usb 1-1: config 0 descriptor?? [ 676.386821][T10372] veth0_macvtap: entered promiscuous mode [ 676.464500][T10372] veth1_macvtap: entered promiscuous mode [ 676.506215][ T5218] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 676.606433][T10372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.690662][T10372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.767564][T10372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.847260][T10372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.986143][T10372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.021847][T10372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.035149][T10372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.053413][T10372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.084579][T10372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.118561][T10372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.129994][T10372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.149503][T10372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.165918][T10372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.209457][T10372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.315318][T10372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.328275][T10372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.342458][T10372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.354016][T10372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.377894][T10372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.412748][T10372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.519599][T10372] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.559294][T10372] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.564171][T10754] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1273'. [ 677.616249][T10754] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1273'. [ 677.632069][T10372] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.641193][T10372] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.620818][T10754] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1273'. [ 678.685926][ T2537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.723124][T10763] autofs: Unknown parameter '0x0000000000000000' [ 678.738313][T10754] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1273'. [ 678.760528][ T2537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.951205][ T9500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.982679][ T9500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.244130][T10754] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1273'. [ 679.331984][T10754] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1273'. [ 679.392650][T10771] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1275'. [ 679.894170][T10752] delete_channel: no stack [ 680.014088][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1276'. [ 681.763690][ T2038] usb 1-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 681.802134][ T59] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 681.891606][ T2038] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 682.627553][ T59] usb 4-1: Using ep0 maxpacket: 8 [ 682.635582][ T29] audit: type=1326 audit(1723390564.356:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10797 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb891b779f9 code=0x7ffc0000 [ 682.843843][ T29] audit: type=1326 audit(1723390564.356:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10797 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb891b779f9 code=0x7ffc0000 [ 683.204816][ T59] usb 4-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=db.79 [ 683.214468][ T29] audit: type=1326 audit(1723390564.356:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10797 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb891b779f9 code=0x7ffc0000 [ 683.376324][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1282'. [ 683.400323][ T59] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.495793][ T29] audit: type=1326 audit(1723390564.356:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10797 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb891b779f9 code=0x7ffc0000 [ 683.526875][ T59] usb 4-1: Product: syz [ 683.531067][ T59] usb 4-1: Manufacturer: syz [ 683.692449][ T59] usb 4-1: SerialNumber: syz [ 683.750542][ T59] usb 4-1: config 0 descriptor?? [ 683.857328][ T29] audit: type=1326 audit(1723390564.356:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10797 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb891b779f9 code=0x7ffc0000 [ 684.048693][ T29] audit: type=1326 audit(1723390564.356:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10797 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fb891b779f9 code=0x7ffc0000 [ 684.729723][T10821] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 684.738444][T10821] cramfs: wrong magic [ 685.247714][ T29] audit: type=1326 audit(1723390564.356:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10797 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb891b779f9 code=0x7ffc0000 [ 685.569318][ T29] audit: type=1326 audit(1723390564.356:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10797 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb891b779f9 code=0x7ffc0000 [ 685.753147][ T59] usb 4-1: can't set config #0, error -71 [ 685.790185][ T29] audit: type=1326 audit(1723390564.356:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10797 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fb891b779f9 code=0x7ffc0000 [ 685.921802][ T59] usb 4-1: USB disconnect, device number 40 [ 685.955319][ T29] audit: type=1326 audit(1723390564.356:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10797 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb891b779f9 code=0x7ffc0000 [ 686.115818][T10833] syz_tun: entered promiscuous mode [ 686.205301][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.212301][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.820839][T10830] syz.4.1285 (10830) used greatest stack depth: 18128 bytes left [ 686.852891][T10832] syz_tun: left promiscuous mode [ 687.464212][T10849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1288'. [ 687.913198][T10843] delete_channel: no stack [ 688.213519][ T4607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 688.232172][ T4607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 688.278505][ T4607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 688.291086][ T4607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 688.306574][ T4607] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 688.315612][ T4607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 689.105808][ T5267] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 689.354255][ T5267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.373506][ T5267] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 689.382920][ T5267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.452429][ T5267] usb 2-1: config 0 descriptor?? [ 689.886088][T10860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.936052][T10860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.006809][T10860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.073990][ T5224] Bluetooth: hci3: command tx timeout [ 695.082444][ T5267] usbhid 2-1:0.0: can't add hid device: -32 [ 695.088520][ T5267] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 695.157204][T10860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.643410][ T5337] usb 2-1: USB disconnect, device number 34 [ 695.797007][T10851] chnl_net:caif_netlink_parms(): no params data found [ 695.958634][T10886] fuse: Bad value for 'rootmode' [ 697.460322][ T5224] Bluetooth: hci3: command tx timeout [ 699.230923][T10851] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.276034][T10851] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.323728][T10851] bridge_slave_0: entered allmulticast mode [ 699.366993][T10920] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1303'. [ 699.367231][T10851] bridge_slave_0: entered promiscuous mode [ 699.471675][ T5224] Bluetooth: hci3: command tx timeout [ 699.494184][T10851] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.561852][T10851] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.622206][T10851] bridge_slave_1: entered allmulticast mode [ 699.649779][T10851] bridge_slave_1: entered promiscuous mode [ 700.145450][T10851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.270308][T10851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.617472][ T5337] usb 1-1: USB disconnect, device number 48 [ 700.953958][ T5218] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 701.181001][ T5218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.205477][ T751] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.216610][ T5218] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 701.261243][ T5218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.272974][ T5218] usb 3-1: config 0 descriptor?? [ 701.354197][T10851] team0: Port device team_slave_0 added [ 701.436008][T10851] team0: Port device team_slave_1 added [ 701.552146][ T5224] Bluetooth: hci3: command tx timeout [ 701.635311][ T751] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.699527][T10931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.773714][T10931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.828475][T10931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.859548][T10931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.005980][ T5218] usbhid 3-1:0.0: can't add hid device: -71 [ 702.014013][T10851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.021018][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.047886][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.080703][ T5218] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 702.126015][ T5218] usb 3-1: USB disconnect, device number 22 [ 702.196983][T10851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.236283][T10945] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 702.310516][ T751] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.423657][T10851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.430754][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.456825][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.562067][T10851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.824880][ T751] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.767104][T10851] hsr_slave_0: entered promiscuous mode [ 703.865786][T10851] hsr_slave_1: entered promiscuous mode [ 703.898257][T10851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 703.921726][T10851] Cannot create hsr debugfs directory [ 704.966021][T10991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.196913][ T751] bridge_slave_1: left allmulticast mode [ 705.257767][ T751] bridge_slave_1: left promiscuous mode [ 705.306455][ T751] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.669778][ T751] bridge_slave_0: left allmulticast mode [ 705.704246][ T751] bridge_slave_0: left promiscuous mode [ 705.802853][ T751] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.776500][ T751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.903556][ T751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.016522][ T751] bond0 (unregistering): Released all slaves [ 713.549758][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 713.549778][ T29] audit: type=1326 audit(1723390595.696:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.1332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb891b779f9 code=0x0 [ 715.593322][T11076] FAULT_INJECTION: forcing a failure. [ 715.593322][T11076] name failslab, interval 1, probability 0, space 0, times 0 [ 715.698106][T11076] CPU: 1 UID: 0 PID: 11076 Comm: syz.2.1336 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 715.708945][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 715.719042][T11076] Call Trace: [ 715.722369][T11076] [ 715.725333][T11076] dump_stack_lvl+0x241/0x360 [ 715.730065][T11076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 715.735318][T11076] ? __pfx__printk+0x10/0x10 [ 715.740054][T11076] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 715.746088][T11076] ? __pfx___might_resched+0x10/0x10 [ 715.751438][T11076] should_fail_ex+0x3b0/0x4e0 [ 715.756165][T11076] should_failslab+0xac/0x100 [ 715.760891][T11076] ? __alloc_skb+0x1c3/0x440 [ 715.765526][T11076] kmem_cache_alloc_node_noprof+0x71/0x320 [ 715.771392][T11076] __alloc_skb+0x1c3/0x440 [ 715.775860][T11076] ? __pfx___alloc_skb+0x10/0x10 [ 715.780845][T11076] ? netlink_autobind+0xd6/0x2f0 [ 715.785842][T11076] ? netlink_autobind+0x2b0/0x2f0 [ 715.790915][T11076] netlink_sendmsg+0x638/0xcb0 [ 715.795738][T11076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.801065][T11076] ? __import_iovec+0x536/0x820 [ 715.805992][T11076] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 715.811360][T11076] ? security_socket_sendmsg+0x87/0xb0 [ 715.817026][T11076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.822407][T11076] __sock_sendmsg+0x221/0x270 [ 715.827229][T11076] ____sys_sendmsg+0x525/0x7d0 [ 715.832021][T11076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 715.837354][T11076] __sys_sendmsg+0x2b0/0x3a0 [ 715.841965][T11076] ? __pfx___sys_sendmsg+0x10/0x10 [ 715.847123][T11076] ? vfs_write+0x7c4/0xc90 [ 715.851590][T11076] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 715.858025][T11076] ? do_syscall_64+0x100/0x230 [ 715.862797][T11076] ? do_syscall_64+0xb6/0x230 [ 715.867484][T11076] do_syscall_64+0xf3/0x230 [ 715.872004][T11076] ? clear_bhb_loop+0x35/0x90 [ 715.876695][T11076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.882623][T11076] RIP: 0033:0x7f0b0d3779f9 [ 715.887059][T11076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.906868][T11076] RSP: 002b:00007f0b0e071038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.915299][T11076] RAX: ffffffffffffffda RBX: 00007f0b0d505f80 RCX: 00007f0b0d3779f9 [ 715.923367][T11076] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 715.931358][T11076] RBP: 00007f0b0e071090 R08: 0000000000000000 R09: 0000000000000000 [ 715.939498][T11076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.947492][T11076] R13: 0000000000000000 R14: 00007f0b0d505f80 R15: 00007ffcad6c4688 [ 715.955508][T11076] [ 717.326036][ T4607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 717.337489][ T4607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 717.349921][ T4607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 717.360549][ T4607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 717.954028][ T4607] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 717.961983][ T4607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 718.525517][ T751] hsr_slave_0: left promiscuous mode [ 718.563128][ T751] hsr_slave_1: left promiscuous mode [ 718.622946][ T751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.656367][ T751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.686977][ T751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.634863][ T751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.744655][ T751] veth1_macvtap: left promiscuous mode [ 719.768008][ T751] veth0_macvtap: left promiscuous mode [ 719.782067][ T751] veth1_vlan: left promiscuous mode [ 719.801744][ T751] veth0_vlan: left promiscuous mode [ 720.034115][ T4607] Bluetooth: hci1: command tx timeout [ 721.569410][T11134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1346'. [ 721.701222][T11135] netlink: 'syz.1.1346': attribute type 1 has an invalid length. [ 721.743023][T11135] netlink: 9348 bytes leftover after parsing attributes in process `syz.1.1346'. [ 721.771634][T11135] netlink: 'syz.1.1346': attribute type 1 has an invalid length. [ 721.779441][T11135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1346'. [ 722.111684][ T4607] Bluetooth: hci1: command tx timeout [ 722.988484][T11142] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1348'. [ 723.304476][ T751] team0 (unregistering): Port device team_slave_1 removed [ 723.407943][ T751] team0 (unregistering): Port device team_slave_0 removed [ 724.192272][ T4607] Bluetooth: hci1: command tx timeout [ 724.298005][T11134] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1346'. [ 725.402054][T11152] Device name cannot be null; rc = [-22] [ 725.532570][T11159] FAULT_INJECTION: forcing a failure. [ 725.532570][T11159] name failslab, interval 1, probability 0, space 0, times 0 [ 725.554509][T11159] CPU: 1 UID: 0 PID: 11159 Comm: syz.4.1353 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 725.565357][T11159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 725.575458][T11159] Call Trace: [ 725.578773][T11159] [ 725.581742][T11159] dump_stack_lvl+0x241/0x360 [ 725.586478][T11159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 725.591722][T11159] ? __pfx__printk+0x10/0x10 [ 725.596360][T11159] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 725.601961][T11159] ? __pfx___might_resched+0x10/0x10 [ 725.607302][T11159] should_fail_ex+0x3b0/0x4e0 [ 725.612024][T11159] should_failslab+0xac/0x100 [ 725.616746][T11159] ? hash_ipmark_create+0x3b9/0x1190 [ 725.622083][T11159] __kmalloc_cache_noprof+0x6c/0x2c0 [ 725.627414][T11159] ? __pfx_lock_acquire+0x10/0x10 [ 725.632492][T11159] hash_ipmark_create+0x3b9/0x1190 [ 725.637670][T11159] ? __nla_parse+0x40/0x60 [ 725.642138][T11159] ? __pfx_hash_ipmark_create+0x10/0x10 [ 725.647744][T11159] ip_set_create+0xa5c/0x1900 [ 725.652480][T11159] ? ip_set_create+0x45e/0x1900 [ 725.657383][T11159] ? trace_raw_output_contention_end+0x92/0xd0 [ 725.663610][T11159] ? __pfx_ip_set_create+0x10/0x10 [ 725.668747][T11159] ? trace_contention_end+0x3c/0x120 [ 725.674077][T11159] ? nfnetlink_rcv_msg+0x225/0x1180 [ 725.679289][T11159] nfnetlink_rcv_msg+0xbec/0x1180 [ 725.684325][T11159] ? kernel_text_address+0xa7/0xe0 [ 725.689447][T11159] ? nfnetlink_rcv_msg+0x225/0x1180 [ 725.694678][T11159] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 725.700167][T11159] ? netlink_deliver_tap+0x19d/0x1b0 [ 725.705471][T11159] ? netlink_unicast+0x7be/0x990 [ 725.710449][T11159] ? netlink_sendmsg+0x8e4/0xcb0 [ 725.715420][T11159] ? __sock_sendmsg+0x221/0x270 [ 725.720291][T11159] ? ____sys_sendmsg+0x525/0x7d0 [ 725.725244][T11159] ? __sys_sendmsg+0x2b0/0x3a0 [ 725.730020][T11159] ? do_syscall_64+0xf3/0x230 [ 725.734706][T11159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.740796][T11159] netlink_rcv_skb+0x1e3/0x430 [ 725.745579][T11159] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 725.751053][T11159] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 725.756370][T11159] ? safesetid_security_capable+0xb2/0x1d0 [ 725.762198][T11159] ? bpf_lsm_capable+0x9/0x10 [ 725.766883][T11159] ? security_capable+0x90/0xb0 [ 725.771760][T11159] nfnetlink_rcv+0x297/0x2a90 [ 725.776452][T11159] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 725.782193][T11159] ? __dev_queue_xmit+0x2da/0x3e90 [ 725.787319][T11159] ? __dev_queue_xmit+0x1763/0x3e90 [ 725.792528][T11159] ? kasan_save_track+0x51/0x80 [ 725.797399][T11159] ? do_syscall_64+0xf3/0x230 [ 725.802085][T11159] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 725.807208][T11159] ? __dev_queue_xmit+0x2da/0x3e90 [ 725.812335][T11159] ? __pfx___dev_queue_xmit+0x10/0x10 [ 725.817740][T11159] ? ref_tracker_free+0x643/0x7e0 [ 725.822781][T11159] ? __asan_memcpy+0x40/0x70 [ 725.827387][T11159] ? __pfx_ref_tracker_free+0x10/0x10 [ 725.832787][T11159] ? netlink_deliver_tap+0x2e/0x1b0 [ 725.838005][T11159] ? skb_clone+0x240/0x390 [ 725.842436][T11159] ? __pfx_lock_release+0x10/0x10 [ 725.847505][T11159] ? __netlink_deliver_tap+0x77e/0x7c0 [ 725.852997][T11159] ? netlink_deliver_tap+0x2e/0x1b0 [ 725.858221][T11159] netlink_unicast+0x7f0/0x990 [ 725.863011][T11159] ? __pfx_netlink_unicast+0x10/0x10 [ 725.868314][T11159] ? __virt_addr_valid+0x183/0x530 [ 725.873436][T11159] ? __check_object_size+0x49c/0x900 [ 725.878734][T11159] ? bpf_lsm_netlink_send+0x9/0x10 [ 725.883862][T11159] netlink_sendmsg+0x8e4/0xcb0 [ 725.888645][T11159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.893941][T11159] ? __import_iovec+0x536/0x820 [ 725.898809][T11159] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 725.904105][T11159] ? security_socket_sendmsg+0x87/0xb0 [ 725.909582][T11159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.914894][T11159] __sock_sendmsg+0x221/0x270 [ 725.919596][T11159] ____sys_sendmsg+0x525/0x7d0 [ 725.924392][T11159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 725.929706][T11159] __sys_sendmsg+0x2b0/0x3a0 [ 725.934313][T11159] ? __pfx___sys_sendmsg+0x10/0x10 [ 725.939439][T11159] ? vfs_write+0x7c4/0xc90 [ 725.943909][T11159] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 725.950258][T11159] ? do_syscall_64+0x100/0x230 [ 725.955034][T11159] ? do_syscall_64+0xb6/0x230 [ 725.959742][T11159] do_syscall_64+0xf3/0x230 [ 725.964258][T11159] ? clear_bhb_loop+0x35/0x90 [ 725.968955][T11159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.974857][T11159] RIP: 0033:0x7f18347779f9 [ 725.979282][T11159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.998894][T11159] RSP: 002b:00007f1835594038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.007341][T11159] RAX: ffffffffffffffda RBX: 00007f1834905f80 RCX: 00007f18347779f9 [ 726.015340][T11159] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 726.023329][T11159] RBP: 00007f1835594090 R08: 0000000000000000 R09: 0000000000000000 [ 726.031318][T11159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.039296][T11159] R13: 0000000000000000 R14: 00007f1834905f80 R15: 00007ffcacfb4578 [ 726.047311][T11159] [ 726.120120][T10851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 726.271597][ T4607] Bluetooth: hci1: command tx timeout [ 726.278742][T10851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 726.309215][T10851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 726.511705][T10851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 726.576254][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'. [ 726.828770][T11086] chnl_net:caif_netlink_parms(): no params data found [ 728.410401][ T751] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.837850][ T751] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.841671][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 730.021139][ T751] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.047054][T11086] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.062618][T11086] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.070404][ T9] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 730.078950][T11086] bridge_slave_0: entered allmulticast mode [ 730.085270][ T9] usb 2-1: config 0 has no interface number 0 [ 730.098599][T11086] bridge_slave_0: entered promiscuous mode [ 730.106245][ T9] usb 2-1: config 0 interface 52 has no altsetting 0 [ 730.133149][ T9] usb 2-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=f2.cf [ 730.142536][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.150711][ T9] usb 2-1: Product: syz [ 730.156377][ T9] usb 2-1: Manufacturer: syz [ 730.161028][ T9] usb 2-1: SerialNumber: syz [ 730.172508][ T9] usb 2-1: config 0 descriptor?? [ 730.188782][ T751] bond0: (slave ): Releasing backup interface [ 730.211108][ T751] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.239779][T11086] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.503962][T11086] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.515047][T11086] bridge_slave_1: entered allmulticast mode [ 730.527752][T11086] bridge_slave_1: entered promiscuous mode [ 730.660702][T11086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.742171][T11086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.898653][T11086] team0: Port device team_slave_0 added [ 730.925012][T11086] team0: Port device team_slave_1 added [ 731.262038][T11086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.269054][T11086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.308564][T11086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.422673][T11086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.438021][T11086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.506768][T11086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.563188][ T9] qmi_wwan 2-1:0.52: More than one union descriptor, skipping ... [ 731.595226][ T9] qmi_wwan 2-1:0.52: probe with driver qmi_wwan failed with error -22 [ 731.653997][ T9] usb 2-1: USB disconnect, device number 35 [ 731.703126][T10851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.911817][ T751] bridge_slave_1: left allmulticast mode [ 731.917551][ T751] bridge_slave_1: left promiscuous mode [ 731.980377][ T751] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.833760][T11233] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 732.844956][T11233] cramfs: wrong magic [ 733.028319][ T751] bridge_slave_0: left allmulticast mode [ 733.077786][ T751] bridge_slave_0: left promiscuous mode [ 733.111839][ T751] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.120317][T11249] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 735.128399][T11249] cramfs: wrong magic [ 736.027266][T11254] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1374'. [ 736.274352][ T59] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 736.351814][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 736.489894][ T59] usb 5-1: Using ep0 maxpacket: 32 [ 736.506788][ T59] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 736.516862][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.528910][ T59] usb 5-1: config 0 descriptor?? [ 736.538750][ T59] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 736.556324][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 736.576028][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 736.586616][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 736.606649][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 736.630720][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.655382][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 736.677515][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.691899][ T751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.716465][ T751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.747799][ T751] bond0 (unregistering): Released all slaves [ 736.917895][ T25] usb 3-1: usb_control_msg returned -32 [ 736.927857][T11086] hsr_slave_0: entered promiscuous mode [ 736.936994][ T25] usbtmc 3-1:16.0: can't read capabilities [ 736.952411][T11086] hsr_slave_1: entered promiscuous mode [ 736.981715][T11086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 736.989357][T11086] Cannot create hsr debugfs directory [ 737.012665][ T751] tipc: Disabling bearer [ 737.042248][ T751] tipc: Left network mode [ 737.113606][T10851] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.350770][ T2537] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.358127][ T2537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.517843][ T751] hsr_slave_0: left promiscuous mode [ 737.558324][ T751] hsr_slave_1: left promiscuous mode [ 737.576794][ T59] gspca_nw80x: reg_w err -71 [ 737.583227][ T751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.586330][ T59] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 737.619765][ T59] usb 5-1: USB disconnect, device number 37 [ 737.620486][ T751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.645876][ T751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.710709][ T751] veth1_macvtap: left promiscuous mode [ 737.716969][ T751] veth0_macvtap: left promiscuous mode [ 737.724252][ T751] veth1_vlan: left promiscuous mode [ 737.729904][ T751] veth0_vlan: left promiscuous mode [ 739.129501][ T9867] usb 3-1: USB disconnect, device number 23 [ 740.514961][ T751] team0 (unregistering): Port device team_slave_1 removed [ 740.666301][ T751] team0 (unregistering): Port device team_slave_0 removed [ 741.846225][ T29] audit: type=1326 audit(1723390623.996:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11288 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb891b779f9 code=0x7fc00000 [ 742.181548][ T29] audit: type=1326 audit(1723390624.326:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11288 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb891b779f9 code=0x7fc00000 [ 742.268659][ T29] audit: type=1326 audit(1723390624.326:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11288 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb891b779f9 code=0x7fc00000 [ 742.341674][ T29] audit: type=1326 audit(1723390624.326:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11288 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb891b779f9 code=0x7fc00000 [ 742.426021][ T29] audit: type=1326 audit(1723390624.326:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11288 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb891b779f9 code=0x7fc00000 [ 742.524260][ T2038] pvrusb2: request_firmware fatal error with code=-110 [ 742.531807][ T29] audit: type=1326 audit(1723390624.326:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11288 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb891b779f9 code=0x7fc00000 [ 742.570363][ T2038] pvrusb2: Failure uploading firmware1 [ 742.595903][ T2038] pvrusb2: Device initialization was not successful. [ 742.612532][ T2038] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 742.807140][ T2038] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 742.827355][ T5337] pvrusb2: Device being rendered inoperable [ 743.383852][T11312] FAULT_INJECTION: forcing a failure. [ 743.383852][T11312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 743.419425][T11312] CPU: 1 UID: 0 PID: 11312 Comm: syz.4.1390 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 743.430299][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 743.440401][T11312] Call Trace: [ 743.443984][T11312] [ 743.446947][T11312] dump_stack_lvl+0x241/0x360 [ 743.451692][T11312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 743.456949][T11312] ? __pfx__printk+0x10/0x10 [ 743.461691][T11312] should_fail_ex+0x3b0/0x4e0 [ 743.466419][T11312] prepare_alloc_pages+0x1da/0x5d0 [ 743.471585][T11312] __alloc_pages_noprof+0x166/0x6c0 [ 743.476835][T11312] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 743.482618][T11312] alloc_pages_mpol_noprof+0x3e8/0x680 [ 743.488129][T11312] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 743.494149][T11312] vma_alloc_folio_noprof+0x12e/0x230 [ 743.499559][T11312] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 743.505474][T11312] folio_prealloc+0x31/0x170 [ 743.510106][T11312] handle_pte_fault+0x2530/0x6eb0 [ 743.515158][T11312] ? mark_lock+0x9a/0x350 [ 743.519680][T11312] ? __pfx_handle_pte_fault+0x10/0x10 [ 743.525098][T11312] ? mt_find+0x226/0x850 [ 743.529375][T11312] ? __pfx_lock_release+0x10/0x10 [ 743.534526][T11312] handle_mm_fault+0xf70/0x1880 [ 743.539502][T11312] ? __pfx_handle_mm_fault+0x10/0x10 [ 743.544812][T11312] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 743.551267][T11312] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 743.556574][T11312] exc_page_fault+0x2b9/0x8c0 [ 743.561301][T11312] asm_exc_page_fault+0x26/0x30 [ 743.566183][T11312] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 743.572004][T11312] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 743.591621][T11312] RSP: 0018:ffffc9000a09fa50 EFLAGS: 00050202 [ 743.597723][T11312] RAX: 30203a636967616d RBX: 0000000020001f4f RCX: 000000000000000f [ 743.605703][T11312] RDX: 0000000000000000 RSI: ffff888055261234 RDI: 0000000020001f40 [ 743.613697][T11312] RBP: ffff888055261234 R08: ffff888055261242 R09: 1ffff1100aa4c248 [ 743.621682][T11312] R10: dffffc0000000000 R11: ffffed100aa4c249 R12: 000000000000000f [ 743.629672][T11312] R13: 0000000000000000 R14: 0000000020001f40 R15: ffff888055261234 [ 743.637671][T11312] _copy_to_user+0x86/0xb0 [ 743.642112][T11312] bpf_verifier_vlog+0x31e/0x860 [ 743.647076][T11312] __btf_verifier_log+0xd5/0x120 [ 743.652028][T11312] ? btf_parse_hdr+0x219/0x710 [ 743.656803][T11312] ? __pfx___btf_verifier_log+0x10/0x10 [ 743.662367][T11312] ? btf_parse_hdr+0x1e3/0x710 [ 743.667148][T11312] btf_parse_hdr+0x2a3/0x710 [ 743.671757][T11312] btf_new_fd+0x391/0xd30 [ 743.676103][T11312] ? safesetid_security_capable+0xb2/0x1d0 [ 743.681933][T11312] ? __pfx_btf_new_fd+0x10/0x10 [ 743.686801][T11312] ? bpf_btf_load+0xcf/0x1a0 [ 743.691406][T11312] __sys_bpf+0x6ef/0x810 [ 743.695666][T11312] ? __pfx___sys_bpf+0x10/0x10 [ 743.700455][T11312] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 743.706456][T11312] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 743.712808][T11312] ? do_syscall_64+0x100/0x230 [ 743.717587][T11312] __x64_sys_bpf+0x7c/0x90 [ 743.722017][T11312] do_syscall_64+0xf3/0x230 [ 743.726544][T11312] ? clear_bhb_loop+0x35/0x90 [ 743.731233][T11312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.737144][T11312] RIP: 0033:0x7f18347779f9 [ 743.741577][T11312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.761201][T11312] RSP: 002b:00007f1835594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 743.769630][T11312] RAX: ffffffffffffffda RBX: 00007f1834905f80 RCX: 00007f18347779f9 [ 743.777697][T11312] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000012 [ 743.785677][T11312] RBP: 00007f1835594090 R08: 0000000000000000 R09: 0000000000000000 [ 743.793656][T11312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.801634][T11312] R13: 0000000000000000 R14: 00007f1834905f80 R15: 00007ffcacfb4578 [ 743.809627][T11312] [ 744.670674][ T2537] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.677989][ T2537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.308118][T11332] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 746.405166][T11086] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 746.434460][T11332] netlink: 'syz.1.1394': attribute type 1 has an invalid length. [ 746.471416][T11332] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1394'. [ 746.510047][T11086] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 746.575177][T11334] fuse: Bad value for 'fd' [ 746.773056][ T9867] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 746.910599][T11086] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 746.992003][ T9867] usb 5-1: Using ep0 maxpacket: 8 [ 747.048635][ T9867] usb 5-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=db.79 [ 747.095992][ T9867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.113690][ T9867] usb 5-1: Product: syz [ 747.122257][ T5224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 747.122797][ T9867] usb 5-1: Manufacturer: syz [ 747.146800][ T5224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 747.151397][ T9867] usb 5-1: SerialNumber: syz [ 747.161786][ T5224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 747.177211][ T9867] usb 5-1: config 0 descriptor?? [ 747.182712][ T5224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 747.191058][ T5224] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 747.198771][ T5224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 747.222922][ T9867] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 747.346194][T11086] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 747.636804][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.389596][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1398'. [ 748.901922][T11355] netlink: 'syz.1.1399': attribute type 1 has an invalid length. [ 749.231960][ T4607] Bluetooth: hci3: command tx timeout [ 749.504810][ T2038] usb 5-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 749.522024][ T9867] usb 5-1: USB disconnect, device number 38 [ 749.532954][T11086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.556837][ T2038] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 749.594793][T11338] chnl_net:caif_netlink_parms(): no params data found [ 749.692090][ T9511] bridge_slave_1: left allmulticast mode [ 749.708360][ T9511] bridge_slave_1: left promiscuous mode [ 749.743913][ T9511] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.804396][ T9511] bridge_slave_0: left allmulticast mode [ 749.840131][ T9511] bridge_slave_0: left promiscuous mode [ 749.875798][ T9511] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.264527][ T9511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.286336][ T9511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.307516][ T9511] bond0 (unregistering): Released all slaves [ 751.371612][ T4607] Bluetooth: hci3: command tx timeout [ 751.423281][ T5337] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 751.503358][T11086] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.130185][ T9511] hsr_slave_0: left promiscuous mode [ 752.147223][ T9511] hsr_slave_1: left promiscuous mode [ 752.164739][ T9511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.178941][ T9511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.186443][ T5267] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 752.389551][ T5337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.404053][ T5267] usb 2-1: Using ep0 maxpacket: 8 [ 752.410336][ T5337] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 752.411262][ T5267] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.428255][ T5337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.454199][ T5267] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 752.479106][ T5267] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 752.480317][ T5337] usb 3-1: config 0 descriptor?? [ 752.494228][ T5267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.509574][ T5267] usb 2-1: Product: syz [ 752.514922][ T5267] usb 2-1: Manufacturer: syz [ 752.519619][ T5267] usb 2-1: SerialNumber: syz [ 752.548076][ T5267] usb 2-1: config 0 descriptor?? [ 752.884847][ T9511] team0 (unregistering): Port device team_slave_1 removed [ 752.964281][ T5337] lenovo 0003:17EF:6047.0018: item fetching failed at offset 2/5 [ 752.998213][ T5337] lenovo 0003:17EF:6047.0018: hid_parse failed [ 753.010947][ T5337] lenovo 0003:17EF:6047.0018: probe with driver lenovo failed with error -22 [ 753.079924][ T9511] team0 (unregistering): Port device team_slave_0 removed [ 753.214161][T11379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.263293][T11379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.323503][T11379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.336470][T11379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.391461][ T4607] Bluetooth: hci3: command tx timeout [ 753.408222][ T5266] usb 3-1: USB disconnect, device number 24 [ 754.093498][T11395] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 754.146708][ T8739] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.154076][ T8739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.195055][T11396] netlink: 'syz.2.1409': attribute type 1 has an invalid length. [ 754.221391][T11396] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1409'. [ 754.259821][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.267137][ T9500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.310616][T11338] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.330584][T11396] fuse: Bad value for 'fd' [ 754.335782][T11338] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.347965][ T29] audit: type=1804 audit(1723390636.496:147): pid=11396 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1409" name="/newroot/131/bus/file0" dev="overlay" ino=764 res=1 errno=0 [ 754.369218][T11338] bridge_slave_0: entered allmulticast mode [ 754.384797][T11338] bridge_slave_0: entered promiscuous mode [ 754.397414][T11338] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.405947][T11338] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.413579][T11338] bridge_slave_1: entered allmulticast mode [ 754.421959][T11338] bridge_slave_1: entered promiscuous mode [ 754.535428][T11338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.603774][T11338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.604233][ T5267] usb 2-1: USB disconnect, device number 36 [ 755.058547][T11338] team0: Port device team_slave_0 added [ 755.090424][T11086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 755.102436][T11086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 755.216482][T11338] team0: Port device team_slave_1 added [ 755.370971][T11338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.390840][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.430774][T11338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.471575][ T4607] Bluetooth: hci3: command tx timeout [ 755.481240][T11338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.489669][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.521625][T11338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.840848][T11338] hsr_slave_0: entered promiscuous mode [ 755.861988][T11338] hsr_slave_1: entered promiscuous mode [ 755.885226][T11338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 755.893706][T11338] Cannot create hsr debugfs directory [ 756.004892][T11086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.707351][T11086] veth0_vlan: entered promiscuous mode [ 756.880820][T11086] veth1_vlan: entered promiscuous mode [ 758.273827][T11086] veth0_macvtap: entered promiscuous mode [ 758.359227][T11086] veth1_macvtap: entered promiscuous mode [ 758.437714][T11086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.452466][T11086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.462582][T11086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.473203][T11086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.485080][T11086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.495800][T11086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.506975][T11086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.520535][T11086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.530650][ T25] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 758.555544][T11086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.569434][T11435] FAULT_INJECTION: forcing a failure. [ 758.569434][T11435] name failslab, interval 1, probability 0, space 0, times 0 [ 758.603201][T11435] CPU: 0 UID: 0 PID: 11435 Comm: syz.1.1420 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 758.614035][T11435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 758.624114][T11435] Call Trace: [ 758.627397][T11435] [ 758.630337][T11435] dump_stack_lvl+0x241/0x360 [ 758.635187][T11435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 758.640411][T11435] ? __pfx__printk+0x10/0x10 [ 758.645109][T11435] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 758.651103][T11435] should_fail_ex+0x3b0/0x4e0 [ 758.655793][T11435] should_failslab+0xac/0x100 [ 758.660474][T11435] ? __io_queue_proc+0x273/0x540 [ 758.665431][T11435] __kmalloc_cache_noprof+0x6c/0x2c0 [ 758.670738][T11435] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 758.676653][T11435] __io_queue_proc+0x273/0x540 [ 758.681434][T11435] ? __pfx_io_async_queue_proc+0x10/0x10 [ 758.687077][T11435] ? __pfx_io_async_queue_proc+0x10/0x10 [ 758.692722][T11435] n_tty_poll+0xc3/0x7a0 [ 758.696974][T11435] ? __pfx_n_tty_poll+0x10/0x10 [ 758.701835][T11435] tty_poll+0xc2/0x170 [ 758.705926][T11435] ? __pfx_tty_poll+0x10/0x10 [ 758.710601][T11435] __io_arm_poll_handler+0x395/0x970 [ 758.715916][T11435] io_arm_poll_handler+0x6e7/0xba0 [ 758.721065][T11435] ? io_issue_sqe+0x796/0x1570 [ 758.725857][T11435] ? __pfx_io_arm_poll_handler+0x10/0x10 [ 758.731621][T11435] ? __pfx_io_async_queue_proc+0x10/0x10 [ 758.737361][T11435] ? __pfx_io_issue_sqe+0x10/0x10 [ 758.742418][T11435] io_queue_async+0xa3/0x510 [ 758.747019][T11435] ? __pfx_io_req_task_submit+0x10/0x10 [ 758.752657][T11435] io_handle_tw_list+0x380/0x500 [ 758.757603][T11435] tctx_task_work_run+0x9a/0x370 [ 758.762633][T11435] tctx_task_work+0x9a/0x100 [ 758.767225][T11435] ? __pfx_tctx_task_work+0x10/0x10 [ 758.772430][T11435] ? _raw_spin_unlock_irq+0x23/0x50 [ 758.777658][T11435] ? lockdep_hardirqs_on+0x99/0x150 [ 758.782867][T11435] task_work_run+0x24f/0x310 [ 758.787471][T11435] ? __pfx_task_work_run+0x10/0x10 [ 758.792600][T11435] get_signal+0x15da/0x1730 [ 758.797202][T11435] ? tiocsti+0x29c/0x300 [ 758.801541][T11435] ? __pfx_lock_release+0x10/0x10 [ 758.806642][T11435] ? __pfx_get_signal+0x10/0x10 [ 758.811540][T11435] arch_do_signal_or_restart+0x96/0x860 [ 758.817180][T11435] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 758.823424][T11435] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 758.829458][T11435] ? syscall_exit_to_user_mode+0xa3/0x370 [ 758.835575][T11435] syscall_exit_to_user_mode+0xc9/0x370 [ 758.841152][T11435] do_syscall_64+0x100/0x230 [ 758.845771][T11435] ? clear_bhb_loop+0x35/0x90 [ 758.850489][T11435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.856416][T11435] RIP: 0033:0x7fb891b779f9 [ 758.860862][T11435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.880493][T11435] RSP: 002b:00007fb892930038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 758.889105][T11435] RAX: 0000000000000000 RBX: 00007fb891d05f80 RCX: 00007fb891b779f9 [ 758.897143][T11435] RDX: 0000000020000140 RSI: 0000000000005412 RDI: 0000000000000006 [ 758.905208][T11435] RBP: 00007fb892930090 R08: 0000000000000000 R09: 0000000000000000 [ 758.913182][T11435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.921153][T11435] R13: 0000000000000000 R14: 00007fb891d05f80 R15: 00007ffcb809e7e8 [ 758.929164][T11435] [ 758.964799][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.980697][T11086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.007556][ T25] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 759.029691][T11086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.050336][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.073563][T11086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.099108][T11086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.102786][ T25] usb 3-1: config 0 descriptor?? [ 759.109469][T11086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.125116][T11086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.136019][T11086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.148464][T11086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.182223][T11086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.235212][T11086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.247930][T11086] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.263036][T11086] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.273042][T11086] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.287909][T11338] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 759.358994][T11338] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 759.441057][T11338] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 759.502923][T11338] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 759.579377][ T25] lenovo 0003:17EF:6047.0019: unknown main item tag 0x4 [ 759.608103][ T25] lenovo 0003:17EF:6047.0019: item fetching failed at offset 3/5 [ 759.635927][ T25] lenovo 0003:17EF:6047.0019: hid_parse failed [ 759.658980][ T25] lenovo 0003:17EF:6047.0019: probe with driver lenovo failed with error -22 [ 759.804891][T11428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.830045][T11428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.843034][ T9507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.864810][ T9507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.897262][T11428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.937579][T11428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.997824][ T5337] usb 3-1: USB disconnect, device number 25 [ 760.023971][ T9511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.084612][ T9511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.266700][T11338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.385633][T11338] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.470625][ T9507] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.478302][ T9507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.543469][ T8739] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.551145][ T8739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.777580][ T5266] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 760.973835][T11463] FAULT_INJECTION: forcing a failure. [ 760.973835][T11463] name failslab, interval 1, probability 0, space 0, times 0 [ 761.007949][ T5266] usb 2-1: Using ep0 maxpacket: 32 [ 761.031065][T11463] CPU: 0 UID: 0 PID: 11463 Comm: syz.2.1424 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 761.041911][T11463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 761.052012][T11463] Call Trace: [ 761.055337][T11463] [ 761.058315][T11463] dump_stack_lvl+0x241/0x360 [ 761.063067][T11463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 761.068343][T11463] ? __pfx__printk+0x10/0x10 [ 761.072992][T11463] ? fs_reclaim_acquire+0x93/0x140 [ 761.078146][T11463] ? __pfx___might_resched+0x10/0x10 [ 761.083451][T11463] should_fail_ex+0x3b0/0x4e0 [ 761.088145][T11463] ? tomoyo_encode+0x26f/0x540 [ 761.092931][T11463] should_failslab+0xac/0x100 [ 761.097802][T11463] ? tomoyo_encode+0x26f/0x540 [ 761.102767][T11463] __kmalloc_noprof+0xd8/0x400 [ 761.107555][T11463] tomoyo_encode+0x26f/0x540 [ 761.112195][T11463] tomoyo_realpath_from_path+0x59e/0x5e0 [ 761.118354][T11463] tomoyo_mount_permission+0x3bc/0xb80 [ 761.123864][T11463] ? tomoyo_mount_permission+0x295/0xb80 [ 761.129595][T11463] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 761.135611][T11463] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 761.141663][T11463] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 761.148037][T11463] ? hook_sb_mount+0x122/0x390 [ 761.152869][T11463] security_sb_mount+0x8f/0xd0 [ 761.157658][T11463] path_mount+0xb9/0xfa0 [ 761.161920][T11463] ? kmem_cache_free+0x145/0x350 [ 761.166994][T11463] __se_sys_mount+0x2d6/0x3c0 [ 761.171957][T11463] ? __pfx___se_sys_mount+0x10/0x10 [ 761.177389][T11463] ? do_syscall_64+0x100/0x230 [ 761.182261][T11463] ? __x64_sys_mount+0x20/0xc0 [ 761.187050][T11463] do_syscall_64+0xf3/0x230 [ 761.191573][T11463] ? clear_bhb_loop+0x35/0x90 [ 761.196527][T11463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.202781][T11463] RIP: 0033:0x7f0b0d3779f9 [ 761.207211][T11463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.227096][T11463] RSP: 002b:00007f0b0e071038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 761.235537][T11463] RAX: ffffffffffffffda RBX: 00007f0b0d505f80 RCX: 00007f0b0d3779f9 [ 761.243527][T11463] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000000000000 [ 761.251786][T11463] RBP: 00007f0b0e071090 R08: 0000000020000140 R09: 0000000000000000 [ 761.259785][T11463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 761.268387][T11463] R13: 0000000000000000 R14: 00007f0b0d505f80 R15: 00007ffcad6c4688 [ 761.276564][T11463] [ 761.361123][T11463] ERROR: Out of memory at tomoyo_realpath_from_path. [ 761.384754][ T5266] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 761.429066][ T5266] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 761.460074][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 761.501087][ T5266] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 761.571446][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 761.606857][ T5266] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 761.630529][T11471] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1425'. [ 761.641760][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 761.679837][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 761.728177][ T5266] usb 2-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 761.823565][ T5266] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 761.837023][T11338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.855446][ T5266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.881387][ T5266] usb 2-1: Product: syz [ 761.885638][ T5266] usb 2-1: Manufacturer: syz [ 761.910872][ T5266] usb 2-1: SerialNumber: syz [ 761.947779][ T5266] usb 2-1: config 0 descriptor?? [ 761.963799][T11456] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 762.057789][T11338] veth0_vlan: entered promiscuous mode [ 762.096970][T11338] veth1_vlan: entered promiscuous mode [ 762.646423][ T5266] cxacru 2-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 762.931193][T11498] overlayfs: failed to resolve './file1': -2 [ 763.865761][ T5266] cxacru 2-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 763.889096][ T5266] cxacru 2-1:0.0: probe with driver cxacru failed with error -22 [ 763.904957][T11338] veth0_macvtap: entered promiscuous mode [ 763.944627][ T5266] usb 2-1: USB disconnect, device number 37 [ 763.995253][T11338] veth1_macvtap: entered promiscuous mode [ 764.065223][T11504] sock: sock_timestamping_bind_phc: sock not bind to device [ 764.110726][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.151603][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.181548][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.211526][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.243868][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.281058][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.309288][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.345388][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.385881][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.421645][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.462540][T11338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.512065][T11505] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1431'. [ 764.544131][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.579299][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.624938][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.665131][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.703739][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.735527][T11513] input: syz0 as /devices/virtual/input/input11 [ 764.758052][T11513] input: failed to attach handler leds to device input11, error: -6 [ 764.769539][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.802517][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.855223][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.891530][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.933354][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.983786][T11338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.109787][T11338] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.201858][T11338] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.210757][T11338] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.220051][T11338] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.972857][T11529] tipc: Started in network mode [ 765.977808][T11529] tipc: Node identity b628ea479d65, cluster identity 4711 [ 766.051684][T11529] tipc: Enabled bearer , priority 0 [ 766.227268][ T8739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.282488][ T8739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.390321][ T8739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.486440][ T8739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.174580][ T5337] tipc: Node number set to 726526535 [ 767.411490][ T5268] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 767.621454][ T5268] usb 1-1: Using ep0 maxpacket: 8 [ 767.684515][ T5268] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 767.742676][ T5268] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 767.757566][ T5268] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 767.771500][ T5268] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 767.844059][ T5268] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 768.068301][ T5268] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 768.179977][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.460382][ T5268] usb 1-1: usb_control_msg returned -32 [ 768.490838][ T5268] usbtmc 1-1:16.0: can't read capabilities [ 768.665058][ T5218] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 768.893966][ T5218] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 768.918758][ T5218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.970405][ T5218] usb 2-1: config 0 descriptor?? [ 770.444404][ T5218] [drm:udl_init] *ERROR* Selecting channel failed [ 770.625153][ T5218] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 770.644139][ T5218] [drm] Initialized udl on minor 2 [ 770.659036][ T5218] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 770.685912][ T5218] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 770.702954][ T25] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 770.717441][ T25] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 770.726180][ T5218] usb 2-1: USB disconnect, device number 38 [ 770.911913][ T5266] usb 1-1: USB disconnect, device number 49 [ 770.923660][ T29] audit: type=1326 audit(1723390653.076:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11597 comm="syz.2.1448" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b0d3779f9 code=0x0 [ 771.151893][ T4607] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 771.160985][ T4607] Bluetooth: hci3: Injecting HCI hardware error event [ 771.171501][ T4607] Bluetooth: hci3: hardware error 0x00 [ 774.353475][ T4607] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 774.369513][T11675] overlayfs: failed to resolve './file1': -2 [ 775.421526][ T25] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 775.436409][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1473'. [ 775.643321][ T25] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 775.676997][ T25] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 775.733601][ T25] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 775.774734][ T25] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 775.817075][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.833977][T11681] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 776.231671][T11700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.018288][T11726] overlayfs: failed to resolve './file1': -2 [ 778.244212][ T25] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 778.290453][ T25] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input12 [ 778.377685][ T25] usb 4-1: USB disconnect, device number 41 [ 778.383675][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 778.951422][ T942] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 779.071539][ T5266] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 779.145742][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1488'. [ 779.197792][ T942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.222699][T11745] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1489'. [ 779.243532][ T942] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 779.272628][ T5266] usb 2-1: Using ep0 maxpacket: 8 [ 779.320569][ T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.335044][ T5266] usb 2-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=db.79 [ 779.355263][ T5266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.366855][ T942] usb 1-1: config 0 descriptor?? [ 779.395171][ T5266] usb 2-1: Product: syz [ 779.416455][ T5266] usb 2-1: Manufacturer: syz [ 779.438096][ T5266] usb 2-1: SerialNumber: syz [ 779.465372][ T5266] usb 2-1: config 0 descriptor?? [ 779.546717][ T5266] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 779.750432][ T5266] usb 2-1: USB disconnect, device number 39 [ 779.810817][ T942] lenovo 0003:17EF:6047.001A: item fetching failed at offset 2/5 [ 779.820652][ T5266] pvrusb2: Device being rendered inoperable [ 779.877823][ T942] lenovo 0003:17EF:6047.001A: hid_parse failed [ 779.907352][ T942] lenovo 0003:17EF:6047.001A: probe with driver lenovo failed with error -22 [ 780.042762][T11736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.079374][T11736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.123656][T11736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.161600][T11736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.203719][ T25] usb 1-1: USB disconnect, device number 50 [ 780.912020][ T942] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 781.118030][T11765] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 781.125640][T11765] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 781.170392][ T942] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.175692][T11765] vhci_hcd vhci_hcd.0: Device attached [ 781.218501][ T942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.261037][ T942] usb 3-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 781.280360][ T942] usb 3-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 781.335552][ T942] usb 3-1: config 1 interface 1 has no altsetting 0 [ 781.359962][ T942] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 781.387729][ T942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.411068][ T942] usb 3-1: Product: syz [ 781.425030][ T942] usb 3-1: Manufacturer: syz [ 781.437268][ T942] usb 3-1: SerialNumber: syz [ 781.451603][ T5218] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 781.456636][ T942] usb 3-1: selecting invalid altsetting 1 [ 781.473767][ T942] usb 3-1: selecting invalid altsetting 0 [ 781.488615][ T942] usb 3-1: selecting invalid altsetting 0 [ 781.502472][ T942] cdc_ncm 3-1:1.0: bind() failure [ 783.803391][T11768] vhci_hcd: connection reset by peer [ 783.916414][ T9511] vhci_hcd: stop threads [ 783.996561][ T9511] vhci_hcd: release socket [ 784.078307][ T9511] vhci_hcd: disconnect device [ 784.442687][T11781] input: syz0 as /devices/virtual/input/input13 [ 785.153385][T11789] overlayfs: failed to resolve './file1': -2 [ 785.531792][T11794] ieee802154 phy0 wpan0: encryption failed: -22 [ 785.619026][ T942] usb 3-1: selecting invalid altsetting 0 [ 785.635469][ T942] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 785.661866][ T942] usb 3-1: USB disconnect, device number 26 [ 786.602219][ T5218] vhci_hcd: vhci_device speed not set [ 786.701400][ T5269] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 786.891641][ T5269] usb 4-1: Using ep0 maxpacket: 8 [ 786.907960][ T5269] usb 4-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=db.79 [ 786.926758][ T5269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.938614][ T5269] usb 4-1: Product: syz [ 786.946402][ T5269] usb 4-1: Manufacturer: syz [ 786.959638][ T5269] usb 4-1: SerialNumber: syz [ 786.967745][ T5269] usb 4-1: config 0 descriptor?? [ 786.978703][ T5269] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 787.021787][ T5266] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 787.226589][ T5269] usb 4-1: USB disconnect, device number 42 [ 787.232021][ T5266] usb 1-1: Using ep0 maxpacket: 8 [ 787.234074][ T5269] pvrusb2: Device being rendered inoperable [ 787.263357][ T5266] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 787.291698][ T5266] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 787.341685][ T5266] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 787.358845][ T5266] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 787.572992][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 787.583679][ T5266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 787.603019][ T5266] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 787.716529][ T5266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.732731][T11836] overlayfs: failed to resolve './file1': -2 [ 787.778069][ T5266] usb 1-1: Product: syz [ 787.797722][ T5266] usb 1-1: Manufacturer: syz [ 787.819655][ T5266] usb 1-1: SerialNumber: syz [ 787.860138][ T5266] usb 1-1: config 0 descriptor?? [ 787.896731][ T5266] hub 1-1:0.0: bad descriptor, ignoring hub [ 787.923341][ T5266] hub 1-1:0.0: probe with driver hub failed with error -5 [ 788.209373][T11818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 788.461724][ T5269] usb 1-1: USB disconnect, device number 51 [ 789.403993][T11860] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 789.415889][T11860] cramfs: wrong magic [ 790.607895][T11883] overlayfs: failed to resolve './file1': -2 [ 792.774225][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 793.293533][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1535'. [ 793.428090][T11925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1536'. [ 793.531135][T11928] overlayfs: overlapping lowerdir path [ 794.140685][T11939] overlayfs: failed to resolve './file1': -2 [ 796.401527][ T5218] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 796.601391][ T5218] usb 3-1: Using ep0 maxpacket: 32 [ 796.616268][ T5218] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.640834][ T5218] usb 3-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 796.651433][ T5218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.667917][ T5218] usb 3-1: config 0 descriptor?? [ 796.944570][ T5218] cdc_subset 3-1:0.0: probe with driver cdc_subset failed with error -71 [ 796.986579][ T5218] usb 3-1: USB disconnect, device number 27 [ 798.293997][ T5266] IPVS: starting estimator thread 0... [ 798.309815][T11980] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 798.602844][T11982] IPVS: using max 16 ests per chain, 38400 per kthread [ 798.625261][T11989] overlayfs: failed to resolve './file1': -2 [ 798.743384][T11991] FAULT_INJECTION: forcing a failure. [ 798.743384][T11991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.775921][T11991] CPU: 1 UID: 0 PID: 11991 Comm: syz.0.1555 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 798.786885][T11991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 798.797164][T11991] Call Trace: [ 798.800508][T11991] [ 798.803514][T11991] dump_stack_lvl+0x241/0x360 [ 798.808270][T11991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 798.813604][T11991] ? __pfx__printk+0x10/0x10 [ 798.818357][T11991] ? snprintf+0xda/0x120 [ 798.822675][T11991] should_fail_ex+0x3b0/0x4e0 [ 798.827506][T11991] _copy_to_user+0x2f/0xb0 [ 798.832009][T11991] simple_read_from_buffer+0xca/0x150 [ 798.837547][T11991] proc_fail_nth_read+0x1e9/0x250 [ 798.842729][T11991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 798.848348][T11991] ? rw_verify_area+0x52a/0x6b0 [ 798.853253][T11991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 798.858967][T11991] vfs_read+0x204/0xbc0 [ 798.863195][T11991] ? __pfx_lock_release+0x10/0x10 [ 798.868277][T11991] ? __pfx_vfs_read+0x10/0x10 [ 798.873055][T11991] ? __fget_files+0x29/0x470 [ 798.877699][T11991] ? __fget_files+0x3f6/0x470 [ 798.882432][T11991] ksys_read+0x1a0/0x2c0 [ 798.886734][T11991] ? __pfx_ksys_read+0x10/0x10 [ 798.891535][T11991] ? do_syscall_64+0x100/0x230 [ 798.896449][T11991] ? do_syscall_64+0xb6/0x230 [ 798.901268][T11991] do_syscall_64+0xf3/0x230 [ 798.905870][T11991] ? clear_bhb_loop+0x35/0x90 [ 798.910593][T11991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.916610][T11991] RIP: 0033:0x7ff6aa57643c [ 798.921324][T11991] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 798.941082][T11991] RSP: 002b:00007ff6ab3cd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 798.949671][T11991] RAX: ffffffffffffffda RBX: 00007ff6aa705f80 RCX: 00007ff6aa57643c [ 798.957726][T11991] RDX: 000000000000000f RSI: 00007ff6ab3cd0a0 RDI: 0000000000000005 [ 798.965769][T11991] RBP: 00007ff6ab3cd090 R08: 0000000000000000 R09: 0000000000000000 [ 798.973885][T11991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.982249][T11991] R13: 0000000000000000 R14: 00007ff6aa705f80 R15: 00007ffefb0c1498 [ 798.990780][T11991] [ 799.083511][T11993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1556'. [ 799.092898][ T5218] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 799.284326][ T5218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.284368][ T5218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.284395][ T5218] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 799.284447][ T5218] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 799.284476][ T5218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.286857][ T5218] usb 4-1: config 0 descriptor?? [ 799.742967][ T5218] plantronics 0003:047F:FFFF.001B: unbalanced collection at end of report description [ 799.762610][ T5218] plantronics 0003:047F:FFFF.001B: parse failed [ 799.769348][ T5218] plantronics 0003:047F:FFFF.001B: probe with driver plantronics failed with error -22 [ 799.914593][ T5266] usb 4-1: USB disconnect, device number 43 [ 802.582814][T12023] tmpfs: Bad value for 'mpol' [ 803.663840][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1569'. [ 803.892050][T12036] process 'syz.3.1571' launched './file0' with NULL argv: empty string added [ 804.089642][T11624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 804.101340][T11624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 804.110319][T11624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 804.119641][T11624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 804.130875][T11624] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 804.140841][T11624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 804.333852][ T5337] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 804.565197][ T5337] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 804.601606][ T5337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.630340][ T5337] usb 4-1: Product: syz [ 804.640730][ T5337] usb 4-1: Manufacturer: syz [ 804.654076][ T5337] usb 4-1: SerialNumber: syz [ 804.668714][ T5337] usb 4-1: config 0 descriptor?? [ 805.267815][ T5337] usb-storage 4-1:0.0: USB Mass Storage device detected [ 805.280204][ T29] audit: type=1400 audit(1723390687.416:149): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=12059 comm="syz.0.1576" [ 805.489899][T12036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.498584][T12036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.534447][ T942] usb 4-1: USB disconnect, device number 44 [ 805.548124][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1575'. [ 805.860135][T12040] chnl_net:caif_netlink_parms(): no params data found [ 806.143571][ T5218] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 806.201412][ T4607] Bluetooth: hci4: command tx timeout [ 806.561574][ T5218] usb 3-1: Using ep0 maxpacket: 16 [ 806.909904][ T5218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 807.347226][ T5218] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 807.417545][ T5218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.481394][ T5218] usb 3-1: Product: syz [ 807.485638][ T5218] usb 3-1: Manufacturer: syz [ 807.551005][ T5218] usb 3-1: SerialNumber: syz [ 807.854802][ T5218] usb 3-1: config 0 descriptor?? [ 807.864654][T12040] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.867890][ T5218] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 807.884560][ T5218] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 807.922091][T12040] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.930583][T12040] bridge_slave_0: entered allmulticast mode [ 807.976600][T12089] Cannot find set identified by id 0 to match [ 808.293471][ T4607] Bluetooth: hci4: command tx timeout [ 808.412822][T12040] bridge_slave_0: entered promiscuous mode [ 808.605085][T12040] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.676139][T12040] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.695845][T12040] bridge_slave_1: entered allmulticast mode [ 808.709890][T12040] bridge_slave_1: entered promiscuous mode [ 808.756065][T12096] xt_CT: You must specify a L4 protocol and not use inversions on it [ 808.987326][ T29] audit: type=1400 audit(1723390691.126:150): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=12098 comm="syz.0.1583" [ 809.261751][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.717479][T12040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.768105][T12040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.017357][ T942] usb 3-1: USB disconnect, device number 28 [ 810.042245][ T942] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 810.055380][T12040] team0: Port device team_slave_0 added [ 810.063157][T12106] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 810.080901][ T942] kobil_sct 3-1:0.0: device disconnected [ 810.093927][T12040] team0: Port device team_slave_1 added [ 810.256516][T12040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.300816][T12040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.351872][T11624] Bluetooth: hci4: command tx timeout [ 810.386397][T12117] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1584'. [ 810.400739][T12117] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 810.479992][T12040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.556784][T12040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.585889][T12040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.691433][T12040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.227905][T12040] hsr_slave_0: entered promiscuous mode [ 811.296323][T12040] hsr_slave_1: entered promiscuous mode [ 811.345975][T12040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 811.365848][T12040] Cannot create hsr debugfs directory [ 811.391427][ T29] audit: type=1400 audit(1723390693.526:151): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=12119 comm="syz.0.1587" [ 812.170484][ T29] audit: type=1400 audit(1723390694.306:152): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=12129 comm="syz.2.1590" dest=2 [ 812.395033][ T2537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.583551][T11624] Bluetooth: hci4: command 0x0419 tx timeout [ 817.952448][ T4607] Bluetooth: hci4: command 0x0419 tx timeout [ 818.230222][ T2038] pvrusb2: request_firmware fatal error with code=-110 [ 818.276944][ T2038] pvrusb2: Failure uploading firmware1 [ 818.301510][ T2038] pvrusb2: Device initialization was not successful. [ 818.341469][ T2038] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 818.397888][ T2038] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 818.435694][ T9867] pvrusb2: Device being rendered inoperable [ 818.572251][ T29] audit: type=1400 audit(1723390700.716:153): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=12144 comm="syz.2.1593" [ 819.428720][ T2537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.707487][ T2537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.958450][ T2537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.215687][ T29] audit: type=1800 audit(1723390702.366:154): pid=12155 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1594" name="/" dev="fuse" ino=1 res=0 errno=0 [ 820.324219][ T29] audit: type=1400 audit(1723390702.466:155): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=12164 comm="syz.4.1598" [ 820.698654][ T2537] bridge_slave_1: left allmulticast mode [ 820.718911][ T2537] bridge_slave_1: left promiscuous mode [ 820.748173][ T2537] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.770651][ T2537] bridge_slave_0: left allmulticast mode [ 820.783363][ T2537] bridge_slave_0: left promiscuous mode [ 820.798423][ T2537] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.087462][ T29] audit: type=1326 audit(1723390703.236:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12179 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18347779f9 code=0x7ffc0000 [ 821.166341][ T29] audit: type=1326 audit(1723390703.236:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12179 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18347779f9 code=0x7ffc0000 [ 821.240559][ T29] audit: type=1326 audit(1723390703.236:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12179 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f18347779f9 code=0x7ffc0000 [ 821.297610][ T29] audit: type=1326 audit(1723390703.236:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12179 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18347779f9 code=0x7ffc0000 [ 821.351968][T12183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1603'. [ 821.404296][ T29] audit: type=1326 audit(1723390703.236:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12179 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18347779f9 code=0x7ffc0000 [ 821.480184][ T29] audit: type=1326 audit(1723390703.236:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12179 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f18347779f9 code=0x7ffc0000 [ 822.042720][ T29] audit: type=1326 audit(1723390703.236:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12179 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18347779f9 code=0x7ffc0000 [ 823.029250][ T2537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.075923][ T2537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.097836][ T2537] bond0 (unregistering): Released all slaves [ 823.406213][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1605'. [ 823.845795][T12214] dvmrp0: entered allmulticast mode [ 824.102730][ T2537] hsr_slave_0: left promiscuous mode [ 824.193901][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 824.193916][ T29] audit: type=1400 audit(1723390706.346:170): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=12215 comm="syz.2.1610" [ 824.277873][ T2537] hsr_slave_1: left promiscuous mode [ 824.288727][ T2537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.331055][ T2537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.389522][ T2537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.399155][ T2537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.474275][ T2537] veth1_macvtap: left promiscuous mode [ 824.480030][ T2537] veth0_macvtap: left promiscuous mode [ 824.491589][ T2537] veth1_vlan: left promiscuous mode [ 824.500671][ T2537] veth0_vlan: left promiscuous mode [ 824.651478][ T9867] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 824.887295][ T9867] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 824.907132][ T9867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.928202][ T9867] usb 1-1: Product: syz [ 824.943063][ T9867] usb 1-1: Manufacturer: syz [ 824.958285][ T9867] usb 1-1: SerialNumber: syz [ 824.970983][ T9867] usb 1-1: config 0 descriptor?? [ 824.982027][ T9867] ch341 1-1:0.0: ch341-uart converter detected [ 825.894333][ T2537] team0 (unregistering): Port device team_slave_1 removed [ 825.967393][ T2537] team0 (unregistering): Port device team_slave_0 removed [ 826.233475][T12225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.250048][T12225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.272714][ T9867] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 826.741528][T12232] netlink: 'syz.2.1613': attribute type 4 has an invalid length. [ 826.778228][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1613'. [ 828.014893][T12243] xt_CT: No such helper "pptp" [ 828.174143][T12040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 828.226282][ T5218] usb 1-1: USB disconnect, device number 52 [ 828.257973][T12040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 828.282070][ T5218] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 828.304079][ T5218] ch341 1-1:0.0: device disconnected [ 828.337645][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 828.368706][T12040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 828.435831][T12040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 828.978528][T12263] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 828.987798][T12263] cramfs: wrong magic [ 830.032223][ T2537] IPVS: stop unused estimator thread 0... [ 830.193587][T12278] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1622'. [ 830.276850][T12040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.324121][T12040] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.363282][ T751] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.370571][ T751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.427548][ T9511] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.435037][ T9511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.703681][T12288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.913621][T12286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.413474][T12308] syz.3.1630 (12308): attempted to duplicate a private mapping with mremap. This is not supported. [ 838.990333][T12040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.111591][T12040] veth0_vlan: entered promiscuous mode [ 839.126079][T12040] veth1_vlan: entered promiscuous mode [ 839.264384][T12040] veth0_macvtap: entered promiscuous mode [ 839.313129][T12040] veth1_macvtap: entered promiscuous mode [ 839.495773][T12040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.381457][T12040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.421745][T12040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.458359][T12040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.468385][T12040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.481320][T12040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.491200][T12040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.511337][T12040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.529170][T12040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.540100][T12040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.569266][T12040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.606285][T12040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.661065][T12040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.678077][T12040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.706346][T12040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.723841][T12040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.735025][T12040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.745443][T12040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.756300][T12040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.766734][T12040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.780004][T12040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.807895][T12040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.853494][T12332] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1637'. [ 840.928012][T12040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.982345][T12040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.042131][T12040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.093158][T12040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.931574][ T29] audit: type=1400 audit(1723390723.706:171): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=12333 comm="syz.4.1639" [ 842.222385][T12342] FAULT_INJECTION: forcing a failure. [ 842.222385][T12342] name failslab, interval 1, probability 0, space 0, times 0 [ 842.235125][T12342] CPU: 0 UID: 0 PID: 12342 Comm: syz.2.1640 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 842.245941][T12342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 842.256041][T12342] Call Trace: [ 842.259349][T12342] [ 842.262311][T12342] dump_stack_lvl+0x241/0x360 [ 842.267052][T12342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 842.272308][T12342] ? __pfx__printk+0x10/0x10 [ 842.276958][T12342] should_fail_ex+0x3b0/0x4e0 [ 842.281689][T12342] should_failslab+0xac/0x100 [ 842.286426][T12342] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 842.292815][T12342] ? nf_ct_ext_add+0x1a2/0x3e0 [ 842.297657][T12342] krealloc_noprof+0x7d/0x120 [ 842.302408][T12342] nf_ct_ext_add+0x1a2/0x3e0 [ 842.307084][T12342] init_conntrack+0x8bf/0x1310 [ 842.311915][T12342] ? __pfx_init_conntrack+0x10/0x10 [ 842.317187][T12342] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 842.323237][T12342] ? __local_bh_enable_ip+0x168/0x200 [ 842.328676][T12342] nf_conntrack_in+0xd59/0x1880 [ 842.333587][T12342] ? __pfx_nf_conntrack_in+0x10/0x10 [ 842.338919][T12342] ? ipt_do_table+0x312/0x1860 [ 842.343712][T12342] ? __pfx_ipt_do_table+0x10/0x10 [ 842.348774][T12342] ? ipv4_conntrack_defrag+0x2a2/0x5a0 [ 842.354304][T12342] ? ip_sabotage_in+0x55/0x290 [ 842.359267][T12342] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 842.364840][T12342] nf_hook_slow+0xc3/0x220 [ 842.369312][T12342] ? __pfx_ip_rcv_finish+0x10/0x10 [ 842.374465][T12342] ? __pfx_ip_rcv_finish+0x10/0x10 [ 842.379624][T12342] NF_HOOK+0x29e/0x450 [ 842.383716][T12342] ? NF_HOOK+0x9a/0x450 [ 842.387895][T12342] ? __pfx_NF_HOOK+0x10/0x10 [ 842.392501][T12342] ? ip_rcv_core+0x801/0xd10 [ 842.397112][T12342] ? __pfx_ip_rcv_finish+0x10/0x10 [ 842.402380][T12342] ? __pfx_ip_rcv+0x10/0x10 [ 842.406927][T12342] __netif_receive_skb+0x2bf/0x650 [ 842.412066][T12342] ? __pfx_lock_acquire+0x10/0x10 [ 842.417398][T12342] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 842.423660][T12342] ? __pfx___netif_receive_skb+0x10/0x10 [ 842.429320][T12342] ? __kasan_slab_alloc+0x66/0x80 [ 842.434366][T12342] ? read_tsc+0x9/0x20 [ 842.438459][T12342] ? timekeeping_get_ns+0x2c0/0x420 [ 842.443688][T12342] ? netif_receive_skb+0x131/0x890 [ 842.448822][T12342] ? netif_receive_skb+0x131/0x890 [ 842.453994][T12342] netif_receive_skb+0x1e8/0x890 [ 842.458960][T12342] ? tun_rx_batched+0x160/0x8f0 [ 842.463860][T12342] ? __pfx_netif_receive_skb+0x10/0x10 [ 842.469356][T12342] ? tun_rx_batched+0x160/0x8f0 [ 842.474312][T12342] tun_rx_batched+0x1b7/0x8f0 [ 842.479102][T12342] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 842.485486][T12342] ? __pfx_lock_acquire+0x10/0x10 [ 842.490538][T12342] ? __pfx_tun_rx_batched+0x10/0x10 [ 842.495781][T12342] tun_get_user+0x2f84/0x4720 [ 842.500494][T12342] ? tun_get_user+0x2a78/0x4720 [ 842.505375][T12342] ? __lock_acquire+0x137a/0x2040 [ 842.510431][T12342] ? __pfx_tun_get_user+0x10/0x10 [ 842.515496][T12342] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 842.520981][T12342] ? tun_get+0x1e/0x2f0 [ 842.525350][T12342] ? __pfx_lock_release+0x10/0x10 [ 842.530429][T12342] ? tun_get+0x1e/0x2f0 [ 842.534604][T12342] ? tun_get+0x27d/0x2f0 [ 842.538901][T12342] tun_chr_write_iter+0x113/0x1f0 [ 842.543962][T12342] vfs_write+0xa72/0xc90 [ 842.548226][T12342] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 842.553816][T12342] ? __pfx_vfs_write+0x10/0x10 [ 842.558635][T12342] ksys_write+0x1a0/0x2c0 [ 842.562993][T12342] ? __pfx_ksys_write+0x10/0x10 [ 842.567874][T12342] ? do_syscall_64+0x100/0x230 [ 842.572745][T12342] ? do_syscall_64+0xb6/0x230 [ 842.577542][T12342] do_syscall_64+0xf3/0x230 [ 842.582151][T12342] ? clear_bhb_loop+0x35/0x90 [ 842.586908][T12342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.592907][T12342] RIP: 0033:0x7f0b0d3764df [ 842.597362][T12342] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 842.617078][T12342] RSP: 002b:00007f0b0e071000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 842.625514][T12342] RAX: ffffffffffffffda RBX: 00007f0b0d505f80 RCX: 00007f0b0d3764df [ 842.633525][T12342] RDX: 0000000000000062 RSI: 0000000020000280 RDI: 00000000000000c8 [ 842.641511][T12342] RBP: 00007f0b0e071090 R08: 0000000000000000 R09: 0000000000000000 [ 842.649521][T12342] R10: 0000000000000062 R11: 0000000000000293 R12: 0000000000000001 [ 842.657512][T12342] R13: 0000000000000001 R14: 00007f0b0d505f80 R15: 00007ffcad6c4688 [ 842.665522][T12342] [ 842.668753][T12342] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 842.693667][ T9511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.702196][ T4607] Bluetooth: hci1: command 0x0406 tx timeout [ 842.705781][ T9511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.831403][ T9507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.870166][ T9507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.629627][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'. [ 844.446073][T12376] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1650'. [ 848.077304][T12385] program syz.4.1652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 848.078576][T12380] can: request_module (can-proto-4) failed. [ 848.121451][T12385] FAULT_INJECTION: forcing a failure. [ 848.121451][T12385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.188672][T12385] CPU: 1 UID: 0 PID: 12385 Comm: syz.4.1652 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 848.199622][T12385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 848.209817][T12385] Call Trace: [ 848.213137][T12385] [ 848.216099][T12385] dump_stack_lvl+0x241/0x360 [ 848.220927][T12385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 848.226227][T12385] ? __pfx__printk+0x10/0x10 [ 848.231142][T12385] ? snprintf+0xda/0x120 [ 848.235617][T12385] should_fail_ex+0x3b0/0x4e0 [ 848.240355][T12385] _copy_to_user+0x2f/0xb0 [ 848.244829][T12385] simple_read_from_buffer+0xca/0x150 [ 848.250351][T12385] proc_fail_nth_read+0x1e9/0x250 [ 848.255437][T12385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 848.261043][T12385] ? rw_verify_area+0x520/0x6b0 [ 848.265950][T12385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 848.271546][T12385] vfs_read+0x204/0xbc0 [ 848.275756][T12385] ? __pfx_lock_release+0x10/0x10 [ 848.280847][T12385] ? __pfx_vfs_read+0x10/0x10 [ 848.285609][T12385] ? __fget_files+0x29/0x470 [ 848.290251][T12385] ? __fget_files+0x3f6/0x470 [ 848.294995][T12385] ksys_read+0x1a0/0x2c0 [ 848.299289][T12385] ? __pfx_ksys_read+0x10/0x10 [ 848.304091][T12385] ? do_syscall_64+0x100/0x230 [ 848.308894][T12385] ? do_syscall_64+0xb6/0x230 [ 848.313609][T12385] do_syscall_64+0xf3/0x230 [ 848.318158][T12385] ? clear_bhb_loop+0x35/0x90 [ 848.322887][T12385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.328821][T12385] RIP: 0033:0x7f183477643c [ 848.333290][T12385] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 848.352972][T12385] RSP: 002b:00007f1835594030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 848.361440][T12385] RAX: ffffffffffffffda RBX: 00007f1834905f80 RCX: 00007f183477643c [ 848.369471][T12385] RDX: 000000000000000f RSI: 00007f18355940a0 RDI: 0000000000000004 [ 848.377582][T12385] RBP: 00007f1835594090 R08: 0000000000000000 R09: 0000000000000000 [ 848.385602][T12385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.393619][T12385] R13: 0000000000000000 R14: 00007f1834905f80 R15: 00007ffcacfb4578 [ 848.401653][T12385] [ 849.065211][ T5218] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 854.904608][ T5218] usb 1-1: Using ep0 maxpacket: 8 [ 955.921211][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 955.928214][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12401 [ 955.936110][ C1] rcu: (detected by 1, t=10502 jiffies, g=62225, q=439 ncpus=2) [ 955.943823][ C1] task:syz.4.1658 state:R running task stack:23800 pid:12401 tgid:12400 ppid:10372 flags:0x00004002 [ 955.956717][ C1] Call Trace: [ 955.960010][ C1] [ 955.962886][ C1] sched_show_task+0x506/0x6d0 [ 955.967672][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 955.972986][ C1] ? rcu_dump_cpu_stacks+0x76/0x440 [ 955.978543][ C1] ? wq_watchdog_touch+0xef/0x180 [ 955.983584][ C1] print_other_cpu_stall+0x11f9/0x15a0 [ 955.989068][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 955.994882][ C1] ? __pfx_lock_release+0x10/0x10 [ 955.999930][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 956.006180][ C1] rcu_sched_clock_irq+0xa2c/0x10d0 [ 956.011401][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 956.017048][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 956.022253][ C1] ? acct_account_cputime+0xd3/0x210 [ 956.027589][ C1] update_process_times+0x1ce/0x230 [ 956.032814][ C1] tick_nohz_handler+0x37c/0x500 [ 956.037770][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 956.043238][ C1] __hrtimer_run_queues+0x551/0xd50 [ 956.048437][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 956.054436][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 956.060153][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 956.066323][ C1] hrtimer_interrupt+0x396/0x990 [ 956.071299][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 956.077311][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 956.082951][ C1] [ 956.085879][ C1] [ 956.088843][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 956.094824][ C1] RIP: 0010:bpf_test_run+0x404/0xa90 [ 956.100158][ C1] Code: 80 3c 28 00 74 0d 48 8d bc 24 d0 01 00 00 e8 43 91 3a f8 48 89 9c 24 d0 01 00 00 48 8b 7c 24 50 be 00 02 00 00 e8 3c 3f 9a f7 <43> 80 3c 2e 00 74 08 4c 89 e7 e8 2d 90 3a f8 49 83 3c 24 00 74 09 [ 956.119790][ C1] RSP: 0018:ffffc90009b8f900 EFLAGS: 00000246 [ 956.125864][ C1] RAX: 244bbc8688f03000 RBX: ffffc90009b8fa90 RCX: ffffffff8bb7b500 [ 956.133849][ C1] RDX: ffffc9000a314000 RSI: 0000000000000200 RDI: ffffffff89bd0784 [ 956.141818][ C1] RBP: ffffc90009b8fb90 R08: ffffffff89bd61db R09: 1ffff1100c47e000 [ 956.149804][ C1] R10: dffffc0000000000 R11: ffffed100c47e001 R12: ffff8880623f1800 [ 956.157796][ C1] R13: dffffc0000000000 R14: 1ffff1100c47e300 R15: ffffc90004e83030 [ 956.165794][ C1] ? bpf_test_timer_continue+0x10b/0x350 [ 956.171456][ C1] ? queued_write_lock_slowpath+0x3c0/0x44a [ 956.177396][ C1] ? bpf_test_run+0x404/0xa90 [ 956.182095][ C1] ? do_syscall_64+0xf3/0x230 [ 956.186790][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.192864][ C1] ? bpf_test_run+0x370/0xa90 [ 956.197561][ C1] ? __pfx_bpf_test_run+0x10/0x10 [ 956.202606][ C1] ? eth_type_trans+0x3d1/0x7a0 [ 956.207466][ C1] ? __pfx_eth_type_trans+0x10/0x10 [ 956.212669][ C1] ? convert___skb_to_skb+0x41/0x620 [ 956.217975][ C1] bpf_prog_test_run_skb+0xc97/0x1820 [ 956.223382][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 956.229199][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 956.235101][ C1] bpf_prog_test_run+0x33a/0x3b0 [ 956.240048][ C1] __sys_bpf+0x48d/0x810 [ 956.244315][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 956.249098][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 956.255088][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 956.261595][ C1] ? do_syscall_64+0x100/0x230 [ 956.266384][ C1] __x64_sys_bpf+0x7c/0x90 [ 956.270824][ C1] do_syscall_64+0xf3/0x230 [ 956.275329][ C1] ? clear_bhb_loop+0x35/0x90 [ 956.280009][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.285905][ C1] RIP: 0033:0x7f18347779f9 [ 956.290315][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 956.309919][ C1] RSP: 002b:00007f1835594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 956.318340][ C1] RAX: ffffffffffffffda RBX: 00007f1834905f80 RCX: 00007f18347779f9 [ 956.326313][ C1] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 956.334283][ C1] RBP: 00007f18347e58ee R08: 0000000000000000 R09: 0000000000000000 [ 956.342252][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.350217][ C1] R13: 0000000000000000 R14: 00007f1834905f80 R15: 00007ffcacfb4578 [ 956.358202][ C1] [ 956.361236][ C1] rcu: rcu_preempt kthread starved for 10340 jiffies! g62225 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 956.372435][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 956.382399][ C1] rcu: RCU grace-period kthread stack dump: [ 956.388281][ C1] task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 956.400056][ C1] Call Trace: [ 956.403334][ C1] [ 956.406263][ C1] __schedule+0x17ae/0x4a10 [ 956.410789][ C1] ? __pfx___schedule+0x10/0x10 [ 956.415660][ C1] ? __pfx_lock_release+0x10/0x10 [ 956.420694][ C1] ? __asan_memset+0x23/0x50 [ 956.425296][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 956.431112][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 956.437446][ C1] ? schedule+0x90/0x320 [ 956.441709][ C1] schedule+0x14b/0x320 [ 956.445880][ C1] schedule_timeout+0x1be/0x310 [ 956.450728][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 956.456098][ C1] ? __pfx_process_timeout+0x10/0x10 [ 956.461391][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 956.466942][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 956.471793][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 956.476995][ C1] ? rcu_gp_init+0x1256/0x1630 [ 956.481769][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 956.486705][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 956.492775][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 956.498062][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 956.503959][ C1] ? finish_swait+0xd4/0x1e0 [ 956.508551][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 956.513143][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 956.518342][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 956.524244][ C1] ? __kthread_parkme+0x169/0x1d0 [ 956.529287][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 956.534490][ C1] kthread+0x2f0/0x390 [ 956.538565][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 956.543763][ C1] ? __pfx_kthread+0x10/0x10 [ 956.548358][ C1] ret_from_fork+0x4b/0x80 [ 956.552781][ C1] ? __pfx_kthread+0x10/0x10 [ 956.557393][ C1] ret_from_fork_asm+0x1a/0x30 [ 956.562175][ C1] [ 956.565190][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 956.571518][ C1] Sending NMI from CPU 1 to CPUs 0: [ 956.576744][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30