last executing test programs: 2.498161975s ago: executing program 1 (id=6): bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x96175200, &(0x7f0000000b80)="98", 0x1, 0x0, 0x0, 0x0) 2.289092714s ago: executing program 1 (id=7): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) 2.131637009s ago: executing program 0 (id=1): syz_usb_connect(0x0, 0x3b, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) 1.994255831s ago: executing program 1 (id=8): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x31, 0x0, 0x0) 1.877852291s ago: executing program 1 (id=9): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="5500000018007f5f00fe01b2a4a280930225631860d5ef7b57fa4c2d0135f9c2c8060000fd41fd01020400000a00120002002800e52d19002d007fffffff0022de13c7c43d30d54400009b84136ef75afb83de066a5900e1", 0x58}], 0x1, 0x0, 0x0, 0x7a000000}, 0x800) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='mm_page_alloc\x00'}, 0x10) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r6, 0x0, r7, 0x0, 0x2000, 0x0) 851.553993ms ago: executing program 0 (id=10): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000f835020000f8fffff9bf4ae6ffb703000008000000b704000000000000c1000000012ef23a912533910d47dc1055f13be0a4649940894053fa02a3113be73f918a453b4be130d7a2b8eefe53d99adb517091eef9d2c7b53b380ab15b817f0bd741009fdf956c922d4c5f7d41510b1c7311c1bd3f71ad0f8a02cbc0f277c0adec0f88abaa2b9bbb6f6373c16c24d3485235fa3874ee444ae2847b235742f43d6be3546f56cdf46d979df03d08a77ed82a17a4a5d93bfe037631c2b00cedc022b6ae5eb15abaddb08ab6f495816a2b40"], 0x0, 0x3, 0x0, 0x0, 0x1f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeba, 0x0, 0x0, 0x0, 0x20000}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45f, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdad]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)) dup(r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 631.904644ms ago: executing program 1 (id=11): unshare(0x20000600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r0) write$cgroup_pid(r0, 0x0, 0x0) 296.866024ms ago: executing program 0 (id=12): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x7fff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 296.224904ms ago: executing program 1 (id=13): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x8}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01", @ANYRES32], 0x6f4}}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r0, &(0x7f0000000000)='\"', 0xc0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r2, &(0x7f0000000140), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r3, 0x10e, 0x0, 0x0, &(0x7f0000000100)) 0s ago: executing program 0 (id=14): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x22020400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000000), 0x0}, 0x20) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:59830' (ED25519) to the list of known hosts. syzkaller login: [ 120.398623][ T3260] cgroup: Unknown subsys name 'net' [ 120.852068][ T3260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 121.640541][ T3260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 130.298231][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.398549][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.512728][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.582750][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.423139][ T3268] hsr_slave_0: entered promiscuous mode [ 132.469673][ T3268] hsr_slave_1: entered promiscuous mode [ 132.764444][ T3269] hsr_slave_0: entered promiscuous mode [ 132.808440][ T3269] hsr_slave_1: entered promiscuous mode [ 132.857797][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.859245][ T3269] Cannot create hsr debugfs directory [ 134.179121][ T3268] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.208987][ T3268] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.230736][ T3268] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.257513][ T3268] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.439353][ T3269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.462512][ T3269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.481917][ T3269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 134.516250][ T3269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 135.632542][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.118339][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.732996][ T3269] veth0_vlan: entered promiscuous mode [ 141.819853][ T3269] veth1_vlan: entered promiscuous mode [ 142.000127][ T3269] veth0_macvtap: entered promiscuous mode [ 142.022382][ T3269] veth1_macvtap: entered promiscuous mode [ 142.158997][ T3269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.159984][ T3269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.160696][ T3269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.161380][ T3269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.627191][ T3268] veth0_vlan: entered promiscuous mode [ 142.697717][ T3268] veth1_vlan: entered promiscuous mode [ 142.976905][ T3401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.980018][ T3401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.990480][ T3268] veth0_macvtap: entered promiscuous mode [ 143.062658][ T3268] veth1_macvtap: entered promiscuous mode [ 143.359167][ T3405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.365297][ T3405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.450385][ T3268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.454692][ T3268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.467364][ T3268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.469038][ T3268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.694100][ T3407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.695473][ T3407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.777498][ T3048] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 144.781831][ C0] hrtimer: interrupt took 1698096 ns [ 145.015187][ T3420] syzkaller0: entered promiscuous mode [ 145.018289][ T3048] usb 1-1: Using ep0 maxpacket: 32 [ 145.020548][ T3420] syzkaller0: entered allmulticast mode [ 145.173840][ T3048] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 145.175171][ T3048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.178075][ T3048] usb 1-1: Product: syz [ 145.178894][ T3048] usb 1-1: Manufacturer: syz [ 145.179748][ T3048] usb 1-1: SerialNumber: syz [ 145.201319][ T3048] usb 1-1: config 0 descriptor?? [ 145.522936][ T3048] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 145.523716][ T3048] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 145.764672][ T3424] input: syz0 as /devices/virtual/input/input1 [ 145.808028][ T3048] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 145.864219][ T3048] usb 1-1: USB disconnect, device number 2 [ 146.604354][ T3432] ------------[ cut here ]------------ [ 146.612512][ T3432] WARNING: CPU: 1 PID: 3432 at mm/page_alloc.c:4672 __alloc_pages_noprof+0x66c/0xd58 [ 146.615634][ T3432] Modules linked in: [ 146.618258][ T3432] CPU: 1 UID: 0 PID: 3432 Comm: syz.0.14 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 146.621112][ T3432] Hardware name: linux,dummy-virt (DT) [ 146.622789][ T3432] pstate: 21400009 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 146.623827][ T3432] pc : __alloc_pages_noprof+0x66c/0xd58 [ 146.624579][ T3432] lr : ___kmalloc_large_node+0x94/0x194 [ 146.625304][ T3432] sp : ffff800088b03ac0 [ 146.626002][ T3432] x29: ffff800088b03ac0 x28: f4f00000094fc900 x27: 0000000000000000 [ 146.627475][ T3432] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000 [ 146.628563][ T3432] x23: fdf000000678d800 x22: 0000000000040dc0 x21: 00000020000000a0 [ 146.629747][ T3432] x20: 000000000000001a x19: 0000000000000000 x18: ffffffffffffffff [ 146.630880][ T3432] x17: 0000000000000000 x16: 0000000000000000 x15: ffff800088b03aa0 [ 146.632241][ T3432] x14: ffff800088b03d88 x13: ffff800088b03d4a x12: 0000000000000000 [ 146.633288][ T3432] x11: 0000000000000000 x10: 0000000000000078 x9 : 000000000000003c [ 146.634678][ T3432] x8 : ffff800088b03db8 x7 : 0000000000000000 x6 : 0000000000005452 [ 146.636258][ T3432] x5 : 0000000000000000 x4 : f4f00000094fc900 x3 : 0000000000000000 [ 146.637869][ T3432] x2 : 0000000000000000 x1 : 0000000000000001 x0 : ffff8000828e4000 [ 146.639281][ T3432] Call trace: [ 146.640039][ T3432] __alloc_pages_noprof+0x66c/0xd58 [ 146.640936][ T3432] ___kmalloc_large_node+0x94/0x194 [ 146.641991][ T3432] __kmalloc_noprof+0x2d0/0x360 [ 146.642954][ T3432] input_mt_init_slots+0x5c/0x1ec [ 146.643591][ T3432] uinput_ioctl_handler.isra.0+0x95c/0xcdc [ 146.644334][ T3432] uinput_ioctl+0x18/0x24 [ 146.644959][ T3432] __arm64_sys_ioctl+0xac/0xf0 [ 146.645883][ T3432] invoke_syscall+0x48/0x110 [ 146.646543][ T3432] el0_svc_common+0x3c/0xe8 [ 146.647154][ T3432] do_el0_svc+0x20/0x2c [ 146.647820][ T3432] el0_svc+0x34/0xec [ 146.648455][ T3432] el0t_64_sync_handler+0x100/0x12c [ 146.649187][ T3432] el0t_64_sync+0x19c/0x1a0 [ 146.650189][ T3432] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 147.654671][ T1206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.758497][ T1206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.839544][ T1206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.936803][ T1206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.877517][ T1206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.948467][ T1206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.008052][ T1206] bond0 (unregistering): Released all slaves [ 149.191049][ T1206] hsr_slave_0: left promiscuous mode [ 149.251337][ T1206] hsr_slave_1: left promiscuous mode [ 149.352864][ T1206] veth1_macvtap: left promiscuous mode [ 149.354966][ T1206] veth0_macvtap: left promiscuous mode [ 149.358542][ T1206] veth1_vlan: left promiscuous mode [ 149.360258][ T1206] veth0_vlan: left promiscuous mode [ 152.117300][ T1206] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.168554][ T1206] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.264578][ T1206] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.367725][ T1206] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.666882][ T1206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.737042][ T1206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.793975][ T1206] bond0 (unregistering): Released all slaves [ 153.969566][ T1206] hsr_slave_0: left promiscuous mode [ 154.021312][ T1206] hsr_slave_1: left promiscuous mode [ 154.131919][ T1206] veth1_macvtap: left promiscuous mode [ 154.133502][ T1206] veth0_macvtap: left promiscuous mode [ 154.134855][ T1206] veth1_vlan: left promiscuous mode [ 154.139143][ T1206] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 05:53:45 Registers: info registers vcpu 0 CPU#0 PC=ffff800080012150 X00=0000000000000000 X01=0000000000000000 X02=f4f000000675b6c0 X03=0000000003028b00 X04=0000000000000015 X05=01ffffffffffffff X06=0000000001a91319 X07=f3f0000005442050 X08=f4f000000675b6c0 X09=0000000000000000 X10=0000000000000001 X11=000000000000000c X12=0000000000000001 X13=0000000000000178 X14=0000000000000178 X15=1850fe3ca41d3e0a X16=c12e00006a2cffff X17=22658c4a163873c1 X18=0000000000000000 X19=0000000000000000 X20=f4f000000675c898 X21=0000ffff848faae8 X22=0000000060001000 X23=0000fffff3897970 X24=0000000000000000 X25=0000000000000000 X26=0000000000000000 X27=0000000000000000 X28=f4f000000675b6c0 X29=ffff8000887f3fe0 X30=ffff8000800116f8 SP=ffff8000887f3eb0 PSTATE=414003c9 -Z-- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:494d003d524f4a41:4d003d454d414e56 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000f00000000000:000f000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:f00ff00ff00ff00f:f00ff00ff00ff00f Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00f000000f000000:00f000000f000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3003300330033003:3003300330033003 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:f00ff00ff00ff00f:f00ff00ff00ff00f Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3000000000000000:3000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff80008083f608 X00=0000000000000002 X01=0000000000000018 X02=ffff800082a35018 X03=ffff800082806c68 X04=f7f0000004077c80 X05=0000000000000034 X06=362e36343120205b X07=205b5d3835323831 X08=2032333433203a44 X09=7973203a6d6d6f43 X10=656c6c616b7a7973 X11=2d32363532312d72 X12=5b5d383532383136 X13=205d323334335420 X14=4e2034312e302e7a X15=746e69617420746f X16=2e30312e36206465 X17=6c616b7a79732d30 X18=ffffffffffffffff X19=ffff800082922ee3 X20=ffff80008083f6b8 X21=f7f0000004077c80 X22=ffff800082922f42 X23=00000000000003c0 X24=0000000000000072 X25=ffff800082806c98 X26=ffff8000826b0028 X27=ffff800082923ad0 X28=f4f00000094fc900 X29=ffff800088b03380 X30=ffff80008083f6e0 SP=ffff800088b03380 PSTATE=824003c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffb8896418:0000ffffb8896430 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffb8896428:0000ffffb8896470 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffb93fca20:0000ffffb8896410 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffb8896448:0000ffffb8896420 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffb8896458:0000ffffb8896450 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffb8896458:0000ffffb8896450 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffb8896468:0000ffffb8896460 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffdc1b9e30:0000ffffdc1b9e30 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffdc1b9e00 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000