last executing test programs: 26.937276394s ago: executing program 1 (id=1259): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6a, &(0x7f0000000000)="d69a1c20d26a2095dd", 0x9) r1 = socket$inet6(0xa, 0x80000, 0x2) sendto$inet6(r1, &(0x7f0000001040)="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", 0x1000, 0x4008001, &(0x7f0000002040)={0xa, 0x4e20, 0x2c8, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002140)={'syztnl2\x00', &(0x7f00000020c0)={'ip6_vti0\x00', 0x0, 0x4, 0xf7, 0x6, 0xffffffe0, 0x0, @private2, @empty, 0x80, 0x8, 0x4de, 0x1c53}}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000002200)={'gre0\x00', &(0x7f0000002180)={'tunl0\x00', 0x0, 0x700, 0x10, 0x6e, 0x5, {{0x9, 0x4, 0x0, 0x4, 0x24, 0x68, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @remote, {[@rr={0x7, 0xf, 0xd5, [@multicast2, @remote, @broadcast]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002240)={'gretap0\x00', &(0x7f0000003280)={'syztnl1\x00', 0x0, 0x1, 0x7, 0xfffffff5, 0x0, {{0x32, 0x4, 0x2, 0x9, 0xc8, 0x68, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@rr={0x7, 0x27, 0xad, [@empty, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @loopback, @empty, @rand_addr=0x64010100, @broadcast, @loopback]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "ae7e8188"}]}, @cipso={0x86, 0x22, 0x0, [{0x0, 0x6, "6c3e020b"}, {0x6, 0x9, "937978e4853292"}, {0x6, 0x9, "565159d7b2c782"}, {0x0, 0x4, "20a0"}]}, @timestamp_addr={0x44, 0x44, 0x10, 0x1, 0xc, [{@private=0xa010101, 0x4}, {@local, 0x5}, {@local, 0xfffffff9}, {@multicast2, 0xb0}, {@multicast2, 0x6}, {@multicast2}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @lsrr={0x83, 0x7, 0x7d, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x10, 0x0, [{0x0, 0x4, "eff2"}, {0x1, 0x6, "406fb466"}]}, @ra={0x94, 0x4}]}}}}}) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r13, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r15 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r14}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r15, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000003640)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003600)={&(0x7f0000003380)={0x258, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x44000}, 0x40) sendto$inet6(r1, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001000000000904"], 0x0) read(r1, &(0x7f0000000040)=""/4096, 0x1000) 24.467467759s ago: executing program 1 (id=1271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) (fail_nth: 1) 24.194100039s ago: executing program 1 (id=1274): syz_open_dev$video(0x0, 0x7, 0x40440) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x6, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_rr_get_interval(0x0, &(0x7f0000000080)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='cachefiles_trunc\x00', r4, 0x0, 0x10000000}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x9) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xae) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mknod$loop(&(0x7f00000006c0)='./file1\x00', 0x2000, 0x0) mount(&(0x7f0000002a40)=@md0, &(0x7f0000002a80)='./file1\x00', &(0x7f0000002ac0)='squashfs\x00', 0x1, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000042}, 0x2404c0c5) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033a0000001f030000ef000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRESHEX=r6], 0x30}}, 0x0) 23.133832459s ago: executing program 3 (id=1281): iopl(0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000380)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) clock_adjtime(0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000001a40)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES64=0x0, @ANYBLOB="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"], 0x0, 0x2d, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x90, 0x8, 0x0, 0x0}}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$TIOCGICOUNT(r2, 0x5409, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') 22.174310829s ago: executing program 4 (id=1283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 22.16444138s ago: executing program 2 (id=1284): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f0000000040)}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x73}], 0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x24040900) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) 22.116934583s ago: executing program 4 (id=1285): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x410000002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110140000001000e7ff00000000000000000084000a"], 0xc4}}, 0x20050800) r3 = socket$rds(0x15, 0x5, 0x0) shutdown(r3, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000100)) syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a530112406060405080004000500ba725989050924030506030501f909240702020005cbad092403060101"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 21.233410541s ago: executing program 1 (id=1286): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x108) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2e, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x6e) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {0xffffffffffffffff, 0xffffffffffffffff, 0x2}}, 0x18) 21.116412065s ago: executing program 2 (id=1287): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000062811c27fa5104e100"/24, @ANYRESHEX=r1, @ANYBLOB='\x00'/15, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0xcca9ab302c33dda8, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') fcntl$setstatus(r5, 0x4, 0x42000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_DIRENT(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) chdir(&(0x7f0000000100)='./file0\x00') 20.741083886s ago: executing program 3 (id=1289): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000000)) ioctl$TIOCSTI(r2, 0x5412, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket(0x2, 0x3, 0x3f3d) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2001108}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='W\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd5ff97000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040844}, 0x4000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f00000000c0)=0x6, 0x4) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') r4 = socket(0x2a, 0x2, 0xb8a1) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=@newqdisc={0xd8, 0x24, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xfff2, 0xa}, {0x1, 0x4}}, [@qdisc_kind_options=@q_atm={0x8}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_choke={{0xa}, {0x34, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x53d4}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0xffff, 0x44, 0x2, 0x19, 0xa, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1d7, 0x9, 0x6, 0x8, 0x1f, 0xe, 0x5}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xbba6}, @qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x34}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}]}}]}, 0xd8}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000380)=@phonet={0x23, 0xd6, 0xf3, 0x4}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000400)="35d00066d4b59e88fa8ac8ba498f7bb20c33bf020d8ffb8d547858be2f907f75523acc4862d5012920a20e89fc77671d1e9faf60f377b6a9ba107a6ba359015705116a2a4f1e8488914c974f8afd04fcee83322a02b34f96026f248182be17d8870fa3a68e4bc1269634a364a549e3cf2610c98565b60b86df6541a29748faf1c25af62ee388a5ec559f7494e80f6e77a51a78304a7360632576784c42a11587155eccd7ba18080628e44e5111f264e741a208583383de57cc259be48414d3f8a17416233970fa87a315165e9b49d9b7d3591c7907ef5d27eeed7899c9c571e94ba9b546452e2f7fe8fd83493300e1317f189485a548229e", 0xfffffffffffffeaa}, {&(0x7f0000000100)="5d2529e0f3f6c8f63ee3c652bae5e4b2fc8e29ac53d06ddf93436f7ee627c4d0fe52322b8407ca200059f33cb1772608d8", 0x31}, {&(0x7f0000000580)="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", 0xff}, {&(0x7f0000000500)="9f683826105b6bff50cf871010969d032af67171745b7c9f79c5bd93", 0x1c}, {&(0x7f0000000680)="21be0fafef097fa354613633a9fae066005501de70043f19683186460e147f9a4100b1ad8b5d08a21ad1b1a3c292844905c86e02a219112b803017b5b30c31e77337a6098e1acb2902be3d9d8353", 0x4e}, {&(0x7f0000000780)="82bac8c18cdfaa3e2c074a0a40b2874915f4af227a4d8e5c7b982a8bf6b262525339299f1cff515cf05b0211201d00eb39de18a50efb84a9a095377683db4b1c20e3205458f76b96aa7aefa202081961a3dd7ca919367f9f2c6869f27c380c8cad37bf53eff7f88c62827acd4fc772e35c1dfde0a6aee85812d33bb007187424f72fa790bc7eaeb1e7bde34d30de4b19bbca41778fca0bc01ddb7826521693bfd1e6ad67568f436882990388f24216b597af9cba9412c762d1d7ebe77439431718fc", 0xc2}, {&(0x7f0000000880)="c36488075dc55c554db1d4dfe8454deeeb66de3830d9793999876462000ba0c70f80c823a9bffdc15eedc6cff5bf6113dcd2864274d50d8b49d72f1ce3614005e1dc", 0x42}], 0x7}}, {{&(0x7f00000009c0)=@l2={0x1f, 0x1, @none, 0x7, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000a40)="f337e911552a6f1bc681cfadab3982c1ae88f2205111aafa22df152c0016d9f4a5470051433a13004056a2cae862f134f3db95c3ea786c4a8c2355b8b6a53bc8ebe30e11083434068d9647fa4843cd", 0x4f}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000ac0)="4f43fae0ff7671c48665cffab2c457c6db06bb3284960efeab8b388bd6e806c43ad73227f7b022ec92a47649991c9cb27731240a19c72ed62ef8e3e5b6bf6077df98f0f6eb", 0x45}], 0x3, &(0x7f0000000b40)}}, {{&(0x7f0000000b80)=@l2={0x1f, 0x5, @any, 0x8, 0x1}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c00)="95bb248c74d7b9f1a6ab9d318fbc025a50c418c5cc77c433e5b65ae8e2810ca96d9b43c924c38722ee917fb8fd277763c24549c80bf895170a1a234da78642b9a3dcabc4f72a46", 0x47}, {&(0x7f0000000c80)="f1621cef2cd90c5b31c811fbf26e05af3e2f69e4441267c62f2496761b92e22c93f0992dad76d2c814a0d5bf795f89d21da06b005003bd84e001fc1d7caf2029c33213f9aedc010d4e2ff3b21001c68ffed010b08753468c865987df8193bcb881112ca04bcab36e8a18e73caac96267e4bea275c272a4971be0813dbf411159a171e01e9e08a0d92139b845ed32114872ad7f2e3f8989d0084a7b65979d59ac9257fceb80fe3e18d6a475f73c060c838a2514bec49d5482b54dbba612eaaef291731e6856f1e462db7626cad0108d4f5c0374e1ddccf9f191e78d2375e8e03df2", 0xe1}], 0x2}}], 0x3, 0x0) r6 = socket(0x40000000002, 0x3, 0x2) r7 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) recvfrom$inet6(r6, 0x0, 0x14, 0x20, 0x0, 0x0) 20.633189585s ago: executing program 0 (id=1290): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x410000002) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$rds(0x15, 0x5, 0x0) shutdown(r3, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000100)) syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a530112406060405080004000500ba725989050924030506030501f909240702020005cbad092403060101"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 20.607993088s ago: executing program 2 (id=1291): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x110d, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x125) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a0000", 0x3) listen(r3, 0x20000005) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x401, 0x10, 0x5, 0x1}]}) setuid(0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={'sha224-generic\x00'}}) 20.184624106s ago: executing program 1 (id=1292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64]) 20.036663529s ago: executing program 1 (id=1293): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_io_uring_setup(0x110d, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000280)) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a0000", 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x6, @mcast1, 0x1}], 0x1c) listen(r4, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x401, 0x10, 0x5, 0x1}]}) setuid(0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r7, r7}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={'sha224-generic\x00'}}) 19.572652521s ago: executing program 3 (id=1294): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x125) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a0000", 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x6, @mcast1, 0x1}], 0x1c) listen(r4, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x401, 0x10, 0x5, 0x1}]}) setuid(0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={'sha224-generic\x00'}}) 19.554099738s ago: executing program 4 (id=1295): socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r7, 0xfffffffffffffc01, 0x0) tee(r4, r7, 0x60000000000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r8, 0x3b87, &(0x7f00000005c0)={0x18}) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000003584"], 0xffdd) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000080)=0x3, 0x12) gettid() 18.538839839s ago: executing program 2 (id=1296): epoll_create(0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0x400077, 0x6b4380) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000280)={0x0, 0xffffffff000}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0x27}) r3 = syz_open_dev$loop(&(0x7f0000001580), 0x8, 0x8080) ioctl$BLKREPORTZONE(r3, 0xc0101282, 0x0) open(0x0, 0x84000, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r4, &(0x7f00000010c0)=""/4096, 0x1000) 18.263323138s ago: executing program 0 (id=1297): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.192739986s ago: executing program 0 (id=1298): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x410000002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110140000001000e7ff00000000000000000084000a"], 0xc4}}, 0x20050800) socket$rds(0x15, 0x5, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000100)) syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a530112406060405080004000500ba725989050924030506030501f909240702020005cbad092403060101"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 17.769338706s ago: executing program 3 (id=1299): iopl(0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000380)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) clock_adjtime(0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000001a40)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES64=0x0, @ANYBLOB="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"], 0x0, 0x2d, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x90, 0x8, 0x0, 0x0}}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$TIOCGICOUNT(r2, 0x5409, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') 17.662518856s ago: executing program 4 (id=1300): ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) 17.609159353s ago: executing program 2 (id=1301): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1b, 0xf8, 0xfb, 0x40, 0x45e, 0x2bf, 0x7b41, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcc, 0xed, 0x1b}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) userfaultfd(0x80001) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100fadb0010000000000b000000deffffff0e"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x150, 0x7, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x39}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x8f}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x48c0}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) unshare(0x24020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x0) 17.308296579s ago: executing program 4 (id=1302): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x410000002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110140000001000e7ff00000000000000000084000a"], 0xc4}}, 0x20050800) socket$rds(0x15, 0x5, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000100)) syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a530112406060405080004000500ba725989050924030506030501f909240702020005cbad092403060101"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 16.91726813s ago: executing program 3 (id=1303): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0x388) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2) semop(r2, &(0x7f0000000400)=[{0x2, 0x81, 0x1000}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 16.177954054s ago: executing program 0 (id=1304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000000)) ioctl$TIOCSTI(r2, 0x5412, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket(0x2, 0x3, 0x3f3d) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2001108}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='W\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd5ff97000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040844}, 0x4000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f00000000c0)=0x6, 0x4) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') r4 = socket(0x2a, 0x2, 0xb8a1) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=@newqdisc={0xd8, 0x24, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xfff2, 0xa}, {0x1, 0x4}}, [@qdisc_kind_options=@q_atm={0x8}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_choke={{0xa}, {0x34, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x53d4}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0xffff, 0x44, 0x2, 0x19, 0xa, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1d7, 0x9, 0x6, 0x8, 0x1f, 0xe, 0x5}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xbba6}, @qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x34}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}]}}]}, 0xd8}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000380)=@phonet={0x23, 0xd6, 0xf3, 0x4}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000400)="35d00066d4b59e88fa8ac8ba498f7bb20c33bf020d8ffb8d547858be2f907f75523acc4862d5012920a20e89fc77671d1e9faf60f377b6a9ba107a6ba359015705116a2a4f1e8488914c974f8afd04fcee83322a02b34f96026f248182be17d8870fa3a68e4bc1269634a364a549e3cf2610c98565b60b86df6541a29748faf1c25af62ee388a5ec559f7494e80f6e77a51a78304a7360632576784c42a11587155eccd7ba18080628e44e5111f264e741a208583383de57cc259be48414d3f8a17416233970fa87a315165e9b49d9b7d3591c7907ef5d27eeed7899c9c571e94ba9b546452e2f7fe8fd83493300e1317f189485a548229e", 0xfffffffffffffeaa}, {&(0x7f0000000100)="5d2529e0f3f6c8f63ee3c652bae5e4b2fc8e29ac53d06ddf93436f7ee627c4d0fe52322b8407ca200059f33cb1772608d8", 0x31}, {&(0x7f0000000580)="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", 0xff}, {&(0x7f0000000500)="9f683826105b6bff50cf871010969d032af67171745b7c9f79c5bd93", 0x1c}, {&(0x7f0000000680)="21be0fafef097fa354613633a9fae066005501de70043f19683186460e147f9a4100b1ad8b5d08a21ad1b1a3c292844905c86e02a219112b803017b5b30c31e77337a6098e1acb2902be3d9d8353", 0x4e}, {&(0x7f0000000780)="82bac8c18cdfaa3e2c074a0a40b2874915f4af227a4d8e5c7b982a8bf6b262525339299f1cff515cf05b0211201d00eb39de18a50efb84a9a095377683db4b1c20e3205458f76b96aa7aefa202081961a3dd7ca919367f9f2c6869f27c380c8cad37bf53eff7f88c62827acd4fc772e35c1dfde0a6aee85812d33bb007187424f72fa790bc7eaeb1e7bde34d30de4b19bbca41778fca0bc01ddb7826521693bfd1e6ad67568f436882990388f24216b597af9cba9412c762d1d7ebe77439431718fc", 0xc2}, {&(0x7f0000000880)="c36488075dc55c554db1d4dfe8454deeeb66de3830d9793999876462000ba0c70f80c823a9bffdc15eedc6cff5bf6113dcd2864274d50d8b49d72f1ce3614005e1dc", 0x42}], 0x7}}, {{&(0x7f00000009c0)=@l2={0x1f, 0x1, @none, 0x7, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000a40)="f337e911552a6f1bc681cfadab3982c1ae88f2205111aafa22df152c0016d9f4a5470051433a13004056a2cae862f134f3db95c3ea786c4a8c2355b8b6a53bc8ebe30e11083434068d9647fa4843cd", 0x4f}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000ac0)="4f43fae0ff7671c48665cffab2c457c6db06bb3284960efeab8b388bd6e806c43ad73227f7b022ec92a47649991c9cb27731240a19c72ed62ef8e3e5b6bf6077df98f0f6eb", 0x45}], 0x3, &(0x7f0000000b40)}}, {{&(0x7f0000000b80)=@l2={0x1f, 0x5, @any, 0x8, 0x1}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c00)="95bb248c74d7b9f1a6ab9d318fbc025a50c418c5cc77c433e5b65ae8e2810ca96d9b43c924c38722ee917fb8fd277763c24549c80bf895170a1a234da78642b9a3dcabc4f72a46", 0x47}, {&(0x7f0000000c80)="f1621cef2cd90c5b31c811fbf26e05af3e2f69e4441267c62f2496761b92e22c93f0992dad76d2c814a0d5bf795f89d21da06b005003bd84e001fc1d7caf2029c33213f9aedc010d4e2ff3b21001c68ffed010b08753468c865987df8193bcb881112ca04bcab36e8a18e73caac96267e4bea275c272a4971be0813dbf411159a171e01e9e08a0d92139b845ed32114872ad7f2e3f8989d0084a7b65979d59ac9257fceb80fe3e18d6a475f73c060c838a2514bec49d5482b54dbba612eaaef291731e6856f1e462db7626cad0108d4f5c0374e1ddccf9f191e78d2375e8e03df2", 0xe1}], 0x2}}], 0x3, 0x0) r6 = socket(0x40000000002, 0x3, 0x2) r7 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) recvfrom$inet6(r6, 0x0, 0x14, 0x20, 0x0, 0x0) 16.124549914s ago: executing program 2 (id=1305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x317}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x20000000) 16.052222376s ago: executing program 3 (id=1306): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xa, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000400)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 15.464912772s ago: executing program 4 (id=1307): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/106, 0x6a}], 0x1, 0x7ff, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x5b81, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0xe2}) r6 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) 15.327426331s ago: executing program 0 (id=1308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.268399152s ago: executing program 0 (id=1309): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6a, &(0x7f0000000000)="d69a1c20d26a2095dd90187fc77ff9850972", 0x12) r0 = socket$inet6(0xa, 0x80000, 0x2) sendto$inet6(r0, &(0x7f0000001040)="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", 0x1000, 0x4008001, &(0x7f0000002040)={0xa, 0x4e20, 0x2c8, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002140)={'syztnl2\x00', &(0x7f00000020c0)={'ip6_vti0\x00', 0x0, 0x4, 0xf7, 0x6, 0xffffffe0, 0x0, @private2, @empty, 0x80, 0x8, 0x4de, 0x1c53}}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000002200)={'gre0\x00', &(0x7f0000002180)={'tunl0\x00', 0x0, 0x700, 0x10, 0x6e, 0x5, {{0x9, 0x4, 0x0, 0x4, 0x24, 0x68, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @remote, {[@rr={0x7, 0xf, 0xd5, [@multicast2, @remote, @broadcast]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002240)={'gretap0\x00', &(0x7f0000003280)={'syztnl1\x00', 0x0, 0x1, 0x7, 0xfffffff5, 0x0, {{0x32, 0x4, 0x2, 0x9, 0xc8, 0x68, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@rr={0x7, 0x27, 0xad, [@empty, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @loopback, @empty, @rand_addr=0x64010100, @broadcast, @loopback]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "ae7e8188"}]}, @cipso={0x86, 0x22, 0x0, [{0x0, 0x6, "6c3e020b"}, {0x6, 0x9, "937978e4853292"}, {0x6, 0x9, "565159d7b2c782"}, {0x0, 0x4, "20a0"}]}, @timestamp_addr={0x44, 0x44, 0x10, 0x1, 0xc, [{@private=0xa010101, 0x4}, {@local, 0x5}, {@local, 0xfffffff9}, {@multicast2, 0xb0}, {@multicast2, 0x6}, {@multicast2}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @lsrr={0x83, 0x7, 0x7d, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x10, 0x0, [{0x0, 0x4, "eff2"}, {0x1, 0x6, "406fb466"}]}, @ra={0x94, 0x4}]}}}}}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca6cef28d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848b0ebb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4ac"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r12, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r13}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r14, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000003640)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003600)={&(0x7f0000003380)={0x258, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x44000}, 0x40) sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001000000000904"], 0x0) read(r0, &(0x7f0000000040)=""/4096, 0x1000) 1.008892279s ago: executing program 32 (id=1305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x317}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x20000000) 987.569067ms ago: executing program 33 (id=1306): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xa, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000400)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 9.531478ms ago: executing program 34 (id=1309): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6a, &(0x7f0000000000)="d69a1c20d26a2095dd90187fc77ff9850972", 0x12) r0 = socket$inet6(0xa, 0x80000, 0x2) sendto$inet6(r0, &(0x7f0000001040)="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", 0x1000, 0x4008001, &(0x7f0000002040)={0xa, 0x4e20, 0x2c8, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002140)={'syztnl2\x00', &(0x7f00000020c0)={'ip6_vti0\x00', 0x0, 0x4, 0xf7, 0x6, 0xffffffe0, 0x0, @private2, @empty, 0x80, 0x8, 0x4de, 0x1c53}}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000002200)={'gre0\x00', &(0x7f0000002180)={'tunl0\x00', 0x0, 0x700, 0x10, 0x6e, 0x5, {{0x9, 0x4, 0x0, 0x4, 0x24, 0x68, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @remote, {[@rr={0x7, 0xf, 0xd5, [@multicast2, @remote, @broadcast]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002240)={'gretap0\x00', &(0x7f0000003280)={'syztnl1\x00', 0x0, 0x1, 0x7, 0xfffffff5, 0x0, {{0x32, 0x4, 0x2, 0x9, 0xc8, 0x68, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@rr={0x7, 0x27, 0xad, [@empty, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @loopback, @empty, @rand_addr=0x64010100, @broadcast, @loopback]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "ae7e8188"}]}, @cipso={0x86, 0x22, 0x0, [{0x0, 0x6, "6c3e020b"}, {0x6, 0x9, "937978e4853292"}, {0x6, 0x9, "565159d7b2c782"}, {0x0, 0x4, "20a0"}]}, @timestamp_addr={0x44, 0x44, 0x10, 0x1, 0xc, [{@private=0xa010101, 0x4}, {@local, 0x5}, {@local, 0xfffffff9}, {@multicast2, 0xb0}, {@multicast2, 0x6}, {@multicast2}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @lsrr={0x83, 0x7, 0x7d, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x10, 0x0, [{0x0, 0x4, "eff2"}, {0x1, 0x6, "406fb466"}]}, @ra={0x94, 0x4}]}}}}}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r12, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r13}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r14, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000003640)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003600)={&(0x7f0000003380)={0x258, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x44000}, 0x40) sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001000000000904"], 0x0) read(r0, &(0x7f0000000040)=""/4096, 0x1000) 0s ago: executing program 35 (id=1307): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/106, 0x6a}], 0x1, 0x7ff, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x5b81, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0xe2}) r6 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) kernel console output (not intermixed with test programs): [ 291.319726][ T5863] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 291.337953][ T9313] sp0: Synchronizing with TNC [ 291.479886][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 291.495156][ T5863] usb 4-1: unable to get BOS descriptor or descriptor too short [ 291.512837][ T5863] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 291.533792][ T5863] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 291.788467][ T9324] sp0: Synchronizing with TNC [ 291.863360][ T9324] sp0: Synchronizing with TNC [ 291.897242][ T5863] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 291.908453][ T5863] usb 4-1: config 4 has no interface number 0 [ 292.093072][ T5863] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 292.135072][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.152432][ T5863] usb 4-1: Product: syz [ 292.162959][ T5863] usb 4-1: Manufacturer: syz [ 292.171737][ T5863] usb 4-1: SerialNumber: syz [ 292.642818][ T5863] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 292.649211][ T5863] usb 4-1: No streaming interface found for terminal 6. [ 292.706141][ T5863] usb 4-1: USB disconnect, device number 16 [ 293.110231][ T9336] hfs: unable to load iocharset "io#harset[" [ 293.295282][ T9343] sp0: Synchronizing with TNC [ 293.347702][ T9345] sp0: Synchronizing with TNC [ 295.709744][ T46] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 295.999357][ T9373] sp0: Synchronizing with TNC [ 296.263540][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 296.275159][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 296.306362][ T46] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 296.837538][ T46] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 296.847505][ T46] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 296.857892][ T46] usb 1-1: config 4 has no interface number 0 [ 296.865775][ T9384] sp0: Synchronizing with TNC [ 296.874614][ T46] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 296.884076][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.892853][ T46] usb 1-1: Product: syz [ 296.897083][ T46] usb 1-1: Manufacturer: syz [ 296.901872][ T46] usb 1-1: SerialNumber: syz [ 297.108857][ T9393] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 297.462192][ T46] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 297.494120][ T46] usb 1-1: No streaming interface found for terminal 6. [ 297.505416][ T46] usb 1-1: USB disconnect, device number 18 [ 298.089915][ T46] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 298.299738][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 298.306832][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 298.368438][ T46] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 298.664090][ T46] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 298.678565][ T46] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 298.689039][ T46] usb 2-1: config 4 has no interface number 0 [ 298.697559][ T46] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 298.717991][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.728340][ T46] usb 2-1: Product: syz [ 298.732650][ T46] usb 2-1: Manufacturer: syz [ 298.738010][ T46] usb 2-1: SerialNumber: syz [ 298.983069][ T46] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 298.989476][ T46] usb 2-1: No streaming interface found for terminal 6. [ 299.001976][ T46] usb 2-1: USB disconnect, device number 12 [ 299.873959][ T9423] hfs: unable to load iocharset "io#harset[" [ 300.165725][ T9444] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 300.312269][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'. [ 300.321328][ T9446] netlink: 6 bytes leftover after parsing attributes in process `syz.4.946'. [ 301.693405][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 301.702424][ T9457] netlink: 6 bytes leftover after parsing attributes in process `syz.2.950'. [ 302.043654][ T9460] netlink: 'syz.4.951': attribute type 8 has an invalid length. [ 302.664486][ T9484] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 302.876049][ T5865] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 303.098441][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 303.107423][ T9490] netlink: 6 bytes leftover after parsing attributes in process `syz.2.961'. [ 303.399951][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 303.413445][ T5865] usb 2-1: unable to get BOS descriptor or descriptor too short [ 303.422640][ T5865] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 303.439651][ T5865] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 303.449467][ T5865] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 303.469004][ T5865] usb 2-1: config 4 has no interface number 0 [ 303.483896][ T5865] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 303.511546][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.529391][ T5865] usb 2-1: Product: syz [ 303.533735][ T5865] usb 2-1: Manufacturer: syz [ 303.538373][ T5865] usb 2-1: SerialNumber: syz [ 304.075591][ T5865] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 304.096222][ T5865] usb 2-1: No streaming interface found for terminal 6. [ 304.104770][ T5865] usb 2-1: USB disconnect, device number 13 [ 304.758742][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'. [ 304.767715][ T9528] netlink: 6 bytes leftover after parsing attributes in process `syz.0.971'. [ 305.693469][ T5865] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 305.869752][ T969] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 305.878114][ T9541] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 305.890378][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 305.896764][ T5865] usb 5-1: unable to get BOS descriptor or descriptor too short [ 305.906881][ T5865] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 305.915166][ T5865] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 305.924061][ T5865] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 305.934865][ T5865] usb 5-1: config 4 has no interface number 0 [ 305.939238][ T9549] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.978'. [ 305.943496][ T5865] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 305.959458][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.968629][ T5865] usb 5-1: Product: syz [ 305.972916][ T5865] usb 5-1: Manufacturer: syz [ 305.977509][ T5865] usb 5-1: SerialNumber: syz [ 305.989839][ T9553] FAULT_INJECTION: forcing a failure. [ 305.989839][ T9553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.003083][ T9553] CPU: 1 UID: 0 PID: 9553 Comm: syz.2.980 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 306.003116][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 306.003126][ T9553] Call Trace: [ 306.003131][ T9553] [ 306.003144][ T9553] dump_stack_lvl+0x16c/0x1f0 [ 306.003167][ T9553] should_fail_ex+0x497/0x5b0 [ 306.003186][ T9553] _copy_from_user+0x2e/0xd0 [ 306.003204][ T9553] copy_msghdr_from_user+0x99/0x160 [ 306.003226][ T9553] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 306.003249][ T9553] ? rcu_is_watching+0x12/0xc0 [ 306.003271][ T9553] ? lock_release+0x4e2/0x6f0 [ 306.003289][ T9553] ? get_pid_task+0xfc/0x250 [ 306.003305][ T9553] ___sys_sendmsg+0xff/0x1e0 [ 306.003324][ T9553] ? get_pid_task+0x35/0x250 [ 306.003338][ T9553] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.003359][ T9553] ? lock_release+0x4e2/0x6f0 [ 306.003380][ T9553] ? __pfx_lock_release+0x10/0x10 [ 306.003407][ T9553] ? trace_lock_acquire+0x14e/0x1f0 [ 306.003436][ T9553] ? __fget_files+0x206/0x3a0 [ 306.003459][ T9553] __sys_sendmsg+0x16e/0x220 [ 306.003479][ T9553] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.003504][ T9553] ? rcu_is_watching+0x12/0xc0 [ 306.003526][ T9553] ? rcu_is_watching+0x12/0xc0 [ 306.003549][ T9553] do_syscall_64+0xcd/0x250 [ 306.003569][ T9553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.003590][ T9553] RIP: 0033:0x7f41b138cd29 [ 306.003602][ T9553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.003617][ T9553] RSP: 002b:00007f41b217c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.003633][ T9553] RAX: ffffffffffffffda RBX: 00007f41b15a5fa0 RCX: 00007f41b138cd29 [ 306.003644][ T9553] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000003 [ 306.003653][ T9553] RBP: 00007f41b217c090 R08: 0000000000000000 R09: 0000000000000000 [ 306.003663][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.003672][ T9553] R13: 0000000000000000 R14: 00007f41b15a5fa0 R15: 00007ffd655dc138 [ 306.003689][ T9553] [ 306.212895][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.230951][ T5865] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 306.231838][ T969] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 306.237388][ T5865] usb 5-1: No streaming interface found for terminal 6. [ 306.248419][ T969] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 306.258029][ T5865] usb 5-1: USB disconnect, device number 18 [ 306.266482][ T969] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 306.290247][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.290971][ T46] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 306.340689][ T9533] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 306.350635][ T969] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 306.480427][ T9557] sp0: Synchronizing with TNC [ 306.629956][ T46] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 306.879771][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.888726][ T46] usb 4-1: config 0 descriptor?? [ 307.656540][ T5822] usb 4-1: USB disconnect, device number 17 [ 308.192266][ T5822] usb 2-1: USB disconnect, device number 14 [ 308.882659][ T9585] sp0: Synchronizing with TNC [ 309.069754][ T5822] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 309.420187][ T46] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 309.432303][ T5822] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 309.442302][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.579754][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 309.587216][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 309.642264][ T5822] usb 2-1: config 0 descriptor?? [ 309.654693][ T46] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 309.679905][ T46] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 309.691894][ T46] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 309.710633][ T46] usb 4-1: config 4 has no interface number 0 [ 309.718418][ T46] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 309.727544][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.735857][ T29] audit: type=1400 audit(1737677497.468:580): avc: denied { create } for pid=9599 comm="syz.4.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 309.756558][ T46] usb 4-1: Product: syz [ 309.761115][ T46] usb 4-1: Manufacturer: syz [ 309.765751][ T46] usb 4-1: SerialNumber: syz [ 309.770572][ T29] audit: type=1400 audit(1737677497.468:581): avc: denied { write } for pid=9599 comm="syz.4.993" path="socket:[24321]" dev="sockfs" ino=24321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 309.843743][ T29] audit: type=1400 audit(1737677497.468:582): avc: denied { write } for pid=9599 comm="syz.4.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 309.863909][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.573504][ T5822] usb 2-1: USB disconnect, device number 15 [ 310.581800][ T29] audit: type=1400 audit(1737677497.468:583): avc: denied { nlmsg_write } for pid=9599 comm="syz.4.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 310.586975][ T46] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 310.637964][ T46] usb 4-1: No streaming interface found for terminal 6. [ 310.655872][ T46] usb 4-1: USB disconnect, device number 18 [ 311.516800][ T9615] sp0: Synchronizing with TNC [ 312.939734][ T969] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 313.040821][ T9651] hfs: unable to load iocharset "io#harset[" [ 313.221966][ T5865] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 313.230110][ T969] usb 1-1: Using ep0 maxpacket: 8 [ 313.242402][ T969] usb 1-1: unable to get BOS descriptor or descriptor too short [ 313.258828][ T969] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 313.268014][ T9656] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 313.284480][ T969] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 313.308857][ T969] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 313.339309][ T969] usb 1-1: config 4 has no interface number 0 [ 313.361078][ T969] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 313.387265][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.399713][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 313.407380][ T5865] usb 2-1: unable to get BOS descriptor or descriptor too short [ 313.412988][ T969] usb 1-1: Product: syz [ 313.435476][ T969] usb 1-1: Manufacturer: syz [ 313.437410][ T5865] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 313.448811][ T969] usb 1-1: SerialNumber: syz [ 313.468901][ T5865] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 313.501814][ T5865] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 313.530999][ T5865] usb 2-1: config 4 has no interface number 0 [ 313.550256][ T5865] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 313.576981][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.601120][ T5865] usb 2-1: Product: syz [ 313.613190][ T5865] usb 2-1: Manufacturer: syz [ 313.626483][ T5865] usb 2-1: SerialNumber: syz [ 313.714676][ T969] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 313.726463][ T969] usb 1-1: No streaming interface found for terminal 6. [ 313.738954][ T969] usb 1-1: USB disconnect, device number 19 [ 313.840575][ T5865] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 313.847063][ T5865] usb 2-1: No streaming interface found for terminal 6. [ 313.865084][ T5865] usb 2-1: USB disconnect, device number 16 [ 313.886530][ T9660] netlink: 'syz.2.1009': attribute type 8 has an invalid length. [ 314.957999][ T9669] hfs: unable to load iocharset "io#harset[" [ 315.239530][ T9682] sp0: Synchronizing with TNC [ 315.578872][ T9686] sp0: Synchronizing with TNC [ 316.100741][ T46] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 316.269754][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 316.288053][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 316.340058][ T46] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 316.409330][ T46] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 316.420834][ T46] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 316.529679][ T46] usb 2-1: config 4 has no interface number 0 [ 316.540827][ T46] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 316.559754][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.567787][ T46] usb 2-1: Product: syz [ 316.587504][ T46] usb 2-1: Manufacturer: syz [ 316.610521][ T46] usb 2-1: SerialNumber: syz [ 316.830112][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.910115][ T46] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 316.925813][ T46] usb 2-1: No streaming interface found for terminal 6. [ 317.001136][ T46] usb 2-1: USB disconnect, device number 17 [ 317.117816][ T29] audit: type=1400 audit(1737677504.858:584): avc: denied { getopt } for pid=9703 comm="syz.3.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 317.142591][ T9707] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 317.355997][ T9718] sp0: Synchronizing with TNC [ 318.098492][ T29] audit: type=1400 audit(1737677505.838:585): avc: denied { accept } for pid=9726 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 318.774914][ T9731] sp0: Synchronizing with TNC [ 318.824217][ T9736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.833147][ T9736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.932894][ T9742] Process accounting resumed [ 318.939514][ T29] audit: type=1400 audit(1737677506.668:586): avc: denied { append } for pid=9741 comm="syz.3.1031" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 318.963027][ T29] audit: type=1400 audit(1737677506.678:587): avc: denied { ioctl } for pid=9741 comm="syz.3.1031" path="socket:[25879]" dev="sockfs" ino=25879 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 319.222088][ T969] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 319.273109][ T9754] FAULT_INJECTION: forcing a failure. [ 319.273109][ T9754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.286445][ T9754] CPU: 0 UID: 0 PID: 9754 Comm: syz.4.1036 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 319.286467][ T9754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 319.286477][ T9754] Call Trace: [ 319.286482][ T9754] [ 319.286488][ T9754] dump_stack_lvl+0x16c/0x1f0 [ 319.286512][ T9754] should_fail_ex+0x497/0x5b0 [ 319.286531][ T9754] _copy_from_user+0x2e/0xd0 [ 319.286551][ T9754] copy_msghdr_from_user+0x99/0x160 [ 319.286574][ T9754] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 319.286597][ T9754] ? rcu_is_watching+0x12/0xc0 [ 319.286622][ T9754] ? lock_release+0x4e2/0x6f0 [ 319.286640][ T9754] ? get_pid_task+0xfc/0x250 [ 319.286657][ T9754] ___sys_sendmsg+0xff/0x1e0 [ 319.286677][ T9754] ? get_pid_task+0x35/0x250 [ 319.286692][ T9754] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.286713][ T9754] ? lock_release+0x4e2/0x6f0 [ 319.286734][ T9754] ? __pfx_lock_release+0x10/0x10 [ 319.286751][ T9754] ? trace_lock_acquire+0x14e/0x1f0 [ 319.286780][ T9754] ? __fget_files+0x206/0x3a0 [ 319.286804][ T9754] __sys_sendmsg+0x16e/0x220 [ 319.286825][ T9754] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.286850][ T9754] ? rcu_is_watching+0x12/0xc0 [ 319.286873][ T9754] ? rcu_is_watching+0x12/0xc0 [ 319.286897][ T9754] do_syscall_64+0xcd/0x250 [ 319.286917][ T9754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.286939][ T9754] RIP: 0033:0x7fd8d098cd29 [ 319.286951][ T9754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.286965][ T9754] RSP: 002b:00007fd8d18bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.286988][ T9754] RAX: ffffffffffffffda RBX: 00007fd8d0ba5fa0 RCX: 00007fd8d098cd29 [ 319.286999][ T9754] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000006 [ 319.287008][ T9754] RBP: 00007fd8d18bc090 R08: 0000000000000000 R09: 0000000000000000 [ 319.287017][ T9754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.287026][ T9754] R13: 0000000000000000 R14: 00007fd8d0ba5fa0 R15: 00007ffc724dc788 [ 319.287043][ T9754] [ 319.493356][ T5897] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 319.549755][ T969] usb 1-1: device descriptor read/64, error -71 [ 319.729725][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 319.738667][ T5897] usb 3-1: unable to get BOS descriptor or descriptor too short [ 319.749263][ T5897] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 319.757980][ T5897] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 319.956597][ T5897] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 319.967449][ T5897] usb 3-1: config 4 has no interface number 0 [ 319.979039][ T5897] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 319.991013][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.999012][ T5897] usb 3-1: Product: syz [ 320.003283][ T5897] usb 3-1: Manufacturer: syz [ 320.007897][ T5897] usb 3-1: SerialNumber: syz [ 320.110562][ T969] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 320.145014][ T9767] FAULT_INJECTION: forcing a failure. [ 320.145014][ T9767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.159393][ T9767] CPU: 0 UID: 0 PID: 9767 Comm: syz.3.1040 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 320.159416][ T9767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 320.159426][ T9767] Call Trace: [ 320.159431][ T9767] [ 320.159438][ T9767] dump_stack_lvl+0x16c/0x1f0 [ 320.159463][ T9767] should_fail_ex+0x497/0x5b0 [ 320.159482][ T9767] _copy_from_user+0x2e/0xd0 [ 320.159502][ T9767] copy_msghdr_from_user+0x99/0x160 [ 320.159525][ T9767] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 320.159547][ T9767] ? rcu_is_watching+0x12/0xc0 [ 320.159572][ T9767] ? lock_release+0x4e2/0x6f0 [ 320.159590][ T9767] ? get_pid_task+0xfc/0x250 [ 320.159609][ T9767] ___sys_sendmsg+0xff/0x1e0 [ 320.159626][ T9767] ? get_pid_task+0x35/0x250 [ 320.159640][ T9767] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.159658][ T9767] ? lock_release+0x4e2/0x6f0 [ 320.159677][ T9767] ? __pfx_lock_release+0x10/0x10 [ 320.159692][ T9767] ? trace_lock_acquire+0x14e/0x1f0 [ 320.159719][ T9767] ? __fget_files+0x206/0x3a0 [ 320.159740][ T9767] __sys_sendmsg+0x16e/0x220 [ 320.159760][ T9767] ? __pfx___sys_sendmsg+0x10/0x10 [ 320.159783][ T9767] ? rcu_is_watching+0x12/0xc0 [ 320.159805][ T9767] ? rcu_is_watching+0x12/0xc0 [ 320.159828][ T9767] do_syscall_64+0xcd/0x250 [ 320.159847][ T9767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.159868][ T9767] RIP: 0033:0x7fae2158cd29 [ 320.159881][ T9767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.159897][ T9767] RSP: 002b:00007fae2233b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.159913][ T9767] RAX: ffffffffffffffda RBX: 00007fae217a5fa0 RCX: 00007fae2158cd29 [ 320.159923][ T9767] RDX: 0000000004000040 RSI: 0000000020000000 RDI: 0000000000000003 [ 320.159931][ T9767] RBP: 00007fae2233b090 R08: 0000000000000000 R09: 0000000000000000 [ 320.159939][ T9767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.159948][ T9767] R13: 0000000000000000 R14: 00007fae217a5fa0 R15: 00007ffd8c585fb8 [ 320.159962][ T9767] [ 320.401031][ T5897] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 320.410964][ T5897] usb 3-1: No streaming interface found for terminal 6. [ 320.458697][ T5897] usb 3-1: USB disconnect, device number 9 [ 320.761670][ T969] usb 1-1: device descriptor read/64, error -71 [ 320.904504][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 320.913587][ T9775] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1042'. [ 321.158751][ T969] usb usb1-port1: attempt power cycle [ 321.707937][ T9788] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1047'. [ 321.713921][ T9791] FAULT_INJECTION: forcing a failure. [ 321.713921][ T9791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.730838][ T9791] CPU: 0 UID: 0 PID: 9791 Comm: syz.4.1048 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 321.730860][ T9791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 321.730869][ T9791] Call Trace: [ 321.730873][ T9791] [ 321.730879][ T9791] dump_stack_lvl+0x16c/0x1f0 [ 321.730902][ T9791] should_fail_ex+0x497/0x5b0 [ 321.730922][ T9791] _copy_from_user+0x2e/0xd0 [ 321.730941][ T9791] __sys_bpf+0x21c/0x49c0 [ 321.730961][ T9791] ? __pfx_lock_release+0x10/0x10 [ 321.730979][ T9791] ? __pfx___sys_bpf+0x10/0x10 [ 321.730996][ T9791] ? vfs_write+0x306/0x1150 [ 321.731014][ T9791] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 321.731035][ T9791] ? fput+0x67/0x440 [ 321.731053][ T9791] ? ksys_write+0x1ba/0x250 [ 321.731066][ T9791] ? __pfx_ksys_write+0x10/0x10 [ 321.731084][ T9791] __x64_sys_bpf+0x78/0xc0 [ 321.731103][ T9791] do_syscall_64+0xcd/0x250 [ 321.731124][ T9791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.731141][ T9791] RIP: 0033:0x7fd8d098cd29 [ 321.731152][ T9791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.731163][ T9791] RSP: 002b:00007fd8d18bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 321.731177][ T9791] RAX: ffffffffffffffda RBX: 00007fd8d0ba5fa0 RCX: 00007fd8d098cd29 [ 321.731186][ T9791] RDX: 0000000000000094 RSI: 00000000200001c0 RDI: 0000000000000005 [ 321.731193][ T9791] RBP: 00007fd8d18bc090 R08: 0000000000000000 R09: 0000000000000000 [ 321.731201][ T9791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.731208][ T9791] R13: 0000000000000001 R14: 00007fd8d0ba5fa0 R15: 00007ffc724dc788 [ 321.731221][ T9791] [ 321.940801][ T969] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 322.849977][ T5865] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 322.867444][ T969] usb 1-1: device not accepting address 22, error -71 [ 323.019868][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 323.129669][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 323.135990][ T5865] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 323.147500][ T5865] usb 4-1: config 0 has no interface number 0 [ 323.219983][ T5865] usb 4-1: config 0 interface 184 has no altsetting 0 [ 323.228386][ T5865] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 323.237519][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.273898][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 324.132167][ T5897] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 324.149712][ T5865] usb 4-1: Product: syz [ 324.154113][ T5865] usb 4-1: Manufacturer: syz [ 324.159439][ T5865] usb 4-1: SerialNumber: syz [ 324.166177][ T5865] usb 4-1: config 0 descriptor?? [ 324.172988][ T5865] smsc75xx v1.0.0 [ 324.222676][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.233781][ T9] usb 2-1: config 0 descriptor?? [ 324.328430][ T9814] sp0: Synchronizing with TNC [ 324.432312][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 324.439919][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 324.448564][ T5897] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 324.456811][ T5897] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 324.465576][ T5897] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 324.475793][ T5897] usb 5-1: config 4 has no interface number 0 [ 324.483748][ T5897] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 324.493857][ T9] usb 2-1: USB disconnect, device number 18 [ 324.500093][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.558087][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'. [ 324.575192][ T9823] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1056'. [ 324.797666][ T5897] usb 5-1: Product: syz [ 324.802083][ T5897] usb 5-1: Manufacturer: syz [ 324.806694][ T5897] usb 5-1: SerialNumber: syz [ 324.996645][ T9789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.004327][ T9789] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 325.303483][ T5865] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 325.322255][ T5865] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 325.332296][ T5897] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 325.338722][ T5897] usb 5-1: No streaming interface found for terminal 6. [ 325.398790][ T5897] usb 5-1: USB disconnect, device number 19 [ 325.478409][ T9842] FAULT_INJECTION: forcing a failure. [ 325.478409][ T9842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.491713][ T9842] CPU: 1 UID: 0 PID: 9842 Comm: syz.1.1061 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 325.491734][ T9842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 325.491743][ T9842] Call Trace: [ 325.491748][ T9842] [ 325.491753][ T9842] dump_stack_lvl+0x16c/0x1f0 [ 325.491779][ T9842] should_fail_ex+0x497/0x5b0 [ 325.491798][ T9842] _copy_from_user+0x2e/0xd0 [ 325.491816][ T9842] copy_msghdr_from_user+0x99/0x160 [ 325.491835][ T9842] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 325.491857][ T9842] ? rcu_is_watching+0x12/0xc0 [ 325.491878][ T9842] ? lock_release+0x4e2/0x6f0 [ 325.491895][ T9842] ? get_pid_task+0xfc/0x250 [ 325.491910][ T9842] ___sys_sendmsg+0xff/0x1e0 [ 325.491929][ T9842] ? get_pid_task+0x35/0x250 [ 325.491943][ T9842] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.491963][ T9842] ? lock_release+0x4e2/0x6f0 [ 325.491985][ T9842] ? __pfx_lock_release+0x10/0x10 [ 325.492002][ T9842] ? trace_lock_acquire+0x14e/0x1f0 [ 325.492032][ T9842] ? __fget_files+0x206/0x3a0 [ 325.492055][ T9842] __sys_sendmsg+0x16e/0x220 [ 325.492075][ T9842] ? __pfx___sys_sendmsg+0x10/0x10 [ 325.492104][ T9842] ? rcu_is_watching+0x12/0xc0 [ 325.492127][ T9842] ? rcu_is_watching+0x12/0xc0 [ 325.492151][ T9842] do_syscall_64+0xcd/0x250 [ 325.492170][ T9842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.492192][ T9842] RIP: 0033:0x7fc1c1b8cd29 [ 325.492205][ T9842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.492219][ T9842] RSP: 002b:00007fc1c2949038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.492235][ T9842] RAX: ffffffffffffffda RBX: 00007fc1c1da5fa0 RCX: 00007fc1c1b8cd29 [ 325.492246][ T9842] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000004 [ 325.492255][ T9842] RBP: 00007fc1c2949090 R08: 0000000000000000 R09: 0000000000000000 [ 325.492265][ T9842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.492274][ T9842] R13: 0000000000000000 R14: 00007fc1c1da5fa0 R15: 00007ffe95263f98 [ 325.492290][ T9842] [ 325.492884][ T29] audit: type=1400 audit(1737677513.218:588): avc: denied { block_suspend } for pid=9834 comm="syz.0.1059" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 325.991370][ T5865] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 326.002586][ T29] audit: type=1326 audit(1737677513.408:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.0.1059" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11aaf8cd29 code=0x0 [ 326.026050][ T5865] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 326.037296][ T5865] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 326.046838][ T5865] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 326.057945][ T5865] usb 4-1: USB disconnect, device number 19 [ 326.676572][ T9858] hfs: unable to load iocharset "io#harset[" [ 328.071300][ T29] audit: type=1400 audit(1737677515.818:590): avc: denied { ioctl } for pid=9882 comm="syz.0.1072" path="socket:[25026]" dev="sockfs" ino=25026 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 328.121403][ T5897] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 328.137374][ T29] audit: type=1400 audit(1737677515.848:591): avc: denied { write } for pid=9882 comm="syz.0.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 328.196805][ T9885] binder: 9884:9885 ioctl c0306201 20000580 returned -22 [ 328.204313][ T9885] binder: 9884:9885 ioctl c0306201 20000580 returned -14 [ 328.230718][ T5865] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 328.349681][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 328.359481][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 328.368762][ T5897] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 328.377007][ T5897] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 328.385811][ T5897] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 328.396825][ T5897] usb 5-1: config 4 has no interface number 0 [ 328.407908][ T5897] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 328.421366][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 328.429932][ T5865] usb 3-1: unable to get BOS descriptor or descriptor too short [ 328.685705][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.694483][ T5865] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 328.703805][ T5865] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 328.712861][ T5897] usb 5-1: Product: syz [ 328.718578][ T5897] usb 5-1: Manufacturer: syz [ 328.723306][ T5865] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 328.733909][ T5897] usb 5-1: SerialNumber: syz [ 328.744062][ T5865] usb 3-1: config 4 has no interface number 0 [ 328.758851][ T5865] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 328.768657][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.776860][ T5865] usb 3-1: Product: syz [ 328.819807][ T5865] usb 3-1: Manufacturer: syz [ 328.824668][ T5865] usb 3-1: SerialNumber: syz [ 328.993495][ T5897] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 329.256661][ T5897] usb 5-1: No streaming interface found for terminal 6. [ 329.274492][ T5865] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 329.274806][ T9902] syz.0.1077 uses obsolete (PF_INET,SOCK_PACKET) [ 329.292075][ T9902] syzkaller1: entered promiscuous mode [ 329.292770][ T5897] usb 5-1: USB disconnect, device number 20 [ 329.297622][ T9902] syzkaller1: entered allmulticast mode [ 329.303492][ T5865] usb 3-1: No streaming interface found for terminal 6. [ 329.319557][ T9902] FAULT_INJECTION: forcing a failure. [ 329.319557][ T9902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.339783][ T9902] CPU: 0 UID: 0 PID: 9902 Comm: syz.0.1077 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 329.339810][ T9902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 329.339820][ T9902] Call Trace: [ 329.339825][ T9902] [ 329.339830][ T9902] dump_stack_lvl+0x16c/0x1f0 [ 329.339853][ T9902] should_fail_ex+0x497/0x5b0 [ 329.339871][ T9902] _copy_from_iter+0x2a1/0x1560 [ 329.339891][ T9902] ? __pfx__copy_from_iter+0x10/0x10 [ 329.339907][ T9902] ? __pfx_stack_trace_save+0x10/0x10 [ 329.339930][ T9902] ? _kstrtoull+0x146/0x200 [ 329.339951][ T9902] ? __pfx__kstrtoull+0x10/0x10 [ 329.339972][ T9902] ? lock_release+0x4e2/0x6f0 [ 329.339992][ T9902] tun_get_user+0x241/0x3e50 [ 329.340024][ T9902] ? __pfx_tun_get_user+0x10/0x10 [ 329.340037][ T9902] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 329.340054][ T9902] ? rcu_is_watching+0x12/0xc0 [ 329.340074][ T9902] ? lock_release+0x4e2/0x6f0 [ 329.340091][ T9902] ? __pfx_lock_release+0x10/0x10 [ 329.340108][ T9902] ? tun_get+0x30/0x370 [ 329.340130][ T9902] ? lock_acquire+0x2f/0xb0 [ 329.340146][ T9902] ? tun_get+0x30/0x370 [ 329.340170][ T9902] tun_chr_write_iter+0xdc/0x210 [ 329.340184][ T9902] vfs_write+0x5ae/0x1150 [ 329.340204][ T9902] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 329.340222][ T9902] ? __pfx_vfs_write+0x10/0x10 [ 329.340240][ T9902] ? __fget_files+0x40/0x3a0 [ 329.340265][ T9902] ksys_write+0x12b/0x250 [ 329.340281][ T9902] ? __pfx_ksys_write+0x10/0x10 [ 329.340298][ T9902] ? rcu_is_watching+0x12/0xc0 [ 329.340320][ T9902] ? rcu_is_watching+0x12/0xc0 [ 329.340342][ T9902] do_syscall_64+0xcd/0x250 [ 329.340361][ T9902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.340382][ T9902] RIP: 0033:0x7f11aaf8cd29 [ 329.340394][ T9902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.340409][ T9902] RSP: 002b:00007f11abe4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 329.340425][ T9902] RAX: ffffffffffffffda RBX: 00007f11ab1a5fa0 RCX: 00007f11aaf8cd29 [ 329.340435][ T9902] RDX: 000000000000fdef RSI: 0000000020000140 RDI: 0000000000000003 [ 329.340444][ T9902] RBP: 00007f11abe4e090 R08: 0000000000000000 R09: 0000000000000000 [ 329.340453][ T9902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.340462][ T9902] R13: 0000000000000000 R14: 00007f11ab1a5fa0 R15: 00007ffd5125aa78 [ 329.340478][ T9902] [ 329.346294][ T5865] usb 3-1: USB disconnect, device number 10 [ 330.243712][ T29] audit: type=1400 audit(1737677517.988:592): avc: denied { getopt } for pid=9921 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.020606][ T9940] sp0: Synchronizing with TNC [ 331.364286][ T5897] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 331.516464][ T29] audit: type=1400 audit(1737677519.258:593): avc: denied { mount } for pid=9947 comm="syz.3.1090" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 331.544883][ T9948] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1090'. [ 331.559766][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 331.626120][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 331.635230][ T9949] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1089'. [ 332.200164][ T46] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 332.223399][ T5897] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 332.231872][ T5897] usb 5-1: config 0 has no interface number 0 [ 332.237978][ T5897] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 332.250870][ T9953] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1091'. [ 332.269731][ T29] audit: type=1400 audit(1737677520.008:594): avc: denied { write } for pid=9952 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 332.289299][ T5897] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 332.329360][ T5897] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 332.342626][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.354029][ T5897] usb 5-1: Product: syz [ 332.358241][ T5897] usb 5-1: Manufacturer: syz [ 332.364014][ T5897] usb 5-1: SerialNumber: syz [ 332.382225][ T5897] usb 5-1: config 0 descriptor?? [ 332.394804][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 332.432039][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 332.490369][ T9933] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 332.498226][ T9933] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 332.520289][ T46] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 332.538439][ T46] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 332.554927][ T46] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 332.570130][ T46] usb 1-1: config 4 has no interface number 0 [ 332.595777][ T46] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 332.612689][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.628085][ T46] usb 1-1: Product: syz [ 332.639085][ T46] usb 1-1: Manufacturer: syz [ 332.648672][ T46] usb 1-1: SerialNumber: syz [ 332.736175][ T9933] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 332.744903][ T9933] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 332.753329][ T5897] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 332.764189][ T5822] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 332.774654][ T5897] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 332.785005][ T5897] asix 5-1:0.251: probe with driver asix failed with error -5 [ 332.809679][ T969] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 333.235114][ T46] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 333.235320][ T9931] ÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 333.243939][ T46] usb 1-1: No streaming interface found for terminal 6. [ 333.256512][ T46] usb 1-1: USB disconnect, device number 24 [ 333.262615][ T5822] usb 4-1: Using ep0 maxpacket: 8 [ 333.263246][ T5863] usb 5-1: USB disconnect, device number 21 [ 333.269676][ T5822] usb 4-1: unable to get BOS descriptor or descriptor too short [ 333.283827][ T5822] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 333.293134][ T5822] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 333.299719][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 333.301923][ T5822] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 333.308423][ T969] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 333.317618][ T5822] usb 4-1: config 4 has no interface number 0 [ 333.327101][ T969] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 333.333628][ T5822] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 333.353146][ T969] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 333.353487][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.364616][ T969] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 333.371345][ T5822] usb 4-1: Product: syz [ 333.385072][ T969] usb 3-1: config 0 interface 0 has no altsetting 0 [ 333.388421][ T5822] usb 4-1: Manufacturer: syz [ 333.396457][ T969] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 333.399692][ T5822] usb 4-1: SerialNumber: syz [ 333.410216][ T969] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 333.422572][ T969] usb 3-1: Product: syz [ 333.426904][ T969] usb 3-1: Manufacturer: syz [ 333.431805][ T969] usb 3-1: SerialNumber: syz [ 333.438422][ T969] usb 3-1: config 0 descriptor?? [ 333.446244][ T969] ldusb 3-1:0.0: Interrupt in endpoint not found [ 333.676162][ T29] audit: type=1400 audit(1737677521.418:595): avc: denied { write } for pid=9954 comm="syz.2.1092" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 333.733471][ T5822] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 333.740034][ T5822] usb 4-1: No streaming interface found for terminal 6. [ 333.749446][ T5822] usb 4-1: USB disconnect, device number 20 [ 333.785180][ T5863] usb 3-1: USB disconnect, device number 11 [ 334.371010][ T9982] netlink: 'syz.4.1099': attribute type 13 has an invalid length. [ 335.006912][ T9990] sp0: Synchronizing with TNC [ 335.474816][ T29] audit: type=1400 audit(1737677523.218:596): avc: denied { ioctl } for pid=9995 comm="syz.2.1104" path="socket:[25280]" dev="sockfs" ino=25280 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 335.558749][ T29] audit: type=1400 audit(1737677523.298:597): avc: denied { execute } for pid=9995 comm="syz.2.1104" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 335.597242][ T29] audit: type=1400 audit(1737677523.298:598): avc: denied { read write } for pid=9995 comm="syz.2.1104" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 335.625848][ T29] audit: type=1400 audit(1737677523.298:599): avc: denied { open } for pid=9995 comm="syz.2.1104" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 335.696768][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 335.706121][T10004] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1103'. [ 337.070433][ T29] audit: type=1400 audit(1737677524.808:600): avc: denied { create } for pid=10008 comm="syz.2.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 337.100411][ T29] audit: type=1400 audit(1737677524.838:601): avc: denied { write } for pid=10008 comm="syz.2.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 337.682124][T10018] hfs: unable to load iocharset "io#harset[" [ 337.697774][T10021] sp0: Synchronizing with TNC [ 338.645559][ T29] audit: type=1400 audit(1737677526.388:602): avc: denied { getopt } for pid=10036 comm="syz.4.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 338.686538][ T29] audit: type=1400 audit(1737677526.428:603): avc: denied { nlmsg_write } for pid=10044 comm="syz.0.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 338.965264][T10051] sp0: Synchronizing with TNC [ 339.222660][T10055] netlink: 'syz.0.1118': attribute type 8 has an invalid length. [ 339.259796][ T29] audit: type=1400 audit(1737677526.998:604): avc: denied { mount } for pid=10059 comm="syz.0.1120" name="/" dev="hugetlbfs" ino=25409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 339.284172][T10060] hugetlbfs: Bad value 'Ð' for mount option 'size' [ 339.284172][T10060] [ 339.298869][ T29] audit: type=1400 audit(1737677527.028:605): avc: denied { remount } for pid=10059 comm="syz.0.1120" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 339.390556][T10065] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1117'. [ 339.502908][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1122'. [ 339.871294][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 339.901342][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 339.917126][T10074] tmpfs: Bad value for 'mpol' [ 340.023951][T10076] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 340.104730][ T29] audit: type=1400 audit(1737677527.848:606): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 340.124888][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.161640][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 340.176497][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 340.349111][T10069] ceph: No mds server is up or the cluster is laggy [ 340.540218][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 340.729723][ T5897] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 340.749771][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 340.823458][T10094] sp0: Synchronizing with TNC [ 340.839710][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 340.908519][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 340.910652][ T9] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 340.952919][ T5897] usb 3-1: unable to get BOS descriptor or descriptor too short [ 340.982359][ T5897] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 341.017517][ T5897] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 341.044981][ T5897] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 341.077843][ T5897] usb 3-1: config 4 has no interface number 0 [ 341.095212][T10078] syz.3.1123 (10078): drop_caches: 2 [ 341.105603][ T5897] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 341.133651][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.149684][ T9] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 341.158426][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 341.168967][ T5897] usb 3-1: Product: syz [ 341.178457][ T5897] usb 3-1: Manufacturer: syz [ 341.191901][ T5897] usb 3-1: SerialNumber: syz [ 341.200729][ T9] usb 2-1: config 4 has no interface number 0 [ 341.207904][T10098] sp0: Synchronizing with TNC [ 341.208427][ T9] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 341.231315][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.239322][ T9] usb 2-1: Product: syz [ 341.251218][ T9] usb 2-1: Manufacturer: syz [ 341.256187][ T9] usb 2-1: SerialNumber: syz [ 341.293794][ T29] audit: type=1400 audit(1737677529.038:607): avc: denied { write } for pid=10100 comm="syz.0.1131" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 341.449907][ T5897] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 341.456309][ T5897] usb 3-1: No streaming interface found for terminal 6. [ 341.465867][ T5897] usb 3-1: USB disconnect, device number 12 [ 341.501493][ T9] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 341.508089][ T9] usb 2-1: No streaming interface found for terminal 6. [ 341.520829][ T9] usb 2-1: USB disconnect, device number 19 [ 341.569729][ T5822] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 341.619695][ T969] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 341.713665][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1134'. [ 341.731181][ T5822] usb 4-1: Using ep0 maxpacket: 32 [ 341.759940][ T5822] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 341.774998][ T5822] usb 4-1: config 0 has no interface number 0 [ 341.781724][ T29] audit: type=1400 audit(1737677529.528:608): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.845211][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.867547][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.867810][ T5822] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 341.887240][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.895485][ T5822] usb 4-1: Product: syz [ 341.899837][ T969] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 341.900635][ T5822] usb 4-1: Manufacturer: syz [ 341.911052][ T969] usb 1-1: New USB device strings: Mfr=255, Product=221, SerialNumber=0 [ 341.915548][ T5822] usb 4-1: SerialNumber: syz [ 341.922180][ T969] usb 1-1: Product: syz [ 341.928327][ T5822] usb 4-1: config 0 descriptor?? [ 341.936230][ T969] usb 1-1: Manufacturer: syz [ 341.942215][ T969] usb 1-1: config 0 descriptor?? [ 341.942378][ T5822] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 341.948363][T10113] netlink: 'syz.4.1135': attribute type 8 has an invalid length. [ 342.115909][T10117] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 342.118734][T10120] FAULT_INJECTION: forcing a failure. [ 342.118734][T10120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.137217][T10120] CPU: 1 UID: 0 PID: 10120 Comm: syz.1.1138 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 342.137238][T10120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 342.137248][T10120] Call Trace: [ 342.137252][T10120] [ 342.137256][T10120] dump_stack_lvl+0x16c/0x1f0 [ 342.137278][T10120] should_fail_ex+0x497/0x5b0 [ 342.137294][T10120] _copy_from_user+0x2e/0xd0 [ 342.137310][T10120] copy_msghdr_from_user+0x99/0x160 [ 342.137329][T10120] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 342.137348][T10120] ? rcu_is_watching+0x12/0xc0 [ 342.137369][T10120] ? lock_release+0x4e2/0x6f0 [ 342.137385][T10120] ? get_pid_task+0xfc/0x250 [ 342.137399][T10120] ___sys_sendmsg+0xff/0x1e0 [ 342.137417][T10120] ? get_pid_task+0x35/0x250 [ 342.137430][T10120] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.137450][T10120] ? lock_release+0x4e2/0x6f0 [ 342.137469][T10120] ? __pfx_lock_release+0x10/0x10 [ 342.137486][T10120] ? trace_lock_acquire+0x14e/0x1f0 [ 342.137512][T10120] ? __fget_files+0x206/0x3a0 [ 342.137533][T10120] __sys_sendmsg+0x16e/0x220 [ 342.137553][T10120] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.137576][T10120] ? rcu_is_watching+0x12/0xc0 [ 342.137597][T10120] ? rcu_is_watching+0x12/0xc0 [ 342.137618][T10120] do_syscall_64+0xcd/0x250 [ 342.137637][T10120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.137656][T10120] RIP: 0033:0x7fc1c1b8cd29 [ 342.137667][T10120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.137680][T10120] RSP: 002b:00007fc1c2949038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.137694][T10120] RAX: ffffffffffffffda RBX: 00007fc1c1da5fa0 RCX: 00007fc1c1b8cd29 [ 342.137702][T10120] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 342.137711][T10120] RBP: 00007fc1c2949090 R08: 0000000000000000 R09: 0000000000000000 [ 342.137719][T10120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.137727][T10120] R13: 0000000000000000 R14: 00007fc1c1da5fa0 R15: 00007ffe95263f98 [ 342.137741][T10120] [ 342.461650][ T5822] usb 4-1: qt2_attach - failed to power on unit: -71 [ 342.468529][ T5822] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 342.479334][ T5822] usb 4-1: USB disconnect, device number 21 [ 342.545709][ T969] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 342.552662][ T969] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 342.559501][ T969] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 342.567156][ T969] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 342.579770][ T969] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 342.591642][ T969] arvo 0003:1E7D:30D4.0005: couldn't init struct arvo_device [ 342.599149][ T969] arvo 0003:1E7D:30D4.0005: couldn't install keyboard [ 342.748911][T10138] sp0: Synchronizing with TNC [ 342.763082][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 342.779383][ T969] arvo 0003:1E7D:30D4.0005: probe with driver arvo failed with error -32 [ 343.080513][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 343.088883][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 232, changing to 11 [ 343.146483][T10145] input: syz1 as /devices/virtual/input/input9 [ 343.155200][ T29] audit: type=1400 audit(1737677530.888:609): avc: denied { write } for pid=10134 comm="syz.1.1142" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 343.307628][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57923, setting to 1024 [ 343.318860][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 343.331720][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 343.332465][T10148] sp0: Synchronizing with TNC [ 343.341020][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.382020][ T9] usb 5-1: config 0 descriptor?? [ 344.192231][T10159] sp0: Synchronizing with TNC [ 344.486554][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 344.639459][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input10 [ 344.658026][ T5865] usb 1-1: USB disconnect, device number 25 [ 344.797194][T10170] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 344.857623][T10169] SELinux: security_context_str_to_sid () failed with errno=-22 [ 344.923173][ T29] audit: type=1400 audit(1737677532.668:610): avc: denied { audit_write } for pid=10122 comm="syz.4.1139" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 344.952558][ T29] audit: type=1400 audit(1737677532.698:611): avc: denied { map } for pid=10167 comm="syz.0.1148" path="pipe:[26957]" dev="pipefs" ino=26957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 344.998968][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 345.009852][ T9] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 345.270400][T10190] sp0: Synchronizing with TNC [ 345.354488][ T5865] usb 5-1: USB disconnect, device number 22 [ 345.545545][T10194] FAULT_INJECTION: forcing a failure. [ 345.545545][T10194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.559012][T10194] CPU: 1 UID: 0 PID: 10194 Comm: syz.0.1153 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 345.559034][T10194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 345.559044][T10194] Call Trace: [ 345.559049][T10194] [ 345.559054][T10194] dump_stack_lvl+0x16c/0x1f0 [ 345.559077][T10194] should_fail_ex+0x497/0x5b0 [ 345.559095][T10194] _copy_from_user+0x2e/0xd0 [ 345.559113][T10194] copy_msghdr_from_user+0x99/0x160 [ 345.559135][T10194] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 345.559158][T10194] ? rcu_is_watching+0x12/0xc0 [ 345.559181][T10194] ? lock_release+0x4e2/0x6f0 [ 345.559198][T10194] ? get_pid_task+0xfc/0x250 [ 345.559214][T10194] ___sys_sendmsg+0xff/0x1e0 [ 345.559231][T10194] ? get_pid_task+0x35/0x250 [ 345.559244][T10194] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.559254][T10194] ? lock_release+0x4e2/0x6f0 [ 345.559265][T10194] ? __pfx_lock_release+0x10/0x10 [ 345.559274][T10194] ? trace_lock_acquire+0x14e/0x1f0 [ 345.559289][T10194] ? __fget_files+0x206/0x3a0 [ 345.559300][T10194] __sys_sendmsg+0x16e/0x220 [ 345.559311][T10194] ? __pfx___sys_sendmsg+0x10/0x10 [ 345.559323][T10194] ? rcu_is_watching+0x12/0xc0 [ 345.559335][T10194] ? rcu_is_watching+0x12/0xc0 [ 345.559347][T10194] do_syscall_64+0xcd/0x250 [ 345.559358][T10194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.559369][T10194] RIP: 0033:0x7f11aaf8cd29 [ 345.559377][T10194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.559385][T10194] RSP: 002b:00007f11abe4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.559395][T10194] RAX: ffffffffffffffda RBX: 00007f11ab1a5fa0 RCX: 00007f11aaf8cd29 [ 345.559400][T10194] RDX: 0000000000004000 RSI: 0000000020000f00 RDI: 0000000000000003 [ 345.559405][T10194] RBP: 00007f11abe4e090 R08: 0000000000000000 R09: 0000000000000000 [ 345.559410][T10194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.559415][T10194] R13: 0000000000000000 R14: 00007f11ab1a5fa0 R15: 00007ffd5125aa78 [ 345.559423][T10194] [ 345.639711][ T969] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 345.772892][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 346.000882][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 346.010491][ T969] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 346.019990][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.029735][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.044789][ T9] usb 3-1: config 0 descriptor?? [ 346.051473][ T969] usb 4-1: config 0 descriptor?? [ 346.139732][ T46] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 346.333872][T10202] sp0: Synchronizing with TNC [ 346.429806][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 346.492190][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 346.500818][ T9] usb 3-1: USB disconnect, device number 13 [ 346.501276][ T5865] usb 4-1: USB disconnect, device number 22 [ 346.513249][ T46] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 346.513273][ T46] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 346.513288][ T46] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 346.513304][ T46] usb 1-1: config 4 has no interface number 0 [ 346.523523][ T46] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 346.557263][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.565382][ T46] usb 1-1: Product: syz [ 346.569756][ T46] usb 1-1: Manufacturer: syz [ 346.574406][ T46] usb 1-1: SerialNumber: syz [ 346.844451][T10209] hfs: unable to load iocharset "io#harset[" [ 347.086412][ T46] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 347.092903][ T46] usb 1-1: No streaming interface found for terminal 6. [ 347.108928][ T46] usb 1-1: USB disconnect, device number 26 [ 347.406597][T10218] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1159'. [ 347.420191][T10218] nbd: couldn't find device at index -1 [ 347.912748][T10231] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 348.024679][T10234] FAULT_INJECTION: forcing a failure. [ 348.024679][T10234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.060411][T10234] CPU: 1 UID: 0 PID: 10234 Comm: syz.3.1164 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 348.060437][T10234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 348.060447][T10234] Call Trace: [ 348.060452][T10234] [ 348.060458][T10234] dump_stack_lvl+0x16c/0x1f0 [ 348.060481][T10234] should_fail_ex+0x497/0x5b0 [ 348.060500][T10234] _copy_from_user+0x2e/0xd0 [ 348.060520][T10234] __sys_bpf+0x21c/0x49c0 [ 348.060543][T10234] ? __pfx_lock_release+0x10/0x10 [ 348.060563][T10234] ? __pfx___sys_bpf+0x10/0x10 [ 348.060584][T10234] ? vfs_write+0x306/0x1150 [ 348.060605][T10234] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 348.060631][T10234] ? fput+0x67/0x440 [ 348.060658][T10234] ? ksys_write+0x1ba/0x250 [ 348.060675][T10234] ? __pfx_ksys_write+0x10/0x10 [ 348.060694][T10234] __x64_sys_bpf+0x78/0xc0 [ 348.060724][T10234] do_syscall_64+0xcd/0x250 [ 348.060743][T10234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.060764][T10234] RIP: 0033:0x7fae2158cd29 [ 348.060776][T10234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.060790][T10234] RSP: 002b:00007fae2233b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 348.060808][T10234] RAX: ffffffffffffffda RBX: 00007fae217a5fa0 RCX: 00007fae2158cd29 [ 348.060818][T10234] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 348.060828][T10234] RBP: 00007fae2233b090 R08: 0000000000000000 R09: 0000000000000000 [ 348.060838][T10234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.060847][T10234] R13: 0000000000000000 R14: 00007fae217a5fa0 R15: 00007ffd8c585fb8 [ 348.060863][T10234] [ 348.239994][ T46] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 349.073215][T10248] sp0: Synchronizing with TNC [ 349.110263][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 349.140867][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 349.268093][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 349.459439][ T46] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 349.477701][ T46] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 349.486598][ T46] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 349.497414][ T46] usb 3-1: config 4 has no interface number 0 [ 349.527254][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 349.532890][ T46] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 349.542201][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.552091][ T46] usb 3-1: Product: syz [ 349.556467][ T46] usb 3-1: Manufacturer: syz [ 349.562096][ T46] usb 3-1: SerialNumber: syz [ 349.566741][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 349.576823][ T9] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 349.585097][ T9] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 349.595449][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 349.629807][ T9] usb 2-1: config 4 has no interface number 0 [ 349.637385][ T9] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 349.647712][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.721118][ T9] usb 2-1: Product: syz [ 349.725291][ T9] usb 2-1: Manufacturer: syz [ 349.730824][ T9] usb 2-1: SerialNumber: syz [ 349.775050][ T46] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 349.781575][ T46] usb 3-1: No streaming interface found for terminal 6. [ 349.790032][ T46] usb 3-1: USB disconnect, device number 14 [ 350.325149][T10261] hfs: unable to load iocharset "io#harset[" [ 350.334066][ T9] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 350.340500][ T9] usb 2-1: No streaming interface found for terminal 6. [ 350.359361][ T9] usb 2-1: USB disconnect, device number 20 [ 350.369734][ T5822] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 350.521118][ T5822] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 350.531416][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.543721][ T5822] usb 1-1: config 0 descriptor?? [ 350.665212][ T29] audit: type=1400 audit(1737677538.408:612): avc: denied { bind } for pid=10267 comm="syz.2.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 350.689496][T10268] FAULT_INJECTION: forcing a failure. [ 350.689496][T10268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.709584][T10268] CPU: 1 UID: 0 PID: 10268 Comm: syz.2.1172 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 350.709615][T10268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 350.709624][T10268] Call Trace: [ 350.709628][T10268] [ 350.709633][T10268] dump_stack_lvl+0x16c/0x1f0 [ 350.709656][T10268] should_fail_ex+0x497/0x5b0 [ 350.709674][T10268] _copy_from_user+0x2e/0xd0 [ 350.709692][T10268] copy_msghdr_from_user+0x99/0x160 [ 350.709711][T10268] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 350.709732][T10268] ? rcu_is_watching+0x12/0xc0 [ 350.709755][T10268] ? lock_release+0x4e2/0x6f0 [ 350.709771][T10268] ? get_pid_task+0xfc/0x250 [ 350.709787][T10268] ___sys_sendmsg+0xff/0x1e0 [ 350.709804][T10268] ? get_pid_task+0x35/0x250 [ 350.709816][T10268] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.709834][T10268] ? lock_release+0x4e2/0x6f0 [ 350.709851][T10268] ? __pfx_lock_release+0x10/0x10 [ 350.709866][T10268] ? trace_lock_acquire+0x14e/0x1f0 [ 350.709892][T10268] ? __fget_files+0x206/0x3a0 [ 350.709914][T10268] __sys_sendmsg+0x16e/0x220 [ 350.709932][T10268] ? __pfx___sys_sendmsg+0x10/0x10 [ 350.709954][T10268] ? rcu_is_watching+0x12/0xc0 [ 350.709975][T10268] ? rcu_is_watching+0x12/0xc0 [ 350.709998][T10268] do_syscall_64+0xcd/0x250 [ 350.710017][T10268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.710038][T10268] RIP: 0033:0x7f41b138cd29 [ 350.710051][T10268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.710067][T10268] RSP: 002b:00007f41b217c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.710083][T10268] RAX: ffffffffffffffda RBX: 00007f41b15a5fa0 RCX: 00007f41b138cd29 [ 350.710093][T10268] RDX: 0000000000000004 RSI: 0000000020000140 RDI: 0000000000000003 [ 350.710102][T10268] RBP: 00007f41b217c090 R08: 0000000000000000 R09: 0000000000000000 [ 350.710109][T10268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.710118][T10268] R13: 0000000000000000 R14: 00007f41b15a5fa0 R15: 00007ffd655dc138 [ 350.710131][T10268] [ 350.923653][ T29] audit: type=1400 audit(1737677538.408:613): avc: denied { name_bind } for pid=10267 comm="syz.2.1172" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 350.944948][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.951998][ T29] audit: type=1400 audit(1737677538.428:614): avc: denied { node_bind } for pid=10267 comm="syz.2.1172" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 350.976669][ T46] usb 1-1: USB disconnect, device number 27 [ 351.429739][ T969] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 351.696422][ T969] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 351.707289][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.716555][ T969] usb 2-1: config 0 descriptor?? [ 351.737867][T10291] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1179'. [ 352.349724][ T969] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 352.594924][T10303] hfs: unable to load iocharset "io#harset[" [ 352.602470][ T5863] usb 2-1: USB disconnect, device number 21 [ 352.819874][ T29] audit: type=1400 audit(1737677540.558:615): avc: denied { create } for pid=10308 comm="syz.2.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 352.841474][ T29] audit: type=1400 audit(1737677540.568:616): avc: denied { setopt } for pid=10308 comm="syz.2.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 352.960014][ T969] usb 1-1: Using ep0 maxpacket: 16 [ 353.018203][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 353.046708][ T969] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 353.056665][ T969] usb 1-1: config 8 has no interface number 0 [ 353.065053][ T969] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 353.079868][ T46] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 353.104747][ T969] usb 1-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 353.146690][ T969] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 353.180855][ T969] usb 1-1: config 8 interface 39 has no altsetting 0 [ 353.212033][ T969] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 353.221340][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.231342][ T969] usb 1-1: Product: syz [ 353.249805][ T969] usb 1-1: Manufacturer: syz [ 353.250733][T10315] FAULT_INJECTION: forcing a failure. [ 353.250733][T10315] name failslab, interval 1, probability 0, space 0, times 0 [ 353.255312][ T969] usb 1-1: SerialNumber: syz [ 353.267209][T10315] CPU: 1 UID: 0 PID: 10315 Comm: syz.1.1186 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 353.267231][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 353.267240][T10315] Call Trace: [ 353.267246][T10315] [ 353.267252][T10315] dump_stack_lvl+0x16c/0x1f0 [ 353.267273][T10315] should_fail_ex+0x497/0x5b0 [ 353.267288][T10315] ? fs_reclaim_acquire+0xae/0x150 [ 353.267305][T10315] should_failslab+0xc2/0x120 [ 353.267324][T10315] __kmalloc_noprof+0xcb/0x510 [ 353.267344][T10315] tomoyo_realpath_from_path+0xb9/0x720 [ 353.267366][T10315] ? tomoyo_path_number_perm+0x235/0x590 [ 353.267390][T10315] ? tomoyo_path_number_perm+0x235/0x590 [ 353.267409][T10315] tomoyo_path_number_perm+0x248/0x590 [ 353.267426][T10315] ? tomoyo_path_number_perm+0x235/0x590 [ 353.267444][T10315] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 353.267462][T10315] ? rcu_is_watching+0x12/0xc0 [ 353.267485][T10315] ? preempt_count_add+0x76/0x150 [ 353.267504][T10315] ? __pfx_lock_release+0x10/0x10 [ 353.267520][T10315] ? trace_lock_acquire+0x14e/0x1f0 [ 353.267541][T10315] ? __fget_files+0x40/0x3a0 [ 353.267557][T10315] ? lock_acquire+0x2f/0xb0 [ 353.267571][T10315] ? __fget_files+0x40/0x3a0 [ 353.267588][T10315] ? __fget_files+0x206/0x3a0 [ 353.267604][T10315] security_file_ioctl+0x9b/0x240 [ 353.267626][T10315] __x64_sys_ioctl+0xb7/0x200 [ 353.267640][T10315] do_syscall_64+0xcd/0x250 [ 353.267657][T10315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.267675][T10315] RIP: 0033:0x7fc1c1b8cd29 [ 353.267686][T10315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.267700][T10315] RSP: 002b:00007fc1c2949038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.267714][T10315] RAX: ffffffffffffffda RBX: 00007fc1c1da5fa0 RCX: 00007fc1c1b8cd29 [ 353.267723][T10315] RDX: 0000000020000200 RSI: 00000000000089e2 RDI: 0000000000000004 [ 353.267731][T10315] RBP: 00007fc1c2949090 R08: 0000000000000000 R09: 0000000000000000 [ 353.267740][T10315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.267748][T10315] R13: 0000000000000000 R14: 00007fc1c1da5fa0 R15: 00007ffe95263f98 [ 353.267762][T10315] [ 353.267768][T10315] ERROR: Out of memory at tomoyo_realpath_from_path. [ 353.509153][ T29] audit: type=1400 audit(1737677541.248:617): avc: denied { ioctl } for pid=10314 comm="syz.1.1186" path="socket:[27313]" dev="sockfs" ino=27313 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 353.533846][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.539738][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 353.564450][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 353.627998][T10319] netlink: 'syz.2.1187': attribute type 8 has an invalid length. [ 353.901169][ T46] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 353.912698][ T46] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 353.930182][ T46] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 353.947488][ T46] usb 4-1: config 4 has no interface number 0 [ 353.955785][ T46] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 353.965629][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.973740][ T46] usb 4-1: Product: syz [ 353.977939][ T46] usb 4-1: Manufacturer: syz [ 353.982650][ T46] usb 4-1: SerialNumber: syz [ 354.120103][ T5863] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 354.139791][ T5865] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 354.207835][ T46] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 354.218870][ T46] usb 4-1: No streaming interface found for terminal 6. [ 354.233127][ T46] usb 4-1: USB disconnect, device number 23 [ 354.289707][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 354.295705][ T5863] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 354.296681][ T5865] usb 2-1: unable to get BOS descriptor or descriptor too short [ 354.312779][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.314024][ T5865] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 354.330681][ T5865] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 354.331936][ T5863] usb 3-1: config 0 descriptor?? [ 354.340212][ T5865] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 354.355888][ T5865] usb 2-1: config 4 has no interface number 0 [ 354.363639][ T5865] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 354.372984][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.381008][ T5865] usb 2-1: Product: syz [ 354.385679][ T5865] usb 2-1: Manufacturer: syz [ 354.390306][ T5865] usb 2-1: SerialNumber: syz [ 354.569056][ T5863] usb 3-1: USB disconnect, device number 15 [ 354.629879][ T5865] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 354.636275][ T5865] usb 2-1: No streaming interface found for terminal 6. [ 354.647745][ T5865] usb 2-1: USB disconnect, device number 22 [ 354.795814][ T969] ipheth 1-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 354.809104][ T969] ipheth 1-1:8.39: probe with driver ipheth failed with error -71 [ 354.821869][ T969] usb 1-1: USB disconnect, device number 28 [ 355.921779][T10347] hfs: unable to load iocharset "io#harset[" [ 356.079828][T10355] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 356.470997][T10360] FAULT_INJECTION: forcing a failure. [ 356.470997][T10360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.484192][T10360] CPU: 1 UID: 0 PID: 10360 Comm: syz.2.1197 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 356.484214][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 356.484224][T10360] Call Trace: [ 356.484228][T10360] [ 356.484234][T10360] dump_stack_lvl+0x16c/0x1f0 [ 356.484256][T10360] should_fail_ex+0x497/0x5b0 [ 356.484274][T10360] _copy_from_user+0x2e/0xd0 [ 356.484293][T10360] copy_msghdr_from_user+0x99/0x160 [ 356.484315][T10360] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 356.484356][T10360] ? rcu_is_watching+0x12/0xc0 [ 356.484379][T10360] ? lock_release+0x4e2/0x6f0 [ 356.484397][T10360] ? get_pid_task+0xfc/0x250 [ 356.484412][T10360] ___sys_sendmsg+0xff/0x1e0 [ 356.484431][T10360] ? get_pid_task+0x35/0x250 [ 356.484445][T10360] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.484465][T10360] ? lock_release+0x4e2/0x6f0 [ 356.484485][T10360] ? __pfx_lock_release+0x10/0x10 [ 356.484501][T10360] ? trace_lock_acquire+0x14e/0x1f0 [ 356.484528][T10360] ? __fget_files+0x206/0x3a0 [ 356.484549][T10360] __sys_sendmsg+0x16e/0x220 [ 356.484568][T10360] ? __pfx___sys_sendmsg+0x10/0x10 [ 356.484592][T10360] ? rcu_is_watching+0x12/0xc0 [ 356.484615][T10360] ? rcu_is_watching+0x12/0xc0 [ 356.484638][T10360] do_syscall_64+0xcd/0x250 [ 356.484658][T10360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.484680][T10360] RIP: 0033:0x7f41b138cd29 [ 356.484694][T10360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.484709][T10360] RSP: 002b:00007f41b217c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.484726][T10360] RAX: ffffffffffffffda RBX: 00007f41b15a5fa0 RCX: 00007f41b138cd29 [ 356.484736][T10360] RDX: 0000000020000000 RSI: 0000000020006040 RDI: 0000000000000003 [ 356.484746][T10360] RBP: 00007f41b217c090 R08: 0000000000000000 R09: 0000000000000000 [ 356.484755][T10360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.484764][T10360] R13: 0000000000000000 R14: 00007f41b15a5fa0 R15: 00007ffd655dc138 [ 356.484779][T10360] [ 356.499709][ T969] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 356.703279][T10365] netlink: 'syz.1.1199': attribute type 8 has an invalid length. [ 357.078969][ T969] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 357.121616][ T5863] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 357.189945][ T969] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 357.307648][ T969] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 357.348862][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.359420][T10350] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 357.368422][ T969] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 357.379653][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 357.386515][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 232, changing to 11 [ 357.435619][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57923, setting to 1024 [ 357.474920][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 357.638177][ T5863] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 357.653507][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.765750][ T5863] usb 3-1: config 0 descriptor?? [ 357.818613][T10392] FAULT_INJECTION: forcing a failure. [ 357.818613][T10392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.832459][T10392] CPU: 1 UID: 0 PID: 10392 Comm: syz.4.1208 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 357.832481][T10392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 357.832491][T10392] Call Trace: [ 357.832496][T10392] [ 357.832501][T10392] dump_stack_lvl+0x16c/0x1f0 [ 357.832524][T10392] should_fail_ex+0x497/0x5b0 [ 357.832542][T10392] _copy_from_user+0x2e/0xd0 [ 357.832560][T10392] copy_msghdr_from_user+0x99/0x160 [ 357.832582][T10392] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 357.832604][T10392] ? rcu_is_watching+0x12/0xc0 [ 357.832635][T10392] ? lock_release+0x4e2/0x6f0 [ 357.832652][T10392] ? get_pid_task+0xfc/0x250 [ 357.832667][T10392] ___sys_sendmsg+0xff/0x1e0 [ 357.832686][T10392] ? get_pid_task+0x35/0x250 [ 357.832701][T10392] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.832720][T10392] ? lock_release+0x4e2/0x6f0 [ 357.832740][T10392] ? __pfx_lock_release+0x10/0x10 [ 357.832757][T10392] ? trace_lock_acquire+0x14e/0x1f0 [ 357.832786][T10392] ? __fget_files+0x206/0x3a0 [ 357.832809][T10392] __sys_sendmsg+0x16e/0x220 [ 357.832829][T10392] ? __pfx___sys_sendmsg+0x10/0x10 [ 357.832853][T10392] ? rcu_is_watching+0x12/0xc0 [ 357.832874][T10392] ? rcu_is_watching+0x12/0xc0 [ 357.832897][T10392] do_syscall_64+0xcd/0x250 [ 357.832917][T10392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.832938][T10392] RIP: 0033:0x7fd8d098cd29 [ 357.832950][T10392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.832964][T10392] RSP: 002b:00007fd8d18bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.832981][T10392] RAX: ffffffffffffffda RBX: 00007fd8d0ba5fa0 RCX: 00007fd8d098cd29 [ 357.832990][T10392] RDX: 0000000020000000 RSI: 0000000020006040 RDI: 0000000000000003 [ 357.832999][T10392] RBP: 00007fd8d18bc090 R08: 0000000000000000 R09: 0000000000000000 [ 357.833008][T10392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.833016][T10392] R13: 0000000000000000 R14: 00007fd8d0ba5fa0 R15: 00007ffc724dc788 [ 357.833031][T10392] [ 358.344042][ T29] audit: type=1400 audit(1737677546.088:618): avc: denied { connect } for pid=10395 comm="syz.4.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 358.500382][ T5863] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input11 [ 358.703288][ T969] usb 1-1: USB disconnect, device number 29 [ 358.736581][ T5863] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 359.172767][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'. [ 359.181894][T10422] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1216'. [ 361.096862][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1221'. [ 361.105880][T10446] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1221'. [ 361.678114][ T969] usb 3-1: USB disconnect, device number 16 [ 362.146818][T10466] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1226'. [ 362.172932][T10462] FAULT_INJECTION: forcing a failure. [ 362.172932][T10462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.202836][T10462] CPU: 1 UID: 0 PID: 10462 Comm: syz.3.1225 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 362.202859][T10462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 362.202867][T10462] Call Trace: [ 362.202871][T10462] [ 362.202875][T10462] dump_stack_lvl+0x16c/0x1f0 [ 362.202894][T10462] should_fail_ex+0x497/0x5b0 [ 362.202910][T10462] _copy_from_user+0x2e/0xd0 [ 362.202925][T10462] copy_msghdr_from_user+0x99/0x160 [ 362.202943][T10462] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 362.202960][T10462] ? rcu_is_watching+0x12/0xc0 [ 362.202978][T10462] ? lock_release+0x4e2/0x6f0 [ 362.202992][T10462] ? get_pid_task+0xfc/0x250 [ 362.203004][T10462] ___sys_sendmsg+0xff/0x1e0 [ 362.203018][T10462] ? get_pid_task+0x35/0x250 [ 362.203029][T10462] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.203045][T10462] ? lock_release+0x4e2/0x6f0 [ 362.203061][T10462] ? __pfx_lock_release+0x10/0x10 [ 362.203074][T10462] ? trace_lock_acquire+0x14e/0x1f0 [ 362.203096][T10462] ? __fget_files+0x206/0x3a0 [ 362.203113][T10462] __sys_sendmsg+0x16e/0x220 [ 362.203129][T10462] ? __pfx___sys_sendmsg+0x10/0x10 [ 362.203148][T10462] ? rcu_is_watching+0x12/0xc0 [ 362.203165][T10462] ? rcu_is_watching+0x12/0xc0 [ 362.203182][T10462] do_syscall_64+0xcd/0x250 [ 362.203197][T10462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.203215][T10462] RIP: 0033:0x7fae2158cd29 [ 362.203229][T10462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.203245][T10462] RSP: 002b:00007fae2233b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.203258][T10462] RAX: ffffffffffffffda RBX: 00007fae217a5fa0 RCX: 00007fae2158cd29 [ 362.203265][T10462] RDX: 0000000000000000 RSI: 0000000020006040 RDI: 0000000000000005 [ 362.203273][T10462] RBP: 00007fae2233b090 R08: 0000000000000000 R09: 0000000000000000 [ 362.203280][T10462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.203287][T10462] R13: 0000000000000000 R14: 00007fae217a5fa0 R15: 00007ffd8c585fb8 [ 362.203300][T10462] [ 362.609713][T10472] FAULT_INJECTION: forcing a failure. [ 362.609713][T10472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.624138][T10472] CPU: 0 UID: 0 PID: 10472 Comm: syz.1.1228 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 362.624161][T10472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 362.624171][T10472] Call Trace: [ 362.624176][T10472] [ 362.624182][T10472] dump_stack_lvl+0x16c/0x1f0 [ 362.624205][T10472] should_fail_ex+0x497/0x5b0 [ 362.624224][T10472] _copy_from_user+0x2e/0xd0 [ 362.624243][T10472] copy_msghdr_from_user+0x99/0x160 [ 362.624265][T10472] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 362.624288][T10472] ? rcu_is_watching+0x12/0xc0 [ 362.624312][T10472] ? lock_release+0x4e2/0x6f0 [ 362.624330][T10472] ? get_pid_task+0xfc/0x250 [ 362.624346][T10472] ___sys_sendmsg+0xff/0x1e0 [ 362.624369][T10472] ? get_pid_task+0x35/0x250 [ 362.624384][T10472] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.624405][T10472] ? lock_release+0x4e2/0x6f0 [ 362.624427][T10472] ? __pfx_lock_release+0x10/0x10 [ 362.624444][T10472] ? trace_lock_acquire+0x14e/0x1f0 [ 362.624478][T10472] ? __fget_files+0x206/0x3a0 [ 362.624501][T10472] __sys_sendmsg+0x16e/0x220 [ 362.624522][T10472] ? __pfx___sys_sendmsg+0x10/0x10 [ 362.624546][T10472] ? rcu_is_watching+0x12/0xc0 [ 362.624570][T10472] ? rcu_is_watching+0x12/0xc0 [ 362.624595][T10472] do_syscall_64+0xcd/0x250 [ 362.624615][T10472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.624637][T10472] RIP: 0033:0x7fc1c1b8cd29 [ 362.624649][T10472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.624665][T10472] RSP: 002b:00007fc1c2949038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.624681][T10472] RAX: ffffffffffffffda RBX: 00007fc1c1da5fa0 RCX: 00007fc1c1b8cd29 [ 362.624692][T10472] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 362.624701][T10472] RBP: 00007fc1c2949090 R08: 0000000000000000 R09: 0000000000000000 [ 362.624710][T10472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.624720][T10472] R13: 0000000000000000 R14: 00007fc1c1da5fa0 R15: 00007ffe95263f98 [ 362.624735][T10472] [ 363.155234][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'. [ 363.164426][T10484] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1229'. [ 364.148479][ T5897] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 364.399677][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 364.465990][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 364.545728][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 364.547599][ T29] audit: type=1400 audit(1737677552.218:619): avc: denied { accept } for pid=10490 comm="syz.1.1235" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 364.580391][ T29] audit: type=1400 audit(1737677552.218:620): avc: denied { getattr } for pid=10490 comm="syz.1.1235" path="socket:[27606]" dev="sockfs" ino=27606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 365.135817][ T29] audit: type=1400 audit(1737677552.218:621): avc: denied { write } for pid=10490 comm="syz.1.1235" laddr=::ffff:127.0.0.1 lport=20000 faddr=::ffff:127.0.0.1 fport=58134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 365.161400][ T29] audit: type=1400 audit(1737677552.218:622): avc: denied { getopt } for pid=10490 comm="syz.1.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 365.188908][T10490] dccp_close: ABORT with 4 bytes unread [ 365.217482][ T5897] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 365.235611][ T5897] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 365.244624][ T5897] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 365.255488][ T5897] usb 5-1: config 4 has no interface number 0 [ 365.752971][T10512] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1239'. [ 365.899249][ T5897] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 365.908456][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.917109][ T5897] usb 5-1: Product: syz [ 365.919437][ T29] audit: type=1400 audit(1737677553.658:623): avc: denied { accept } for pid=10511 comm="syz.3.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.941116][ T5897] usb 5-1: Manufacturer: syz [ 365.941163][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 365.953437][ T5897] usb 5-1: SerialNumber: syz [ 365.992848][T10521] FAULT_INJECTION: forcing a failure. [ 365.992848][T10521] name failslab, interval 1, probability 0, space 0, times 0 [ 366.010076][ T29] audit: type=1400 audit(1737677553.658:624): avc: denied { write } for pid=10511 comm="syz.3.1239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 366.010645][ T5897] usb 5-1: can't set config #4, error -71 [ 366.030614][T10521] CPU: 0 UID: 0 PID: 10521 Comm: syz.4.1240 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 366.030636][T10521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 366.030645][T10521] Call Trace: [ 366.030650][T10521] [ 366.030655][T10521] dump_stack_lvl+0x16c/0x1f0 [ 366.030677][T10521] should_fail_ex+0x497/0x5b0 [ 366.030692][T10521] ? fs_reclaim_acquire+0xae/0x150 [ 366.030709][T10521] should_failslab+0xc2/0x120 [ 366.030729][T10521] __kmalloc_noprof+0xcb/0x510 [ 366.030749][T10521] tomoyo_realpath_from_path+0xb9/0x720 [ 366.030770][T10521] ? tomoyo_path_number_perm+0x235/0x590 [ 366.030788][T10521] ? tomoyo_path_number_perm+0x235/0x590 [ 366.030806][T10521] tomoyo_path_number_perm+0x248/0x590 [ 366.030823][T10521] ? tomoyo_path_number_perm+0x235/0x590 [ 366.030841][T10521] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 366.030858][T10521] ? rcu_is_watching+0x12/0xc0 [ 366.030881][T10521] ? preempt_count_add+0x76/0x150 [ 366.030900][T10521] ? __pfx_lock_release+0x10/0x10 [ 366.030915][T10521] ? trace_lock_acquire+0x14e/0x1f0 [ 366.030936][T10521] ? __fget_files+0x40/0x3a0 [ 366.030953][T10521] ? lock_acquire+0x2f/0xb0 [ 366.030967][T10521] ? __fget_files+0x40/0x3a0 [ 366.030983][T10521] ? __fget_files+0x206/0x3a0 [ 366.031000][T10521] security_file_ioctl+0x9b/0x240 [ 366.031020][T10521] __x64_sys_ioctl+0xb7/0x200 [ 366.031033][T10521] do_syscall_64+0xcd/0x250 [ 366.031050][T10521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.031070][T10521] RIP: 0033:0x7fd8d098cd29 [ 366.031081][T10521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.031094][T10521] RSP: 002b:00007fd8d18bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.031109][T10521] RAX: ffffffffffffffda RBX: 00007fd8d0ba5fa0 RCX: 00007fd8d098cd29 [ 366.031118][T10521] RDX: 0000000000000000 RSI: 00000000c0403d08 RDI: 0000000000000003 [ 366.031127][T10521] RBP: 00007fd8d18bc090 R08: 0000000000000000 R09: 0000000000000000 [ 366.031135][T10521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.031143][T10521] R13: 0000000000000000 R14: 00007fd8d0ba5fa0 R15: 00007ffc724dc788 [ 366.031162][T10521] [ 366.031167][T10521] ERROR: Out of memory at tomoyo_realpath_from_path. [ 366.307522][ T29] audit: type=1400 audit(1737677554.048:625): avc: denied { ioctl } for pid=10520 comm="syz.4.1240" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 366.335452][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 366.351483][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 366.361489][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 366.418244][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.436099][ T29] audit: type=1400 audit(1737677554.048:626): avc: denied { append } for pid=10523 comm="syz.2.1241" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 366.440054][ T5897] usb 5-1: USB disconnect, device number 23 [ 366.458952][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.460464][T10510] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 366.479876][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 366.747259][T10530] sp0: Synchronizing with TNC [ 367.756341][T10545] xt_l2tp: unknown flags: 10 [ 368.192573][T10549] hfs: unable to load iocharset "io#harset[" [ 368.236212][T10557] capability: warning: `syz.3.1251' uses 32-bit capabilities (legacy support in use) [ 368.266841][ T5897] usb 2-1: USB disconnect, device number 23 [ 368.879324][T10564] hfs: unable to load iocharset "io#harset[" [ 369.187953][T10574] loop6: detected capacity change from 0 to 8 [ 369.201715][ C0] blk_print_req_error: 6 callbacks suppressed [ 369.201731][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.217018][ C0] buffer_io_error: 6 callbacks suppressed [ 369.217039][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.237417][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.246658][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.255480][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.264621][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.273352][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.282475][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.294136][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.303323][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.313669][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.322855][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.331818][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.340975][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.348959][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.358091][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.369253][T10574] ldm_validate_partition_table(): Disk read failed. [ 369.379291][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.388444][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.396452][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.405672][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.414194][T10574] Dev loop6: unable to read RDB block 0 [ 369.421964][T10574] loop6: unable to read partition table [ 369.446471][T10574] loop6: partition table beyond EOD, truncated [ 369.475216][T10574] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 369.519687][ T5897] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 369.671130][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 369.684840][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 369.728327][ T5897] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 369.772535][ T5897] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 369.845864][ T5897] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 369.861637][ T5897] usb 1-1: config 4 has no interface number 0 [ 369.872060][ T5897] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 369.891447][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.907424][ T5897] usb 1-1: Product: syz [ 370.862367][ T5897] usb 1-1: Manufacturer: syz [ 370.866960][ T5897] usb 1-1: SerialNumber: syz [ 370.872131][ T29] audit: type=1400 audit(1737677557.768:627): avc: denied { execute } for pid=10585 comm="syz.4.1258" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 371.093346][T10605] netlink: 'syz.4.1262': attribute type 1 has an invalid length. [ 371.101920][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'. [ 371.124240][T10605] netlink: 'syz.4.1262': attribute type 1 has an invalid length. [ 371.133701][T10605] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1262'. [ 371.144754][ T5897] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 371.160078][ T5897] usb 1-1: No streaming interface found for terminal 6. [ 371.169369][ T5897] usb 1-1: USB disconnect, device number 30 [ 371.270610][ T5865] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 371.443663][ T5865] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 371.468194][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.553336][ T5865] usb 2-1: config 0 descriptor?? [ 371.785786][ T5865] usb 2-1: USB disconnect, device number 24 [ 371.844208][ T29] audit: type=1400 audit(1737677559.588:628): avc: denied { connect } for pid=10622 comm="syz.3.1268" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 372.364539][T10633] FAULT_INJECTION: forcing a failure. [ 372.364539][T10633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.382924][T10633] CPU: 1 UID: 0 PID: 10633 Comm: syz.1.1271 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 372.382951][T10633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 372.382960][T10633] Call Trace: [ 372.382965][T10633] [ 372.382971][T10633] dump_stack_lvl+0x16c/0x1f0 [ 372.382994][T10633] should_fail_ex+0x497/0x5b0 [ 372.383012][T10633] _copy_from_user+0x2e/0xd0 [ 372.383030][T10633] copy_msghdr_from_user+0x99/0x160 [ 372.383052][T10633] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 372.383073][T10633] ? rcu_is_watching+0x12/0xc0 [ 372.383096][T10633] ? lock_release+0x4e2/0x6f0 [ 372.383113][T10633] ? get_pid_task+0xfc/0x250 [ 372.383128][T10633] ___sys_sendmsg+0xff/0x1e0 [ 372.383147][T10633] ? get_pid_task+0x35/0x250 [ 372.383161][T10633] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.383180][T10633] ? lock_release+0x4e2/0x6f0 [ 372.383198][T10633] ? __pfx_lock_release+0x10/0x10 [ 372.383214][T10633] ? trace_lock_acquire+0x14e/0x1f0 [ 372.383237][T10633] ? __fget_files+0x206/0x3a0 [ 372.383255][T10633] __sys_sendmsg+0x16e/0x220 [ 372.383271][T10633] ? __pfx___sys_sendmsg+0x10/0x10 [ 372.383290][T10633] ? rcu_is_watching+0x12/0xc0 [ 372.383309][T10633] ? rcu_is_watching+0x12/0xc0 [ 372.383339][T10633] do_syscall_64+0xcd/0x250 [ 372.383356][T10633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.383373][T10633] RIP: 0033:0x7fc1c1b8cd29 [ 372.383383][T10633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.383395][T10633] RSP: 002b:00007fc1c2949038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.383408][T10633] RAX: ffffffffffffffda RBX: 00007fc1c1da5fa0 RCX: 00007fc1c1b8cd29 [ 372.383416][T10633] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 372.383423][T10633] RBP: 00007fc1c2949090 R08: 0000000000000000 R09: 0000000000000000 [ 372.383431][T10633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.383437][T10633] R13: 0000000000000000 R14: 00007fc1c1da5fa0 R15: 00007ffe95263f98 [ 372.383455][T10633] [ 372.628208][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1272'. [ 372.629662][ T29] audit: type=1400 audit(1737677560.368:629): avc: denied { write } for pid=10637 comm="syz.0.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 372.732599][ T29] audit: type=1400 audit(1737677560.468:630): avc: denied { create } for pid=10643 comm="syz.1.1274" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 373.021931][T10656] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 373.519739][ T5865] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 373.867653][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1279'. [ 373.876716][T10668] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1279'. [ 374.455787][ T5865] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 374.615543][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.635562][T10675] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1282'. [ 374.646849][ T5865] usb 2-1: config 0 descriptor?? [ 374.649908][T10675] unsupported nlmsg_type 40 [ 374.659807][ T5865] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 375.380597][ T5865] gp8psk: usb in 128 operation failed. [ 375.389172][ T5865] gp8psk: usb in 137 operation failed. [ 375.394744][ T5865] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 375.405154][ T5865] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 375.415668][ T5865] usb 2-1: USB disconnect, device number 25 [ 375.610893][ T5897] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 376.072020][ T29] audit: type=1400 audit(1737677563.818:631): avc: denied { read } for pid=10694 comm="syz.0.1288" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 376.116551][ T29] audit: type=1400 audit(1737677563.818:632): avc: denied { open } for pid=10694 comm="syz.0.1288" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 376.140692][ T29] audit: type=1400 audit(1737677563.838:633): avc: denied { ioctl } for pid=10694 comm="syz.0.1288" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 376.194097][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 376.229350][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 376.298178][ T5897] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 376.313032][ T5897] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 376.327460][ T5897] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 376.346913][ T5897] usb 5-1: config 4 has no interface number 0 [ 376.364616][ T5897] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 376.378688][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.387584][ T5897] usb 5-1: Product: syz [ 376.401242][ T5897] usb 5-1: Manufacturer: syz [ 376.405913][ T5897] usb 5-1: SerialNumber: syz [ 376.549737][ T5865] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 376.654121][ T5897] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 376.661745][ T5897] usb 5-1: No streaming interface found for terminal 6. [ 376.681053][ T5897] usb 5-1: USB disconnect, device number 24 [ 376.709737][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 376.716469][ T5865] usb 1-1: unable to get BOS descriptor or descriptor too short [ 376.726420][ T5865] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 376.737089][ T5865] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 376.746358][ T5865] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 376.761407][ T5865] usb 1-1: config 4 has no interface number 0 [ 376.771210][ T5865] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 376.780335][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.789476][ T5865] usb 1-1: Product: syz [ 376.794672][ T1045] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.805757][ T5865] usb 1-1: Manufacturer: syz [ 376.810618][ T5865] usb 1-1: SerialNumber: syz [ 377.198116][ T5865] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 377.209760][ T5865] usb 1-1: No streaming interface found for terminal 6. [ 377.224574][ T5865] usb 1-1: USB disconnect, device number 31 [ 377.246876][ T1045] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.390226][ T5136] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.398018][ T5136] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.418473][ T1045] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.436871][ T5136] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.449887][ T5136] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.263441][ T5136] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 378.270779][ T5136] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.161646][ T29] audit: type=1400 audit(1737677566.888:634): avc: denied { mounton } for pid=10714 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 379.223881][ T1045] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.436750][ T5897] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 379.559652][ T5866] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 379.601315][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 379.634796][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 379.667249][ T5897] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 379.717450][ T5897] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 379.728914][ T1045] bridge_slave_1: left allmulticast mode [ 379.736682][ T5897] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 379.750948][ T1045] bridge_slave_1: left promiscuous mode [ 379.751779][ T5897] usb 1-1: config 4 has no interface number 0 [ 379.757040][ T1045] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.771840][ T1045] bridge_slave_0: left promiscuous mode [ 379.772483][ T5866] usb 3-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 379.777968][ T5897] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 379.795891][ T1045] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.796633][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.803668][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.819458][ T5897] usb 1-1: Product: syz [ 379.820734][ T5866] usb 3-1: Product: syz [ 379.823932][ T5897] usb 1-1: Manufacturer: syz [ 379.833346][ T5866] usb 3-1: Manufacturer: syz [ 379.834226][ T5897] usb 1-1: SerialNumber: syz [ 379.838926][ T5866] usb 3-1: SerialNumber: syz [ 379.850853][ T5866] usb 3-1: config 0 descriptor?? [ 379.857756][ T5866] gspca_main: kinect-2.14.0 probing 045e:02bf [ 379.891224][ T46] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 379.947717][T10746] Bluetooth: MGMT ver 1.23 [ 379.982246][ T1045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.992645][ T1045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.001904][ T1045] bond0 (unregistering): Released all slaves [ 380.011563][T10714] chnl_net:caif_netlink_parms(): no params data found [ 380.037095][T10714] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.046054][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.053176][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 380.058695][T10714] bridge_slave_0: entered allmulticast mode [ 380.066625][ T46] usb 5-1: unable to get BOS descriptor or descriptor too short [ 380.074886][T10714] bridge_slave_0: entered promiscuous mode [ 380.083058][ T5897] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 380.086670][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.097571][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.104877][T10714] bridge_slave_1: entered allmulticast mode [ 380.111522][T10714] bridge_slave_1: entered promiscuous mode [ 380.118828][ T46] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 380.127350][ T5897] usb 1-1: No streaming interface found for terminal 6. [ 380.134409][ T46] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 380.146032][ T5897] usb 1-1: USB disconnect, device number 32 [ 380.152012][ T46] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 380.163829][ T46] usb 5-1: config 4 has no interface number 0 [ 380.166099][T10714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.173228][ T46] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 380.188429][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.196589][ T46] usb 5-1: Product: syz [ 380.201042][ T46] usb 5-1: Manufacturer: syz [ 380.205696][ T46] usb 5-1: SerialNumber: syz [ 380.213189][T10714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.231035][T10714] team0: Port device team_slave_0 added [ 380.237565][T10714] team0: Port device team_slave_1 added [ 380.252751][T10714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.260092][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.286236][T10714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.438271][ T46] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 380.445207][ T46] usb 5-1: No streaming interface found for terminal 6. [ 380.454106][ T46] usb 5-1: USB disconnect, device number 25 [ 380.631579][ T46] usb 3-1: USB disconnect, device number 17 [ 381.290859][ T5136] Bluetooth: hci2: command tx timeout [ 381.787807][T10769] hfs: unable to load iocharset "io#harset[" [ 382.180187][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 382.330777][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 382.339875][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.348469][ T9] usb 1-1: config 0 descriptor?? [ 383.359780][ T5136] Bluetooth: hci2: command tx timeout [ 385.439737][ T5136] Bluetooth: hci2: command tx timeout [ 387.519735][ T5136] Bluetooth: hci2: command tx timeout [ 395.888384][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 395.896041][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 395.904467][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.911667][ T5816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 395.911898][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.921563][ T5816] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 395.926433][ T5815] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 395.933032][ T5816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 395.940009][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 395.947135][ T5816] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 395.961025][ T5816] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 395.968184][ T5816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 396.907627][ T5829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 396.914886][ T5829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 396.922273][ T5829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 396.922480][ T5815] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 396.929711][ T5829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 396.939085][ T5815] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 396.944158][ T5829] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 396.951933][ T5815] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 396.957907][ T5829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 396.973650][ T5816] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 396.981061][ T5816] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 396.988184][ T5816] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 397.999846][ T5816] Bluetooth: hci5: command tx timeout [ 398.000599][ T5136] Bluetooth: hci6: command tx timeout [ 399.039801][ T5816] Bluetooth: hci7: command tx timeout [ 399.039800][ T5136] Bluetooth: hci8: command tx timeout [ 400.079784][ T5816] Bluetooth: hci5: command tx timeout [ 400.081531][ T5136] Bluetooth: hci6: command tx timeout [ 401.119859][ T5136] Bluetooth: hci8: command tx timeout [ 401.119864][ T5816] Bluetooth: hci7: command tx timeout [ 402.159708][ T5816] Bluetooth: hci5: command tx timeout [ 402.159774][ T5136] Bluetooth: hci6: command tx timeout [ 403.199722][ T5136] Bluetooth: hci8: command tx timeout [ 403.209807][ T5136] Bluetooth: hci7: command tx timeout [ 404.239757][ T5136] Bluetooth: hci5: command tx timeout [ 404.241667][ T5816] Bluetooth: hci6: command tx timeout [ 405.279893][ T5816] Bluetooth: hci7: command tx timeout [ 405.279898][ T5136] Bluetooth: hci8: command tx timeout [ 437.427994][ T5816] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 437.435738][ T5816] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 437.442939][ T5816] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 437.450337][ T5816] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 437.457611][ T5816] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 437.464882][ T5816] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 439.519782][ T5816] Bluetooth: hci9: command tx timeout [ 441.599652][ T5816] Bluetooth: hci9: command tx timeout [ 443.679726][ T5816] Bluetooth: hci9: command tx timeout [ 445.760243][ T5816] Bluetooth: hci9: command tx timeout [ 455.976056][ T5136] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 455.983510][ T5136] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 455.991174][ T5136] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 455.991798][ T5815] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 455.998458][ T5136] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 456.006323][ T5815] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 456.013159][ T5136] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 456.020535][ T5815] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 456.027827][ T5136] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 456.034846][ T5815] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 456.049635][ T5136] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 456.056934][ T5136] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 456.967454][ T5829] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 456.974069][ T5816] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 456.974740][ T5829] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 456.983098][ T5816] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 456.989482][ T5829] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 456.996463][ T5816] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 457.003705][ T5829] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 457.011816][ T5816] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 457.017716][ T5829] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 457.024738][ T5816] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 457.031582][ T5829] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 457.040474][ T5816] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 458.079671][ T5816] Bluetooth: hci10: command tx timeout [ 458.080667][ T5815] Bluetooth: hci11: command tx timeout [ 459.119741][ T5815] Bluetooth: hci13: command tx timeout [ 459.119768][ T5816] Bluetooth: hci12: command tx timeout [ 460.159791][ T5816] Bluetooth: hci11: command tx timeout [ 460.161397][ T5815] Bluetooth: hci10: command tx timeout [ 461.199708][ T5815] Bluetooth: hci12: command tx timeout [ 461.199731][ T5816] Bluetooth: hci13: command tx timeout [ 462.239763][ T5816] Bluetooth: hci10: command tx timeout [ 462.239779][ T5815] Bluetooth: hci11: command tx timeout [ 463.279718][ T5816] Bluetooth: hci12: command tx timeout [ 463.279896][ T5815] Bluetooth: hci13: command tx timeout [ 464.319774][ T5815] Bluetooth: hci11: command tx timeout [ 464.320742][ T5816] Bluetooth: hci10: command tx timeout [ 465.359734][ T5815] Bluetooth: hci13: command tx timeout [ 465.365242][ T5816] Bluetooth: hci12: command tx timeout [ 497.694387][ T5815] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 497.701973][ T5815] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 497.709229][ T5815] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 497.716782][ T5815] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 497.724480][ T5815] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 497.732320][ T5815] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 499.759665][ T5816] Bluetooth: hci14: command tx timeout [ 501.839709][ T5816] Bluetooth: hci14: command tx timeout [ 503.200519][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 503.919666][ T5815] Bluetooth: hci14: command tx timeout [ 505.999753][ T5815] Bluetooth: hci14: command tx timeout [ 516.262511][ T5816] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 516.269872][ T5816] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 516.277074][ T5816] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 516.284228][ T5816] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 516.285373][T10818] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 516.291673][ T5816] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 516.299955][T10818] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 516.306803][ T5816] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 516.314528][T10818] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 516.319947][ T5816] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 516.326998][T10818] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 516.341249][T10818] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 517.252640][ T5816] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 517.260813][ T5816] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 517.268063][ T5816] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 517.284536][T10825] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 517.291926][T10825] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 517.294888][T10826] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 517.299195][T10825] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 517.306570][T10826] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 517.315239][T10825] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 517.320794][T10826] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 517.327707][T10825] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 517.341844][T10825] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 518.399688][ T5816] Bluetooth: hci16: command tx timeout [ 518.399782][T10825] Bluetooth: hci15: command tx timeout [ 518.560596][T10825] Bluetooth: hci6: command 0x0406 tx timeout [ 518.560619][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 519.359728][T10818] Bluetooth: hci17: command tx timeout [ 519.359750][ T5815] Bluetooth: hci18: command tx timeout [ 520.479759][ T5815] Bluetooth: hci16: command tx timeout [ 520.480729][T10818] Bluetooth: hci15: command tx timeout [ 521.439778][T10818] Bluetooth: hci17: command tx timeout [ 521.439783][ T5815] Bluetooth: hci18: command tx timeout [ 522.559709][ T5816] Bluetooth: hci16: command tx timeout [ 522.559716][T10825] Bluetooth: hci15: command tx timeout [ 523.519722][T10825] Bluetooth: hci18: command tx timeout [ 523.520064][ T5816] Bluetooth: hci17: command tx timeout [ 523.679692][ T5816] Bluetooth: hci7: command 0x0406 tx timeout [ 523.679696][T10825] Bluetooth: hci8: command 0x0406 tx timeout [ 524.639686][ T5815] Bluetooth: hci15: command tx timeout [ 524.639703][T10818] Bluetooth: hci16: command tx timeout [ 525.599761][ T5815] Bluetooth: hci17: command tx timeout [ 525.600781][T10818] Bluetooth: hci18: command tx timeout [ 534.399701][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 534.407196][ T30] Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 534.414713][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 534.423403][ T30] task:kworker/0:0 state:D stack:22472 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 534.433601][ T30] Workqueue: events disconnect_work [ 534.438802][ T30] Call Trace: [ 534.442074][ T30] [ 534.444978][ T30] __schedule+0x1142/0x5b60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 534.449456][ T30] ? __pfx_bpf_trace_run2+0x10/0x10 [ 534.454706][ T30] ? rcu_is_watching+0x12/0xc0 [ 534.461068][ T30] ? __pfx___schedule+0x10/0x10 [ 534.466162][ T30] ? lock_release+0x4e2/0x6f0 [ 534.470980][ T30] ? schedule+0x298/0x350 [ 534.475309][ T30] ? __pfx_lock_release+0x10/0x10 [ 534.481079][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 534.486467][ T30] ? rcu_is_watching+0x12/0xc0 [ 534.491279][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 534.497280][ T30] schedule+0xe7/0x350 [ 534.501817][ T30] schedule_preempt_disabled+0x13/0x30 [ 534.507568][ T30] __mutex_lock+0x6bd/0xb10 [ 534.512117][ T30] ? disconnect_work+0xa0/0x2a0 [ 534.516966][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 534.522006][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 534.527970][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 534.533943][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 534.539832][ T30] ? disconnect_work+0xa0/0x2a0 [ 534.544657][ T30] disconnect_work+0xa0/0x2a0 [ 534.549313][ T30] process_one_work+0x9c5/0x1ba0 [ 534.554246][ T30] ? __pfx_process_one_work+0x10/0x10 [ 534.559633][ T30] ? rcu_is_watching+0x12/0xc0 [ 534.564893][ T30] ? assign_work+0x1a0/0x250 [ 534.569498][ T30] worker_thread+0x6c8/0xf00 [ 534.574089][ T30] ? __pfx_worker_thread+0x10/0x10 [ 534.579170][ T30] kthread+0x3af/0x750 [ 534.583273][ T30] ? __pfx_kthread+0x10/0x10 [ 534.587841][ T30] ? lock_acquire+0x2f/0xb0 [ 534.592347][ T30] ? __pfx_kthread+0x10/0x10 [ 534.596905][ T30] ret_from_fork+0x45/0x80 [ 534.601308][ T30] ? __pfx_kthread+0x10/0x10 [ 534.605868][ T30] ret_from_fork_asm+0x1a/0x30 [ 534.610677][ T30] [ 534.613749][ T30] INFO: task kworker/u8:5:1045 blocked for more than 143 seconds. [ 534.621663][ T30] Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 534.628913][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 534.637588][ T30] task:kworker/u8:5 state:D stack:23936 pid:1045 tgid:1045 ppid:2 flags:0x00004000 [ 534.647747][ T30] Workqueue: netns cleanup_net [ 534.652515][ T30] Call Trace: [ 534.655768][ T30] [ 534.658670][ T30] __schedule+0x1142/0x5b60 [ 534.663172][ T30] ? __switch_to+0x749/0x1190 [ 534.668180][ T30] ? rcu_is_watching+0x12/0xc0 [ 534.673024][ T30] ? synchronize_rcu_expedited+0x424/0x450 [ 534.678842][ T30] ? trace_sched_wakeup+0xe8/0x140 [ 534.683985][ T30] ? __pfx___schedule+0x10/0x10 [ 534.688826][ T30] ? lock_release+0x4e2/0x6f0 [ 534.693582][ T30] ? schedule+0x298/0x350 [ 534.697888][ T30] ? __pfx_lock_release+0x10/0x10 [ 534.702910][ T30] ? __mutex_trylock_common+0x78/0x250 [ 534.708341][ T30] ? schedule+0x1fd/0x350 [ 534.712699][ T30] ? lock_acquire+0x2f/0xb0 [ 534.717196][ T30] ? schedule+0x1fd/0x350 [ 534.721530][ T30] schedule+0xe7/0x350 [ 534.725569][ T30] schedule_preempt_disabled+0x13/0x30 [ 534.731034][ T30] __mutex_lock+0x6bd/0xb10 [ 534.735516][ T30] ? unregister_netdevice_many_notify+0x1a51/0x21a0 [ 534.742107][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 534.747104][ T30] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 534.752386][ T30] ? __pfx___might_resched+0x10/0x10 [ 534.757645][ T30] ? unregister_netdevice_many_notify+0x959/0x21a0 [ 534.764141][ T30] ? unregister_netdevice_many_notify+0x1a51/0x21a0 [ 534.771083][ T30] unregister_netdevice_many_notify+0x1a51/0x21a0 [ 534.777503][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 534.784268][ T30] ? rcu_is_watching+0x12/0xc0 [ 534.789004][ T30] ? lock_release+0x4e2/0x6f0 [ 534.793675][ T30] ? kernfs_remove_by_name_ns+0xc4/0x130 [ 534.799290][ T30] ? __pfx_lock_release+0x10/0x10 [ 534.804350][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 534.810342][ T30] unregister_netdevice_queue+0x307/0x3f0 [ 534.816072][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 534.822334][ T30] _cfg80211_unregister_wdev+0x64b/0x830 [ 534.827963][ T30] ieee80211_remove_interfaces+0x34f/0x720 [ 534.833798][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 534.840142][ T30] ieee80211_unregister_hw+0x55/0x3a0 [ 534.845486][ T30] hwsim_exit_net+0x3ad/0x7d0 [ 534.850176][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 534.855361][ T30] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 534.860724][ T30] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 534.866417][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 534.871963][ T30] ops_exit_list+0xb0/0x180 [ 534.876464][ T30] cleanup_net+0x5c6/0xbf0 [ 534.880891][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 534.885801][ T30] ? lock_acquire+0x2f/0xb0 [ 534.890309][ T30] ? process_one_work+0x921/0x1ba0 [ 534.895408][ T30] process_one_work+0x9c5/0x1ba0 [ 534.900347][ T30] ? __pfx_process_one_work+0x10/0x10 [ 534.905701][ T30] ? rcu_is_watching+0x12/0xc0 [ 534.910554][ T30] ? assign_work+0x1a0/0x250 [ 534.915141][ T30] worker_thread+0x6c8/0xf00 [ 534.919727][ T30] ? __pfx_worker_thread+0x10/0x10 [ 534.924811][ T30] kthread+0x3af/0x750 [ 534.928849][ T30] ? __pfx_kthread+0x10/0x10 [ 534.933431][ T30] ? lock_acquire+0x2f/0xb0 [ 534.937908][ T30] ? __pfx_kthread+0x10/0x10 [ 534.942523][ T30] ret_from_fork+0x45/0x80 [ 534.946916][ T30] ? __pfx_kthread+0x10/0x10 [ 534.951518][ T30] ret_from_fork_asm+0x1a/0x30 [ 534.956277][ T30] [ 534.959335][ T30] INFO: task kworker/u8:10:6407 blocked for more than 143 seconds. [ 534.967267][ T30] Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 534.974878][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 534.983562][ T30] task:kworker/u8:10 state:D stack:23840 pid:6407 tgid:6407 ppid:2 flags:0x00004000 [ 534.994166][ T30] Workqueue: events_unbound linkwatch_event [ 535.000069][ T30] Call Trace: [ 535.003324][ T30] [ 535.006235][ T30] __schedule+0x1142/0x5b60 [ 535.010751][ T30] ? rcu_is_watching+0x12/0xc0 [ 535.015532][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 535.020609][ T30] ? __pfx___schedule+0x10/0x10 [ 535.025434][ T30] ? lock_release+0x4e2/0x6f0 [ 535.030129][ T30] ? schedule+0x298/0x350 [ 535.034442][ T30] ? __pfx_lock_release+0x10/0x10 [ 535.039438][ T30] ? __mutex_trylock_common+0x78/0x250 [ 535.044944][ T30] ? schedule+0x1fd/0x350 [ 535.049250][ T30] ? lock_acquire+0x2f/0xb0 [ 535.053781][ T30] ? schedule+0x1fd/0x350 [ 535.058095][ T30] schedule+0xe7/0x350 [ 535.062173][ T30] schedule_preempt_disabled+0x13/0x30 [ 535.067624][ T30] __mutex_lock+0x6bd/0xb10 [ 535.072150][ T30] ? __pfx_lock_release+0x10/0x10 [ 535.077530][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 535.082926][ T30] ? linkwatch_event+0x51/0xc0 [ 535.087667][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 535.092700][ T30] ? lock_release+0x4e2/0x6f0 [ 535.097349][ T30] ? process_one_work+0x813/0x1ba0 [ 535.102448][ T30] ? rcu_is_watching+0x12/0xc0 [ 535.107201][ T30] ? linkwatch_event+0x51/0xc0 [ 535.111963][ T30] linkwatch_event+0x51/0xc0 [ 535.116534][ T30] ? __pfx_linkwatch_event+0x10/0x10 [ 535.121807][ T30] ? rcu_is_watching+0x12/0xc0 [ 535.126552][ T30] process_one_work+0x9c5/0x1ba0 [ 535.131534][ T30] ? __pfx_process_one_work+0x10/0x10 [ 535.136887][ T30] ? rcu_is_watching+0x12/0xc0 [ 535.141641][ T30] ? assign_work+0x1a0/0x250 [ 535.146199][ T30] worker_thread+0x6c8/0xf00 [ 535.150801][ T30] ? __kthread_parkme+0x148/0x220 [ 535.155817][ T30] ? __pfx_worker_thread+0x10/0x10 [ 535.160916][ T30] kthread+0x3af/0x750 [ 535.164956][ T30] ? __pfx_kthread+0x10/0x10 [ 535.169517][ T30] ? lock_acquire+0x2f/0xb0 [ 535.174017][ T30] ? rcu_is_watching+0x12/0xc0 [ 535.179099][ T30] ? __pfx_kthread+0x10/0x10 [ 535.183741][ T30] ret_from_fork+0x45/0x80 [ 535.188152][ T30] ? __pfx_kthread+0x10/0x10 [ 535.192765][ T30] ret_from_fork_asm+0x1a/0x30 [ 535.197525][ T30] [ 535.200575][ T30] INFO: task syz-executor:10714 blocked for more than 144 seconds. [ 535.208442][ T30] Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 535.215784][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.224441][ T30] task:syz-executor state:D stack:23808 pid:10714 tgid:10714 ppid:1 flags:0x00000004 [ 535.234609][ T30] Call Trace: [ 535.237874][ T30] [ 535.240851][ T30] __schedule+0x1142/0x5b60 [ 535.245329][ T30] ? rcu_is_watching+0x12/0xc0 [ 535.250105][ T30] ? avc_has_perm_noaudit+0x119/0x3a0 [ 535.255463][ T30] ? __pfx___schedule+0x10/0x10 [ 535.260301][ T30] ? lock_release+0x4e2/0x6f0 [ 535.264948][ T30] ? schedule+0x298/0x350 [ 535.269251][ T30] ? __pfx_lock_release+0x10/0x10 [ 535.274284][ T30] ? __mutex_trylock_common+0x78/0x250 [ 535.280365][ T30] ? schedule+0x1fd/0x350 [ 535.284697][ T30] ? lock_acquire+0x2f/0xb0 [ 535.289171][ T30] ? schedule+0x1fd/0x350 [ 535.293493][ T30] schedule+0xe7/0x350 [ 535.297540][ T30] schedule_preempt_disabled+0x13/0x30 [ 535.303020][ T30] __mutex_lock+0x6bd/0xb10 [ 535.307516][ T30] ? rcu_is_watching+0x12/0xc0 [ 535.312270][ T30] ? rtnl_newlink+0x5d9/0x1d60 [ 535.317006][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 535.322023][ T30] ? cap_capable+0xb3/0x250 [ 535.326528][ T30] ? ns_capable+0xd7/0x110 [ 535.330932][ T30] ? rtnl_newlink+0x5d9/0x1d60 [ 535.335666][ T30] rtnl_newlink+0x5d9/0x1d60 [ 535.340248][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 535.345252][ T30] ? avc_has_perm_noaudit+0x143/0x3a0 [ 535.350692][ T30] ? cred_has_capability.isra.0+0x192/0x2f0 [ 535.356560][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 535.362933][ T30] ? rcu_is_watching+0x12/0xc0 [ 535.367722][ T30] ? rcu_is_watching+0x12/0xc0 [ 535.372913][ T30] ? lock_release+0x4e2/0x6f0 [ 535.377579][ T30] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 535.383014][ T30] ? __pfx_lock_release+0x10/0x10 [ 535.388051][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 535.393334][ T30] ? bpf_lsm_capable+0x9/0x10 [ 535.398008][ T30] ? security_capable+0x7e/0x260 [ 535.402959][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 535.408059][ T30] ? lock_acquire+0x2f/0xb0 [ 535.412569][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 535.417664][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 535.422723][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 535.427651][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 535.433125][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 535.438146][ T30] netlink_rcv_skb+0x16b/0x440 [ 535.442937][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 535.448378][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 535.453703][ T30] ? lock_release+0x4e2/0x6f0 [ 535.458401][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 535.463687][ T30] netlink_unicast+0x53c/0x7f0 [ 535.468421][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 535.473724][ T30] netlink_sendmsg+0x8b8/0xd70 [ 535.478488][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.484039][ T30] __sys_sendto+0x488/0x4f0 [ 535.488567][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 535.493624][ T30] ? __fput+0x686/0xb60 [ 535.497760][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 535.502526][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 535.508493][ T30] do_syscall_64+0xcd/0x250 [ 535.513000][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.518867][ T30] RIP: 0033:0x7fad0158ebbc [ 535.523403][ T30] RSP: 002b:00007ffeaaedc610 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 535.531927][ T30] RAX: ffffffffffffffda RBX: 00007fad022d4620 RCX: 00007fad0158ebbc [ 535.539896][ T30] RDX: 0000000000000028 RSI: 00007fad022d4670 RDI: 0000000000000003 [ 535.547838][ T30] RBP: 0000000000000000 R08: 00007ffeaaedc664 R09: 000000000000000c [ 535.555804][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 535.563772][ T30] R13: 0000000000000000 R14: 00007fad022d4670 R15: 0000000000000000 [ 535.571739][ T30] [ 535.574751][ T30] INFO: task syz.2.1305:10753 blocked for more than 144 seconds. [ 535.582496][ T30] Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 535.590077][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.598727][ T30] task:syz.2.1305 state:D stack:26904 pid:10753 tgid:10752 ppid:5819 flags:0x00000004 [ 535.609622][ T30] Call Trace: [ 535.612896][ T30] [ 535.615818][ T30] __schedule+0x1142/0x5b60 [ 535.620360][ T30] ? rcu_is_watching+0x12/0xc0 [ 535.625111][ T30] ? rcu_is_watching+0x12/0xc0 [ 535.629897][ T30] ? avc_has_perm_noaudit+0x119/0x3a0 [ 535.635250][ T30] ? __pfx___schedule+0x10/0x10 [ 535.640109][ T30] ? lock_release+0x4e2/0x6f0 [ 535.644774][ T30] ? schedule+0x298/0x350 [ 535.649087][ T30] ? __pfx_lock_release+0x10/0x10 [ 535.654106][ T30] ? __mutex_trylock_common+0x78/0x250 [ 535.659580][ T30] ? schedule+0x1fd/0x350 [ 535.663895][ T30] ? lock_acquire+0x2f/0xb0 [ 535.668368][ T30] ? schedule+0x1fd/0x350 [ 535.672690][ T30] schedule+0xe7/0x350 [ 535.676729][ T30] schedule_preempt_disabled+0x13/0x30 [ 535.682208][ T30] __mutex_lock+0x6bd/0xb10 [ 535.686702][ T30] ? rcu_is_watching+0x12/0xc0 [ 535.691695][ T30] ? rtnl_newlink+0x5d9/0x1d60 [ 535.696557][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 535.701606][ T30] ? cap_capable+0xb3/0x250 [ 535.706092][ T30] ? ns_capable+0xd7/0x110 [ 535.710524][ T30] ? rtnl_newlink+0x5d9/0x1d60 [ 535.715280][ T30] rtnl_newlink+0x5d9/0x1d60 [ 535.719875][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 535.724870][ T30] ? avc_has_perm_noaudit+0x143/0x3a0 [ 535.730253][ T30] ? rcu_is_watching+0x12/0xc0 [ 535.735009][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 535.741011][ T30] ? rcu_is_watching+0x12/0xc0 [ 535.745766][ T30] ? lock_release+0x4e2/0x6f0 [ 535.750458][ T30] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 535.755568][ T30] ? __pfx_lock_release+0x10/0x10 [ 535.760600][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 535.765773][ T30] ? bpf_lsm_capable+0x9/0x10 [ 535.770440][ T30] ? security_capable+0x7e/0x260 [ 535.775361][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 535.780489][ T30] ? lock_acquire+0x2f/0xb0 [ 535.785415][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 535.790795][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 535.795820][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 535.800765][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 535.806198][ T30] netlink_rcv_skb+0x16b/0x440 [ 535.810965][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 535.816394][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 535.821676][ T30] ? lock_release+0x4e2/0x6f0 [ 535.826336][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 535.831628][ T30] netlink_unicast+0x53c/0x7f0 [ 535.836373][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 535.841657][ T30] netlink_sendmsg+0x8b8/0xd70 [ 535.846394][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.851675][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 535.856408][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 535.861857][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.867113][ T30] ___sys_sendmsg+0x135/0x1e0 [ 535.871816][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.877005][ T30] ? __pfx_lock_release+0x10/0x10 [ 535.882024][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 535.887197][ T30] ? __fget_files+0x206/0x3a0 [ 535.891862][ T30] __sys_sendmsg+0x16e/0x220 [ 535.896685][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 535.901818][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 535.906728][ T30] ? rcu_is_watching+0x12/0xc0 [ 535.911495][ T30] ? rcu_is_watching+0x12/0xc0 [ 535.916231][ T30] do_syscall_64+0xcd/0x250 [ 535.920745][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.926611][ T30] RIP: 0033:0x7f41b138cd29 [ 535.931017][ T30] RSP: 002b:00007f41b217c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.939403][ T30] RAX: ffffffffffffffda RBX: 00007f41b15a5fa0 RCX: 00007f41b138cd29 [ 535.947379][ T30] RDX: 0000000020000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 535.955372][ T30] RBP: 00007f41b140e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 535.963368][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.971339][ T30] R13: 0000000000000000 R14: 00007f41b15a5fa0 R15: 00007ffd655dc138 [ 535.979285][ T30] [ 535.982322][ T30] INFO: task syz.3.1306:10758 blocked for more than 144 seconds. [ 535.990040][ T30] Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 535.997516][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.006212][ T30] task:syz.3.1306 state:D stack:27432 pid:10758 tgid:10755 ppid:5821 flags:0x00004004 [ 536.016441][ T30] Call Trace: [ 536.019737][ T30] [ 536.022656][ T30] __schedule+0x1142/0x5b60 [ 536.027134][ T30] ? finish_task_switch.isra.0+0x217/0xcc0 [ 536.032940][ T30] ? rcu_is_watching+0x12/0xc0 [ 536.037694][ T30] ? __pfx___schedule+0x10/0x10 [ 536.042573][ T30] ? lock_release+0x4e2/0x6f0 [ 536.047234][ T30] ? schedule+0x298/0x350 [ 536.051570][ T30] ? __pfx_lock_release+0x10/0x10 [ 536.056594][ T30] ? __mutex_trylock_common+0x78/0x250 [ 536.062084][ T30] ? schedule+0x1fd/0x350 [ 536.066395][ T30] ? lock_acquire+0x2f/0xb0 [ 536.070891][ T30] ? schedule+0x1fd/0x350 [ 536.075211][ T30] schedule+0xe7/0x350 [ 536.079251][ T30] schedule_preempt_disabled+0x13/0x30 [ 536.084702][ T30] __mutex_lock+0x6bd/0xb10 [ 536.089178][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 536.095700][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 536.101035][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 536.106055][ T30] ? rcu_is_watching+0x12/0xc0 [ 536.110825][ T30] ? lock_release+0x4e2/0x6f0 [ 536.115476][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 536.120694][ T30] ? bpf_lsm_capable+0x9/0x10 [ 536.125349][ T30] ? security_capable+0x7e/0x260 [ 536.130305][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 536.135415][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 536.140542][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 536.145474][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 536.150953][ T30] ? __pfx___schedule+0x10/0x10 [ 536.155783][ T30] netlink_rcv_skb+0x16b/0x440 [ 536.160569][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 536.166019][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 536.171331][ T30] ? rcu_is_watching+0x12/0xc0 [ 536.176093][ T30] netlink_unicast+0x53c/0x7f0 [ 536.180853][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 536.186108][ T30] netlink_sendmsg+0x8b8/0xd70 [ 536.190862][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.196119][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 536.201181][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 536.206634][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.211922][ T30] ? try_to_wake_up+0x953/0x1490 [ 536.216831][ T30] ___sys_sendmsg+0x135/0x1e0 [ 536.221500][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.226670][ T30] ? __pfx_lock_release+0x10/0x10 [ 536.231688][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 536.236862][ T30] ? __fget_files+0x206/0x3a0 [ 536.241611][ T30] __sys_sendmsg+0x16e/0x220 [ 536.246192][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 536.251297][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 536.256207][ T30] ? rcu_is_watching+0x12/0xc0 [ 536.260963][ T30] ? rcu_is_watching+0x12/0xc0 [ 536.265711][ T30] do_syscall_64+0xcd/0x250 [ 536.270233][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.276120][ T30] RIP: 0033:0x7fae2158cd29 [ 536.280529][ T30] RSP: 002b:00007fae1f3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.288909][ T30] RAX: ffffffffffffffda RBX: 00007fae217a6160 RCX: 00007fae2158cd29 [ 536.296905][ T30] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000007 [ 536.305127][ T30] RBP: 00007fae2160e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 536.313108][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.321375][ T30] R13: 0000000000000000 R14: 00007fae217a6160 R15: 00007ffd8c585fb8 [ 536.329359][ T30] [ 536.332428][ T30] INFO: task syz.4.1307:10761 blocked for more than 145 seconds. [ 536.340191][ T30] Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 536.347468][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.356129][ T30] task:syz.4.1307 state:D stack:29104 pid:10761 tgid:10760 ppid:5811 flags:0x00000004 [ 536.366303][ T30] Call Trace: [ 536.369583][ T30] [ 536.372510][ T30] __schedule+0x1142/0x5b60 [ 536.377003][ T30] ? __pfx_lock_release+0x10/0x10 [ 536.382020][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 536.387194][ T30] ? __pfx___schedule+0x10/0x10 [ 536.392049][ T30] ? lock_release+0x4e2/0x6f0 [ 536.396696][ T30] ? schedule+0x298/0x350 [ 536.401146][ T30] ? __pfx_lock_release+0x10/0x10 [ 536.406469][ T30] ? __mutex_trylock_common+0x78/0x250 [ 536.411985][ T30] ? schedule+0x1fd/0x350 [ 536.416336][ T30] ? lock_acquire+0x2f/0xb0 [ 536.420861][ T30] ? schedule+0x1fd/0x350 [ 536.425178][ T30] schedule+0xe7/0x350 [ 536.429216][ T30] schedule_preempt_disabled+0x13/0x30 [ 536.434670][ T30] __mutex_lock+0x6bd/0xb10 [ 536.439144][ T30] ? __tun_chr_ioctl+0x4e7/0x4b80 [ 536.444163][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 536.449158][ T30] ? __pfx_lock_release+0x10/0x10 [ 536.454179][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 536.459350][ T30] ? __might_fault+0xe3/0x190 [ 536.464026][ T30] ? __might_fault+0xe3/0x190 [ 536.468691][ T30] ? __tun_chr_ioctl+0x4e7/0x4b80 [ 536.473728][ T30] ? rtnl_lock+0x9/0x20 [ 536.477859][ T30] __tun_chr_ioctl+0x4e7/0x4b80 [ 536.482702][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 536.487977][ T30] ? selinux_file_ioctl+0x180/0x270 [ 536.493231][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 536.498326][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 536.503437][ T30] __x64_sys_ioctl+0x190/0x200 [ 536.508390][ T30] do_syscall_64+0xcd/0x250 [ 536.512902][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.518768][ T30] RIP: 0033:0x7fd8d098cd29 [ 536.523180][ T30] RSP: 002b:00007fd8d18bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.531587][ T30] RAX: ffffffffffffffda RBX: 00007fd8d0ba5fa0 RCX: 00007fd8d098cd29 [ 536.539557][ T30] RDX: 0000000020000200 RSI: 00000000400454ca RDI: 0000000000000004 [ 536.547513][ T30] RBP: 00007fd8d0a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 536.555484][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.563479][ T30] R13: 0000000000000000 R14: 00007fd8d0ba5fa0 R15: 00007ffc724dc788 [ 536.571466][ T30] [ 536.574461][ T30] INFO: task syz.0.1309:10770 blocked for more than 145 seconds. [ 536.582177][ T30] Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 536.589423][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.598086][ T30] task:syz.0.1309 state:D stack:27432 pid:10770 tgid:10766 ppid:5812 flags:0x00004004 [ 536.608245][ T30] Call Trace: [ 536.611850][ T30] [ 536.614771][ T30] __schedule+0x1142/0x5b60 [ 536.619249][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 536.625242][ T30] ? finish_task_switch.isra.0+0x217/0xcc0 [ 536.631033][ T30] ? __schedule+0x114a/0x5b60 [ 536.635678][ T30] ? __pfx___schedule+0x10/0x10 [ 536.641113][ T30] ? lock_release+0x4e2/0x6f0 [ 536.645792][ T30] ? schedule+0x298/0x350 [ 536.650170][ T30] ? __pfx_lock_release+0x10/0x10 [ 536.655184][ T30] ? __mutex_trylock_common+0x78/0x250 [ 536.660677][ T30] ? schedule+0x1fd/0x350 [ 536.664999][ T30] ? lock_acquire+0x2f/0xb0 [ 536.669472][ T30] ? schedule+0x1fd/0x350 [ 536.673830][ T30] schedule+0xe7/0x350 [ 536.677884][ T30] schedule_preempt_disabled+0x13/0x30 [ 536.683376][ T30] __mutex_lock+0x6bd/0xb10 [ 536.687867][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 536.694131][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 536.699231][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 536.704277][ T30] ? rcu_is_watching+0x12/0xc0 [ 536.709023][ T30] ? lock_release+0x4e2/0x6f0 [ 536.713931][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 536.719128][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 536.724282][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 536.729370][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 536.734328][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 536.739807][ T30] ? rcu_is_watching+0x12/0xc0 [ 536.744563][ T30] netlink_rcv_skb+0x16b/0x440 [ 536.749298][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 536.754774][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 536.760097][ T30] ? rcu_is_watching+0x12/0xc0 [ 536.764861][ T30] netlink_unicast+0x53c/0x7f0 [ 536.769634][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 536.774906][ T30] netlink_sendmsg+0x8b8/0xd70 [ 536.779680][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.784953][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.790228][ T30] ? ____sys_sendmsg+0x600/0xc90 [ 536.795135][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 536.799906][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 536.805352][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.810629][ T30] ___sys_sendmsg+0x135/0x1e0 [ 536.815487][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.820716][ T30] ? rcu_is_watching+0x12/0xc0 [ 536.825472][ T30] __sys_sendmsg+0x16e/0x220 [ 536.830082][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 536.835189][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 536.840130][ T30] ? rcu_is_watching+0x12/0xc0 [ 536.844869][ T30] ? rcu_is_watching+0x12/0xc0 [ 536.849638][ T30] do_syscall_64+0xcd/0x250 [ 536.854128][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.860059][ T30] RIP: 0033:0x7f11aaf8cd29 [ 536.864458][ T30] RSP: 002b:00007f11abe2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.872887][ T30] RAX: ffffffffffffffda RBX: 00007f11ab1a6080 RCX: 00007f11aaf8cd29 [ 536.880959][ T30] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 536.888923][ T30] RBP: 00007f11ab00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 536.896917][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.904895][ T30] R13: 0000000000000000 R14: 00007f11ab1a6080 R15: 00007ffd5125aa78 [ 536.912887][ T30] [ 536.915888][ T30] INFO: task syz.0.1309:10772 blocked for more than 145 seconds. [ 536.924258][ T30] Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 536.931561][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.940223][ T30] task:syz.0.1309 state:D stack:26792 pid:10772 tgid:10766 ppid:5812 flags:0x00004004 [ 536.950400][ T30] Call Trace: [ 536.953664][ T30] [ 536.956568][ T30] __schedule+0x1142/0x5b60 [ 536.961741][ T30] ? rcu_is_watching+0x12/0xc0 [ 536.966503][ T30] ? __switch_to+0x749/0x1190 [ 536.971245][ T30] ? __pfx___schedule+0x10/0x10 [ 536.976221][ T30] ? lock_release+0x4e2/0x6f0 [ 536.981447][ T30] ? schedule+0x298/0x350 [ 536.985791][ T30] ? __pfx_lock_release+0x10/0x10 [ 536.990883][ T30] ? __mutex_trylock_common+0x78/0x250 [ 536.996339][ T30] ? schedule+0x1fd/0x350 [ 537.000677][ T30] ? lock_acquire+0x2f/0xb0 [ 537.005153][ T30] ? schedule+0x1fd/0x350 [ 537.009462][ T30] schedule+0xe7/0x350 [ 537.013550][ T30] schedule_preempt_disabled+0x13/0x30 [ 537.018978][ T30] __mutex_lock+0x6bd/0xb10 [ 537.023918][ T30] ? rtnl_dumpit+0x18f/0x1f0 [ 537.028513][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 537.033587][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 537.039675][ T30] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 537.045035][ T30] ? rtnl_dumpit+0x18f/0x1f0 [ 537.049637][ T30] rtnl_dumpit+0x18f/0x1f0 [ 537.054041][ T30] netlink_dump+0x53c/0xd00 [ 537.058524][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 537.063664][ T30] ? __netlink_dump_start+0x154/0x970 [ 537.069018][ T30] ? netlink_lookup+0x259/0x520 [ 537.073879][ T30] ? __pfx_netlink_lookup+0x10/0x10 [ 537.079060][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 537.084873][ T30] ? rcu_preempt_deferred_qs_irqrestore+0x502/0xbd0 [ 537.091473][ T30] __netlink_dump_start+0x6ca/0x970 [ 537.096674][ T30] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 537.102044][ T30] rtnetlink_rcv_msg+0xb44/0xea0 [ 537.106963][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 537.112416][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 537.117327][ T30] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 537.122933][ T30] netlink_rcv_skb+0x16b/0x440 [ 537.127718][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 537.133200][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.138485][ T30] ? rcu_is_watching+0x12/0xc0 [ 537.143284][ T30] netlink_unicast+0x53c/0x7f0 [ 537.148041][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 537.153321][ T30] netlink_sendmsg+0x8b8/0xd70 [ 537.158059][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.163336][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 537.168071][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 537.173551][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.178825][ T30] ___sys_sendmsg+0x135/0x1e0 [ 537.183508][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.188681][ T30] ? __pfx_lock_release+0x10/0x10 [ 537.193701][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 537.198877][ T30] ? __fget_files+0x206/0x3a0 [ 537.203550][ T30] __sys_sendmsg+0x16e/0x220 [ 537.208114][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 537.213217][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 537.218126][ T30] ? rcu_is_watching+0x12/0xc0 [ 537.222894][ T30] ? rcu_is_watching+0x12/0xc0 [ 537.227859][ T30] do_syscall_64+0xcd/0x250 [ 537.232386][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.238255][ T30] RIP: 0033:0x7f11aaf8cd29 [ 537.242660][ T30] RSP: 002b:00007f11abe0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.251069][ T30] RAX: ffffffffffffffda RBX: 00007f11ab1a6160 RCX: 00007f11aaf8cd29 [ 537.259009][ T30] RDX: 0000000020008000 RSI: 00000000200001c0 RDI: 0000000000000005 [ 537.266974][ T30] RBP: 00007f11ab00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 537.274935][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.282929][ T30] R13: 0000000000000000 R14: 00007f11ab1a6160 R15: 00007ffd5125aa78 [ 537.290926][ T30] [ 537.293937][ T30] INFO: task syz.0.1309:10773 blocked for more than 146 seconds. [ 537.301737][ T30] Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 537.308983][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 537.317641][ T30] task:syz.0.1309 state:D stack:27704 pid:10773 tgid:10766 ppid:5812 flags:0x00004004 [ 537.328084][ T30] Call Trace: [ 537.331395][ T30] [ 537.334307][ T30] __schedule+0x1142/0x5b60 [ 537.338782][ T30] ? rcu_is_watching+0x12/0xc0 [ 537.343539][ T30] ? __switch_to+0x749/0x1190 [ 537.348189][ T30] ? __pfx___schedule+0x10/0x10 [ 537.353032][ T30] ? lock_release+0x4e2/0x6f0 [ 537.357681][ T30] ? schedule+0x298/0x350 [ 537.362045][ T30] ? __pfx_lock_release+0x10/0x10 [ 537.367038][ T30] ? __mutex_trylock_common+0x78/0x250 [ 537.372562][ T30] ? schedule+0x1fd/0x350 [ 537.376879][ T30] ? lock_acquire+0x2f/0xb0 [ 537.381379][ T30] ? schedule+0x1fd/0x350 [ 537.385677][ T30] schedule+0xe7/0x350 [ 537.389752][ T30] schedule_preempt_disabled+0x13/0x30 [ 537.395200][ T30] __mutex_lock+0x6bd/0xb10 [ 537.399717][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 537.404826][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 537.409855][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 537.415808][ T30] ? lock_release+0xa9/0x6f0 [ 537.420402][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 537.425504][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 537.430653][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 537.436104][ T30] ? __pfx___schedule+0x10/0x10 [ 537.440956][ T30] netlink_rcv_skb+0x16b/0x440 [ 537.445692][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 537.451177][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.456463][ T30] ? rcu_is_watching+0x12/0xc0 [ 537.461248][ T30] netlink_unicast+0x53c/0x7f0 [ 537.466001][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 537.471288][ T30] ? bpf_lsm_netlink_send+0x4/0x10 [ 537.476371][ T30] netlink_sendmsg+0x8b8/0xd70 [ 537.481127][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.486382][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.491660][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 537.496408][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 537.501865][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.507640][ T30] ? __pfx_lock_release+0x10/0x10 [ 537.512685][ T30] ___sys_sendmsg+0x135/0x1e0 [ 537.517335][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.522561][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 537.527736][ T30] ? rcu_is_watching+0x12/0xc0 [ 537.532870][ T30] ? __pfx_lock_release+0x10/0x10 [ 537.537891][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 537.543093][ T30] ? __fget_files+0x206/0x3a0 [ 537.547751][ T30] __sys_sendmsg+0x16e/0x220 [ 537.552331][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 537.557414][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 537.562356][ T30] ? rcu_is_watching+0x12/0xc0 [ 537.567098][ T30] ? rcu_is_watching+0x12/0xc0 [ 537.571863][ T30] do_syscall_64+0xcd/0x250 [ 537.576339][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.582248][ T30] RIP: 0033:0x7f11aaf8cd29 [ 537.586646][ T30] RSP: 002b:00007f11abdeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.595047][ T30] RAX: ffffffffffffffda RBX: 00007f11ab1a6240 RCX: 00007f11aaf8cd29 [ 537.603056][ T30] RDX: 0000000000008000 RSI: 0000000020000000 RDI: 0000000000000007 [ 537.611058][ T30] RBP: 00007f11ab00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 537.619029][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.627031][ T30] R13: 0000000000000000 R14: 00007f11ab1a6240 R15: 00007ffd5125aa78 [ 537.635221][ T30] [ 537.638228][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 537.647262][ T30] INFO: task syz.0.1309:10775 blocked for more than 146 seconds. [ 537.654987][ T30] Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 537.662257][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 537.670928][ T30] task:syz.0.1309 state:D stack:27384 pid:10775 tgid:10766 ppid:5812 flags:0x00000004 [ 537.681773][ T30] Call Trace: [ 537.685042][ T30] [ 537.687957][ T30] __schedule+0x1142/0x5b60 [ 537.692473][ T30] ? finish_task_switch.isra.0+0x212/0xcc0 [ 537.698273][ T30] ? kasan_save_stack+0x42/0x60 [ 537.703172][ T30] ? kasan_save_stack+0x33/0x60 [ 537.708010][ T30] ? __bpf_map_area_alloc+0x161/0x190 [ 537.713388][ T30] ? bpf_map_offload_map_alloc+0x10a/0x420 [ 537.719181][ T30] ? map_create+0x5c5/0x1d20 [ 537.723784][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.729872][ T30] ? __pfx___schedule+0x10/0x10 [ 537.734716][ T30] ? lock_release+0x4e2/0x6f0 [ 537.739737][ T30] ? schedule+0x298/0x350 [ 537.744071][ T30] ? __pfx_lock_release+0x10/0x10 [ 537.749084][ T30] ? __mutex_trylock_common+0x78/0x250 [ 537.754559][ T30] ? schedule+0x1fd/0x350 [ 537.758869][ T30] ? lock_acquire+0x2f/0xb0 [ 537.763378][ T30] ? schedule+0x1fd/0x350 [ 537.767696][ T30] schedule+0xe7/0x350 [ 537.771758][ T30] schedule_preempt_disabled+0x13/0x30 [ 537.777195][ T30] __mutex_lock+0x6bd/0xb10 [ 537.781781][ T30] ? bpf_map_offload_map_alloc+0x12a/0x420 [ 537.787581][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 537.792632][ T30] ? rcu_is_watching+0x12/0xc0 [ 537.797376][ T30] ? cap_capable+0xb1/0x250 [ 537.801873][ T30] ? __bpf_map_area_alloc+0x161/0x190 [ 537.807221][ T30] ? bpf_map_offload_map_alloc+0x12a/0x420 [ 537.813021][ T30] ? rtnl_lock+0x9/0x20 [ 537.817150][ T30] bpf_map_offload_map_alloc+0x12a/0x420 [ 537.822773][ T30] map_create+0x5c5/0x1d20 [ 537.827163][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 537.832180][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 537.837351][ T30] ? __pfx_map_create+0x10/0x10 [ 537.842427][ T30] ? lock_acquire+0x2f/0xb0 [ 537.846924][ T30] ? __might_fault+0xe3/0x190 [ 537.851612][ T30] ? selinux_bpf+0xde/0x130 [ 537.856087][ T30] __sys_bpf+0x4391/0x49c0 [ 537.860520][ T30] ? __pfx___sys_bpf+0x10/0x10 [ 537.865285][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 537.870794][ T30] ? __pfx_down_read_trylock+0x10/0x10 [ 537.876245][ T30] ? do_futex+0x123/0x350 [ 537.880588][ T30] ? __pfx_do_futex+0x10/0x10 [ 537.885249][ T30] ? xfd_validate_state+0x5d/0x180 [ 537.890364][ T30] ? rcu_is_watching+0x12/0xc0 [ 537.895108][ T30] __x64_sys_bpf+0x78/0xc0 [ 537.899503][ T30] do_syscall_64+0xcd/0x250 [ 537.904013][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.909900][ T30] RIP: 0033:0x7f11aaf8cd29 [ 537.914284][ T30] RSP: 002b:00007f11abdca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 537.922692][ T30] RAX: ffffffffffffffda RBX: 00007f11ab1a6320 RCX: 00007f11aaf8cd29 [ 537.930648][ T30] RDX: 0000000000000050 RSI: 0000000020000280 RDI: 0000000000000000 [ 537.938592][ T30] RBP: 00007f11ab00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 537.946795][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.954786][ T30] R13: 0000000000000000 R14: 00007f11ab1a6320 R15: 00007ffd5125aa78 [ 537.962765][ T30] [ 537.965757][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 537.974779][ T30] INFO: lockdep is turned off. [ 537.979514][ T30] NMI backtrace for cpu 0 [ 537.979521][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 537.979539][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 537.979547][ T30] Call Trace: [ 537.979554][ T30] [ 537.979559][ T30] dump_stack_lvl+0x116/0x1f0 [ 537.979582][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 537.979605][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 537.979623][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 537.979646][ T30] watchdog+0xf14/0x1240 [ 537.979665][ T30] ? __pfx_watchdog+0x10/0x10 [ 537.979683][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 537.979699][ T30] ? __kthread_parkme+0x148/0x220 [ 537.979720][ T30] ? __pfx_watchdog+0x10/0x10 [ 537.979738][ T30] kthread+0x3af/0x750 [ 537.979753][ T30] ? __pfx_kthread+0x10/0x10 [ 537.979769][ T30] ? __pfx_kthread+0x10/0x10 [ 537.979783][ T30] ret_from_fork+0x45/0x80 [ 537.979800][ T30] ? __pfx_kthread+0x10/0x10 [ 537.979814][ T30] ret_from_fork_asm+0x1a/0x30 [ 537.979843][ T30] [ 538.085561][ T30] Sending NMI from CPU 0 to CPUs 1: [ 538.090924][ C1] NMI backtrace for cpu 1 [ 538.090936][ C1] CPU: 1 UID: 0 PID: 5940 Comm: kworker/u8:8 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 538.090951][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 538.090958][ C1] Workqueue: bat_events batadv_mcast_mla_update [ 538.090978][ C1] RIP: 0010:unwind_next_frame+0x14c/0x20c0 [ 538.090997][ C1] Code: ea 03 0f b6 04 02 4c 89 f2 83 e2 07 38 d0 7f 08 84 c0 0f 85 4e 09 00 00 48 89 e9 41 0f b6 45 35 48 ba 00 00 00 00 00 fc ff df <48> c1 e9 03 80 3c 11 00 0f 85 25 17 00 00 4d 8b 7d 48 3c 01 49 83 [ 538.091010][ C1] RSP: 0018:ffffc90003827658 EFLAGS: 00000246 [ 538.091019][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc90003827710 [ 538.091027][ C1] RDX: dffffc0000000000 RSI: ffffffff810ba28a RDI: ffff888036745d48 [ 538.091035][ C1] RBP: ffffc90003827710 R08: ffffc900038276fc R09: ffffffff90f39ef4 [ 538.091043][ C1] R10: ffffc900038276c8 R11: 0000000000003ed3 R12: ffffc90003827718 [ 538.091051][ C1] R13: ffffc900038276c8 R14: ffffc900038276fd R15: ffff888036744880 [ 538.091060][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 538.091073][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 538.091081][ C1] CR2: 00007f779209b76a CR3: 000000000df80000 CR4: 00000000003526f0 [ 538.091089][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 538.091097][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 538.091104][ C1] Call Trace: [ 538.091109][ C1] [ 538.091114][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 538.091133][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 538.091146][ C1] ? nmi_handle+0x1ac/0x5d0 [ 538.091161][ C1] ? unwind_next_frame+0x14c/0x20c0 [ 538.091176][ C1] ? default_do_nmi+0x6a/0x160 [ 538.091193][ C1] ? exc_nmi+0x170/0x1e0 [ 538.091209][ C1] ? end_repeat_nmi+0xf/0x53 [ 538.091228][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 538.091247][ C1] ? unwind_next_frame+0x14c/0x20c0 [ 538.091262][ C1] ? unwind_next_frame+0x14c/0x20c0 [ 538.091277][ C1] ? unwind_next_frame+0x14c/0x20c0 [ 538.091292][ C1] [ 538.091296][ C1] [ 538.091300][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 538.091318][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 538.091337][ C1] arch_stack_walk+0x95/0x100 [ 538.091355][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 538.091373][ C1] stack_trace_save+0x95/0xd0 [ 538.091389][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 538.091406][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 538.091425][ C1] kasan_save_stack+0x33/0x60 [ 538.091440][ C1] ? kasan_save_stack+0x33/0x60 [ 538.091454][ C1] ? kasan_save_track+0x14/0x30 [ 538.091467][ C1] ? kasan_save_free_info+0x3b/0x60 [ 538.091479][ C1] ? __kasan_slab_free+0x51/0x70 [ 538.091493][ C1] ? kfree+0x14f/0x4b0 [ 538.091506][ C1] ? batadv_mcast_mla_update+0x151f/0x3200 [ 538.091519][ C1] ? process_one_work+0x9c5/0x1ba0 [ 538.091532][ C1] ? worker_thread+0x6c8/0xf00 [ 538.091544][ C1] ? kthread+0x3af/0x750 [ 538.091555][ C1] ? ret_from_fork+0x45/0x80 [ 538.091568][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 538.091597][ C1] kasan_save_track+0x14/0x30 [ 538.091611][ C1] kasan_save_free_info+0x3b/0x60 [ 538.091623][ C1] __kasan_slab_free+0x51/0x70 [ 538.091638][ C1] kfree+0x14f/0x4b0 [ 538.091650][ C1] ? batadv_mcast_mla_update+0x151f/0x3200 [ 538.091665][ C1] batadv_mcast_mla_update+0x151f/0x3200 [ 538.091686][ C1] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 538.091700][ C1] ? lock_release+0x4e2/0x6f0 [ 538.091714][ C1] ? process_one_work+0x813/0x1ba0 [ 538.091726][ C1] ? rcu_is_watching+0x12/0xc0 [ 538.091744][ C1] ? process_one_work+0x921/0x1ba0 [ 538.091757][ C1] ? lock_acquire+0x2f/0xb0 [ 538.091769][ C1] ? process_one_work+0x921/0x1ba0 [ 538.091783][ C1] process_one_work+0x9c5/0x1ba0 [ 538.091799][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 538.091814][ C1] ? __pfx_process_one_work+0x10/0x10 [ 538.091827][ C1] ? rcu_is_watching+0x12/0xc0 [ 538.091845][ C1] ? assign_work+0x1a0/0x250 [ 538.091858][ C1] worker_thread+0x6c8/0xf00 [ 538.091874][ C1] ? __kthread_parkme+0x148/0x220 [ 538.091890][ C1] ? __pfx_worker_thread+0x10/0x10 [ 538.091903][ C1] kthread+0x3af/0x750 [ 538.091914][ C1] ? __pfx_kthread+0x10/0x10 [ 538.091925][ C1] ? lock_acquire+0x2f/0xb0 [ 538.091938][ C1] ? rcu_is_watching+0x12/0xc0 [ 538.091954][ C1] ? __pfx_kthread+0x10/0x10 [ 538.091966][ C1] ret_from_fork+0x45/0x80 [ 538.091978][ C1] ? __pfx_kthread+0x10/0x10 [ 538.091989][ C1] ret_from_fork_asm+0x1a/0x30 [ 538.092010][ C1] [ 538.092929][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 538.543128][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 538.553260][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 538.563292][ T30] Call Trace: [ 538.566551][ T30] [ 538.569461][ T30] dump_stack_lvl+0x3d/0x1f0 [ 538.574034][ T30] panic+0x71d/0x800 [ 538.577914][ T30] ? __pfx_panic+0x10/0x10 [ 538.582312][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 538.587663][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 538.593620][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 538.598971][ T30] ? watchdog+0xd7e/0x1240 [ 538.603368][ T30] ? watchdog+0xd71/0x1240 [ 538.607766][ T30] watchdog+0xd8f/0x1240 [ 538.611988][ T30] ? __pfx_watchdog+0x10/0x10 [ 538.616644][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 538.621822][ T30] ? __kthread_parkme+0x148/0x220 [ 538.626830][ T30] ? __pfx_watchdog+0x10/0x10 [ 538.631487][ T30] kthread+0x3af/0x750 [ 538.635532][ T30] ? __pfx_kthread+0x10/0x10 [ 538.640101][ T30] ? __pfx_kthread+0x10/0x10 [ 538.644666][ T30] ret_from_fork+0x45/0x80 [ 538.649060][ T30] ? __pfx_kthread+0x10/0x10 [ 538.653627][ T30] ret_from_fork_asm+0x1a/0x30 [ 538.658380][ T30] [ 538.661578][ T30] Kernel Offset: disabled [ 538.665927][ T30] Rebooting in 86400 seconds..