last executing test programs: 1m19.944088207s ago: executing program 1 (id=2472): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(r2) prlimit64(r3, 0xd, &(0x7f0000000100)={0x7, 0xc6}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x90) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x2400, 0x93) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r7, 0x102, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) move_mount(r6, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x2}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m13.30976174s ago: executing program 1 (id=2479): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioperm(0x0, 0x3ff, 0x4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x85, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x2) syz_open_dev$I2C(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)={'U-'}, 0x16, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000002e40)='./bus\x00', &(0x7f0000002e80)='nilfs2\x00', 0x0, 0x0) 1m7.29025353s ago: executing program 1 (id=2496): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb, 0x1}, 0x20) r1 = accept4(r0, &(0x7f0000000100)=@caif=@dbg, &(0x7f0000000180)=0x80, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="17090000000000000016ae0000000520070000000000080009000000000014001f000000000000000000000000000000000006001b0000f94a31e95154d6ff58550fa6ecb6d0000000"], 0x40}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0), 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x0, 0x1, 0x400, 0x6b0b, 0xc0000}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x3c, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$packet(0x11, 0x0, 0x300) socket(0xa, 0x3, 0x3a) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r6}}, 0x18) 1m6.774597623s ago: executing program 1 (id=2498): r0 = syz_open_dev$vim2m(&(0x7f0000001f80), 0xec, 0x2) r1 = socket$kcm(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32], 0xc) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xbdff, 0x0, "ec28a1ba80a20507"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xff2e) r2 = syz_open_pts(0xffffffffffffffff, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x4, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x12) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000400)={0x3, 0x1, 0x3, "5a30bc68b9de658caf5999a76c019fefcf54e97d739d47b900", 0x33425c56}) 1m6.471002736s ago: executing program 1 (id=2499): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000650006000010000018010000646c6c2500000000002020207b9af8ff000000002d9a00000000000037090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000076000000b70000000000000095", @ANYRES32=r0, @ANYRES16, @ANYBLOB="fb2a280fdc73be01d3c475db59666180159bb7be4c9dc9f5bc18465925f8fa45265f8a2831b7a34e7749eaa19203b33143f2b096a2eec1a9ffd745906bed30d91d69a9e404bf4d24df2d40e59aa2f73a19168048af43c4e08f96ec6b7dff572eb49f523070b360331baf3c07", @ANYRESHEX=r1], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0xc1100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'rr\x00'}, 0x2c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) pipe2(&(0x7f0000000000), 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x3ff) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095001f0000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000180)=0x5) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r10, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0xfde7, 0x0, 0x0, 0x0, '\x00', r10}, 0x90) 1m5.301606871s ago: executing program 1 (id=2505): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, &(0x7f00000039c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="80000000080211000001080211000000505050505050000000000000000000006400010000150202020202020102ec16710700000000000000f06af1bf2e0692fd0c783ad888a10aea7436895e287de37914b1fe8a8cf313f78f2ced82fd74b3c4eefbbd337a69bdb10f4f688e3ccad9775012e206e20345a412f9a976e22c494a87b22673cf71fc6a60654c33eb37fc5dbdbef6d15917b121709e0568d035239e44f752412a8e46e580c21a203aa6bf662cdb9a37ac253d409eee4ce08aae3d0657e0a7a7af104572b6a1144c5a2f2d0b70ca8c1ead096c2a43aaf3bafaf2378d2be906d73f80"], 0x39) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a003400764fa1ac45cd692d5c9f5ea91014c8e9987f65ef6b5b190e82957c555bd3cee8b47f635c412aaa52c63f6238788d7e649a0ebf0519c7648f505586955e27ca9f5ac5bfc353f02eb17d3f71e1bb05c57d38382ddce696f91659155c3b0e309a435a0c7cc04ac62257199b029b1b05261b8701fc926e29b07e93e70cf6e0d479727511a055cf2ffbe66de29da06496f9fe2ba18365d1dabea49e92da8c2319c60bfce08ec1e0"], 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000240)=@mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xa2a}, @broadcast, @device_b, @from_mac, {0x9, 0x5}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x22, @void}, 0x1e) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100)=0x7d, 0x4) r4 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r4, 0x0, 0x0, 0x10040, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x3ff) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(r1, 0x0) 54.178727885s ago: executing program 2 (id=2520): r0 = syz_open_dev$vbi(&(0x7f0000000740), 0x2, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000180)={0x0, 0x400, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, '\x00', @p_u16=0x0}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2b}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x9, &(0x7f0000000040)=@raw=[@ringbuf_output], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x3, &(0x7f0000000100)=""/3, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0xa, &(0x7f0000000300), 0x8}, 0x90) fcntl$notify(r1, 0x402, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140), 0xfecc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0}, 0x90) 53.810984083s ago: executing program 2 (id=2521): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c710016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa73d897e3896d863081b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbd744e517e65ddab19e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f200004304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188541c300f5c1bf56705ba12d198e897186b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710f7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47cbb0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9ea410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be0a33c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06a6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c6062368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c5bed4b0d73dffb17a88aaad5921aee7dae6a2f3009d9cb434898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a64d903b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e7ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000000000000000006a728258ca3d846a000e80d5f43109a48ddc54cec5d7f78c80e010ed02ffc0846577cafcd9e0ad83149bfb08ba7b5b431311041deb5e5d65610ad6e8d6ed55e900071b4d37d9fadb17a0407e7251866b63faccfe936980f59ceaa9d6b6863024b482023799a4f30a225b560f320e89ed44130e78f8cf000ac3c743b08d4256f282fc36162ac4b59527a3b67560313914ff6ac4ac43cd0e79d6372da631de3fde6c29de3b43d3046df23019ecadd57f175a2443928b1bcb9be16f54936796c3b928dc07c70771622cef2fafeb239a3ca4"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb, 0x1}, 0x20) r1 = accept4(r0, &(0x7f0000000100)=@caif=@dbg, &(0x7f0000000180)=0x80, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="17090000000000000016ae0000000520070000000000080009000000000014001f000000000000000000000000000000000006001b0000f94a31e95154d6ff58550fa6ecb6d0000000"], 0x40}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0), 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x0, 0x1, 0x400, 0x6b0b, 0xc0000}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x3c, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x80) socket(0xa, 0x3, 0x3a) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r6}}, 0x18) 52.746723973s ago: executing program 2 (id=2524): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = dup(r1) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040), 0xc) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r6, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0x1}], 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="bb517c84337fea1d20840b67ba7815203f8e966310b71c95166a41625117e935f135981f308ffce23d865a543e2c88bdb046f79a91a00d440f432ddd872fc0e4050de7bc5c8465f793f8c48cb1c30ed30b"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0xe, &(0x7f0000000240)="b9ad020000b805000000ba000000000f30c4c1f56b03b8003000000f23d80f21f835c00000100f23f89a0b00000005013e0f01cbb9b00100000f320f63650966baf80cb8e86e868fef66bafc0cb8c67512e7ef670f01c3663e660fc7b4390d000000", 0x62}], 0x1, 0x5e, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x20) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 46.262924922s ago: executing program 2 (id=2528): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r0, r0) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) 45.141855607s ago: executing program 2 (id=2533): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb, 0x1}, 0x20) accept4(r0, &(0x7f0000000100)=@caif=@dbg, &(0x7f0000000180)=0x80, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="17090000000000000016ae0000000520070000000000080009000000000014001f000000000000000000000000000000000006001b0000f94a31e95154d6ff58550fa6ecb6d0000000"], 0x40}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0), 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x0, 0x1, 0x400, 0x6b0b, 0xc0000}) socket(0xa, 0x3, 0x3a) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r5}}, 0x18) 44.614034111s ago: executing program 2 (id=2535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x3b7, &(0x7f0000000e00)=ANY=[], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r4, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 28.219345004s ago: executing program 0 (id=2568): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) fdatasync(0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0x1b, 0x0, 0x0, @mcast2, 0x4}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x4, @loopback}, r5}}, 0x48) r6 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0xc1086201, 0x20000000) socket$inet6_sctp(0xa, 0x0, 0x84) socket$pppoe(0x18, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7) 27.127105917s ago: executing program 0 (id=2570): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) fsopen(0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x500}, 0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r4}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r5, 0x58, &(0x7f00000000c0)}, 0x10) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x100400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000003c0)=0x8000000000000001, 0xe0) syz_usbip_server_init(0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x13, 0x0, 0x0) 25.528605062s ago: executing program 0 (id=2573): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0xf, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xd9, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000004c0)={{&(0x7f0000000280)=""/63, 0x3f}, &(0x7f0000000400), 0x21}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @remote}, 0x1, 0x0, 0x0, 0x0, 0x28d, &(0x7f0000000000)='veth1\x00', 0x91a2, 0x6, 0xff}) 20.877660141s ago: executing program 0 (id=2580): socket$kcm(0x10, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/225, 0xe1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0}, {0x0}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x41}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/32, 0x20}}], 0x4, 0x40000121, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000280)="baf80c66b86aecf18a66efbafc0c3dc800ef8087430008f36e660f3a0ee06a640fc77a00baf80c66d110a9514f8989efbafc0cb000ee66b9800000c00f326635001000000f3066b94d03000066b80e00000066ba000000000f300fc7aa0090deed", 0x61}], 0x1, 0x0, 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000680)=ANY=[], 0xfe3a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x2, 0x1, 0x4, 0x1}) 14.772402053s ago: executing program 0 (id=2584): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01840000000000000000020000002c00048028000180080001006e6174001c0002800800034000000000080001400000160108000240000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r1, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sysinfo(&(0x7f0000000000)=""/196) 13.453318625s ago: executing program 3 (id=2587): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)={0x2}) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000006c0)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000580)) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xc81, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000001080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0xfffffffb, @mcast2, 0x101}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="600340e5e377e1fd52f1b4c6fe08aca305abd312c51e883aa42d0f6c296c73112efd430e4b002e3327d1d881a0561cbf43e4fe67c85993b70b56a012e7171511a1a8f9ad782045bb12416a4c9faa674a8eddb2b8357b3392fc781dcfdb95955775bccc3be15c000c484dd77ae0329bb5c906", 0x72}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0xfffffff4, @remote, 0x6}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180)="7f0154f113a7130a738b8e040c458ade11419c7c009c3a580183dfc15a6aaa749ed947507ebdf5da384e9e297973ddc4fd7420d33f8f4b64c519b8eb9fa019cefc5380fbcdac2364bcb1db4b3538ab21fb420b94e4422bbdfc8dc03d3ea8f6880fa887df76605b4e099c5f1279d1893acee5ea6b21f4d28efce874e8b2ec9de98845d04cb358c38e1573de8d56f04e24c6dc11100b3f46504b7f2252c0675c", 0x9f}, {&(0x7f0000000280)="e3aa7f99f3b383c6f94f28cbdc52f7f3e81e00fb0598020d34e21f4c9f3c6c0deb620275f7ebf639b9b6e141fd169a0ed61b6898819c21e55e2a06cc07cf72f1a829db6b1396fbf04764fa129153cd640f902beed861c696", 0x58}, {&(0x7f0000000300)="ee045e9eed9d32a29921ad353fc4e439de1b91899ce7d78c023980f9bb855845dc8e620e74b7a079a83b04d610d5ca0042c2e02562c5d90d93e91c429fc3869574edb9a669196f8286d0fcf86a0aef659b84b92975f1e7297788ae67ac72fe4ea780c7812248e990e9cfa935dea907e6d41d81950c0c3a8a85d17c300b1a4661da0c8922c21345a608e5e746045cb351cb7664ea4d555ef4e472def5afd4d5eeda14406b6ffd05c10b2c3ed164742b1f", 0xb0}, {&(0x7f00000003c0)="b4f3e7269e1157734016024fe562babe1a15c6e113508d259365af7a5ecaf5129c6f4ed0467a56f43ee7ee80b5e9eea01c45e1e8e08620bc414ef4cb54724018fe6f34b674dc9947beccc8c904502e5196b26277588581906d1c37db77c804150047e74aabc2deddc077a91083e4466520664ea00c0835cb7c71d85433da71e5d8ca40f382d6a9484d24e850ab33dd78aa2b0396215b97efd4c90e7b58e6579f727c2c170bcbadd8d068c99140023a04bb7e66048f3c82fc39", 0xb9}, {&(0x7f0000000480)="44d98692091d9f4985cb41d02c149f04719148bb5bdc5d8af77f5f09cbce3494ba3f9e0afe429552d4f26dab00ffeffc536a9a73b76a48220b18492f8fd0fb0a0d99fb0f837704e147ecc929cc91a2b3d315b09c623bd25d87f95f61109f297b216f9c89a30581e8d6e6de890e084d6267fcb47d576dbc01290a096c681c75", 0x7f}], 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"/335], 0x148}}], 0x3, 0x0) 13.306439243s ago: executing program 0 (id=2588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x3b7, &(0x7f0000000e00)=ANY=[], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 12.450756475s ago: executing program 3 (id=2589): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000026000701"], 0x20}}, 0x0) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) writev(r5, &(0x7f0000002680)=[{&(0x7f00000025c0)='8', 0x1}, {0x0, 0x2}], 0x2) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x0, 0x0, {0x800, 0x3ab1cfa, 0x300d, 0x7, 0xa, 0x1, 0x0, 0x5}}) 12.223657189s ago: executing program 3 (id=2590): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2a, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0xd, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp={0x44, 0x1c, 0x82, 0x0, 0x0, [0x0, 0x8, 0x6, 0x6, 0x4, 0x6]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev, 0x8000}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2, 0x2}]}, @noop, @timestamp_addr={0x44, 0x1c, 0xa8, 0x1, 0x7, [{@multicast2, 0x7}, {@broadcast, 0xe}, {@rand_addr=0x64010100, 0x5}]}, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010101, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) write$nci(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="610501030307060204040006beacfe46fd18176d06801f1f29ad57ee07a74604defa3384ab1759f92a579e81a2e3646dfa998203b9861eb7ee0a4160fae23fedcb79082c50f218848c956f069f1ccbc4"], 0x1a) r5 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000000c2b52ecfb3f8c5ab2ebcaa4f7e1770ec561280833bdfb41ec9271f8158fdd23ba0389743060f21acf44647d2b325198644406c8ef09ce95697015a51524daf6ad2c05ddca05c1db1218275e5b06ad1cc097cc739f7277be9b1da0d6e08841aa66e6a5b258e586d17f2cfd72cb002b5d880f9d58f84051148523a13c439445490087044e6204119255c40c23cd5c356e1c94bc90c69315fd6a07a89e2baa94e6e2eaec9d72eda0b374340ab70c1e908890a42570fc416ab9", @ANYRES16=r7, @ANYBLOB="010000000000000000001900000018000180140002007465616d5f736c6176655f3000000000"], 0x2c}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000b00)=ANY=[@ANYBLOB="000000aba9b2097814e7f0261d9f001435d68fe4fe8fa21bfc53d6082e420e05be517488bbeebfe9d378c8be2001fc9c3dd8645aec3e28f5feee4a113db17f85827c4ddf8a048aaa4110790636f0e79466596e08055a625332f7e6553d03170a5df116bc89713f4536efaad1cf58e1735a7a5bea1ca2d23e01675a926615489ba341c20005df935c501e518cb2a738e62b4fe8c1f1219ab635fbe580c9aa84e848b8b64529e98b4cc991189abbd15737306a568f9c1538b12fd38f2d8e22886419790d938ee70fe61a5d301f90347faa7511985744120c7260a3cad7a579029dd6c8854659224105baff6ba3cf", @ANYRES16=0x0, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x4000810}, 0x40004) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000008000a0006ab7a00080006001300000008001100ff03000000000000060bccb9b1f564bf43741e29201c605f134a1ca571360a0ec947b334db2f4c5c1b90a48a1192f1619eabce451a093fb3d66efeed766d7a9dbca0877b6a8729658fab090d8afcf79fe1a1d6733df2841900"/120], 0x34}, 0x1, 0x0, 0x0, 0x4881}, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x1, 0x80ce, 0xfffe, 0xfff, {{0x23, 0x4, 0x3, 0x15, 0x8c, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x5, [@empty, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0x36, 0x3, 0x4, [{@local, 0x1}, {@remote, 0x8001}, {@empty, 0x7f}, {@local, 0x4}, {@loopback}]}, @end, @rr={0x7, 0x27, 0xb4, [@dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x8}, @private=0xa010101, @local, @broadcast, @loopback, @multicast1, @private=0xa010101]}, @generic={0x86, 0x12, "50e05afec07b746e478b37360700f248"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0xef, 0x9, 0x184d, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast1, 0x40, 0x10, 0x1, 0x2}}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000680)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)={@empty, @broadcast}, &(0x7f0000000400)=0xc) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001300290afcffffff0000000007000000", @ANYRES32=r9, @ANYBLOB="00d13f08000005004945418a665a18211a523dbbfa7e232e45649f69706f5d647bcfb6a19da37f26f265d782c00cc37426cd9db5db6cdc017284178edd8a26c26123d7fa15cff0f808"], 0x2c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @local}, &(0x7f0000000480)=0xc) 4.794788183s ago: executing program 4 (id=2593): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0/../file0/../file0\x00', 0x0, 0x820, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="33000000060000000000000000000000020000000000000002000000000000000a0000000000000063616368653d6e6f6e65006fbcb314143eeb8c31c0a5213ca43629d9ed0a9c4fdc9790b8523d16a73ffeda29d111e2ca0d1d633055640de6fd024056041cd0a20e"], 0x33) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000002c0)={0x0, 0x10000, 0x0, [0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rseq_update\x00', r4}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) 3.73073966s ago: executing program 4 (id=2594): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x902}, 0xe) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000580), 0xffffffff, r1}, 0x38) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa}, 0x48) 3.455488084s ago: executing program 4 (id=2595): r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$rtc(&(0x7f00000002c0), 0x3, 0x585201) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000340)={0x5, "e0f46210680ca2d43b8019cd299b6d6776fadfb773c996ce451062885817ae09", 0xffffffffffffffff}) sendmsg$netlink(r1, &(0x7f00000003c0)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000640)={0x108, 0x1e, 0xc3c, 0x70bd28, 0x25dfdbfc, "", [@generic="b06b43f71e5198781227fa33b224a3072a8cc7c3b7097273e17345ab5e2cb5068743076f1af4d6a2e1c57a8ccb576d029c251725613d42b4af9aa734736fcc6d2a250813f7f3fdaec544d73f67e1831114dfee1b9577124ed56481339176bcc9fbd7a4640c57df72453158d64663c05fa25ec29875caeb0080f3f80acf2062dc3d7bf8bc95f1f272b1da9522125734019cd223b6ced28c09742a6037a4276ad0708a29d0870a3efc16fee7ffa1fb4cce7d3e3aa49024ff10a26afbc1f0d6c039556e2fb98be225ef69a8d73534c952939f21d8c52d5da26694970979e1e3df6d0d8b23e3b6ce14d5182e77acd4cc6518b2e906d15db9"]}, 0x108}], 0x1, &(0x7f0000000440)=[@rights={{0x24, 0x1, 0x1, [r1, r2, r2, r1, r0]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r0, r2, 0xffffffffffffffff, r1, r2, r1, r0, r1, r3]}}], 0x60}, 0x20000000) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x96}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 2.576661829s ago: executing program 3 (id=2597): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xd2, 0x8}, 0x48) fcntl$setflags(r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f00000000c0)=0x311, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "2126cdab48c31b56", "2911587b8a2f7117c212172ceae0a819c6634262a65a94851ca0bba42dbfdd43", '\t\x00', "68b48afd9ec8bdc1"}, 0x38) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000025c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r6 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x2a, 0x0, 0xffffffffffffffff, 0x46, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) 2.471850555s ago: executing program 4 (id=2598): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000026000701"], 0x20}}, 0x0) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) writev(r4, &(0x7f0000002680)=[{&(0x7f00000025c0)='8', 0x1}, {0x0, 0x2}], 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x0, 0x0, {0x800, 0x3ab1cfa, 0x300d, 0x7, 0xa, 0x1, 0x0, 0x5}}) 2.192726657s ago: executing program 4 (id=2599): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542f8000880f4000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014100200ff02000000000000000000000000000105c9900003000000000028000080060001000a00000014000200fc02000000000000000000000000000005000300000000001c000080"], 0x138}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) (fail_nth: 2) 1.380847151s ago: executing program 3 (id=2600): bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff4b, &(0x7f0000000200)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000400)=""/64, 0xb4, 0x40, 0x1, 0x5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2d, 0x7, 0xd40, 0x3ae, 0x870, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r2, 0x4, 0x0, 0x1}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=@newlink={0x2c, 0x10, 0x100, 0x0, 0x25dfdbff, {0x0, 0x0, 0xe403, r7, 0x46003}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$nl_xfrm(r1, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000300)=@expire={0x3e8, 0x18, 0x400, 0x70bd2c, 0x25dfdbfb, {{{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x29, 0x0, r3}, {@in=@broadcast, 0x4d4, 0x33}, @in=@rand_addr=0x64010102, {0xfffffffffffffffc, 0x8, 0x10001, 0x400, 0x100000001, 0x0, 0x4, 0x2}, {0x6, 0x0, 0x6, 0x3}, {0x1, 0x6, 0x5}, 0x70bd2d, 0x34ff, 0xa, 0x1, 0x7, 0x2}, 0x10}, [@tmpl={0x4}, @etimer_thresh={0x8}, @sec_ctx={0x15, 0x8, {0x11, 0x8, 0x0, 0xc, 0x9, "94ccab551500000000"}}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0xb, 0x9}}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@multicast2, 0x4e20, 0xef8, 0x4e22, 0x0, 0x2, 0x80, 0x100, 0x11, r4, 0xffffffffffffffff}, {0x9, 0x6526, 0x2f5a5f94, 0xfffffffffffff000, 0x9, 0x7, 0x9, 0xfffffffffffff6be}, {0x2, 0x5, 0xffff, 0xb7}, 0x0, 0x6e6bb1, 0x2, 0x0, 0x0, 0x1}}, @algo_auth={0x10c, 0x1, {{'sha256-neon\x00'}, 0x620, "34b83f11d8877ff9a736144bb40a9e49a052c3c3f4978af99023bb5928348181828e72cc2c5d9aadbceb6162ac2864b57e5a171bbb0c03a7e82cf1d9fe8d110affebb5919fd221227aee5baec7e7974906afb0425c6058d370a33668ab54b472ddbc7ec56c7ab15adbed50a8ae7d6a72c5322a7000003485af446d3cf66326cefa807deda862fbe48b8c83b9ee045189691d2f72a2d5c09700e45091731c3940c363f90b8d8c819a848dbf1a9bafffac593c6045810fad6dda02153055a359b5515383bc"}}, @sa={0xe4, 0x6, {{@in=@private=0xa010102, @in6=@empty, 0x4e20, 0xb, 0x4e21, 0x5, 0xa, 0x0, 0x40, 0x2, r7, r8}, {@in=@remote, 0x4d5, 0x32}, @in=@private=0xa010102, {0x8, 0x8000000000000000, 0x0, 0x100000001, 0x0, 0x6e, 0x8001, 0x4}, {0x6, 0x6, 0x6, 0x3}, {0x6, 0x5, 0x2}, 0x6, 0x3504, 0x2, 0x6, 0xc6, 0x50}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x2400c015}, 0x1) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) bind$inet(r9, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_int(r9, 0x6, 0x4, 0x0, 0x0) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r9, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x5f) recvfrom$inet(r9, &(0x7f0000000080)=""/128, 0xfffffce3, 0x0, 0x0, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000700)={'wg1\x00'}) 130.628297ms ago: executing program 3 (id=2601): socket$kcm(0x10, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/225, 0xe1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0}, {0x0}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x41}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/32, 0x20}}], 0x4, 0x40000121, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000280)="baf80c66b86aecf18a66efbafc0c3dc800ef8087430008f36e660f3a0ee06a640fc77a00baf80c66d110a9514f8989efbafc0cb000ee66b9800000c00f326635001000000f3066b94d03000066b80e00000066ba000000000f300fc7aa0090deed", 0x61}], 0x1, 0x0, 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000680)=ANY=[], 0xfe3a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x2, 0x1, 0x4, 0x1}) 0s ago: executing program 4 (id=2602): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xd3, 0x75, 0x8, 0x20, 0xac8, 0x321, 0x6fbe, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xfe, 0x89}}]}}]}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r1 = socket$tipc(0x1e, 0x5, 0x0) pipe2$9p(0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000001b880)={0x2020, 0x0, 0x0}, 0xfeec) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000580)=[{&(0x7f0000019740)=""/242, 0xf2}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x1010, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): T12989] ? __pfx___might_resched+0x10/0x10 [ 883.801205][T12989] ? dynamic_dname+0x141/0x1b0 [ 883.806022][T12989] should_fail_ex+0x3b0/0x4e0 [ 883.810769][T12989] ? tomoyo_encode+0x26f/0x540 [ 883.815676][T12989] should_failslab+0xac/0x100 [ 883.820398][T12989] ? tomoyo_encode+0x26f/0x540 [ 883.825313][T12989] __kmalloc_noprof+0xd8/0x400 [ 883.830308][T12989] tomoyo_encode+0x26f/0x540 [ 883.832499][ T4488] Bluetooth: hci2: command tx timeout [ 883.834927][T12989] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 883.834961][T12989] tomoyo_realpath_from_path+0x59e/0x5e0 [ 883.851664][T12989] tomoyo_path_number_perm+0x23a/0x880 [ 883.857271][T12989] ? tomoyo_path_number_perm+0x208/0x880 [ 883.862951][T12989] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 883.869029][T12989] ? __fget_files+0x29/0x470 [ 883.873668][T12989] ? __fget_files+0x3f6/0x470 [ 883.878383][T12989] ? __fget_files+0x29/0x470 [ 883.883023][T12989] security_file_ioctl+0x75/0xb0 [ 883.888008][T12989] __se_sys_ioctl+0x47/0x170 [ 883.892640][T12989] do_syscall_64+0xf3/0x230 [ 883.897189][T12989] ? clear_bhb_loop+0x35/0x90 [ 883.901907][T12989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.908024][T12989] RIP: 0033:0x7f0ab0d75f19 [ 883.912650][T12989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.932566][T12989] RSP: 002b:00007f0ab1a80048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 883.941132][T12989] RAX: ffffffffffffffda RBX: 00007f0ab0f05f60 RCX: 00007f0ab0d75f19 [ 883.949153][T12989] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 883.957170][T12989] RBP: 00007f0ab1a800a0 R08: 0000000000000000 R09: 0000000000000000 [ 883.965327][T12989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.973432][T12989] R13: 000000000000000b R14: 00007f0ab0f05f60 R15: 00007ffd572f1e48 [ 883.981478][T12989] [ 883.989839][T12989] ERROR: Out of memory at tomoyo_realpath_from_path. [ 883.999503][T12989] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 884.305172][T13001] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2094'. [ 884.330254][T13001] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 884.489711][ T2860] team0 (unregistering): Port device team_slave_1 removed [ 884.544141][ T2860] team0 (unregistering): Port device team_slave_0 removed [ 885.180509][T12904] team0: Port device team_slave_0 added [ 885.295566][T12904] team0: Port device team_slave_1 added [ 885.346050][ T9327] usb 4-1: USB disconnect, device number 35 [ 885.352384][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 885.469646][T13008] FAULT_INJECTION: forcing a failure. [ 885.469646][T13008] name failslab, interval 1, probability 0, space 0, times 0 [ 885.518750][T13008] CPU: 0 UID: 0 PID: 13008 Comm: syz.3.2098 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 885.529898][T13008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 885.540103][T13008] Call Trace: [ 885.543427][T13008] [ 885.546397][T13008] dump_stack_lvl+0x241/0x360 [ 885.551302][T13008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 885.556671][T13008] ? __pfx__printk+0x10/0x10 [ 885.561334][T13008] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 885.567364][T13008] ? __pfx___might_resched+0x10/0x10 [ 885.572712][T13008] should_fail_ex+0x3b0/0x4e0 [ 885.577541][T13008] should_failslab+0xac/0x100 [ 885.582370][T13008] ? __alloc_skb+0x1c3/0x440 [ 885.587277][T13008] kmem_cache_alloc_node_noprof+0x71/0x320 [ 885.593193][T13008] __alloc_skb+0x1c3/0x440 [ 885.597694][T13008] ? __pfx___alloc_skb+0x10/0x10 [ 885.602777][T13008] ? netlink_autobind+0xd6/0x2f0 [ 885.607848][T13008] ? netlink_autobind+0x2b0/0x2f0 [ 885.612929][T13008] netlink_sendmsg+0x638/0xcb0 [ 885.618028][T13008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.623371][T13008] ? __import_iovec+0x536/0x820 [ 885.628272][T13008] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 885.633613][T13008] ? security_socket_sendmsg+0x87/0xb0 [ 885.639123][T13008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.644720][T13008] __sock_sendmsg+0x221/0x270 [ 885.649557][T13008] ____sys_sendmsg+0x525/0x7d0 [ 885.654570][T13008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 885.659930][T13008] __sys_sendmsg+0x2b0/0x3a0 [ 885.664576][T13008] ? __pfx___sys_sendmsg+0x10/0x10 [ 885.669745][T13008] ? vfs_write+0x7c4/0xc90 [ 885.674430][T13008] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 885.680816][T13008] ? do_syscall_64+0x100/0x230 [ 885.685628][T13008] ? do_syscall_64+0xb6/0x230 [ 885.690398][T13008] do_syscall_64+0xf3/0x230 [ 885.695143][T13008] ? clear_bhb_loop+0x35/0x90 [ 885.699882][T13008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.705830][T13008] RIP: 0033:0x7efebf375f19 [ 885.710290][T13008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.730120][T13008] RSP: 002b:00007efec0133048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.738766][T13008] RAX: ffffffffffffffda RBX: 00007efebf505f60 RCX: 00007efebf375f19 [ 885.746787][T13008] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 885.754801][T13008] RBP: 00007efec01330a0 R08: 0000000000000000 R09: 0000000000000000 [ 885.762898][T13008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.770910][T13008] R13: 000000000000000b R14: 00007efebf505f60 R15: 00007fff80fbb1f8 [ 885.778968][T13008] [ 886.277337][T12904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.338592][T12904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.364962][T12904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.384325][T12904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.467481][T12904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.498853][T13015] NILFS (nullb0): couldn't find nilfs on the device [ 886.523172][T12904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.688603][T13020] overlayfs: missing 'lowerdir' [ 886.867622][T12904] hsr_slave_0: entered promiscuous mode [ 886.892045][T12904] hsr_slave_1: entered promiscuous mode [ 886.920368][T12904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 886.944296][T12904] Cannot create hsr debugfs directory [ 887.035032][ T2860] IPVS: stop unused estimator thread 0... [ 887.042032][ T9327] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 887.097462][ T5099] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 887.262659][ T5099] usb 1-1: device descriptor read/64, error -71 [ 887.267768][ T9327] usb 4-1: Using ep0 maxpacket: 16 [ 887.309625][T10701] IPVS: starting estimator thread 0... [ 887.316869][T10543] Bluetooth: hci1: unexpected event for opcode 0x041a [ 887.423488][T13025] IPVS: using max 15 ests per chain, 36000 per kthread [ 887.992130][ T5099] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 888.148983][T12904] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 888.181898][ T5099] usb 1-1: device descriptor read/64, error -71 [ 888.198188][T12904] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 888.232430][T12904] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 888.243759][T12904] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 888.283688][ T9327] usb 4-1: unable to get BOS descriptor or descriptor too short [ 888.285368][T13036] netlink: 'syz.1.2105': attribute type 1 has an invalid length. [ 888.299462][T13036] netlink: 9372 bytes leftover after parsing attributes in process `syz.1.2105'. [ 888.308698][T13036] netlink: 'syz.1.2105': attribute type 1 has an invalid length. [ 888.325354][ T5099] usb usb1-port1: attempt power cycle [ 888.330995][ T9327] usb 4-1: no configurations [ 888.361721][ T9327] usb 4-1: can't read configurations, error -22 [ 888.607492][T12904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.656794][T13048] FAULT_INJECTION: forcing a failure. [ 888.656794][T13048] name failslab, interval 1, probability 0, space 0, times 0 [ 888.675103][T13048] CPU: 0 UID: 0 PID: 13048 Comm: syz.3.2109 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 888.685586][T13048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 888.695668][T13048] Call Trace: [ 888.698957][T13048] [ 888.702005][T13048] dump_stack_lvl+0x241/0x360 [ 888.706739][T13048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 888.712066][T13048] ? __pfx__printk+0x10/0x10 [ 888.716714][T13048] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 888.722217][T13048] ? __pfx___might_resched+0x10/0x10 [ 888.727565][T13048] should_fail_ex+0x3b0/0x4e0 [ 888.732314][T13048] should_failslab+0xac/0x100 [ 888.737007][T13048] ? sctp_association_new+0x8a/0x23f0 [ 888.742395][T13048] __kmalloc_cache_noprof+0x6c/0x2c0 [ 888.747969][T13048] sctp_association_new+0x8a/0x23f0 [ 888.753621][T13048] ? sctp_has_association+0x1d4/0x1f0 [ 888.759009][T13048] ? sctp_has_association+0x2f/0x1f0 [ 888.761710][ T5099] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 888.764389][T13048] ? __ipv6_addr_type+0x23c/0x2f0 [ 888.777042][T13048] sctp_connect_new_asoc+0x2d8/0x6c0 [ 888.782371][T13048] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 888.788265][T13048] ? sctp_sendmsg+0xbb9/0x3520 [ 888.793053][T13048] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 888.798623][T13048] ? security_sctp_bind_connect+0x90/0xb0 [ 888.804374][T13048] sctp_sendmsg+0x219a/0x3520 [ 888.809077][T13048] ? __pfx_sctp_sendmsg+0x10/0x10 [ 888.814125][T13048] ? inet_sendmsg+0x330/0x390 [ 888.818835][T13048] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 888.824147][T13048] ? security_socket_sendmsg+0x87/0xb0 [ 888.829888][T13048] __sock_sendmsg+0x1a6/0x270 [ 888.834587][T13048] __sys_sendto+0x3a4/0x4f0 [ 888.839121][T13048] ? __pfx___sys_sendto+0x10/0x10 [ 888.844186][T13048] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 888.850199][T13048] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 888.856614][T13048] __x64_sys_sendto+0xde/0x100 [ 888.861428][T13048] do_syscall_64+0xf3/0x230 [ 888.866054][T13048] ? clear_bhb_loop+0x35/0x90 [ 888.870920][T13048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.876835][T13048] RIP: 0033:0x7efebf375f19 [ 888.881271][T13048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.901014][T13048] RSP: 002b:00007efec0133048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 888.909448][T13048] RAX: ffffffffffffffda RBX: 00007efebf505f60 RCX: 00007efebf375f19 [ 888.917431][T13048] RDX: 000000000000cf88 RSI: 0000000020847fff RDI: 0000000000000003 [ 888.925409][T13048] RBP: 00007efec01330a0 R08: 000000002005ffe4 R09: 000000000000001c [ 888.933385][T13048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.941363][T13048] R13: 000000000000000b R14: 00007efebf505f60 R15: 00007fff80fbb1f8 [ 888.949354][T13048] [ 888.977481][T12904] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.992296][ T5099] usb 1-1: device descriptor read/8, error -71 [ 889.013451][ T1792] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.020703][ T1792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.091939][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.099079][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.106632][ T5098] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 889.209995][T12904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 889.278407][T12904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.404756][ T5099] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 889.443912][ T5098] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.554986][ T5098] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 889.574334][ T5099] usb 1-1: device descriptor read/8, error -71 [ 889.636463][ T5098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.762193][ T5099] usb usb1-port1: unable to enumerate USB device [ 889.875609][ T5098] usb 2-1: config 0 descriptor?? [ 890.312960][ T5098] ath6kl: Failed to submit usb control message: -71 [ 890.327237][ T5098] ath6kl: unable to send the bmi data to the device: -71 [ 890.342080][ T5098] ath6kl: Unable to send get target info: -71 [ 890.355694][ T5098] ath6kl: Failed to init ath6kl core: -71 [ 890.375071][T13046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2108'. [ 890.387404][ T5098] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 890.438368][ T5098] usb 2-1: USB disconnect, device number 38 [ 890.980850][T12904] veth0_vlan: entered promiscuous mode [ 891.025127][T12904] veth1_vlan: entered promiscuous mode [ 891.257019][T12904] veth0_macvtap: entered promiscuous mode [ 891.318393][T12904] veth1_macvtap: entered promiscuous mode [ 891.673181][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.683898][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.703251][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.730398][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.753776][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.797797][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.831476][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.914359][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.974412][T12904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.989168][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.003370][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.014390][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.025022][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.035886][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.046741][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.057784][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.068689][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.085363][T12904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.107723][T12904] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.116713][T12904] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.126203][T12904] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.136497][T12904] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.312299][ T9327] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 892.312385][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.346802][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.389213][T13089] netlink: 'syz.3.2116': attribute type 1 has an invalid length. [ 892.397249][T13089] netlink: 9372 bytes leftover after parsing attributes in process `syz.3.2116'. [ 892.406883][T13089] netlink: 'syz.3.2116': attribute type 1 has an invalid length. [ 892.442981][ T2448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.451152][ T2448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.531786][ T9327] usb 2-1: Using ep0 maxpacket: 16 [ 892.581715][ T1148] IPVS: starting estimator thread 0... [ 892.609709][ T4488] Bluetooth: hci0: unexpected event for opcode 0x041a [ 892.691883][T13094] IPVS: using max 15 ests per chain, 36000 per kthread [ 893.968785][ T9327] usb 2-1: unable to get BOS descriptor or descriptor too short [ 893.977207][ T9327] usb 2-1: no configurations [ 893.982528][ T9327] usb 2-1: can't read configurations, error -22 [ 894.678965][T13128] netlink: 'syz.4.2126': attribute type 1 has an invalid length. [ 894.688219][T13128] netlink: 9372 bytes leftover after parsing attributes in process `syz.4.2126'. [ 894.702922][T13128] netlink: 'syz.4.2126': attribute type 1 has an invalid length. [ 894.827873][T13132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2125'. [ 894.907620][T13125] lo speed is unknown, defaulting to 1000 [ 894.955966][T13125] lo speed is unknown, defaulting to 1000 [ 895.014161][T13125] lo speed is unknown, defaulting to 1000 [ 895.860328][T13125] infiniband syz1: set active [ 895.870322][ T5149] lo speed is unknown, defaulting to 1000 [ 895.892277][T13125] infiniband syz1: added lo [ 896.078682][T13125] syz1: rxe_create_cq: returned err = -12 [ 896.086651][T13125] infiniband syz1: Couldn't create ib_mad CQ [ 896.105837][T13125] infiniband syz1: Couldn't open port 1 [ 897.059367][T13125] RDS/IB: syz1: added [ 897.088851][T13125] smc: adding ib device syz1 with port count 1 [ 897.112447][T13125] smc: ib device syz1 port 1 has pnetid [ 897.126497][T10701] lo speed is unknown, defaulting to 1000 [ 897.143168][T13125] lo speed is unknown, defaulting to 1000 [ 897.261842][ T9327] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 897.593818][ T9327] usb 3-1: Using ep0 maxpacket: 16 [ 897.856667][T13172] netlink: 'syz.1.2138': attribute type 1 has an invalid length. [ 897.911660][T13172] netlink: 9372 bytes leftover after parsing attributes in process `syz.1.2138'. [ 897.955651][T13125] lo speed is unknown, defaulting to 1000 [ 897.987295][T13172] netlink: 'syz.1.2138': attribute type 1 has an invalid length. [ 898.205833][ T9327] usb 3-1: unable to get BOS descriptor or descriptor too short [ 898.586199][ T9327] usb 3-1: no configurations [ 898.592403][ T9327] usb 3-1: can't read configurations, error -22 [ 898.860757][T13125] lo speed is unknown, defaulting to 1000 [ 899.016652][T13125] lo speed is unknown, defaulting to 1000 [ 899.434939][T13125] lo speed is unknown, defaulting to 1000 [ 901.319805][T13210] NILFS (nullb0): couldn't find nilfs on the device [ 901.515892][T13215] NILFS (nullb0): couldn't find nilfs on the device [ 901.601993][T13216] FAULT_INJECTION: forcing a failure. [ 901.601993][T13216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 901.666555][T13216] CPU: 0 UID: 0 PID: 13216 Comm: syz.2.2148 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 901.677044][T13216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 901.687228][T13216] Call Trace: [ 901.690539][T13216] [ 901.693499][T13216] dump_stack_lvl+0x241/0x360 [ 901.698232][T13216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 901.703473][T13216] ? __pfx__printk+0x10/0x10 [ 901.708108][T13216] ? snd_pcm_oss_read2+0x2c0/0x440 [ 901.713271][T13216] should_fail_ex+0x3b0/0x4e0 [ 901.717998][T13216] _copy_to_user+0x2f/0xb0 [ 901.722459][T13216] snd_pcm_oss_read+0x5b0/0x940 [ 901.727358][T13216] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 901.732764][T13216] vfs_read+0x204/0xbc0 [ 901.736960][T13216] ? __pfx_lock_release+0x10/0x10 [ 901.742032][T13216] ? __mutex_unlock_slowpath+0x21d/0x750 [ 901.747705][T13216] ? __pfx_vfs_read+0x10/0x10 [ 901.752420][T13216] ? __fget_files+0x29/0x470 [ 901.757056][T13216] ? __fget_files+0x3f6/0x470 [ 901.761768][T13216] ? __fget_files+0x29/0x470 [ 901.766409][T13216] ksys_read+0x1a0/0x2c0 [ 901.770692][T13216] ? __pfx_ksys_read+0x10/0x10 [ 901.775526][T13216] ? do_syscall_64+0x100/0x230 [ 901.780334][T13216] ? do_syscall_64+0xb6/0x230 [ 901.785054][T13216] do_syscall_64+0xf3/0x230 [ 901.789607][T13216] ? clear_bhb_loop+0x35/0x90 [ 901.794336][T13216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.800380][T13216] RIP: 0033:0x7fda44175f19 [ 901.804849][T13216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.824513][T13216] RSP: 002b:00007fda43bbd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 901.832987][T13216] RAX: ffffffffffffffda RBX: 00007fda44306110 RCX: 00007fda44175f19 [ 901.840998][T13216] RDX: 00000000000000ab RSI: 0000000020000440 RDI: 0000000000000003 [ 901.849012][T13216] RBP: 00007fda43bbd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 901.857038][T13216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.865061][T13216] R13: 000000000000006e R14: 00007fda44306110 R15: 00007fff497672e8 [ 901.873105][T13216] [ 903.707116][T10701] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 903.903865][T13241] IPv4: Oversized IP packet from 172.20.20.24 [ 903.914644][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 903.921905][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 903.932813][T10701] usb 5-1: Using ep0 maxpacket: 16 [ 903.988614][ T5149] IPVS: starting estimator thread 0... [ 904.102220][T13245] IPVS: using max 15 ests per chain, 36000 per kthread [ 904.576074][ T29] audit: type=1326 audit(1721754441.252:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13246 comm="syz.3.2158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efebf375f19 code=0x0 [ 905.206681][T10701] usb 5-1: unable to get BOS descriptor or descriptor too short [ 905.215020][T10701] usb 5-1: no configurations [ 905.220206][T10701] usb 5-1: can't read configurations, error -22 [ 905.296408][ T5177] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 905.501632][ T5177] usb 1-1: Using ep0 maxpacket: 16 [ 905.523909][ T5177] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 905.596896][ T5177] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 905.617907][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.696206][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'. [ 905.713458][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'. [ 905.739701][T13262] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2160'. [ 905.848634][ C0] eth0: bad gso: type: 1, size: 1408 [ 905.894389][ T5177] usb 1-1: config 0 descriptor?? [ 907.661254][ T5177] usbhid 1-1:0.0: can't add hid device: -71 [ 907.668092][ T5177] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 907.710006][ T5177] usb 1-1: USB disconnect, device number 32 [ 908.069373][T13289] NILFS (nullb0): couldn't find nilfs on the device [ 908.931954][ T5099] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 910.151974][ T5099] usb 4-1: Using ep0 maxpacket: 16 [ 912.401158][ C0] eth0: bad gso: type: 1, size: 1408 [ 912.410498][ T4488] Bluetooth: hci1: unexpected event for opcode 0x041a [ 912.428214][ C0] eth0: bad gso: type: 1, size: 1408 [ 912.436282][T13313] lo speed is unknown, defaulting to 1000 [ 912.866382][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2178'. [ 912.958435][ T5099] usb 4-1: unable to get BOS descriptor or descriptor too short [ 912.984569][ T5099] usb 4-1: no configurations [ 912.989386][ T5099] usb 4-1: can't read configurations, error -22 [ 913.301866][T13329] rdma_rxe: rxe_newlink: failed to add lo [ 914.305752][ C0] eth0: bad gso: type: 1, size: 1408 [ 914.826798][T13363] NILFS (nullb0): couldn't find nilfs on the device [ 915.251989][T10701] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 916.424001][T10701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 916.453545][T10701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 916.472000][T10701] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 916.481503][T10701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.492629][T10701] usb 3-1: config 0 descriptor?? [ 916.757662][T10701] appletouch 3-1:0.0: Could not find int-in endpoint [ 916.764614][T10701] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 916.792588][T10701] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 916.991741][ T5149] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 917.171700][ T5149] usb 1-1: Using ep0 maxpacket: 16 [ 917.243126][ T1792] IPVS: starting estimator thread 0... [ 917.352006][T13373] IPVS: using max 15 ests per chain, 36000 per kthread [ 917.823541][ T5149] usb 1-1: unable to get BOS descriptor or descriptor too short [ 917.855472][ T5149] usb 1-1: no configurations [ 917.866944][ T5149] usb 1-1: can't read configurations, error -22 [ 917.934545][T11968] usb 3-1: USB disconnect, device number 35 [ 918.321513][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2193'. [ 918.387422][T13389] rdma_rxe: rxe_newlink: failed to add lo [ 918.560316][T13390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 918.764220][T13390] syz.4.2194: attempt to access beyond end of device [ 918.764220][T13390] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 918.780434][T13390] SQUASHFS error: Failed to read block 0x0: -5 [ 918.796786][T13390] unable to read squashfs_super_block [ 920.606263][ T5149] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 920.619127][ T1792] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 920.827601][ T5149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 920.842612][ T1792] usb 5-1: Using ep0 maxpacket: 16 [ 920.871302][ T5149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 920.888020][ T5149] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 920.898042][ T5149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.912909][ T5149] usb 1-1: config 0 descriptor?? [ 920.926567][ T5149] appletouch 1-1:0.0: Could not find int-in endpoint [ 920.938999][ T5149] appletouch 1-1:0.0: probe with driver appletouch failed with error -5 [ 920.966873][ T5149] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 921.131896][T10701] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 921.174635][ T9327] usb 1-1: USB disconnect, device number 35 [ 921.354142][T10701] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 921.369933][T10701] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 921.385909][T10701] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 921.410554][T10701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.419160][ T1792] usb 5-1: unable to get BOS descriptor or descriptor too short [ 921.441734][ T1792] usb 5-1: no configurations [ 921.459853][ T1792] usb 5-1: can't read configurations, error -22 [ 921.642419][T13418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.657497][T13418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.154492][T10701] usb 4-1: string descriptor 0 read error: -22 [ 922.331819][ T9327] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 922.424990][T10701] usb 4-1: USB disconnect, device number 40 [ 922.575536][ T9327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.612613][ T9327] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 922.630117][ T9327] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 922.640528][ T9327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.675130][ T9327] usb 1-1: config 0 descriptor?? [ 922.729783][T13442] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2211'. [ 923.731821][T13447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 923.754004][T13447] syz.3.2212: attempt to access beyond end of device [ 923.754004][T13447] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 923.782802][T13447] SQUASHFS error: Failed to read block 0x0: -5 [ 923.796547][T13447] unable to read squashfs_super_block [ 923.962037][ T1148] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 924.195701][ T1148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 924.237679][ T1148] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 924.287215][ T1148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.336694][ T1148] usb 3-1: config 0 descriptor?? [ 924.611859][ T1148] ath6kl: Failed to submit usb control message: -71 [ 924.618613][ T1148] ath6kl: unable to send the bmi data to the device: -71 [ 924.623674][T13451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2214'. [ 924.626023][ T1148] ath6kl: Unable to send get target info: -71 [ 924.651751][ T1148] ath6kl: Failed to init ath6kl core: -71 [ 924.658823][ T1148] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 924.736734][ T1148] usb 3-1: USB disconnect, device number 36 [ 925.000033][ T9327] usbhid 1-1:0.0: can't add hid device: -71 [ 925.038575][ T9327] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 925.093947][ T9327] usb 1-1: USB disconnect, device number 36 [ 926.326850][T10543] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 926.339910][T10543] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 926.354910][T10543] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 926.367668][T10543] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 926.375950][T10543] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 926.386998][T10543] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 926.421722][ T9327] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 926.464253][T13468] lo speed is unknown, defaulting to 1000 [ 926.641896][ T9327] usb 5-1: Using ep0 maxpacket: 16 [ 926.735916][ T9327] usb 5-1: unable to get BOS descriptor or descriptor too short [ 926.759197][ T9327] usb 5-1: no configurations [ 926.785505][ T9327] usb 5-1: can't read configurations, error -22 [ 926.881746][ T1148] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 927.120316][ T1148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 927.151629][ T1148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 927.172930][ T1148] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 927.194301][ T1148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.217354][ T1148] usb 3-1: config 0 descriptor?? [ 927.240782][ T1148] appletouch 3-1:0.0: Could not find int-in endpoint [ 927.258893][ T1148] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 927.289447][T13468] chnl_net:caif_netlink_parms(): no params data found [ 927.298447][ T1148] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 927.365066][ T5177] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 927.561906][ T5177] usb 4-1: Using ep0 maxpacket: 32 [ 927.572186][T13468] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.597113][ T5177] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 927.616350][T13468] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.638081][ T5177] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 927.651906][T13468] bridge_slave_0: entered allmulticast mode [ 927.674312][ T5177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.681956][T13468] bridge_slave_0: entered promiscuous mode [ 927.701710][ T5177] usb 4-1: Product: syz [ 927.714860][T13468] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.718489][ T5177] usb 4-1: Manufacturer: syz [ 927.729327][T13468] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.744346][ T5177] usb 4-1: SerialNumber: syz [ 927.755538][T13468] bridge_slave_1: entered allmulticast mode [ 927.769881][ T5177] usb 4-1: config 0 descriptor?? [ 927.779383][T13468] bridge_slave_1: entered promiscuous mode [ 927.783050][T13480] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 927.807277][ T5177] hub 4-1:0.0: bad descriptor, ignoring hub [ 927.827803][ T5177] hub 4-1:0.0: probe with driver hub failed with error -5 [ 927.850123][ T5177] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 927.904740][T13468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.949775][T13468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.035470][T13480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.054382][T13480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.103073][T10543] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 928.121383][ T5177] usb 4-1: USB disconnect, device number 41 [ 928.129196][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 928.144683][ T9327] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 928.197355][T13468] team0: Port device team_slave_0 added [ 928.235260][T13468] team0: Port device team_slave_1 added [ 928.333770][ T9327] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 928.346263][ T9327] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 928.362967][ T9327] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 928.382530][ T9327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.385140][T13468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.436336][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.472703][T10543] Bluetooth: hci5: command tx timeout [ 928.494311][T13468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.520341][T13468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.539915][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.589343][T13468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.644557][T13484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.676450][T13484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.855751][T13468] hsr_slave_0: entered promiscuous mode [ 928.882495][T13468] hsr_slave_1: entered promiscuous mode [ 928.903265][T13468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 928.923435][T13468] Cannot create hsr debugfs directory [ 929.203278][ T1148] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 929.284901][ T9327] usb 5-1: string descriptor 0 read error: -22 [ 929.330363][T11968] usb 3-1: USB disconnect, device number 37 [ 929.379871][T13468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.405360][ T1148] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 929.447141][ T1148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.492693][ T1148] usb 4-1: config 0 descriptor?? [ 929.559401][ T9327] usb 5-1: USB disconnect, device number 50 [ 929.578386][T13468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.774454][T13468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.933720][T13468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.963112][ T1792] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 930.198891][ T1792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 930.238577][ T1792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 930.289649][ T1792] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 930.331681][ T1792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.353995][T13468] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 930.385873][ T1792] usb 3-1: config 0 descriptor?? [ 930.419483][T13468] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 930.473942][T13468] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 930.535930][T13468] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 930.553039][T10543] Bluetooth: hci5: command tx timeout [ 930.559369][T13514] netlink: 'syz.4.2230': attribute type 1 has an invalid length. [ 930.567508][T13514] netlink: 9372 bytes leftover after parsing attributes in process `syz.4.2230'. [ 930.576942][T13514] netlink: 'syz.4.2230': attribute type 1 has an invalid length. [ 930.946916][ T1148] usb 4-1: Cannot set autoneg [ 931.014429][T13508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2228'. [ 931.161835][ T1148] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 931.400982][ T1792] ath6kl: Failed to submit usb control message: -71 [ 931.412424][ T1792] ath6kl: unable to send the bmi data to the device: -71 [ 931.419612][ T1792] ath6kl: Unable to send get target info: -71 [ 931.447717][ T1792] ath6kl: Failed to init ath6kl core: -71 [ 931.454564][ T1792] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 931.481198][ T1792] usb 3-1: USB disconnect, device number 38 [ 931.596302][T13468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.639417][T13468] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.669437][ T9327] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.676655][ T9327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.708006][ T9327] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.715251][ T9327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.723778][ T1148] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 931.912798][ T1148] usb 5-1: Using ep0 maxpacket: 16 [ 932.002029][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.008450][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.074373][T13530] binder: 13528:13530 ioctl c0306201 0 returned -14 [ 932.153824][T10543] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 932.163355][T10543] Bluetooth: hci1: Injecting HCI hardware error event [ 932.173296][ T4488] Bluetooth: hci1: hardware error 0x00 [ 932.298989][T13468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.522156][ T1148] usb 5-1: unable to get BOS descriptor or descriptor too short [ 932.584770][ T1148] usb 5-1: no configurations [ 932.691840][T10543] Bluetooth: hci5: command tx timeout [ 932.786256][ T1148] usb 5-1: can't read configurations, error -22 [ 932.790055][T13468] veth0_vlan: entered promiscuous mode [ 932.899797][T13468] veth1_vlan: entered promiscuous mode [ 932.934274][T13539] NILFS (nullb0): couldn't find nilfs on the device [ 933.093221][T13468] veth0_macvtap: entered promiscuous mode [ 933.165604][T13468] veth1_macvtap: entered promiscuous mode [ 933.248296][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.281268][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.343503][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.391920][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.427754][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.448820][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.472819][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.496014][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.529431][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.560623][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.595004][T13468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.622144][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.636923][ C0] eth0: bad gso: type: 1, size: 1408 [ 933.643474][ T1792] usb 4-1: USB disconnect, device number 42 [ 933.681693][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.703466][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.735027][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.765882][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.792023][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.821711][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.851690][ T9327] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 933.859603][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.900795][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.956360][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.994641][T13468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.066240][ T9327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 934.117046][ T9327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 934.140410][T13468] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.162756][ T9327] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 934.181175][T13468] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.190267][ T9327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.232515][ T4488] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 934.235169][T13468] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.261748][ T9327] usb 3-1: config 0 descriptor?? [ 934.270265][ T9327] appletouch 3-1:0.0: Could not find int-in endpoint [ 934.278300][ T9327] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 934.297273][ T9327] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 934.322439][T13468] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.636864][ T2860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.674611][ T2860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.712119][ T4488] Bluetooth: hci5: command tx timeout [ 934.777594][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.813698][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.562120][ T1792] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 935.766804][ T1792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 935.796524][ T1792] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 935.825926][ T1792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.848494][ T1792] usb 1-1: config 0 descriptor?? [ 935.988133][T13563] netlink: 'syz.3.2241': attribute type 1 has an invalid length. [ 936.032065][T13563] netlink: 9372 bytes leftover after parsing attributes in process `syz.3.2241'. [ 936.067754][T13563] netlink: 'syz.3.2241': attribute type 1 has an invalid length. [ 936.076218][ T1792] ath6kl: Failed to submit usb control message: -71 [ 936.088800][T13560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2240'. [ 936.098100][ T1792] ath6kl: unable to send the bmi data to the device: -71 [ 936.114160][ T1792] ath6kl: Unable to send get target info: -71 [ 936.139526][ T1792] ath6kl: Failed to init ath6kl core: -71 [ 936.176325][ T1792] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 936.740503][ T1792] usb 1-1: USB disconnect, device number 37 [ 936.807663][ T9327] usb 3-1: USB disconnect, device number 39 [ 937.171965][ T5149] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 937.382517][ T5149] usb 5-1: Using ep0 maxpacket: 16 [ 937.936415][T13582] syz.0.2247[13582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 937.936587][T13582] syz.0.2247[13582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 939.142215][ T5149] usb 5-1: unable to get BOS descriptor or descriptor too short [ 939.187635][ T5149] usb 5-1: no configurations [ 939.222036][ T5149] usb 5-1: can't read configurations, error -22 [ 940.326050][T13602] netlink: 'syz.3.2254': attribute type 1 has an invalid length. [ 940.385659][T13602] netlink: 9372 bytes leftover after parsing attributes in process `syz.3.2254'. [ 940.402094][T13602] netlink: 'syz.3.2254': attribute type 1 has an invalid length. [ 940.741826][ T5149] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 940.801711][ T5099] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 941.003935][ T5149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 941.017752][ T5099] usb 2-1: Using ep0 maxpacket: 32 [ 941.030591][ T5149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 941.055782][ T5149] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 941.078552][ T5099] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 941.105548][ T5149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.124750][ T5099] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 941.142743][ T5149] usb 1-1: config 0 descriptor?? [ 941.147847][ T5099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.156585][ T5099] usb 2-1: Product: syz [ 941.165641][ T5149] appletouch 1-1:0.0: Could not find int-in endpoint [ 941.180909][ T5099] usb 2-1: Manufacturer: syz [ 941.192001][ T9327] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 941.193227][ T5149] appletouch 1-1:0.0: probe with driver appletouch failed with error -5 [ 941.231323][ T5099] usb 2-1: SerialNumber: syz [ 941.248166][ T5099] usb 2-1: config 0 descriptor?? [ 941.255344][ T5149] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 941.309718][T13615] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 941.334608][ T5099] hub 2-1:0.0: bad descriptor, ignoring hub [ 941.352374][ T5099] hub 2-1:0.0: probe with driver hub failed with error -5 [ 941.368410][ T5099] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input26 [ 941.391776][ T9327] usb 5-1: Using ep0 maxpacket: 16 [ 941.444491][T11968] usb 1-1: USB disconnect, device number 38 [ 941.759501][T13615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.793299][T13615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.021816][ T9327] usb 5-1: unable to get BOS descriptor or descriptor too short [ 942.060190][ T9327] usb 5-1: no configurations [ 942.068858][ T4488] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 942.074558][ T9327] usb 5-1: can't read configurations, error -22 [ 942.106750][ T5099] usb 2-1: USB disconnect, device number 41 [ 942.106827][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 944.701848][ T1148] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 944.792803][ T5177] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 944.901873][ T1148] usb 2-1: Using ep0 maxpacket: 32 [ 944.926982][ T1148] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 944.963822][ T1148] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 944.990245][ T1148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.013486][ T5177] usb 4-1: Using ep0 maxpacket: 16 [ 945.024351][ T1148] usb 2-1: Product: syz [ 945.040760][ T1148] usb 2-1: Manufacturer: syz [ 945.051128][ T1148] usb 2-1: SerialNumber: syz [ 945.068073][ T1148] usb 2-1: config 0 descriptor?? [ 945.074767][T13662] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 945.097733][ T1148] hub 2-1:0.0: bad descriptor, ignoring hub [ 945.111462][ T1148] hub 2-1:0.0: probe with driver hub failed with error -5 [ 945.137306][ T1148] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input27 [ 945.291678][T11968] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 945.343802][T13662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.375207][T13662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.445706][ T4488] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 945.474005][ T5149] usb 2-1: USB disconnect, device number 42 [ 945.474152][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 945.694009][T11968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 945.739471][T11968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 945.757039][ T5177] usb 4-1: unable to get BOS descriptor or descriptor too short [ 945.780358][T11968] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 945.785337][ T5177] usb 4-1: no configurations [ 945.805733][T11968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.821717][ T5177] usb 4-1: can't read configurations, error -22 [ 945.843096][T11968] usb 1-1: config 0 descriptor?? [ 945.868698][T11968] appletouch 1-1:0.0: Could not find int-in endpoint [ 945.891817][T11968] appletouch 1-1:0.0: probe with driver appletouch failed with error -5 [ 945.922270][T11968] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 946.062479][ T9327] usb 1-1: USB disconnect, device number 39 [ 946.073180][ T4488] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 946.082333][ T4488] Bluetooth: hci5: Injecting HCI hardware error event [ 946.091269][ T4488] Bluetooth: hci5: hardware error 0x00 [ 946.512540][T11968] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 946.592137][ T5149] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 946.701741][T11968] usb 3-1: Using ep0 maxpacket: 32 [ 946.811678][ T5149] usb 5-1: Using ep0 maxpacket: 8 [ 946.953653][T11968] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 946.988092][ T5149] usb 5-1: config 0 has no interfaces? [ 946.993996][ T5149] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 947.005530][ T5149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.016112][T11968] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 947.030855][T11968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.047898][ T5149] usb 5-1: config 0 descriptor?? [ 947.054665][T11968] usb 3-1: Product: syz [ 947.074008][T11968] usb 3-1: Manufacturer: syz [ 947.082328][T11968] usb 3-1: SerialNumber: syz [ 947.095220][T11968] usb 3-1: config 0 descriptor?? [ 947.112061][T13681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 947.120374][T11968] hub 3-1:0.0: bad descriptor, ignoring hub [ 947.127632][T11968] hub 3-1:0.0: probe with driver hub failed with error -5 [ 947.170837][T11968] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input28 [ 947.185621][T13693] NILFS (nullb0): couldn't find nilfs on the device [ 947.475615][T13681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.523639][T13681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.535737][ T9327] usb 5-1: USB disconnect, device number 57 [ 947.662028][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 947.679659][T11968] usb 3-1: USB disconnect, device number 40 [ 948.062136][ T5149] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 948.232243][ T4488] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 948.261714][ T5149] usb 4-1: Using ep0 maxpacket: 16 [ 948.406141][T13728] FAULT_INJECTION: forcing a failure. [ 948.406141][T13728] name failslab, interval 1, probability 0, space 0, times 0 [ 948.439269][T13728] CPU: 1 UID: 0 PID: 13728 Comm: syz.4.2299 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 948.449769][T13728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 948.459945][T13728] Call Trace: [ 948.463319][T13728] [ 948.466275][T13728] dump_stack_lvl+0x241/0x360 [ 948.470449][T13733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 948.470989][T13728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 948.481344][T13733] syz.0.2297: attempt to access beyond end of device [ 948.481344][T13733] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 948.483068][T13728] ? __pfx__printk+0x10/0x10 [ 948.483108][T13728] ? fs_reclaim_acquire+0x93/0x140 [ 948.483138][T13728] ? __pfx___might_resched+0x10/0x10 [ 948.483173][T13728] should_fail_ex+0x3b0/0x4e0 [ 948.483214][T13728] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 948.483252][T13728] should_failslab+0xac/0x100 [ 948.483283][T13728] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 948.483314][T13728] __kmalloc_noprof+0xd8/0x400 [ 948.483346][T13728] ? kfree+0x4e/0x360 [ 948.483381][T13728] tomoyo_realpath_from_path+0xcf/0x5e0 [ 948.483428][T13728] tomoyo_path_number_perm+0x23a/0x880 [ 948.483462][T13728] ? tomoyo_path_number_perm+0x208/0x880 [ 948.483488][T13728] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 948.483561][T13728] ? __fget_files+0x29/0x470 [ 948.483592][T13728] ? __fget_files+0x3f6/0x470 [ 948.483615][T13728] ? __fget_files+0x29/0x470 [ 948.483649][T13728] security_file_ioctl+0x75/0xb0 [ 948.496679][T13733] SQUASHFS error: Failed to read block 0x0: -5 [ 948.501146][T13728] __se_sys_ioctl+0x47/0x170 [ 948.506369][T13733] unable to read squashfs_super_block [ 948.511520][T13728] do_syscall_64+0xf3/0x230 [ 948.603464][T13728] ? clear_bhb_loop+0x35/0x90 [ 948.608194][T13728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.614245][T13728] RIP: 0033:0x7ff74a775f19 [ 948.618869][T13728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.638783][T13728] RSP: 002b:00007ff74b55f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 948.647341][T13728] RAX: ffffffffffffffda RBX: 00007ff74a905f60 RCX: 00007ff74a775f19 [ 948.655363][T13728] RDX: 0000000020000100 RSI: 000000004138ae84 RDI: 0000000000000005 [ 948.663378][T13728] RBP: 00007ff74b55f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 948.671567][T13728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.679581][T13728] R13: 000000000000004d R14: 00007ff74a905f60 R15: 00007ffca7bc1598 [ 948.687615][T13728] [ 948.722741][T13728] ERROR: Out of memory at tomoyo_realpath_from_path. [ 949.053211][ T5149] usb 4-1: unable to get BOS descriptor or descriptor too short [ 949.069655][ T5149] usb 4-1: no configurations [ 949.093552][ T5149] usb 4-1: can't read configurations, error -22 [ 950.418307][T13760] overlayfs: failed to resolve './file1': -2 [ 951.283020][ T9327] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 951.521668][ T9327] usb 4-1: Using ep0 maxpacket: 8 [ 951.539155][ T9327] usb 4-1: config 0 has no interfaces? [ 951.547429][ T9327] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 951.556727][ T9327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.572724][ T9327] usb 4-1: config 0 descriptor?? [ 951.651960][ T5177] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 951.672122][T10701] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 951.811741][ T5149] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 951.832940][T10701] usb 2-1: device descriptor read/64, error -71 [ 951.861825][ T5177] usb 5-1: Using ep0 maxpacket: 16 [ 951.994119][ T9327] usb 4-1: USB disconnect, device number 47 [ 952.013072][ T5149] usb 3-1: Using ep0 maxpacket: 8 [ 952.039027][ T5149] usb 3-1: config 0 has no interfaces? [ 952.046223][ T5149] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 952.072553][ T5149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.091353][ T5149] usb 3-1: config 0 descriptor?? [ 952.122010][T10701] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 952.283212][T10701] usb 2-1: device descriptor read/64, error -71 [ 952.424534][T10701] usb usb2-port1: attempt power cycle [ 952.453931][ T5177] usb 5-1: unable to get BOS descriptor or descriptor too short [ 952.474764][ T5120] kworker/0:3 (5120) used greatest stack depth: 17368 bytes left [ 952.486490][ T5177] usb 5-1: no configurations [ 952.491215][ T5177] usb 5-1: can't read configurations, error -22 [ 952.705868][T13783] program syz.3.2315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 952.871960][T10701] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 952.922691][T10701] usb 2-1: device descriptor read/8, error -71 [ 953.211675][T10701] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 953.262287][T10701] usb 2-1: device descriptor read/8, error -71 [ 953.392064][T10701] usb usb2-port1: unable to enumerate USB device [ 954.713978][ T1792] usb 3-1: USB disconnect, device number 41 [ 954.943294][ T5177] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 954.961963][T10701] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 955.181832][ T5177] usb 2-1: Using ep0 maxpacket: 16 [ 955.193345][T10701] usb 4-1: Using ep0 maxpacket: 8 [ 956.736437][T10701] usb 4-1: config 0 has no interfaces? [ 956.748573][T10701] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 956.762662][T10701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.552459][T10701] usb 4-1: config 0 descriptor?? [ 960.320272][ T5177] usb 2-1: unable to get BOS descriptor or descriptor too short [ 960.346448][ T5177] usb 2-1: no configurations [ 960.452089][ T5177] usb 2-1: can't read configurations, error -22 [ 961.009226][ T5177] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 961.627221][ T5177] usb 2-1: device descriptor read/64, error -32 [ 961.799234][ T5177] usb usb2-port1: attempt power cycle [ 962.374696][T10701] usb 4-1: can't set config #0, error -71 [ 962.390270][T10701] usb 4-1: USB disconnect, device number 48 [ 962.456825][ T5177] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 962.502987][ T5177] usb 2-1: device descriptor read/8, error -71 [ 962.703321][T13827] FAULT_INJECTION: forcing a failure. [ 962.703321][T13827] name failslab, interval 1, probability 0, space 0, times 0 [ 967.610862][T13827] CPU: 0 UID: 0 PID: 13827 Comm: syz.1.2333 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 967.621359][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 967.631464][T13827] Call Trace: [ 967.634893][T13827] [ 967.637855][T13827] dump_stack_lvl+0x241/0x360 [ 967.642670][T13827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 967.647913][T13827] ? __pfx__printk+0x10/0x10 [ 967.652545][T13827] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 967.658141][T13827] ? __pfx___might_resched+0x10/0x10 [ 967.663508][T13827] should_fail_ex+0x3b0/0x4e0 [ 967.668230][T13827] ? skb_clone+0x20c/0x390 [ 967.672659][T13827] should_failslab+0xac/0x100 [ 967.677350][T13827] ? skb_clone+0x20c/0x390 [ 967.681772][T13827] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 967.687154][T13827] ? __virt_addr_valid+0x183/0x530 [ 967.692302][T13827] skb_clone+0x20c/0x390 [ 967.696568][T13827] pfkey_sendmsg+0x43d/0x1050 [ 967.701291][T13827] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 967.706466][T13827] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 967.712914][T13827] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 967.719699][T13827] ? __pfx___might_resched+0x10/0x10 [ 967.725004][T13827] ? __might_fault+0xaa/0x120 [ 967.729697][T13827] ? __pfx_lock_release+0x10/0x10 [ 967.734747][T13827] ? __import_iovec+0x536/0x820 [ 967.739614][T13827] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 967.744934][T13827] ? security_socket_sendmsg+0x87/0xb0 [ 967.750403][T13827] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 967.755530][T13827] __sock_sendmsg+0x221/0x270 [ 967.760228][T13827] ____sys_sendmsg+0x525/0x7d0 [ 967.765098][T13827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 967.770412][T13827] __sys_sendmmsg+0x3b2/0x740 [ 967.775128][T13827] ? __pfx___sys_sendmmsg+0x10/0x10 [ 967.780369][T13827] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 967.786307][T13827] ? ksys_write+0x23e/0x2c0 [ 967.790829][T13827] ? __pfx_lock_release+0x10/0x10 [ 967.795877][T13827] ? vfs_write+0x7c4/0xc90 [ 967.800308][T13827] ? __mutex_unlock_slowpath+0x21d/0x750 [ 967.805968][T13827] ? __pfx_vfs_write+0x10/0x10 [ 967.810784][T13827] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 967.816874][T13827] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 967.823224][T13827] ? do_syscall_64+0x100/0x230 [ 967.828005][T13827] __x64_sys_sendmmsg+0xa0/0xb0 [ 967.832878][T13827] do_syscall_64+0xf3/0x230 [ 967.837444][T13827] ? clear_bhb_loop+0x35/0x90 [ 967.842145][T13827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.848070][T13827] RIP: 0033:0x7feb6d175f19 [ 967.852499][T13827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.872205][T13827] RSP: 002b:00007feb6cbff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 967.880632][T13827] RAX: ffffffffffffffda RBX: 00007feb6d305f60 RCX: 00007feb6d175f19 [ 967.888618][T13827] RDX: 00000000000003ef RSI: 0000000020000180 RDI: 0000000000000003 [ 967.896599][T13827] RBP: 00007feb6cbff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 967.904582][T13827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.912573][T13827] R13: 000000000000000b R14: 00007feb6d305f60 R15: 00007ffc7554d498 [ 967.920583][T13827] [ 968.289079][T10543] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 968.304104][T10543] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 968.333451][T10543] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 968.345176][T10543] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 968.353207][T10543] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 968.360550][T10543] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 968.545499][T13844] lo speed is unknown, defaulting to 1000 [ 969.035199][T10701] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 969.261646][T10701] usb 4-1: Using ep0 maxpacket: 8 [ 969.273682][T10701] usb 4-1: config 0 has no interfaces? [ 969.281635][T10701] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 969.301641][T10701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.314297][T10701] usb 4-1: config 0 descriptor?? [ 969.471743][ T5177] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 969.496327][T13844] chnl_net:caif_netlink_parms(): no params data found [ 969.621674][T10701] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 969.673371][ T5177] usb 3-1: Using ep0 maxpacket: 16 [ 969.780166][T13844] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.799904][T13844] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.832018][T13844] bridge_slave_0: entered allmulticast mode [ 969.840686][T13844] bridge_slave_0: entered promiscuous mode [ 969.874637][T10701] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 969.904038][T13844] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.911484][T10701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.919606][T10701] usb 2-1: Product: syz [ 969.933241][T13844] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.940659][T13844] bridge_slave_1: entered allmulticast mode [ 969.961868][T10701] usb 2-1: Manufacturer: syz [ 969.966576][T10701] usb 2-1: SerialNumber: syz [ 969.968964][ T29] audit: type=1326 audit(1721754506.642:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13871 comm="syz.4.2346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff74a775f19 code=0x0 [ 969.986327][T13844] bridge_slave_1: entered promiscuous mode [ 970.010642][T10701] usb 2-1: config 0 descriptor?? [ 970.156258][T13844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.173614][T13844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.245418][T13844] team0: Port device team_slave_0 added [ 970.249504][ T5149] usb 2-1: USB disconnect, device number 51 [ 970.259708][T13844] team0: Port device team_slave_1 added [ 970.279232][ T5177] usb 3-1: unable to get BOS descriptor or descriptor too short [ 970.291785][ T5177] usb 3-1: no configurations [ 970.298107][ T5177] usb 3-1: can't read configurations, error -22 [ 970.388880][T13844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.414968][T13844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.458355][T13844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.476323][T13844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.483951][ T4488] Bluetooth: hci6: command tx timeout [ 970.518500][T13844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.598921][T13844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.748844][T13844] hsr_slave_0: entered promiscuous mode [ 970.768707][T13844] hsr_slave_1: entered promiscuous mode [ 970.801149][T13844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 970.840657][T13844] Cannot create hsr debugfs directory [ 972.113242][T13844] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.196741][ T5177] usb 4-1: USB disconnect, device number 49 [ 972.232583][ T1148] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 972.255176][T13914] /dev/nullb0: Can't open blockdev [ 972.360630][T13844] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.462364][ T1148] usb 2-1: Using ep0 maxpacket: 16 [ 972.538216][T13920] FAULT_INJECTION: forcing a failure. [ 972.538216][T13920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.555990][ T4488] Bluetooth: hci6: command tx timeout [ 972.581789][T13920] CPU: 0 UID: 0 PID: 13920 Comm: syz.3.2359 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 972.584820][T13844] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.592363][T13920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 972.592415][T13920] Call Trace: [ 972.592427][T13920] [ 972.592438][T13920] dump_stack_lvl+0x241/0x360 [ 972.592481][T13920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 972.592512][T13920] ? __pfx__printk+0x10/0x10 [ 972.592547][T13920] ? snprintf+0xda/0x120 [ 972.592584][T13920] should_fail_ex+0x3b0/0x4e0 [ 972.592625][T13920] _copy_to_user+0x2f/0xb0 [ 972.647276][T13920] simple_read_from_buffer+0xca/0x150 [ 972.652689][T13920] proc_fail_nth_read+0x1e9/0x250 [ 972.657780][T13920] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 972.663351][T13920] ? rw_verify_area+0x520/0x6b0 [ 972.668209][T13920] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 972.673777][T13920] vfs_read+0x204/0xbc0 [ 972.677945][T13920] ? __pfx_lock_release+0x10/0x10 [ 972.683015][T13920] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 972.688961][T13920] ? __pfx_vfs_read+0x10/0x10 [ 972.693667][T13920] ? __fget_files+0x29/0x470 [ 972.698288][T13920] ? __fget_files+0x3f6/0x470 [ 972.703061][T13920] ksys_read+0x1a0/0x2c0 [ 972.707411][T13920] ? __pfx_ksys_read+0x10/0x10 [ 972.712197][T13920] ? do_syscall_64+0x100/0x230 [ 972.716996][T13920] ? do_syscall_64+0xb6/0x230 [ 972.721691][T13920] do_syscall_64+0xf3/0x230 [ 972.726220][T13920] ? clear_bhb_loop+0x35/0x90 [ 972.731009][T13920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.736938][T13920] RIP: 0033:0x7efebf3749fc [ 972.741376][T13920] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 972.761021][T13920] RSP: 002b:00007efec0133040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 972.769471][T13920] RAX: ffffffffffffffda RBX: 00007efebf505f60 RCX: 00007efebf3749fc [ 972.777456][T13920] RDX: 000000000000000f RSI: 00007efec01330b0 RDI: 0000000000000005 [ 972.785455][T13920] RBP: 00007efec01330a0 R08: 0000000000000000 R09: 0000000000000000 [ 972.793436][T13920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.801421][T13920] R13: 000000000000000b R14: 00007efebf505f60 R15: 00007fff80fbb1f8 [ 972.809419][T13920] [ 973.066920][ T29] audit: type=1326 audit(1721754509.742:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13915 comm="syz.4.2358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff74a775f19 code=0x0 [ 973.392977][T13844] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.073460][ T1148] usb 2-1: unable to get BOS descriptor or descriptor too short [ 974.123590][ T1148] usb 2-1: no configurations [ 974.128351][ T1148] usb 2-1: can't read configurations, error -22 [ 974.154511][T13930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 974.446162][T13844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 974.486874][T13844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 974.530885][T13844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 974.599881][T13844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 974.631743][ T4488] Bluetooth: hci6: command tx timeout [ 974.697647][T13944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.292639][T13946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.620631][T13844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.681801][ T5149] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 975.725888][T13844] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.777239][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.784417][ T5099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.836578][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.843846][ T5099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.921774][ T5149] usb 2-1: Using ep0 maxpacket: 8 [ 975.994802][ T5149] usb 2-1: config 0 has no interfaces? [ 976.000363][ T5149] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 976.046901][ T5149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.103386][ T5149] usb 2-1: config 0 descriptor?? [ 976.720734][ T4488] Bluetooth: hci6: command tx timeout [ 976.728196][T13844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.910443][T13844] veth0_vlan: entered promiscuous mode [ 976.957039][T13844] veth1_vlan: entered promiscuous mode [ 977.388361][T13844] veth0_macvtap: entered promiscuous mode [ 977.653385][T13844] veth1_macvtap: entered promiscuous mode [ 977.820083][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.869528][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.913246][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.972644][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.004434][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.036435][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.061185][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.110183][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.133696][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.158731][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.179694][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.198815][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.241035][T13844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.280679][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.301327][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.312707][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.336787][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.375559][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.391933][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.411788][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.438094][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.458038][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.482829][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.492880][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.503678][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.516014][T13844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.765725][T13844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.867295][T13844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.087775][T13844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.101896][T13844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.605778][ T5099] usb 2-1: USB disconnect, device number 54 [ 984.751747][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.792160][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.931121][ T2860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.976621][ T2860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.219178][T14001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 985.408891][T14001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 985.591359][T14010] NILFS (nullb0): couldn't find nilfs on the device [ 991.540342][T14018] FAULT_INJECTION: forcing a failure. [ 991.540342][T14018] name failslab, interval 1, probability 0, space 0, times 0 [ 991.568273][T14018] CPU: 0 UID: 0 PID: 14018 Comm: syz.0.2330 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 991.578738][T14018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 991.588805][T14018] Call Trace: [ 991.592114][T14018] [ 991.595057][T14018] dump_stack_lvl+0x241/0x360 [ 991.599759][T14018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 991.605014][T14018] ? __pfx__printk+0x10/0x10 [ 991.609631][T14018] ? fs_reclaim_acquire+0x93/0x140 [ 991.614940][T14018] ? __pfx___might_resched+0x10/0x10 [ 991.620243][T14018] ? dynamic_dname+0x141/0x1b0 [ 991.625077][T14018] should_fail_ex+0x3b0/0x4e0 [ 991.629778][T14018] ? tomoyo_encode+0x26f/0x540 [ 991.634560][T14018] should_failslab+0xac/0x100 [ 991.639251][T14018] ? tomoyo_encode+0x26f/0x540 [ 991.644028][T14018] __kmalloc_noprof+0xd8/0x400 [ 991.648811][T14018] tomoyo_encode+0x26f/0x540 [ 991.653437][T14018] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 991.658986][T14018] tomoyo_realpath_from_path+0x59e/0x5e0 [ 991.664641][T14018] tomoyo_path_number_perm+0x23a/0x880 [ 991.670119][T14018] ? tomoyo_path_number_perm+0x208/0x880 [ 991.675788][T14018] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 991.681811][T14018] ? __fget_files+0x29/0x470 [ 991.686420][T14018] ? __fget_files+0x3f6/0x470 [ 991.691099][T14018] ? __fget_files+0x29/0x470 [ 991.695714][T14018] security_file_ioctl+0x75/0xb0 [ 991.700664][T14018] __se_sys_ioctl+0x47/0x170 [ 991.705277][T14018] do_syscall_64+0xf3/0x230 [ 991.709790][T14018] ? clear_bhb_loop+0x35/0x90 [ 991.714473][T14018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.720378][T14018] RIP: 0033:0x7f0f7e175f19 [ 991.724799][T14018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 991.744417][T14018] RSP: 002b:00007f0f7efd9048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 991.752861][T14018] RAX: ffffffffffffffda RBX: 00007f0f7e305f60 RCX: 00007f0f7e175f19 [ 991.760858][T14018] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 991.768857][T14018] RBP: 00007f0f7efd90a0 R08: 0000000000000000 R09: 0000000000000000 [ 991.776839][T14018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.784901][T14018] R13: 000000000000000b R14: 00007f0f7e305f60 R15: 00007ffd8f54b358 [ 991.792892][T14018] [ 991.860254][T14018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 992.406677][ T29] audit: type=1326 audit(1721754529.082:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14023 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebf375f19 code=0x7ffc0000 [ 992.501650][ T29] audit: type=1326 audit(1721754529.082:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14023 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebf375f19 code=0x7ffc0000 [ 992.621833][ T29] audit: type=1326 audit(1721754529.102:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14023 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7efebf375f19 code=0x7ffc0000 [ 992.695092][ T29] audit: type=1326 audit(1721754529.102:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14023 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebf375f19 code=0x7ffc0000 [ 993.051731][ T5099] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 993.312110][ T5099] usb 1-1: Using ep0 maxpacket: 8 [ 993.323414][ T5099] usb 1-1: config 0 has no interfaces? [ 993.328965][ T5099] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 993.372139][ T5099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.402164][ T5099] usb 1-1: config 0 descriptor?? [ 993.437215][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.443781][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.957107][ C0] eth0: bad gso: type: 1, size: 1408 [ 994.997227][T14064] tipc: Started in network mode [ 995.004665][T14064] tipc: Node identity 6629fc4ae344, cluster identity 4711 [ 995.021399][T14059] IPVS: sed: TCP 172.20.20.170:0 - no destination available [ 995.029697][T14064] tipc: Enabled bearer , priority 0 [ 995.171723][ T5177] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 995.203717][T14060] tipc: Disabling bearer [ 995.352311][ T5177] usb 5-1: Using ep0 maxpacket: 8 [ 995.372384][ T5177] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.402126][ T29] audit: type=1326 audit(1721754532.072:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14068 comm="syz.3.2396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efebf375f19 code=0x0 [ 995.423505][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 995.454897][ T5177] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 995.472103][ T5177] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 995.489759][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.726560][ T5177] usb 5-1: config 0 descriptor?? [ 996.391392][T14077] FAULT_INJECTION: forcing a failure. [ 996.391392][T14077] name failslab, interval 1, probability 0, space 0, times 0 [ 996.404931][T14077] CPU: 1 UID: 0 PID: 14077 Comm: syz.2.2398 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 996.415595][T14077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 996.425819][T14077] Call Trace: [ 996.429123][T14077] [ 996.432064][T14077] dump_stack_lvl+0x241/0x360 [ 996.436764][T14077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 996.441997][T14077] ? __pfx__printk+0x10/0x10 [ 996.446623][T14077] ? fs_reclaim_acquire+0x93/0x140 [ 996.451775][T14077] ? __pfx___might_resched+0x10/0x10 [ 996.457103][T14077] should_fail_ex+0x3b0/0x4e0 [ 996.461811][T14077] ? tomoyo_encode+0x26f/0x540 [ 996.467150][T14077] should_failslab+0xac/0x100 [ 996.471866][T14077] ? tomoyo_encode+0x26f/0x540 [ 996.476661][T14077] __kmalloc_noprof+0xd8/0x400 [ 996.481455][T14077] tomoyo_encode+0x26f/0x540 [ 996.486166][T14077] tomoyo_realpath_from_path+0x59e/0x5e0 [ 996.491842][T14077] tomoyo_path_number_perm+0x23a/0x880 [ 996.497346][T14077] ? tomoyo_path_number_perm+0x208/0x880 [ 996.503001][T14077] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 996.509032][T14077] ? __fget_files+0x29/0x470 [ 996.513657][T14077] ? __fget_files+0x3f6/0x470 [ 996.518362][T14077] ? __fget_files+0x29/0x470 [ 996.523178][T14077] security_file_ioctl+0x75/0xb0 [ 996.528159][T14077] __se_sys_ioctl+0x47/0x170 [ 996.532806][T14077] do_syscall_64+0xf3/0x230 [ 996.537345][T14077] ? clear_bhb_loop+0x35/0x90 [ 996.542036][T14077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.547950][T14077] RIP: 0033:0x7fda44175f19 [ 996.552378][T14077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.572135][T14077] RSP: 002b:00007fda43bff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 996.580608][T14077] RAX: ffffffffffffffda RBX: 00007fda44305f60 RCX: 00007fda44175f19 [ 996.588600][T14077] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 996.596596][T14077] RBP: 00007fda43bff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 996.604586][T14077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.612575][T14077] R13: 000000000000000b R14: 00007fda44305f60 R15: 00007fff497672e8 [ 996.620577][T14077] [ 996.628157][T14077] ERROR: Out of memory at tomoyo_realpath_from_path. [ 996.849844][ T5177] usb 1-1: USB disconnect, device number 40 [ 996.898274][T14073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 996.903482][T14083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 997.150567][ C0] eth0: bad gso: type: 1, size: 1408 [ 997.312716][T14073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 997.441354][ T5177] usb 5-1: USB disconnect, device number 60 [ 997.488641][T14084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 997.530688][T14084] syz.0.2400: attempt to access beyond end of device [ 997.530688][T14084] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 997.568667][T14084] SQUASHFS error: Failed to read block 0x0: -5 [ 997.580538][T14084] unable to read squashfs_super_block [ 997.845959][T14102] tipc: Started in network mode [ 997.879889][T14102] tipc: Node identity 0e13a2488f0b, cluster identity 4711 [ 997.908721][T14102] tipc: Enabled bearer , priority 0 [ 997.949596][T14101] tipc: Disabling bearer [ 998.227884][ T29] audit: type=1326 audit(1721754534.902:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14109 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7e175f19 code=0x7ffc0000 [ 998.260772][T11968] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 998.263383][ T29] audit: type=1326 audit(1721754534.922:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14109 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f0f7e175f19 code=0x7ffc0000 [ 998.347972][ T29] audit: type=1326 audit(1721754534.922:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14109 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7e175f19 code=0x7ffc0000 [ 998.390158][ T29] audit: type=1326 audit(1721754534.922:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14109 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7e175f19 code=0x7ffc0000 [ 998.513164][ T5149] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 998.538974][T11968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 998.605444][T11968] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 998.626318][T11968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.662804][T11968] usb 4-1: config 0 descriptor?? [ 998.784372][ T5149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 998.799942][ T5149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 998.810315][ T5149] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 998.811746][ T5177] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 998.820413][ T5149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.860637][ T5149] usb 5-1: config 0 descriptor?? [ 998.878653][ T5149] appletouch 5-1:0.0: Could not find int-in endpoint [ 998.891721][T11968] ath6kl: Failed to submit usb control message: -71 [ 998.901836][ T5149] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 998.911057][T14106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2407'. [ 998.915224][T11968] ath6kl: unable to send the bmi data to the device: -71 [ 998.929155][ T5149] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 998.936706][T11968] ath6kl: Unable to send get target info: -71 [ 998.971462][T11968] ath6kl: Failed to init ath6kl core: -71 [ 998.999018][T11968] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 999.031387][T11968] usb 4-1: USB disconnect, device number 50 [ 999.061876][ T5177] usb 3-1: Using ep0 maxpacket: 8 [ 999.079625][ T5149] usb 5-1: USB disconnect, device number 61 [ 999.084327][ T5177] usb 3-1: config 0 has no interfaces? [ 999.121029][ T5177] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 999.140780][ T5177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.163394][ T5177] usb 3-1: config 0 descriptor?? [ 1000.631690][ T4488] Bluetooth: hci2: command 0x0406 tx timeout [ 1000.724359][T14143] tipc: Started in network mode [ 1000.729626][T14143] tipc: Node identity e603c0916b4f, cluster identity 4711 [ 1000.737424][T14143] tipc: Enabled bearer , priority 0 [ 1000.802906][T14141] tipc: Disabling bearer [ 1002.563617][ T1148] usb 3-1: USB disconnect, device number 44 [ 1002.668033][T14147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1002.848617][T14147] syz.4.2420: attempt to access beyond end of device [ 1002.848617][T14147] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1002.881749][T14147] SQUASHFS error: Failed to read block 0x0: -5 [ 1002.901255][T14147] unable to read squashfs_super_block [ 1004.445618][T14173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1004.541694][ T9871] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1004.743290][T14185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1004.743896][ T9871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1004.821303][T14186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1004.888094][ T9871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1004.911732][ T5099] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1004.933074][ T9871] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 1004.977306][ T9871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.054550][ T9871] usb 1-1: config 0 descriptor?? [ 1005.133045][ T5099] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1005.137374][T14186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1005.175357][ T9871] appletouch 1-1:0.0: Could not find int-in endpoint [ 1005.223321][ T9871] appletouch 1-1:0.0: probe with driver appletouch failed with error -5 [ 1005.233549][ T5099] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1005.280201][ T9871] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1005.293186][ T5099] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.368073][ T5099] usb 3-1: config 0 descriptor?? [ 1005.433107][ T9327] usb 1-1: USB disconnect, device number 41 [ 1005.657795][ T5099] ath6kl: Failed to submit usb control message: -71 [ 1005.690838][ T5099] ath6kl: unable to send the bmi data to the device: -71 [ 1005.700682][T14184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2432'. [ 1005.736185][ T5099] ath6kl: Unable to send get target info: -71 [ 1005.853165][ T5099] ath6kl: Failed to init ath6kl core: -71 [ 1005.859915][ T5099] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1005.970695][ T5099] usb 3-1: USB disconnect, device number 45 [ 1009.383608][T14234] NILFS (nullb0): couldn't find nilfs on the device [ 1010.154123][ T5149] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1011.104799][T14249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1011.142692][ T5149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1011.183856][ T5149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1011.209865][ T5149] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 1011.213413][T14250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1011.271105][ T5149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.308434][ T5149] usb 2-1: config 0 descriptor?? [ 1011.342593][ T5149] appletouch 2-1:0.0: Could not find int-in endpoint [ 1011.378034][ T5149] appletouch 2-1:0.0: probe with driver appletouch failed with error -5 [ 1011.423352][ T5149] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1011.434444][T14249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1011.707208][T14250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1012.874731][ T9871] usb 2-1: USB disconnect, device number 55 [ 1013.833633][T14273] IPVS: sed: TCP 172.20.20.170:0 - no destination available [ 1014.579423][ T9327] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1016.355178][ T9327] usb 5-1: Using ep0 maxpacket: 8 [ 1020.535972][ T9327] usb 5-1: unable to read config index 0 descriptor/all [ 1020.561717][ T9327] usb 5-1: can't read configurations, error -71 [ 1020.911702][ T9871] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1021.251188][ T9871] usb 1-1: Using ep0 maxpacket: 8 [ 1021.314453][T14307] fuse: Unknown parameter 'tޗgfՁ8`O׬ًmArpF0q 4[ւ;@ǭEH A.XYKQG3p>OOq%y$MEmS'0x000000000000000a' [ 1021.347224][ T9871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.378274][ T9871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.419160][ T9871] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1021.487533][T14313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.508084][ T9871] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1021.619462][ T9871] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1021.695693][T14313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.722187][ T9871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.782889][ T9871] usb 1-1: Product: syz [ 1021.808507][ T9871] usb 1-1: Manufacturer: syz [ 1021.823435][ T9871] usb 1-1: SerialNumber: syz [ 1022.223334][T14295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.242886][T14295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.339589][ T9871] cdc_ncm 1-1:1.0: bind() failure [ 1022.380656][T14317] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1022.384064][ T9871] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1022.409360][ T9871] cdc_ncm 1-1:1.1: bind() failure [ 1022.453138][T14317] CPU: 0 UID: 0 PID: 14317 Comm: syz.1.2468 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 1022.461266][ T9871] usb 1-1: USB disconnect, device number 42 [ 1022.463593][T14317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1022.463689][T14317] Call Trace: [ 1022.463702][T14317] [ 1022.463715][T14317] dump_stack_lvl+0x241/0x360 [ 1022.463760][T14317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1022.463793][T14317] ? __pfx__printk+0x10/0x10 [ 1022.463829][T14317] ? sysfs_warn_dup+0x51/0xa0 [ 1022.463861][T14317] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 1022.463904][T14317] sysfs_warn_dup+0x8e/0xa0 [ 1022.463937][T14317] sysfs_do_create_link_sd+0xbe/0x110 [ 1022.463975][T14317] device_add_class_symlinks+0x1c5/0x250 [ 1022.464008][T14317] device_add+0x553/0xbf0 [ 1022.464043][T14317] wiphy_register+0x1d3f/0x2b30 [ 1022.464092][T14317] ? __pfx_wiphy_register+0x10/0x10 [ 1022.540959][T14317] ? minstrel_ht_alloc+0x72b/0x860 [ 1022.546133][T14317] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 1022.552261][T14317] ieee80211_register_hw+0x30fb/0x3e10 [ 1022.557768][T14317] ? ieee80211_register_hw+0x14e1/0x3e10 [ 1022.563511][T14317] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1022.569372][T14317] ? __asan_memset+0x23/0x50 [ 1022.573991][T14317] ? __hrtimer_init+0x170/0x250 [ 1022.578869][T14317] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 1022.584651][T14317] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1022.590748][T14317] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 1022.597363][T14317] ? kstrndup+0x5c/0xb0 [ 1022.601544][T14317] ? __asan_memcpy+0x40/0x70 [ 1022.606166][T14317] hwsim_new_radio_nl+0xece/0x2290 [ 1022.611350][T14317] ? __pfx___nla_validate_parse+0x10/0x10 [ 1022.617266][T14317] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1022.622948][T14317] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 1022.629297][T14317] genl_rcv_msg+0xb14/0xec0 [ 1022.633900][T14317] ? mark_lock+0x9a/0x350 [ 1022.638261][T14317] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1022.643329][T14317] ? __pfx_lock_acquire+0x10/0x10 [ 1022.648464][T14317] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1022.654031][T14317] ? __pfx___might_resched+0x10/0x10 [ 1022.659345][T14317] netlink_rcv_skb+0x1e3/0x430 [ 1022.664132][T14317] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1022.669174][T14317] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1022.674492][T14317] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1022.679983][T14317] genl_rcv+0x28/0x40 [ 1022.683978][T14317] netlink_unicast+0x7f0/0x990 [ 1022.688768][T14317] ? __pfx_netlink_unicast+0x10/0x10 [ 1022.694071][T14317] ? __virt_addr_valid+0x183/0x530 [ 1022.699205][T14317] ? __check_object_size+0x49c/0x900 [ 1022.704521][T14317] ? bpf_lsm_netlink_send+0x9/0x10 [ 1022.709667][T14317] netlink_sendmsg+0x8e4/0xcb0 [ 1022.714552][T14317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1022.719860][T14317] ? __import_iovec+0x536/0x820 [ 1022.724749][T14317] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1022.730049][T14317] ? security_socket_sendmsg+0x87/0xb0 [ 1022.735528][T14317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1022.740833][T14317] __sock_sendmsg+0x221/0x270 [ 1022.745551][T14317] ____sys_sendmsg+0x525/0x7d0 [ 1022.750338][T14317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1022.755747][T14317] __sys_sendmsg+0x2b0/0x3a0 [ 1022.760357][T14317] ? __pfx___sys_sendmsg+0x10/0x10 [ 1022.765527][T14317] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1022.771879][T14317] ? do_syscall_64+0x100/0x230 [ 1022.776682][T14317] ? do_syscall_64+0xb6/0x230 [ 1022.781378][T14317] do_syscall_64+0xf3/0x230 [ 1022.785905][T14317] ? clear_bhb_loop+0x35/0x90 [ 1022.790595][T14317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.796600][T14317] RIP: 0033:0x7feb6d175f19 [ 1022.801046][T14317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1022.821226][T14317] RSP: 002b:00007feb6cbde048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1022.829673][T14317] RAX: ffffffffffffffda RBX: 00007feb6d306038 RCX: 00007feb6d175f19 [ 1022.837919][T14317] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000009 [ 1022.845902][T14317] RBP: 00007feb6d1e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 1022.853905][T14317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.861888][T14317] R13: 000000000000000b R14: 00007feb6d306038 R15: 00007ffc7554d498 [ 1022.869889][T14317] [ 1022.912051][ T9327] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1023.092251][T14325] netlink: 'syz.2.2471': attribute type 5 has an invalid length. [ 1023.118595][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2471'. [ 1023.127831][ T9327] usb 4-1: Using ep0 maxpacket: 32 [ 1023.140612][ T9327] usb 4-1: config 116 has an invalid interface number: 215 but max is 2 [ 1023.158145][ T9327] usb 4-1: config 116 has an invalid interface number: 123 but max is 2 [ 1023.178456][ T9327] usb 4-1: config 116 has an invalid descriptor of length 245, skipping remainder of the config [ 1023.229428][ T9327] usb 4-1: config 116 has 2 interfaces, different from the descriptor's value: 3 [ 1023.254634][ T9327] usb 4-1: config 116 has no interface number 0 [ 1023.263879][ T9327] usb 4-1: config 116 has no interface number 1 [ 1023.271181][ T9327] usb 4-1: config 116 interface 215 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1023.287274][ T9327] usb 4-1: config 116 interface 215 altsetting 8 endpoint 0x7 has an invalid bInterval 64, changing to 7 [ 1023.299493][ T9327] usb 4-1: config 116 interface 215 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 1023.312680][ T9327] usb 4-1: config 116 interface 215 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 1023.330466][ T9327] usb 4-1: config 116 interface 215 altsetting 8 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1023.350798][ T9327] usb 4-1: config 116 interface 215 altsetting 8 bulk endpoint 0xB has invalid maxpacket 32 [ 1023.399319][ T9327] usb 4-1: config 116 interface 123 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 1023.461250][ T9327] usb 4-1: config 116 interface 123 altsetting 248 has a duplicate endpoint with address 0x7, skipping [ 1023.488418][ T9327] usb 4-1: config 116 interface 123 altsetting 248 has a duplicate endpoint with address 0x4, skipping [ 1023.680418][ T9327] usb 4-1: config 116 interface 123 altsetting 248 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 1024.532297][ T9327] usb 4-1: config 116 interface 215 has no altsetting 0 [ 1024.540369][ T9327] usb 4-1: config 116 interface 123 has no altsetting 0 [ 1024.582771][ T9327] usb 4-1: New USB device found, idVendor=12d1, idProduct=65b9, bcdDevice=11.4a [ 1024.621026][ T9327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.649030][ T9327] usb 4-1: Product: Ц [ 1024.672559][ T9327] usb 4-1: Manufacturer: 줋÷ [ 1024.692886][ T9327] usb 4-1: SerialNumber: 诹ȉ灺揺ፖᙷ沟왼떣냉⮲泊햛鍸 [ 1025.017359][ T9327] option 4-1:116.215: GSM modem (1-port) converter detected [ 1025.079704][ T9327] usb 4-1: USB disconnect, device number 51 [ 1025.105678][ T9327] option 4-1:116.215: device disconnected [ 1030.448790][T14358] NILFS (nullb0): couldn't find nilfs on the device [ 1031.513956][ C0] eth0: bad gso: type: 1, size: 1408 [ 1031.921399][T14374] netlink: 'syz.4.2483': attribute type 10 has an invalid length. [ 1031.954858][T14374] veth1_macvtap: left promiscuous mode [ 1032.069426][T14375] FAULT_INJECTION: forcing a failure. [ 1032.069426][T14375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.110157][T14375] CPU: 1 UID: 0 PID: 14375 Comm: syz.2.2484 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 1032.120653][T14375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1032.130746][T14375] Call Trace: [ 1032.134057][T14375] [ 1032.137014][T14375] dump_stack_lvl+0x241/0x360 [ 1032.141748][T14375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1032.146997][T14375] ? __pfx__printk+0x10/0x10 [ 1032.151658][T14375] ? snprintf+0xda/0x120 [ 1032.155951][T14375] should_fail_ex+0x3b0/0x4e0 [ 1032.160682][T14375] _copy_to_user+0x2f/0xb0 [ 1032.165154][T14375] simple_read_from_buffer+0xca/0x150 [ 1032.170690][T14375] proc_fail_nth_read+0x1e9/0x250 [ 1032.175797][T14375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1032.181407][T14375] ? rw_verify_area+0x520/0x6b0 [ 1032.186287][T14375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1032.191863][T14375] vfs_read+0x204/0xbc0 [ 1032.196040][T14375] ? __pfx_lock_release+0x10/0x10 [ 1032.201352][T14375] ? __pfx_vfs_read+0x10/0x10 [ 1032.206042][T14375] ? __fget_files+0x29/0x470 [ 1032.210764][T14375] ? __fget_files+0x3f6/0x470 [ 1032.215495][T14375] ksys_read+0x1a0/0x2c0 [ 1032.219779][T14375] ? __pfx_ksys_read+0x10/0x10 [ 1032.224581][T14375] ? do_syscall_64+0x100/0x230 [ 1032.229373][T14375] ? do_syscall_64+0xb6/0x230 [ 1032.234073][T14375] do_syscall_64+0xf3/0x230 [ 1032.238711][T14375] ? clear_bhb_loop+0x35/0x90 [ 1032.243402][T14375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.249356][T14375] RIP: 0033:0x7fda441749fc [ 1032.253800][T14375] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1032.273511][T14375] RSP: 002b:00007fda43bff040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1032.282032][T14375] RAX: ffffffffffffffda RBX: 00007fda44305f60 RCX: 00007fda441749fc [ 1032.290012][T14375] RDX: 000000000000000f RSI: 00007fda43bff0b0 RDI: 0000000000000005 [ 1032.298081][T14375] RBP: 00007fda43bff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1032.306087][T14375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.314078][T14375] R13: 000000000000000b R14: 00007fda44305f60 R15: 00007fff497672e8 [ 1032.322091][T14375] [ 1032.482682][ T5177] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1032.691685][ T5177] usb 5-1: Using ep0 maxpacket: 16 [ 1032.697879][T14388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.723043][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1032.744391][ T5177] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1032.778626][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.821832][ T5177] usb 5-1: config 0 descriptor?? [ 1033.016792][T14388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1033.349582][T14374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.402404][T14374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.458979][ T5177] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1 [ 1033.524551][ T5177] hid-generic 0003:0158:0100.0007: unexpected long global item [ 1033.547224][ T5177] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 1033.666880][ T5177] usb 5-1: USB disconnect, device number 64 [ 1036.274017][T14433] geneve2: entered promiscuous mode [ 1036.321044][T14433] geneve2: entered allmulticast mode [ 1037.136558][T14441] IPVS: rr: SCTP 127.0.0.1:0 - no destination available [ 1037.144010][ T9871] IPVS: starting estimator thread 0... [ 1037.271827][T14445] IPVS: using max 15 ests per chain, 36000 per kthread [ 1037.451981][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2503'. [ 1038.176482][T14464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1047.446191][T14493] FAULT_INJECTION: forcing a failure. [ 1047.446191][T14493] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.493975][T14493] CPU: 0 UID: 0 PID: 14493 Comm: syz.3.2513 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 1047.504547][T14493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1047.514616][T14493] Call Trace: [ 1047.517906][T14493] [ 1047.521277][T14493] dump_stack_lvl+0x241/0x360 [ 1047.525992][T14493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1047.531212][T14493] ? __pfx__printk+0x10/0x10 [ 1047.535825][T14493] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1047.541824][T14493] ? __pfx___might_resched+0x10/0x10 [ 1047.547136][T14493] should_fail_ex+0x3b0/0x4e0 [ 1047.551840][T14493] should_failslab+0xac/0x100 [ 1047.556532][T14493] ? __alloc_skb+0x1c3/0x440 [ 1047.561139][T14493] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1047.566988][T14493] __alloc_skb+0x1c3/0x440 [ 1047.571435][T14493] ? __pfx___alloc_skb+0x10/0x10 [ 1047.576394][T14493] ? netlink_autobind+0xd6/0x2f0 [ 1047.581632][T14493] ? netlink_autobind+0x2b0/0x2f0 [ 1047.586889][T14493] netlink_sendmsg+0x638/0xcb0 [ 1047.591708][T14493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1047.597042][T14493] ? __import_iovec+0x536/0x820 [ 1047.601907][T14493] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1047.607213][T14493] ? security_socket_sendmsg+0x87/0xb0 [ 1047.613119][T14493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1047.618421][T14493] __sock_sendmsg+0x221/0x270 [ 1047.623140][T14493] ____sys_sendmsg+0x525/0x7d0 [ 1047.627953][T14493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1047.633267][T14493] __sys_sendmsg+0x2b0/0x3a0 [ 1047.637879][T14493] ? __pfx___sys_sendmsg+0x10/0x10 [ 1047.643004][T14493] ? vfs_write+0x7c4/0xc90 [ 1047.647468][T14493] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1047.653817][T14493] ? do_syscall_64+0x100/0x230 [ 1047.658610][T14493] ? do_syscall_64+0xb6/0x230 [ 1047.663308][T14493] do_syscall_64+0xf3/0x230 [ 1047.667829][T14493] ? clear_bhb_loop+0x35/0x90 [ 1047.672525][T14493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.678529][T14493] RIP: 0033:0x7efebf375f19 [ 1047.682959][T14493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1047.702611][T14493] RSP: 002b:00007efec0133048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1047.711048][T14493] RAX: ffffffffffffffda RBX: 00007efebf505f60 RCX: 00007efebf375f19 [ 1047.719036][T14493] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 1047.727017][T14493] RBP: 00007efec01330a0 R08: 0000000000000000 R09: 0000000000000000 [ 1047.734999][T14493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1047.743075][T14493] R13: 000000000000000b R14: 00007efebf505f60 R15: 00007fff80fbb1f8 [ 1047.751072][T14493] [ 1047.895938][T14492] geneve2: entered promiscuous mode [ 1047.901284][T14492] geneve2: entered allmulticast mode [ 1048.241694][ T1148] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1048.402670][ T1148] usb 1-1: device descriptor read/64, error -71 [ 1048.479078][T14507] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1048.492195][T14507] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1048.503940][T14507] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1048.513043][T14507] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1048.520887][T14507] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1048.529807][T14507] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1048.701838][ T1148] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1048.774021][T14506] lo speed is unknown, defaulting to 1000 [ 1048.891678][ T1148] usb 1-1: device descriptor read/64, error -71 [ 1049.209161][ T1148] usb usb1-port1: attempt power cycle [ 1049.469381][T14519] NILFS (nullb0): couldn't find nilfs on the device [ 1049.621747][ T1148] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1049.656356][T14518] netlink: 'syz.3.2522': attribute type 1 has an invalid length. [ 1049.704324][T14518] netlink: 9372 bytes leftover after parsing attributes in process `syz.3.2522'. [ 1049.733652][T14518] netlink: 'syz.3.2522': attribute type 1 has an invalid length. [ 1049.742946][ T1148] usb 1-1: device descriptor read/8, error -71 [ 1050.031686][ T1148] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1050.102299][ T1148] usb 1-1: device descriptor read/8, error -71 [ 1050.143344][T14506] chnl_net:caif_netlink_parms(): no params data found [ 1050.227436][ T1148] usb usb1-port1: unable to enumerate USB device [ 1050.632127][T10543] Bluetooth: hci7: command tx timeout [ 1052.762637][T10543] Bluetooth: hci7: command tx timeout [ 1054.892758][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.899836][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.210683][T10543] Bluetooth: hci7: command tx timeout [ 1056.744530][T14506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.784614][T14506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.793107][T14506] bridge_slave_0: entered allmulticast mode [ 1056.809128][T14506] bridge_slave_0: entered promiscuous mode [ 1056.836232][T14506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.875168][T10543] Bluetooth: hci2: unexpected event 0x17 length: 14 > 6 [ 1056.956740][T14506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.052436][T14506] bridge_slave_1: entered allmulticast mode [ 1057.060149][T14506] bridge_slave_1: entered promiscuous mode [ 1057.351643][T10543] Bluetooth: hci7: command tx timeout [ 1057.404172][T14506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.472961][T14506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.760655][T14506] team0: Port device team_slave_0 added [ 1057.868035][T14506] team0: Port device team_slave_1 added [ 1058.281733][T14506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.303226][T14506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.330488][T14542] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1058.379810][T14506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.593858][T14542] usb 1-1: Using ep0 maxpacket: 32 [ 1058.616439][T14542] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.647826][ T9328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.680657][T14542] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.718285][T14542] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1058.780370][T14542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.789232][T14506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.820579][T14542] usb 1-1: config 0 descriptor?? [ 1058.838765][T14506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.876119][T14542] hub 1-1:0.0: USB hub found [ 1058.925381][T14506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.066836][ T9328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.114835][T14542] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1059.580708][ T9328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.824791][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'. [ 1060.066587][T14589] team1: Mode changed to "loadbalance" [ 1060.141747][T14542] usbhid 1-1:0.0: can't add hid device: -71 [ 1060.161739][T14542] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1060.233191][T14542] usb 1-1: USB disconnect, device number 47 [ 1061.118798][T14599] 9pnet_fd: Insufficient options for proto=fd [ 1062.122044][T14604] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1062.755698][T14610] NILFS (nullb0): couldn't find nilfs on the device [ 1068.297167][T14646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1069.253650][ T9328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.289953][T14506] hsr_slave_0: entered promiscuous mode [ 1069.333681][T14506] hsr_slave_1: entered promiscuous mode [ 1069.351201][T14506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1069.380593][T14506] Cannot create hsr debugfs directory [ 1069.395806][T14598] netlink: 380 bytes leftover after parsing attributes in process `syz.0.2539'. [ 1069.603547][T14507] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1069.615202][T14507] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1069.624950][T14507] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1069.636245][T14507] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1069.646036][T14507] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1069.653777][T14507] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1069.675204][T14658] netlink: 784 bytes leftover after parsing attributes in process `syz.3.2554'. [ 1071.784017][T14507] Bluetooth: hci5: command tx timeout [ 1071.891732][T14681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1072.262306][ T9328] bridge_slave_1: left allmulticast mode [ 1072.268110][ T9328] bridge_slave_1: left promiscuous mode [ 1072.274198][T14657] lo speed is unknown, defaulting to 1000 [ 1072.290433][ T9328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.562769][ T9328] bridge_slave_0: left allmulticast mode [ 1072.665419][ T9328] bridge_slave_0: left promiscuous mode [ 1072.719122][ T9328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.801669][T11968] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1073.844645][T14507] Bluetooth: hci5: command tx timeout [ 1074.034067][T11968] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1074.043395][T11968] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 1074.053434][T11968] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2 [ 1074.064931][T11968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1074.082760][T11968] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 1074.103767][T11968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1074.121174][T11968] usb 4-1: SerialNumber: syz [ 1074.128859][T11968] usb 4-1: config 0 descriptor?? [ 1074.139936][T14689] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1074.160872][T11968] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1074.379050][T11968] usb 4-1: USB disconnect, device number 52 [ 1074.455465][ T9328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.468544][ T9328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.481236][ T9328] bond0 (unregistering): Released all slaves [ 1074.845405][ T9328] tipc: Left network mode [ 1075.911976][T14507] Bluetooth: hci5: command tx timeout [ 1076.373103][T14723] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1077.469857][T14728] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1077.991911][T14507] Bluetooth: hci5: command tx timeout [ 1088.545912][T14657] chnl_net:caif_netlink_parms(): no params data found [ 1088.822257][ T9328] hsr_slave_0: left promiscuous mode [ 1088.861830][ T9328] hsr_slave_1: left promiscuous mode [ 1088.868517][ T9328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1088.895828][ T9328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.931192][ T9328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1088.942226][ T9328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.157930][ T9328] veth1_macvtap: left promiscuous mode [ 1089.177622][ T9328] veth0_macvtap: left promiscuous mode [ 1089.197496][ T9328] veth1_vlan: left promiscuous mode [ 1089.225778][ T9328] veth0_vlan: left promiscuous mode [ 1090.167867][T14799] nvme_fabrics: missing parameter 'transport=%s' [ 1090.189551][T14799] nvme_fabrics: missing parameter 'nqn=%s' [ 1091.351768][T14813] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1092.048478][ T9328] team0 (unregistering): Port device team_slave_1 removed [ 1092.894384][T14507] Bluetooth: hci6: command 0x0406 tx timeout [ 1096.364046][ T9328] team0 (unregistering): Port device team_slave_0 removed [ 1098.509812][T14830] bad cache= option: none [ 1098.509812][T14830] [ 1098.545362][T14830] CIFS: VFS: bad cache= option: none [ 1100.424125][T14506] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1100.910671][T14506] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1101.206271][T14506] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1101.517978][T14657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.647469][T14657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.711799][T14657] bridge_slave_0: entered allmulticast mode [ 1101.772045][T14657] bridge_slave_0: entered promiscuous mode [ 1101.809588][T14657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.832833][T14657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.850931][T14854] FAULT_INJECTION: forcing a failure. [ 1101.850931][T14854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1101.873787][T14657] bridge_slave_1: entered allmulticast mode [ 1101.922102][T14854] CPU: 1 UID: 0 PID: 14854 Comm: syz.4.2599 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 1101.923354][T14657] bridge_slave_1: entered promiscuous mode [ 1101.932571][T14854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1101.932624][T14854] Call Trace: [ 1101.932636][T14854] [ 1101.932646][T14854] dump_stack_lvl+0x241/0x360 [ 1101.932688][T14854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1101.932721][T14854] ? __pfx__printk+0x10/0x10 [ 1101.932753][T14854] ? __pfx_lock_release+0x10/0x10 [ 1101.959185][T14856] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1101.959543][T14854] ? __lock_acquire+0x137a/0x2040 [ 1101.989964][T14854] should_fail_ex+0x3b0/0x4e0 [ 1101.994687][T14854] _copy_from_user+0x2f/0xe0 [ 1101.999283][T14854] kstrtouint_from_user+0xc6/0x190 [ 1102.004410][T14854] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1102.010164][T14854] ? __pfx_lock_acquire+0x10/0x10 [ 1102.015239][T14854] proc_fail_nth_write+0xaa/0x2d0 [ 1102.020280][T14854] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1102.026190][T14854] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1102.031840][T14854] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1102.037518][T14854] vfs_write+0x2a2/0xc90 [ 1102.041773][T14854] ? __pfx_vfs_write+0x10/0x10 [ 1102.046570][T14854] ? __fget_files+0x29/0x470 [ 1102.051169][T14854] ? __fget_files+0x3f6/0x470 [ 1102.055861][T14854] ksys_write+0x1a0/0x2c0 [ 1102.060212][T14854] ? __pfx_ksys_write+0x10/0x10 [ 1102.065091][T14854] ? do_syscall_64+0x100/0x230 [ 1102.069902][T14854] ? do_syscall_64+0xb6/0x230 [ 1102.074598][T14854] do_syscall_64+0xf3/0x230 [ 1102.079109][T14854] ? clear_bhb_loop+0x35/0x90 [ 1102.083791][T14854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.089693][T14854] RIP: 0033:0x7ff74a774a9f [ 1102.094144][T14854] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 1102.113950][T14854] RSP: 002b:00007ff74b51d040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1102.122394][T14854] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff74a774a9f [ 1102.130433][T14854] RDX: 0000000000000001 RSI: 00007ff74b51d0b0 RDI: 0000000000000005 [ 1102.138437][T14854] RBP: 00007ff74b51d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.146591][T14854] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1102.154572][T14854] R13: 000000000000006e R14: 00007ff74a906110 R15: 00007ffca7bc1598 [ 1102.162662][T14854] [ 1102.395460][T14506] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1102.650487][T14507] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1102.748072][T14507] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1102.764830][T14507] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1102.824304][T14507] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1102.832144][T14507] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1102.839540][T14507] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1103.029023][T14657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.128296][T14657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.954500][T10751] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1104.733276][T10751] usb 5-1: Using ep0 maxpacket: 32 [ 1105.040581][T10751] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1105.061577][T10751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.230906][T10543] Bluetooth: hci3: command tx timeout [ 1105.233581][T10751] usb 5-1: config 0 descriptor?? [ 1105.745193][T10751] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1106.768354][T10751] gspca_vc032x: reg_r err -110 [ 1106.861062][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1106.867124][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1106.979047][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.044288][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.051039][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.057556][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.204174][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.213727][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.375994][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.378864][T10543] Bluetooth: hci3: command tx timeout [ 1107.524943][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.531594][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.538935][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.682341][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.914906][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.999436][ T30] INFO: task syz.0.2312:13768 blocked for more than 147 seconds. [ 1108.016729][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.139538][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.216603][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.221992][ T30] Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 1108.226491][T10751] gspca_vc032x: I2c Bus Busy Wait 00 [ 1108.251644][T10751] gspca_vc032x: Unknown sensor... SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1108.261606][T10751] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1108.273949][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1108.305442][T10751] usb 5-1: USB disconnect, device number 65 [ 1108.311584][ T30] task:syz.0.2312 state:D stack:26528 pid:13768 tgid:13767 ppid:12159 flags:0x00004004 [ 1108.351666][ T30] Call Trace: [ 1108.355123][ T30] [ 1108.359616][ T30] __schedule+0x17ae/0x4a10 [ 1108.369215][ T30] ? __pfx___schedule+0x10/0x10 [ 1108.380301][ T30] ? __pfx_lock_release+0x10/0x10 [ 1108.391623][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1108.431400][ T30] ? schedule+0x90/0x320 [ 1108.446154][ T30] schedule+0x14b/0x320 [ 1108.482129][ T30] schedule_preempt_disabled+0x13/0x30 [ 1108.487692][ T30] __ww_mutex_lock+0xec2/0x2790 [ 1108.508633][ T30] ? __ww_mutex_lock+0xb08/0x2790 [ 1108.521552][ T30] ? drm_modeset_lock+0x6f/0x90 [ 1108.526489][ T30] ? __pfx___ww_mutex_lock+0x10/0x10 [ 1108.561583][ T30] ? __drm_mode_object_find+0x448/0x5d0 [ 1108.567228][ T30] ww_mutex_lock+0x40/0x1f0 [ 1108.591604][ T30] ? drm_modeset_lock+0x65/0x90 [ 1108.596567][ T30] drm_modeset_lock+0x6f/0x90 [ 1108.601306][ T30] drm_mode_getplane+0xf0/0x7a0 [ 1108.621569][ T30] drm_ioctl_kernel+0x33a/0x440 [ 1108.626524][ T30] ? __pfx_drm_mode_getplane+0x10/0x10 [ 1108.641574][ T30] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1108.647043][ T30] ? __might_fault+0xc6/0x120 [ 1108.661605][ T30] drm_ioctl+0x611/0xad0 [ 1108.665947][ T30] ? __pfx_drm_mode_getplane+0x10/0x10 [ 1108.685084][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 1108.690049][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1108.711577][ T30] ? security_file_ioctl+0x87/0xb0 [ 1108.717828][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 1108.731546][ T30] __se_sys_ioctl+0xfc/0x170 [ 1108.736217][ T30] do_syscall_64+0xf3/0x230 [ 1108.740770][ T30] ? clear_bhb_loop+0x35/0x90 [ 1108.761569][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.767559][ T30] RIP: 0033:0x7fe4f4575f19 [ 1108.781566][ T30] RSP: 002b:00007fe4f52d0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1108.790058][ T30] RAX: ffffffffffffffda RBX: 00007fe4f4705f60 RCX: 00007fe4f4575f19 [ 1108.811992][ T30] RDX: 0000000020000340 RSI: 00000000c02064b6 RDI: 0000000000000006 [ 1108.831702][ T30] RBP: 00007fe4f45e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 1108.839749][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.861574][ T30] R13: 000000000000000b R14: 00007fe4f4705f60 R15: 00007ffd366123c8 [ 1108.869639][ T30] [ 1108.893023][ T30] INFO: task syz.0.2312:13770 blocked for more than 148 seconds. [ 1108.900918][ T30] Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 1108.921540][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1108.930276][ T30] task:syz.0.2312 state:D stack:27424 pid:13770 tgid:13767 ppid:12159 flags:0x00000004 [ 1108.961946][ T30] Call Trace: [ 1108.965377][ T30] [ 1108.968343][ T30] __schedule+0x17ae/0x4a10 [ 1108.981576][ T30] ? __pfx___schedule+0x10/0x10 [ 1108.986521][ T30] ? __pfx_lock_release+0x10/0x10 [ 1109.000796][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1109.006408][ T30] ? schedule+0x90/0x320 [ 1109.010701][ T30] schedule+0x14b/0x320 [ 1109.015253][ T30] schedule_preempt_disabled+0x13/0x30 [ 1109.022057][ T30] __ww_mutex_lock+0xec2/0x2790 [ 1109.026966][ T30] ? __ww_mutex_lock+0xb08/0x2790 [ 1109.036044][ T30] ? drm_modeset_lock+0x6f/0x90 [ 1109.040974][ T30] ? __pfx___ww_mutex_lock+0x10/0x10 [ 1109.046370][ T30] ? __drm_mode_object_find+0x448/0x5d0 [ 1109.052212][ T30] ww_mutex_lock+0x40/0x1f0 [ 1109.056760][ T30] ? drm_modeset_lock+0x65/0x90 [ 1109.061694][ T30] drm_modeset_lock+0x6f/0x90 [ 1109.071546][ T30] drm_mode_getplane+0xf0/0x7a0 [ 1109.076478][ T30] drm_ioctl_kernel+0x33a/0x440 [ 1109.081382][ T30] ? __pfx_drm_mode_getplane+0x10/0x10 [ 1109.095897][ T30] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1109.101350][ T30] ? __might_fault+0xc6/0x120 [ 1109.110853][ T30] drm_ioctl+0x611/0xad0 [ 1109.119913][ T30] ? __pfx_drm_mode_getplane+0x10/0x10 [ 1109.127030][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 1109.132060][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1109.137049][ T30] ? security_file_ioctl+0x87/0xb0 [ 1109.146338][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 1109.151228][ T30] __se_sys_ioctl+0xfc/0x170 [ 1109.155926][ T30] do_syscall_64+0xf3/0x230 [ 1109.160497][ T30] ? clear_bhb_loop+0x35/0x90 [ 1109.165287][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.171230][ T30] RIP: 0033:0x7fe4f4575f19 [ 1109.175740][ T30] RSP: 002b:00007fe4f52af048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.184256][ T30] RAX: ffffffffffffffda RBX: 00007fe4f4706038 RCX: 00007fe4f4575f19 [ 1109.192322][ T30] RDX: 0000000020000200 RSI: 00000000c02064b6 RDI: 0000000000000005 [ 1109.200357][ T30] RBP: 00007fe4f45e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 1109.208835][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1109.216919][ T30] R13: 000000000000006e R14: 00007fe4f4706038 R15: 00007ffd366123c8 [ 1109.230918][ T30] [ 1109.246713][ T30] [ 1109.246713][ T30] Showing all locks held in the system: [ 1109.266777][ T30] 1 lock held by khungtaskd/30: [ 1109.273349][ T30] #0: ffffffff8e337660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1109.303069][ T30] 2 locks held by kworker/u8:5/1032: [ 1109.308631][ T30] 2 locks held by getty/4848: [ 1109.327525][ T30] #0: ffff88802ab4e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1109.343877][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1109.354650][ T30] 4 locks held by kworker/u8:12/9328: [ 1109.360153][ T30] #0: ffff888015edb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1109.375165][ T30] #1: ffffc90002fafd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1109.385909][ T30] #2: ffffffff8f5e9950 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1109.395641][ T30] #3: ffffffff8f5f64c8 (rtnl_mutex){+.+.}-{3:3}, at: fib6_rules_net_exit_batch+0x20/0xc0 [ 1109.405769][ T30] 1 lock held by syz-executor/12904: [ 1109.411141][ T30] #0: ffffffff8f5f64c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1109.428541][ T30] 3 locks held by syz.1.2184/13351: [ 1109.433144][T10543] Bluetooth: hci3: command tx timeout [ 1109.439150][ T30] 1 lock held by syz.0.2312/13768: [ 1109.439175][ T30] #0: ffff88801fc4d0b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 1109.470006][ T30] 1 lock held by syz.0.2312/13770: [ 1109.477594][ T30] #0: ffff88801fc4d0b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 1109.498088][ T30] 1 lock held by syz-executor/14506: [ 1109.505943][ T30] #0: ffffffff8f5f64c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1109.521926][ T30] 2 locks held by syz-executor/14657: [ 1109.527368][ T30] #0: ffffffff8f5f64c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1109.546881][ T30] #1: ffffffff8e33ca38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1109.561877][ T30] 6 locks held by syz-executor/14860: [ 1109.567303][ T30] #0: ffffffff8f5e9950 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1109.585619][ T30] #1: ffffffff8f389b30 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 1109.607277][ T30] #2: ffffffff8f389cf0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 1109.631875][ T30] #3: ffff88805ee8cf40 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 1109.671021][ T30] #4: ffff88805ee8d238 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x61/0x260 [ 1109.700974][ T30] #5: ffffffff8f5f64c8 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x153/0x800 [ 1109.713929][ T30] 1 lock held by syz.3.2601/14862: [ 1109.719095][ T30] #0: ffffffff8e33c900 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 1109.745184][ T30] [ 1109.747568][ T30] ============================================= [ 1109.747568][ T30] [ 1109.781863][T14860] lo speed is unknown, defaulting to 1000 [ 1109.800513][ T30] NMI backtrace for cpu 0 [ 1109.804923][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 1109.815122][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1109.825219][ T30] Call Trace: [ 1109.828532][ T30] [ 1109.831489][ T30] dump_stack_lvl+0x241/0x360 [ 1109.836212][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1109.841457][ T30] ? __pfx__printk+0x10/0x10 [ 1109.846088][ T30] ? vprintk_emit+0x631/0x770 [ 1109.850805][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1109.855876][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1109.860870][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1109.866380][ T30] ? _printk+0xd5/0x120 [ 1109.870573][ T30] ? __pfx__printk+0x10/0x10 [ 1109.875380][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1109.880293][ T30] ? __pfx__printk+0x10/0x10 [ 1109.884930][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1109.889997][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1109.896027][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1109.902062][ T30] watchdog+0xfee/0x1030 [ 1109.906357][ T30] ? watchdog+0x1ea/0x1030 [ 1109.910825][ T30] ? __pfx_watchdog+0x10/0x10 [ 1109.915555][ T30] kthread+0x2f0/0x390 [ 1109.919660][ T30] ? __pfx_watchdog+0x10/0x10 [ 1109.924384][ T30] ? __pfx_kthread+0x10/0x10 [ 1109.929006][ T30] ret_from_fork+0x4b/0x80 [ 1109.933481][ T30] ? __pfx_kthread+0x10/0x10 [ 1109.938106][ T30] ret_from_fork_asm+0x1a/0x30 [ 1109.942935][ T30] [ 1109.947389][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1109.953348][ C1] NMI backtrace for cpu 1 [ 1109.953365][ C1] CPU: 1 UID: 0 PID: 14862 Comm: syz.3.2601 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 1109.953387][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1109.953398][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x11/0x90 [ 1109.953432][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 65 48 8b 0c 25 00 d7 03 00 <65> 8b 05 30 4f 70 7e a9 00 01 ff 00 74 10 a9 00 01 00 00 74 57 83 [ 1109.953448][ C1] RSP: 0018:ffffc9000314ea20 EFLAGS: 00000246 [ 1109.953464][ C1] RAX: 1ffff92000629d69 RBX: ffffc9000314eb48 RCX: ffff888022c30000 [ 1109.953485][ C1] RDX: ffffc9000314eb35 RSI: ffffffff815a0d94 RDI: 0000000000000000 [ 1109.953498][ C1] RBP: ffffffff815a0d95 R08: ffffffff814108fc R09: ffffc9000314ebf0 [ 1109.953513][ C1] R10: 0000000000000003 R11: ffffffff817f29e0 R12: ffffc9000314eb00 [ 1109.953526][ C1] R13: ffffc9000314eb50 R14: dffffc0000000000 R15: ffffffff815a0d95 [ 1109.953540][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 1109.953556][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1109.953569][ C1] CR2: 000055f27506f058 CR3: 0000000065f84000 CR4: 00000000003506f0 [ 1109.953585][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1109.953596][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1109.953608][ C1] Call Trace: [ 1109.953615][ C1] [ 1109.953623][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1109.953651][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1109.953679][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1109.953706][ C1] ? nmi_handle+0x2a/0x5a0 [ 1109.953735][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1109.953758][ C1] ? nmi_handle+0x14f/0x5a0 [ 1109.953775][ C1] ? nmi_handle+0x2a/0x5a0 [ 1109.953794][ C1] ? __sanitizer_cov_trace_const_cmp8+0x11/0x90 [ 1109.953820][ C1] ? default_do_nmi+0x63/0x160 [ 1109.953838][ C1] ? exc_nmi+0x123/0x1f0 [ 1109.953865][ C1] ? end_repeat_nmi+0xf/0x53 [ 1109.953881][ C1] ? get_signal+0x1695/0x1730 [ 1109.953903][ C1] ? get_signal+0x1695/0x1730 [ 1109.953923][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1109.953947][ C1] ? unwind_next_frame+0x1ac/0x2a00 [ 1109.953975][ C1] ? get_signal+0x1694/0x1730 [ 1109.953995][ C1] ? __sanitizer_cov_trace_const_cmp8+0x11/0x90 [ 1109.954022][ C1] ? __sanitizer_cov_trace_const_cmp8+0x11/0x90 [ 1109.954050][ C1] ? __sanitizer_cov_trace_const_cmp8+0x11/0x90 [ 1109.954077][ C1] [ 1109.954083][ C1] [ 1109.954089][ C1] unwind_next_frame+0x1ac/0x2a00 [ 1109.954123][ C1] ? do_group_exit+0x207/0x2c0 [ 1109.954140][ C1] ? get_signal+0x1695/0x1730 [ 1109.954161][ C1] ? __kernel_text_address+0xd/0x40 [ 1109.954180][ C1] ? get_signal+0x1695/0x1730 [ 1109.954199][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1109.954223][ C1] arch_stack_walk+0x151/0x1b0 [ 1109.954246][ C1] ? get_signal+0x1695/0x1730 [ 1109.954269][ C1] stack_trace_save+0x118/0x1d0 [ 1109.954294][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1109.954324][ C1] save_stack+0xfb/0x1f0 [ 1109.954347][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1109.954372][ C1] ? __pfx_save_stack+0x10/0x10 [ 1109.954393][ C1] ? free_unref_folios+0x100f/0x1ac0 [ 1109.954412][ C1] ? folios_put_refs+0x76e/0x860 [ 1109.954429][ C1] ? free_pages_and_swap_cache+0x2ea/0x690 [ 1109.954447][ C1] ? tlb_flush_mmu+0x3a3/0x680 [ 1109.954480][ C1] ? unmap_page_range+0x38d9/0x42c0 [ 1109.954506][ C1] ? unmap_vmas+0x3cc/0x5f0 [ 1109.954530][ C1] ? exit_mmap+0x264/0xc80 [ 1109.954553][ C1] ? __mmput+0x115/0x380 [ 1109.954574][ C1] ? exit_mm+0x220/0x310 [ 1109.954589][ C1] ? do_exit+0x9b2/0x27f0 [ 1109.954604][ C1] ? do_group_exit+0x207/0x2c0 [ 1109.954620][ C1] ? get_signal+0x1695/0x1730 [ 1109.954646][ C1] ? page_ext_get+0x20/0x2a0 [ 1109.954671][ C1] __reset_page_owner+0x75/0x3f0 [ 1109.954700][ C1] free_unref_folios+0x100f/0x1ac0 [ 1109.954730][ C1] folios_put_refs+0x76e/0x860 [ 1109.954753][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1109.954770][ C1] ? __lock_acquire+0x137a/0x2040 [ 1109.954794][ C1] ? cgroup_rstat_updated+0x13b/0xc60 [ 1109.954816][ C1] ? free_swap_cache+0x141/0x880 [ 1109.954836][ C1] free_pages_and_swap_cache+0x2ea/0x690 [ 1109.954859][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1109.954906][ C1] ? tlb_table_flush+0x143/0x410 [ 1109.954933][ C1] ? __pfx_lock_release+0x10/0x10 [ 1109.954961][ C1] tlb_flush_mmu+0x3a3/0x680 [ 1109.954993][ C1] unmap_page_range+0x38d9/0x42c0 [ 1109.955042][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1109.955077][ C1] ? mas_next_slot+0xeab/0xf90 [ 1109.955101][ C1] ? uprobe_munmap+0x183/0x460 [ 1109.955124][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 1109.955155][ C1] unmap_vmas+0x3cc/0x5f0 [ 1109.955187][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1109.955225][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 1109.955245][ C1] exit_mmap+0x264/0xc80 [ 1109.955274][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1109.955296][ C1] ? __asan_memset+0x23/0x50 [ 1109.955329][ C1] ? uprobe_clear_state+0x277/0x290 [ 1109.955348][ C1] ? mm_update_next_owner+0xa2/0x8a0 [ 1109.955365][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1109.955389][ C1] __mmput+0x115/0x380 [ 1109.955413][ C1] exit_mm+0x220/0x310 [ 1109.955431][ C1] ? __pfx_exit_mm+0x10/0x10 [ 1109.955448][ C1] ? taskstats_exit+0x326/0xa60 [ 1109.955483][ C1] do_exit+0x9b2/0x27f0 [ 1109.955505][ C1] ? __pfx_do_exit+0x10/0x10 [ 1109.955522][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1109.955546][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1109.955573][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1109.955598][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1109.955628][ C1] do_group_exit+0x207/0x2c0 [ 1109.955644][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1109.955670][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1109.955693][ C1] get_signal+0x1695/0x1730 [ 1109.955724][ C1] ? __pfx_get_signal+0x10/0x10 [ 1109.955744][ C1] ? kasan_quarantine_put+0xdc/0x230 [ 1109.955763][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1109.955788][ C1] arch_do_signal_or_restart+0x96/0x860 [ 1109.955815][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1109.955838][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1109.955871][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1109.955895][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1109.955920][ C1] do_syscall_64+0x100/0x230 [ 1109.955943][ C1] ? clear_bhb_loop+0x35/0x90 [ 1109.955961][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.955988][ C1] RIP: 0033:0x7efebf375f19 [ 1109.956003][ C1] Code: Unable to access opcode bytes at 0x7efebf375eef. [ 1109.956012][ C1] RSP: 002b:00007fff80fbb2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1109.956031][ C1] RAX: 0000000000000000 RBX: 00007efebf507a60 RCX: 00007efebf375f19 [ 1109.956043][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1109.956055][ C1] RBP: 00007efebf507a60 R08: 0000000000000006 R09: 0000001b80fbb5ff [ 1109.956067][ C1] R10: 00000000003ff8c8 R11: 0000000000000246 R12: 000000000010d7e9 [ 1109.956079][ C1] R13: 0000000000000032 R14: 00007efebf507a60 R15: 00007efebf5062c0 [ 1109.956102][ C1] [ 1109.988659][ T9328] IPVS: stop unused estimator thread 0... [ 1110.051073][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1110.051097][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 1110.051129][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1110.051144][ T30] Call Trace: [ 1110.051158][ T30] [ 1110.051171][ T30] dump_stack_lvl+0x241/0x360 [ 1110.051215][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1110.051248][ T30] ? __pfx__printk+0x10/0x10 [ 1110.051276][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1110.051319][ T30] ? vscnprintf+0x5d/0x90 [ 1110.051357][ T30] panic+0x349/0x860 [ 1110.051389][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1110.051428][ T30] ? __pfx_panic+0x10/0x10 [ 1110.051449][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1110.051480][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1110.051517][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1110.051545][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1110.051581][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1110.051622][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1110.051664][ T30] watchdog+0x102d/0x1030 [ 1110.051709][ T30] ? watchdog+0x1ea/0x1030 [ 1110.051750][ T30] ? __pfx_watchdog+0x10/0x10 [ 1110.051784][ T30] kthread+0x2f0/0x390 [ 1110.051808][ T30] ? __pfx_watchdog+0x10/0x10 [ 1110.051841][ T30] ? __pfx_kthread+0x10/0x10 [ 1110.051865][ T30] ret_from_fork+0x4b/0x80 [ 1110.051899][ T30] ? __pfx_kthread+0x10/0x10 [ 1110.051923][ T30] ret_from_fork_asm+0x1a/0x30 [ 1110.051973][ T30] [ 1110.052840][ T30] Kernel Offset: disabled