last executing test programs: 1m6.724237645s ago: executing program 3 (id=1226): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) unshare(0x400) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x100000001}, &(0x7f0000000100)={0x1, 0x8}, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x300}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) sched_setscheduler(r7, 0x0, &(0x7f0000000000)=0x3f) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000318e00000008000300", @ANYRES32=r10], 0x24}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="cc0000000001010452e678d6a3505b370a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740ffffffff380006801400050000000000000000006d2bc6c3000000000c0003800600020000000000140004"], 0xcc}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={'tunl0\x00', r1, 0x10, 0x10, 0x7, 0x3, {{0x7, 0x4, 0x0, 0x8, 0x1c, 0x67, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @loopback, {[@ra={0x94, 0x4}, @noop, @noop]}}}}}) shutdown(r2, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$int_in(r13, 0x5452, &(0x7f00000000c0)=0x8) 1m3.776798891s ago: executing program 3 (id=1230): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) 1m0.808659935s ago: executing program 3 (id=1234): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socket$inet(0xa, 0x6, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x48002) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000040)=0x20f5) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000180)="f6fe3af984ef0b48f8eda27331f5c8e6c6e13edf6bdd5bf8416307785ea62cc28aec2b7d589a8c42655965583126db401f0fd555a2720c70e6135b4cde3fa11e40d602ab5e6c0b4ea3d449a37956189248be0d21dede8c7cfb4b18029bcd7f5c7300b60c2c1ae5395e15", 0x6a, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r7, r7, r7}, &(0x7f0000001cc0)=""/199, 0xc7, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="74de77d13a9ddb2f33233f8de951289a0f7db874cd52551aa780bf1de3944fefc749626d", 0x24, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r8, @ANYRES64=0x0, @ANYRESHEX=r8], 0x20) 59.596200598s ago: executing program 3 (id=1236): add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008180)={0x2020, 0x0, 0x0}, 0x205a) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x34, r3, 0x777326d861789ced, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x34}}, 0x0) rmdir(&(0x7f0000000200)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000001880)={&(0x7f00000010c0)={0x50, 0xffffffffffffffda, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04004220"], 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) 58.353044637s ago: executing program 3 (id=1237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f8008000240000000050800024000000b860800034000004751080003400000000308000140"], 0xdc}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mremap(&(0x7f0000c6a000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockname$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c) r4 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x100010, r4, 0x0) rt_sigprocmask(0x2, &(0x7f0000000080)={[0x1]}, &(0x7f0000000100), 0x8) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) 57.618834829s ago: executing program 3 (id=1238): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x2) pwrite64(r0, &(0x7f0000000340)="5da1", 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 36.984411413s ago: executing program 2 (id=1262): r0 = socket$key(0xf, 0x3, 0x2) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000880)={{{@in=@private=0xa010101, @in6=@loopback, 0x2, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x7f, 0x0, 0xa4a7}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, 0x0, 0x6c}, 0x0, @in=@remote, 0x2}}, 0xe8) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e0009"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x2000, 0x3, 0x2db}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000980)="59d077eb932e4866d08e51a492ddd3c7a602612208b91cc24ce329dc9a5b8d868b5a0f562caae59e3ea26aea1cc621d3e9736026ea85fb6c494e4093f214cd87f8d958157bd3cd8fa48dd7913f2e62e2fe71", 0x52, 0x14, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000003f) r6 = dup(0xffffffffffffffff) fallocate(r6, 0x10, 0x0, 0x80400) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x6020) r7 = fsmount(r1, 0x0, 0xf1) mknodat(r7, &(0x7f0000000080)='./file0\x00', 0xfff, 0x0) execveat(r7, 0x0, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r8 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030232d30000c08d80b23f0001090212000100000000ff0f0000"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x84580, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x248, 0x1a0, 0xffffffff, 0x1a0, 0x1a0, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x20}}, @common=@ttl={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@loopback, @port, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x4800}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1c2, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="f30700000000"], 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x3, 0xc24, 0xd, 0x0, 0x5, 0x9, 0x4, 0x2, 0x8081, 0x8, 0x3}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x3fd}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x2}, &(0x7f00000004c0)={0x20, 0x89, 0x2}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020306091000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a"], 0x10}}, 0x0) 32.211208102s ago: executing program 2 (id=1269): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) 31.532774062s ago: executing program 2 (id=1271): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x79}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x418a81) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f00000014c0)=[0x0]}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x28011, r2, 0x0) read(r0, &(0x7f0000000380)=""/167, 0xa7) 29.692174578s ago: executing program 2 (id=1278): add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008180)={0x2020, 0x0, 0x0}, 0x205a) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x34, r3, 0x777326d861789ced, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x34}}, 0x0) rmdir(&(0x7f0000000200)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000001880)={&(0x7f00000010c0)={0x50, 0xffffffffffffffda, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04004220"], 0x7) 22.464112473s ago: executing program 2 (id=1283): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) unshare(0x400) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x100000001}, &(0x7f0000000100)={0x1, 0x8}, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x300}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) sched_setscheduler(r7, 0x0, &(0x7f0000000000)=0x3f) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000318e00000008000300", @ANYRES32=r10], 0x24}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="cc0000000001010452e678d6a3505b370a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740ffffffff380006801400050000000000000000006d2bc6c3000000000c0003800600020000000000140004"], 0xcc}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={'tunl0\x00', r1, 0x10, 0x10, 0x7, 0x3, {{0x7, 0x4, 0x0, 0x8, 0x1c, 0x67, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @loopback, {[@ra={0x94, 0x4}, @noop, @noop]}}}}}) shutdown(r2, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r13, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r13, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$int_in(r13, 0x5452, &(0x7f00000000c0)=0x8) 21.425588861s ago: executing program 2 (id=1288): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x4000) 12.483537533s ago: executing program 1 (id=1303): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000001400)=ANY=[@ANYBLOB="7a0a00ff00000000711049000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'gre0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x8, 0x20, 0x1, 0x1d9a, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x7, 0xaa, 0x29, 0x0, @broadcast, @multicast2}}}}) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x15, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000001000000000000bc04000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000004c000000b7080000000000007b8af8ff00000000b70800001f0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000d33af545b5af", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2d, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r4 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000540)={0x0, [[0x223, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], [0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x3]], '\x00', [{}, {0x0, 0xffffffff, 0x0, 0x1}, {0x0, 0x200000}, {}, {}, {}, {}, {0x0, 0x1}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.557425266s ago: executing program 1 (id=1307): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x29, 0x0, &(0x7f0000000100)=0x2f) connect$inet(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000540)={0x90000001}) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_to_batadv\x00'}}, 0x1e) 11.468126983s ago: executing program 0 (id=1308): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) r2 = dup3(r1, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = accept$alg(r3, 0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000000)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) r5 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000440)='net_prio.prioidx\x00', 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000004c0), 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) setregid(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x6, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x24020400) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r7, &(0x7f0000001600), 0x0}, 0x20) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) 10.807712722s ago: executing program 4 (id=1311): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000012c0)=@buf={0x50, &(0x7f0000001240)="d6dc26ddc7805aed6ac490f522dfc45e051d6b7dbb1af17976dd643d2914894852533d27f17d5ccbdba00cdde1c1c6b90410969190f5869c74efc7f4ca5b9c5d7340f2af4fe13bced033d2ed8a562594"}) (fail_nth: 1) 9.188724338s ago: executing program 0 (id=1312): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x31, 0x57, 0xda, 0x10, 0x2013, 0x24f, 0xa0b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xad, 0x0, 0x2, 0x3d, 0x81, 0xb4, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x2}}]}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x0, 0x0, 0x4, {0x4, 0x0, "54e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 7.010286547s ago: executing program 0 (id=1313): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x0, 0xe6efb000, 0x1000, &(0x7f0000fe8000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)={0x3}) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r4, 0x4068aea3, &(0x7f00000000c0)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000040)={[{0x10, 0x3, 0x4, 0xc, 0x3, 0xfa, 0xfe, 0x3, 0x2, 0x1, 0x10, 0xf8, 0x5}, {0x6, 0x9, 0x3, 0xd, 0xae, 0x5, 0x2, 0xc, 0x1, 0x40, 0x6, 0x17, 0x3c}, {0xa20000, 0x7, 0x4, 0x7, 0x5, 0x77, 0x1, 0x9, 0x2, 0x5, 0x8, 0x54, 0x5c5}], 0xd6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000340)="660f381d53b2ba6100b8c400ef66b95cef0a0000003266b9830000c066b84700000066ba000000000f30f2a60fc75add650fdabc755ac09af67f2066b98004000066b8532ebe18660f388067070f3066b9830500000f32", 0x57}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff000000000101000000000000"], 0xb8}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r8, 0x4068aea3, &(0x7f0000000400)) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r7, 0x89f5, &(0x7f0000000080)={'sit0\x00', 0x0}) io_uring_setup(0x209, &(0x7f0000000500)={0x0, 0x0, 0x80, 0x2, 0x23c}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) syz_open_pts(r9, 0x0) 6.087096914s ago: executing program 1 (id=1314): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 6.070996917s ago: executing program 4 (id=1315): socket$packet(0x11, 0xa, 0x300) r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0405602, &(0x7f00000001c0)=@multiplanar_overlay={0xbfd, 0x2, 0x4, 0x40, 0x6fa8, {0x77359400}, {0x4, 0x2, 0xb8, 0x4c, 0x2, 0x1, "ef8339d7"}, 0x1, 0x3, {&(0x7f0000000480)=[{0x6, 0x1, {0x5}, 0x10000}, {0x9, 0x3, {0x100}, 0x17a1112d}]}}) preadv2(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/122, 0x7a}, {&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/167, 0xa7}], 0x4, 0xfff, 0x7c7d3d28, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_io_uring_setup(0x48be, &(0x7f0000000000), &(0x7f00000011c0), 0x0) syz_emit_vhci(0x0, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_vhci(&(0x7f0000001540)=ANY=[@ANYBLOB="040f0404001c04"], 0x7) socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000140), 0x35000000) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9300c0008000500070004"], 0x11) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008666604880000000000010902240001000009210000000122070009058103000000"], 0x0) socket$packet(0x11, 0x3, 0x300) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x400000, 0x3) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000), 0x0, 0x0, 0x10012, 0x0, 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="e1ee0380e2f827f4ba0d", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) 5.587639882s ago: executing program 0 (id=1316): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40080) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000dba000/0x4000)=nil, &(0x7f000030b000/0x3000)=nil, 0x4000}) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x8, @private1, 0x100000}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in={{0x2, 0x4e23, @loopback}}}, 0x84) 5.284096279s ago: executing program 0 (id=1317): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) madvise(&(0x7f0000e02000/0x4000)=nil, 0x4000, 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x17) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = dup(r2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r3, @ANYRES16=r0, @ANYRESOCT=r5, @ANYRESHEX, @ANYRESHEX=r2]) r7 = accept4(r5, 0x0, 0x0, 0x0) sendfile(r7, r4, 0x0, 0x8a000) r8 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) 4.97673288s ago: executing program 1 (id=1318): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0xe3d08660d3cdcf84}) sendmmsg$sock(r0, &(0x7f0000003500)=[{{&(0x7f0000000280)=@generic={0x11, "8afbbce37f1d78ab7db6126845cf353407b6c686d29ce96141bdac6e430f5e9c31f8f692c0d32dccdb2b760f8c6d84ab703ed4194fb16bed0a7f129de6d09101053e6985552d6c9733d4fe1d7ee0a4db27b6996c8696d5f45258925d0c996d12fd3cf20dc1d5bdd05579fbbf7cd7bdbd8cf9d613dc8de0110db3c671f861"}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)="3e994738ffd3b9264fa7e0cdf9e3e8a5c8033747625765db47d3d5c654691743cbb2fd521c5969bd30889d255e58645fdeb19a6d967408e955ce71c9c92ff1a7cfc3f471edd8c3769ed498380506142c323ee428b58ccd9b1ee8abe9488eecdc7af767c70186ab26911d14e71d5b716937a57c48ee27a3330511f77b2797f333c3edf2174e5611", 0x87}, {&(0x7f00000003c0)="792aa32e4229752c8c59702d31d170b2f4c7b6e4c7597a0fab28df9adb5e8436312413e2c158230ef69269925f6717a621c51e62bf591bc7d9de75a145940b55f44955a976f9c944e058e442802d2df2a259badcbf37c766134faa47b023ab7239fab55c2f48211b8348d26f8f08d3424cd3356b1f2b1334e07290078ec3d4f009049a588b3f80986941f4fd02e4fa931ed4a6dddd179257c0fe1b09393e825eaf92d663f9834f5c13eb88a76f1774e7ceedc252662674", 0xb7}, {&(0x7f0000000480)="3c1a88a36232f7f4b6b93512ca5904d465fb8a31acd0d103148338605be661c636d336395e3659c2d6c728f07d72b11a647e4028b5988fc238d080e5d646ba1ddc2bda97c199608f8fdeebf44093618724626d7929a23bb78508a67f88cd3be06e6fe122df4d2ec9ebf5ca315a56f4ea399935db5165abccac5b66f027c416868059c75a6fbc38d4899d547f", 0x8c}], 0x3, &(0x7f0000000580)=[@txtime={{0x18}}], 0x18}}, {{&(0x7f00000005c0)=@l2tp6={0xa, 0x0, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000640)="d0d62cad53c208f4485023fee59f9540c7f743733f387bc49fcd7d10192caaa4810a0ad9c21094ad040074c9fb1f63db37f9fb5c77499e292cb451739b964b1bcbc18f12550745251ae34001a22e944ca58b7abb287a0201a9099af0e1f99cc40fa7979c4074ac129204a71e22d9d98d9dcae7fc290163932dc31e9cae7e0c33fdad2bee0bf4a37ac4ce73cd3b70b052beed1b9c2f5f9770b35192e5152f6632622abf8186bbb834054e60e8d80c4dc1da41be9a34d8be6cf5f06d", 0xbb}, {&(0x7f0000000700)}, {&(0x7f0000000780)="7658d7d24428c11df570e4c0c7f8654cc9281ec59d96a30c05ad238dcc6b66375f6b7cd0176d8f510bfd0b1e4e30df8e2ad71679dc86", 0x36}, {&(0x7f00000007c0)="b9076bc59c67c5ddbb27ca1d55b58c2f0f6cc5795498e0e3b8ed0676d0ff87b2e38365fc45b606e55a03cc5bff", 0x2d}, {&(0x7f0000000800)="6fc2a525819feed6b480d28b547506e843f4f629", 0x14}, {&(0x7f0000000880)="f2d5bb933eb0b279d6fc019747088416801dbf5b7622c96eed52d00a7571e01fdaf799e73baee374391129b4b5e9a5c8aaff22db", 0x34}, {&(0x7f0000000a80)="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", 0x1000}], 0x7}}, {{&(0x7f0000000940)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x4, 0x4}}, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000001a80)=[@mark={{0x14, 0x1, 0x24, 0xb02}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x3cd}}], 0xa8}}, {{&(0x7f0000001b40)=@in={0x2, 0x4e22, @loopback}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001bc0)="1edfb6c283cdad840cb295853cba3f2e61193bb0bca6dcd562115bfc94d38e8b1a4528d3f5cd950dc42f4e89f4c8aab2302bfe2a4f016a17b887065c41c5a3629d44837d92039ed595f4ce010543917df3dc6dc4871203b504bf11f440c0ebe9a7f482fb62557fe1d52ce4222c8b16d5e1af72cda9c4945c743e6e6f8568047f7b705d0e0ecfbf08be8b2c6faa47d2ae3041abad0546c4ba07ce37ab6310063fad702e68da486152", 0xa8}, {&(0x7f0000001c80)="eb6f58c490ae7c9f2d733c8003a4c2017ca7a7bbf5d718571ea5a344a94b7850f3af85d901d81a4933323e7ed0967e333b8c4fc069ae3ef5a74fab1255def534da87817dd66a122316a4c3614312b0a3a4d2b8861b67d3efd20d7aa1ad8d47c754c09569238c27cfb15cff2660dbd0b6a288da3e44312dd7e7c56312fb15bd8183c5184857cd1bd092cba31d4daeaac28fa366db84374b776472d15d6a2f04e9cf6b09c86519ec912cd0c04ca0a9b2bf27a30c660963f46544c9bff67314ba5e1bbaa5abd9cbef5bbab7fe2eb5f999c080b520598d03fe7fcb197315358b0cbb2b5fa3c4fa18d78d9aa183a62d8573a103b0deb2159ddfb0683b8dbc39e96a7e5b75ad200f5107a4ffaa93f5df65abf454c09a3706159ef84d32c4659dd7ccbee209b4a4d81f4d01878e3dac62cb128b2ac11cf665c5cbf17442f6a5c611b4b98221440ce68053f4f663c0d55838d9b22ef7d8a0a232a75653e05e5aaa0b73115d7492ace469ca46702540343de3e6785348947fc2b11a7bc4092cb4ce3f3cc6d725ec16dc0905f8a9ac7cf32dc3a6e46e911f11b86882d27787e50614d59b2ea1838d3b348d88616726db0b737d3df43e6bd1b2e645d0af14fa7e4559533e37fce1e33bc7239fa521eaa59559856fb6f3ee4931c61ef4c351884d0bf2e54822b54960d289b80229cfcd838bcdbc9169fdf10306613e9b541f9e40593c215474a746415ca5f20ba3377b3f42c0f9fa5ebe1b6097c703d40307552974cb0b4ace20e0d66f19b6876ba211c621dadc463b444b0e3320497c5b10574e466bedf881357193ca27a67079f7ba07b0ac9549601c922783ba56afbccf3ec412701292c52186bc684f1fd1d5ca8f6162fe6d0cefb904308883fdc0e8ec1469e97fb534d928d9219557ddfb4ead0388fc4b4c72775326e655c41bffac4754bed2d123f7806bf00ff67bca8c98763be82919c47840015a0aa9a3077c5a6fe2c88999bb4592b4d4d4f43e0e15810b1421de20290ae0c0d71f276df5fa876b85fda1aa1606f27c0b36a0ffe1ef878ef5a59bba9ca7d7c61b24e409d530669ca02aeebad2a560d407b9681f4ecfc725dfebe002eee17b18b3ad4bbf9a57506df771b2567b57161864c73963b75f8ebb0584df6e64cccb8441396473183653851527fbace698729be70f084bf8d616fd93fd7bccde8ffb311324a9680756d9b58477409a1614a4d5cab236d5c1fbaf666234a3771b07e786bcbdc27eed171f078ef4ff39ca2ceef96da908a7d1ff48772ac1cbb591415e9b44cf875a23cf6f91a3a84f0d0006f4989733ccd5180ff60f082a170babd525784490b1282321df79d59593348cd5d6b59406ee126e4eed80af16056d7f3398da485397a5598ad98b38c9ef1e5df0e106acedfb3172eea433e8782a6451fb74849b1cef0981b4660f74fbb97056cb495b535758719236988d77ab9e6cf7c6e4cca6b9a0adf0fde4c2a42444344026de5cfcee756e5f40793b128ccb38c6314a0561968e57577bb117081177c4b6878114e413c31c7541052009a1f5b73e5095639eee7146e74cf5b53dec399d205336427370c99b74aa8e54f4c737399575d2c036627a3aa9c5020490d700afc1ea27c75d2bd7780659b930ceafcedb8006713a07a1ca52232d0f9fc5702cb9ad1376d02f0ff72dcb9dc62a985454e557602386c01aee2384d4de35d41a9a299e71f7ab34addfd1faf8eb6edb379401407b8fdbe51c8aecd2563a01ea9996bba1595b71fbddab75a0a837dd1434143c90d44308ed01b216311e36f8f1bb494d5bd26664949298ba961a2aa2f89d147ee996cda365fdfb60eeeca57a55014459b18a7ab9a19af7afc37109f8e383456d3e21e6b57c245c6a69e6acfe38b437e13eb9ae553c02956f46df0aa6bca3cc146b8e4d9d38c81d984cdcdda54af75bc75d9f259c1d070dc016af72d5a01eee277f9c6ce9efbf3064f2c41885c6a71db291ab8e37886fc6329a388008896f45647c8c6e6801c19eefae59decf58c95bb573f3a2594a0fedc2293a2aa29c413c0b49a9458af4d878fe84a5534aa1d9ef6bf9fb36ed39f7f0b01e333b41697892b63085f7b369f72bcde919007a63da715e2d2f75fc84edc45beb1bce65c2b64e28fc00f4a0408238cf441039db8564421443856dda3cb9d7ca26272e3e2209c6f523814babf546babbdb759400388bd1a053bf4b61aa540f69afdb6d54905a6ec48d4964c20d394051399dfd41c1d3a1a25e202893a37856ce580d199476631888ddb33d4a722b0c1724adee7ea1761422dfb5e9a1f5913ab0cee5695551e863538d426bcb55bdb5febefa7116fae4522f4e5df968d8642d8fa56c002b1191dfe4e4dbb0f0ce16c71dad4b4f891a0033fcecfea1527cc4de1430b37ae8704d81990609564147bc56d40f1ff0688ed5de5d5e7febb9fabe74eca912f94712d91384e1ccbc6c50b4319a752138cb18692854a0584d54de406f3127a34ace2932b6f1659f6a7c9e4f40e888faba93d5ef6ffc3b72d124b038b0046d0a3ad130da499975660c2df52adc5b9f055d0259bd3265661a2c7f58d517b4b3c6e46f37cc8d121ce29a307e3440e1c0eadd57ee2615101de9ba60a0b9aee1f9717a1276d6103277a1281595558f88ed8f050b50c0b1735b4317d2dc0ae5a2324f50e61bb6f4fdb9ad594f9ef0f2289d735fbe56964214dd08fb0d664d6d7870c7f255993f5291513513758d34cf9676516a38df49731d9d9331ecf363860efcb7f10c2ce6159f8a3a9cd91b9a5d2bf00e59c4dfcc14df392ba67348547c6c8381f490877dfd5df9cb69db782b2367b1c197c0ef2f8ca42f6f0344dc16e6ccd2f62ac23a5ecea4e00ec14f167d301e8b0572a29885e82ae408f8b48c8b116923b39d57d412fab9a680fdc5fc283734a9c055dbab1f454295ab544625e5dafb8fda46c67aeb7363ea5dcd967783a200ceb341484aa82bbb4291df1f1e42902cfc8e4fa00d3c4e12101289fbe3d988f2f1324dff76b9ea53b7e47c65cf6c20b5b01bcd281416b5d4f5a6ef0d1896c5c118c74f8872ed5748bd040f03a4ad5aa1040ac8f018c55acf5e42ca0946a69ea6156d09b4293be2b0b179c8b6ede30328a490e6e09cf7d150d1dbdda318007baabceb3693834009f45474db916b564a2b105963aaad4320a222a4f6fc31fe533a67f598ee75daac4bbbf2344140a6bbc8d3b1eca952cf147080e060d15ba4349417227f44c26e5abaa382613d14f49160d205ede3ef1a1fee333b493f70e2602088131b2c2cb36f59389239f8847015e047a30867b4bea4270e5218a4fa567f4f1cc7a55e30a33f13bc38b2acd7e6b5c9a318826a7a009a905aac0e7d6e5f2b1827b721258f7d398a84e1363a3393ddf6fd2b047dd9bf5360b9c312718facc8bfba0d1e26e5477b1cef212647e2304b7988fc368655ff00732b58358d38e58f1a8be162b6162ed578b818a26bc2f4879818907f7f8a396d5951da8f5e0c7c6cf0b7a99c36a14d6b2d94e8adb9adfea2aef90dd1514a773ec2a2adc37a825d7fe79f6f17ba41f057feaa1eb15c499e77c3025a4a322ec76bfd81ce68c1760f3d31193deacbf2c5edb104b1cd5335e1b2314b092fac2bd80ee4f5405b7dd8711f816f2bcacdb004fa5819d9af9294ec4fe3a27da4a3a92a106924a16db223a7d7c6a1de63f8974062d3961297f4bbe12352464789e0bdfe4820227d87c829070540cf16ba1af0622a7f9952609a0980c84eccc40ef6378936df0b82a733636ac886b75307af9d1f02e80c0d0937576aa7579901d3991259ab667abdb89dcb84301a2dc944812f80ba42050a7754d0c8118ca8da816ff36540e68b421485444ae778cb658ff639758c243dce3f5eca2c321c0b85d2b14d572260d383f6c65073bfbb754896433fa1c0fbc7b1b16728ddfe83f2675f307f9cbfb6407527f702e8458d300b0e736d10781c774a8555a57938e1c2001e86c2c416be8de155e653b18c6f1c819db2ec35cd6358d0d1c7d3239d2fdbd3d67710d0a61cfd10d5e090e727b6d83b6b197d5675cb5b58e3ae58df70ab788e88b5c7acb1e3b4f6e4f298ef753a75c58c4c4f17b9eba283bb9cbcbb68d745bdfaaa3510505ebae291d17d69a15162e7f03ba9a7e36f71447a2ca4784b0f29bfbbbc6e4146103b24b2048ed6bac41e3f60033c516c679f2c698f84804ed432af34bf81c91115ef1488e6b3fbe13844caff11ed2cf0c5c7c17d48192141e5a3cfe369b68cd546e7503fcf0a92eced292aacb8f9c8731182facbd8f69cec47b7accfeb423f15eb54fd3ee94cb8f78a64541e765f541478cee2e0e9ec8a805d1db08b99adda69caf706a891d21169ef8b5e36bfd42ef2aba73b9a02e4f65f857cedd3e72a2bf86f101c4b5424520b3c9ef38d186868ce503aaf6c1f7f08aa2910236d99e1e853f79ac31959bd951089e862597b7bb45eb594814a19d44b21c044a571b7245dfbae2bfe00930ddb3cd703108aaaae2f696a38697525bdcd4d43ce068a9a65ba100710dff69dd37c3fedee8cb853fcd115dd23d2196de5b129000ba81f1d0284728fe527f5939789c11eebedca2421ac48aa6750ae92677c4aadfd52c1379b240cfb476ff5e0b3e2a7f838ab7f8088b875e254f1879739b2e986eefdc3be11a42fedcf3a97965d26b61910fc2dfe6cfd821af5cc510fb25e44a065e6c411dca03a9fbbe3682534d3024bc2aca7c40e3afea798366572be052d75755d108316f78ec52f9d01eb75a3b1d4ce12301288ea27bf20c283733123d5fda4fd230db4271e0ec562a76f08c495da351f97daa95905cb411f19bfd3f677d38a06e91c409273eb97e9689ecb60ba3d42e1585eedf1c0547ffdc5d4b7aa0b18abda889b7b544b667a0e4a060de583257f3a2008f0db866c5ff48d4f7c4327b87b76427fffaeb4c9d407c4b25d5aec9ec597f56f34bb701412a0c3b14eff6107dbe597ff34720a028df9212cfb08cdac95ee8d6ade7e937e3fc29b9959fef2d1b8f467edc2cfc9b00606f5166df37708c54e0100107e0cce1a39ca1b17abfbe8c844bbafc77d12712e7eb3040b9397896b65f7b13ecc650261382b824675b9a61ba5165d50e480e6f7d8067004abf256a02116094c8a0810bffa75f78762eb69819dfd73529dd57bbc5facd02b29ae3a51c2748362c99fedf1a64b93f98821b28bc1b844b51323fcd1e9b1ecd03de50232c0c6be4b323d1a2632ec4c942ae5372b16c88289e561d170ca52ea26c2e7a90b38f2f0034aa58615e72dc90eb70e9449ecd402f044d22030794d4be58dcd0f1ad5f2be345d64484b1f2198fd7f1b3143374f19cc306a9b131334d08d8bd764176690452e9edd426c021fdff9494c9cb32089f325ef85a45d365f6f1599ebe05e704764bed7adec821f74dac796f382b0e56c0384830df1f50fcc61a5d9c9e7d69369dd5b10287ac2dd101a80554094db2c9c92d64ac7ad725718de65ee6ef2519b269f15c6c6d4d87e6f3f22ee31e15463e027ad7c77d84b5791d21e3d7bfc66ae9b6970d4b7cb470e6e5e2e70ca132115d450239d695ad05acb8067fcd4e45f3285c77fb4babc33375b6ff2fdb25a604244ddb5d9f76cb7281d62f046ffb4495c29506db1a58193f43e840efcbf8ba72f46a61722596ae8bc57358da39244b3e0c77e5cf61013404a3820415c61571604f23250a749fb32b4bdecf8b8bd5e129b953d0b8d85ea99d9e7eb7b99a4823f9f010c997a045750b6082cc47d6ecbd6d32879ceab5be598eb86", 0x1000}, {&(0x7f0000000a00)="516757a0f0471272a182f447d1d135b435b91aa654a0bff4972092b8c11b6107e0a5cc6d929e506613b674e30a0c224e01d58369977b106ac8076f0df0", 0x3d}, {&(0x7f0000002c80)="bf26e6b888e86ede76cddbcd94dd339af6f7305563f0a6ba4a92111673a97e1a264441215d63e78346e64afa127af1c5f9367818c7121c899fca93fbdd12f620a3f08a758fd6abff9bb19439a7601ae454527c764b9067", 0x57}, {&(0x7f0000002d00)="672d1fa4c4dcaf805147d07bee432c62e13fc56aaebc37104d1bb2a86fb70f4b11345051beaf561d056b257d9180f2e2fcf136085e275e9318ddc23d648dc26f2d1f005117deefe874db1e1f226c5ef5b4ebc30eae6242afbb319005563e011a3f7e7f17e3d311b8b8abd618bea0cb8b5ee6376b6a814d6b3d495e25a477bbeda116e0cf5150e579f16abf21d12a90ab34c7894fa7386bf80b5db3c13c2da97fb894c204556febb5f60c5cbc6a960f263ecf7d060bc937", 0xb7}, {&(0x7f0000002dc0)="1c47c01ccbf9ec4fa85c74271da7dd9c58e873b4ac40a1de7718824701fcd7abfeb9730ffe08c45a1593cf325ad5", 0x2e}], 0x6, &(0x7f0000002e80)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xfffffff5}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x90}}, {{&(0x7f0000002f40)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x2, 0x2, {0xa, 0x4e22, 0x101, @private0, 0xd243}}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002fc0)="39459d2c8bd1c8eef2eaf370d20b6dedeade01d7a727b0a9ead796b40dbb7517c5987f29320fceb30bd5960778c7cbd864702f7baecded72eea15e02d8870eaef71586a7cbae561429841cb305e84bbbab980d6a4d3c4185fa36c1c08781c43ac1891e852a67c57ba812c4ac30445c308fbe87752fba619ebf41be21dd11a9e1374d313d18dd0bd43ef962f9d91f63ecce6a", 0x92}, {&(0x7f0000003080)="1f86c572ebce6737e1d108dd3ffa90bb0826eba61f121db799c08af9ad14998383133fb041c5e0ac644543f6fe1a4c44b35772a74b81a17d59098419378c5198c4968c596f83ca90bad4af4971ed35", 0x4f}, {&(0x7f0000003100)="a3a5db82efaad8f1831e2ae061dea4ccfdd15fc0b87b0d5b63fe3421ed2236011361a7b8f046cd4897e48115181acffd2acf32b05d1e8f427e3b0691a9475f37fbbb1e27e772bd11931d31bdfcbab202b0b0fd0c9f65a0265ef141336ddf3c8f5da00da2b01ab777f622d233a6ca380c4cc815482a61672afb76dc2812c18b3d5bc478b6d9a45a937cf26c5f3744cb3351d98e493016b191c86dd81dac1aa6764f40d5218d722df623d2a20d520e426db7090683b1a1128b5cf82c1d2b867cc8067e07aed2bda7cc86fee99bb7fb51174d29759c192980d1de2127ca5b599f4e0c2c00ea22", 0xe5}, {&(0x7f0000003200)="ed20925602c0f85f981385c39a24c55a065cc53646c5a8c39e51b3841699c214aa125e1c8b926c95f7c551b6c4f00eeae50fcf3f85fe5079402ed4d88b07c8d3041a5bd21afa02cd37225aa6f6d286a55ec7d1325668c0de729a1fd0a438965f9aa45d7167ef207217a098d3df350652c6e4a863622e06ee28ca075e34a67623e4", 0x81}, {&(0x7f00000032c0)="ab843b3709f5ec8f9348314ab13cbfffbf779227ff37bc851b35cf5515da78b4d03a713528335a2dc3941a71581572969146137f3f267096c2f7e28af5389d54cc79081964f19fd8fa1580dcee385949d9016456973b25b98899edcd36f405966a67c701c23c40c7355482e28e0f1c6fc61fc1cdbf5fee21cd5d85b1609da89df915bb3e0e4dea21c733feb4b93b52cf6edfcccd9e91767f9cb988b22870c60e85654b6e358a1f1bbbf86bcbf2e90defd893b9573b17d76f6d5db099e4932368c20811902981f3b584f04c0bca0234a716ce51747483a3fc244fdc0bbf955423cb1afe4d37e11eea605f0d46a90c9292fac5d4c318f323877db72689", 0xfc}], 0x5, &(0x7f0000003440)=[@txtime={{0x18, 0x1, 0x3d, 0xb72}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6c5e29b2}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x2e4bc0}}], 0xc0}}], 0x5, 0x4000040) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000740)=0x0) io_submit(r7, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r11, 0x4080aea2, &(0x7f0000000240)) r12 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r15}}) io_uring_enter(r12, 0x2def, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r16 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r16, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r16, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r16, &(0x7f0000000040)={0x50, 0x0, r17, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r16, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x9c33cbf2f2cca353}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) write$P9_RLINK(r18, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r8, 0x5501) io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0) 3.90006429s ago: executing program 4 (id=1319): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 3.682891262s ago: executing program 4 (id=1320): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x6000, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x0) 3.469909061s ago: executing program 4 (id=1321): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x40000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) 2.700880207s ago: executing program 4 (id=1322): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1de) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x30bc03, 0x0) ioctl$TCXONC(r5, 0x540a, 0x4) socket$alg(0x26, 0x5, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000180)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, r8, 0x0, 0x0, 0x0, 0xe2, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x7ff, @remote, 0x7ff}]}, &(0x7f0000000100)=0x10) 849.472199ms ago: executing program 1 (id=1323): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 33.064528ms ago: executing program 1 (id=1324): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000002240)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ff}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bf02508df5f58aa1d6561f4b3aa3672b7023618a5dba051da34419fa0c3a31e9086d8d83c119faab0f88c55c18dac393a0c801777b71e28b5e3572c8455cb423eafb81a980192f473ac9dd4fbdc6b35122700f38ec", 0x55}, {&(0x7f0000000140)="3f680a24380df2db2e7f091157c5672fd0ab8a14e7348fbb1d218842438abc5d8f4514d84088ef65a33a1c7ffd4b54f2b7aa699351000c69bbd3bb836d11798d79e5b80b8f55a3084e5ce2d349ffffe8341f58980908dda522a031216b3268", 0x5f}, {&(0x7f0000000300)="6c6458c4eca124bfed117b76a79121e8f83d1b8ff4c615e3f49e4b171c96f584a647b2c3c170305feb3a24c6242493b8630ffb0213fe176163bc575d4a5562d0b6d9280567342cc7873dd771855104166f6b277ffff9df9a657712cc18d9b5e0a03507a014a428d26edcd8185514b0d469061ff5d4549c2102824de035cb6e63f0828eecbbc8d3148cd60fe392ef0944c806908a8074716610568f42d4bffe78189612f3353f7c1926ce3039de6e2669be4f6077dd8193a7c2584b1ec6d5aa97c1d89a65ce3ed932a311dbe188e6a0ffd358794e5a00eef0a6a77f5c5347f99aab55f4ceb53b870fa033ca061f9f", 0xee}, {&(0x7f0000000480)="cd9082f7f4466ab157cf8ea0750b8e57639f40d96201c594deef5a5918c58e10603995258c1f8dc741731518395cc9524ffc468114ac09797028bfc83d43b6b499c9e9d3c86700458f0c2994d95f9df40c94faa25e807271ec360262001cc5f86c5f75fc7c2c5c7158968dd089daf9c22f6435b359acfb32b7f7fcb1c7e5fe08e219d7df965922152d70e96893839ac532139925f8eddebe28d2bb9f3ecf64bffaa88874c3a6a9f867ec13e902827217af4717e03f76c2f3064b1ae4ab161dc452397a1ea662dda48489365681b24064cb899160e6ee212b847246cad55e6ff4dab25df96f07daaa1e83bd6ce71c12c819b42e7245fb", 0xf6}], 0x4, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x190}}, {{&(0x7f0000000200)={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000740)="e3ab0cc62969946ea1072a6dfc5c50e79cf1d26577c653a68cc8c63327a6b804f1ce35a7c726e20c6808e26f3da5676ed528279be3b9f19158e93232e09e4329e9b96de28c20e110016a8e1a50710443374c889c57eda24225e419c951c6e661388cd6a1a31d2f811e57511bd63eedd4a1899490823878b81a9cffe963e656d835ae035ce101e8777abac42232233f6ca9d3b511c23d9751d55d002510a479a3af10", 0xa2}], 0x1, &(0x7f0000000800)=[@dontfrag={{0x14, 0x29, 0x3e, 0x39}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)="cb3ed218e81d2dc807f29d5dfc8ce9fdfc877e5da9fb3ee6db204175e29fbdbb0c933202842cd999949a6da3d2e479698dfe2b660472cda11b4e591ee657d4dbc61a763404e5e19cf9489a0a3b32cd767bfb9dcceb172ee743936071847518a59e1212444e3f85bfcb7ca6767af64a799557eead1cd559cc2d91bcb9069ef212f9ba190ef1b86ad8fcbc229b9fd675b0d3461ea025d8ad6bb14be70e118825595394a23bc36f21d854f735f892dcef", 0xaf}], 0x1}}, {{&(0x7f0000000940)={0xa, 0x4e21, 0x100, @loopback, 0x61}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000980)="f06117f40350d28ce01fa071bbc7e9aa09b85b401767713bd37c5411609c946589d974d11e44147e969cc8f9e3", 0x2d}, {&(0x7f00000009c0)="76526825cf3e07b05b9a84ca42a95d716df60db6f25923e9741cc8036be856bc7b9b6c111cb8df9a71abdc5e548a6245942b7865df4f3f48eae2dabec5c7f2c07500bdb44bdb827fb623b12577dda0934407f467dae148abc7dcbdfb5d4bd41031d93020c582c2a782444ff4e0a4e67637e8cb3c13", 0x75}, {&(0x7f0000000a40)="95c16f1c3412f3cdf7232b7513b1521ba004a6e4b6721ec11f29f1b9ca7e8490c16b5908618c48344c9b0492850bef1cb1f434311f7dfe37aa65764b45505386e02ecdc1320adb6535dfca0f3cd3ed5bd815da0b2fd005a0e643a7842437361b73110d7fc77424eabf494a4926e4ef15b5c9d80e5347e7cbba0a22e95a67d9767f0ac8dcaeb88a36a7afbe8d9a700bfbe0cf289f9b86e792f694aaba41a57cf585fc24185bc4e1d62987930ca0553f79c2aacbcb5f4dea3e34f65530334fdc1e071a7e926f17c7fa976a89788beff4b9eb99f215922f2b7b2fe399fea88a965904ced27d6349f589b172cffc5a783f4437b1d9ba82", 0xf5}], 0x3, &(0x7f0000000b80)=[@hopopts={{0x30, 0x29, 0x36, {0x6c, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}}}, @hopopts_2292={{0x170, 0x29, 0x36, {0x21, 0x2a, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0xce, [0x1, 0x4, 0x81, 0x0]}}, @ra={0x5, 0x2, 0x400}, @generic={0x4, 0x6d, "b5fc940df3009eda222ca3f682ab3adce377e190606b536ed85cf1c047dc37f0b869d53d442f07b556307e5960c2329849a44af5abb7d9dd28b58454f2d238407b975c73e22098631b869349f7f3f68f366c98a58bb09b5b2cde2f037c51d30b3ca7bda06d8b55b493d6e0f6a4"}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @pad1, @generic={0x9, 0x89, "991526c1bb6280be28c1557e62b36100b445a2d99824187782dcc420a06a50249d54e7eb583b961a7761b016c82525b5ccf0c40d1fedf8fe7a102246ec855c239b574a9ec0ec2a9c69a0cc4a10519c80893f20d80f8a0d7c9c47cae98dfeb8e1be7a772aa8f936426c38d939e25b8eed47dc740defb01c6503bfa8f3142df8a0afde46e40bfe204a0a"}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0xb2}]}}}], 0x1a0}}, {{&(0x7f0000000d80)={0xa, 0x4e22, 0x9, @empty, 0x2}, 0x1c, &(0x7f0000001f80)=[{&(0x7f0000000dc0)="17409a20300a66cd257cbb0200f43cc3991d45e1c0860184f94705d91d6edc81101ec8e75def29a93fb21b838aa27b4b8897e97171", 0x35}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="3bed3c3c9460ef209572dde0f0755478c180fd6c449556327761a5b25707049d05d663af2920250eea7cc16898761c3b2f6a04e7169a5c01b9c6d2bd981be226b35de0f094b25afb92b7f46cc6936050f3597e1758dd669c65f6c72b91d93fdaea6caf8952b0b5312aab9fe959ac88a27c084485eaae682abccfb498c7381ea372de0a84bff74735fc3fd80fc0abbd47a261fe722a5e10ecad48c4163b95091bceb656c2061d8b693d6a0cc90869c223d14ea34b3ca51fc5e349b2ae24d9646da199abbb3ab245a8f3ab2ca0ce1a", 0xce}, {&(0x7f0000001f00)="953fcb6c9e8915dad8ba90566488", 0xe}, {&(0x7f0000001f40)="e22b8b4fb025d2766f6486cab42dc29f88a76469", 0x14}], 0x5, &(0x7f0000003440)=[@tclass={{0x14, 0x29, 0x43, 0x2}}, @hopopts_2292={{0x158, 0x29, 0x36, {0x0, 0x27, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x18, {0x3, 0x4, 0x2, 0x40, [0x0, 0x7ff]}}, @generic={0xa, 0xe9, "f5d483c6d40f0184993e33713fc9598118d0fc2e322d3b6342736cad2510ff40580d0ae0353f8cd5e68433bbd488ed36f1b2061b46d4332402a4b68aadff7bc36da4acd9f38a405573bb165b3a83d93799c5b791f58a83099c6f094b2ebdae5596649822a089ed1f3d4201841c09b1bad98776be85fc8c3eca6365ad851bd58b6afb0d8464acee3fce87c339006615941bc1681183aed1aef8214b1ca616f270304e8b25d5db280d775a97853cb9da6856d3c098ec87db54273a79547e9fd619d3219ed9ad55ab6a63cede851642bf0e8cf448f61a36c58ab25beedfe7cfbcc567157fd944450fe5ba"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x8}, @jumbo]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x16, 0x4, '\x00', [@ra={0x5, 0x2, 0x5}, @pad1, @pad1, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x15}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x2, 0xa, 0x0, 0xe9, 0x0, [@private2, @loopback, @loopback, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @flowinfo={{0x14, 0x29, 0xb, 0x81}}], 0x248}}], 0x5, 0x4004000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x210, 0x1b, 0x9f, 0xa8, 0x40, 0x10c4, 0x8857, 0x14c6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xa5, 0xa0, 0x5, [{{0x9, 0x4, 0x46, 0x8, 0x1, 0x6, 0x9b, 0x36, 0x2d, [], [{{0x9, 0x5, 0xf, 0x3, 0x200, 0x6, 0x3, 0x80}}]}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r1, 0x1) r3 = epoll_create1(0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x0, 0x200000, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x10191d}) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x9}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000002380)={0x89, 0x212, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0xfff8, [0xfffffffffffffffd]}}, @generic={0x1, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0xa}, @hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0xa}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x10001}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0xffff, [0x40, 0xffff, 0xe541, 0x6, 0x0, 0xfdc, 0x8, 0x3ff]}}]}, 0x10a0) write$binfmt_script(r9, &(0x7f0000000000), 0xfea7) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000080)={0x0, 0x9c7, 0x4, {0xa, @pix_mp={0x0, 0x0, 0x32314d54, 0x0, 0x0, [], 0x7}}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8}, 0x8) connect$rxrpc(r0, &(0x7f0000000440)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x24) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64], 0x20) 0s ago: executing program 0 (id=1325): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004000090000000000000000000300000008000200", @ANYRES32=r1], 0x1c}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xffff, 0x5c}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x674e, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x800000, "0000000108653904030405ffffff09c56a3000", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000005c0)='westwood\x00', 0x9) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)='#\x00', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1", 0x6e}], 0x1}}], 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.011712][T10239] vhci_hcd: connection reset by peer [ 413.034133][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 413.058802][ T52] vhci_hcd: stop threads [ 413.068006][ T2559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.082446][ T52] vhci_hcd: release socket [ 413.096744][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.156820][ T52] vhci_hcd: disconnect device [ 413.184395][ T9] usb 1-1: config 0 descriptor?? [ 413.227014][ T2559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.262104][T10277] ucma_write: process 952 (syz.3.1120) changed security contexts after opening file descriptor, this is not allowed. [ 413.299465][ T2559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.614716][ T51] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 413.786030][ T51] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.822269][ T51] usb 3-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e5.df [ 413.846276][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.881536][ T51] usb 3-1: config 0 descriptor?? [ 413.942017][ T51] pwc: Philips PCA646VC USB webcam detected. [ 414.149464][ T51] pwc: send_video_command error -71 [ 414.158450][ T51] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 414.175177][ T51] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 414.225200][ T51] usb 3-1: USB disconnect, device number 28 [ 414.517025][ T5287] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 414.736305][ T5287] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 414.811172][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.859317][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.929456][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 414.983041][ T5287] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 415.027235][ T5287] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 415.053320][ T5287] usb 5-1: Manufacturer: syz [ 415.076811][ T5287] usb 5-1: config 0 descriptor?? [ 415.423321][T10166] vhci_hcd: vhci_device speed not set [ 415.463592][T10249] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 415.629015][ T5287] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 415.655882][T10320] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1130'. [ 415.655954][T10249] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.683826][ T5287] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 415.707029][T10249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 415.763281][ T5287] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 415.870271][T10249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 415.870329][T10249] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 415.870409][T10249] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 415.870436][T10249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.904760][T10249] usb 3-1: config 0 descriptor?? [ 415.905533][T10310] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 415.917722][T10296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.930109][T10296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.097536][ T9866] usb 5-1: USB disconnect, device number 24 [ 416.459192][T10249] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 416.469180][T10249] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 416.574882][T10249] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 416.842189][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 417.382594][T10352] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1136'. [ 417.443383][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 417.498145][ T9] asix 1-1:0.0: probe with driver asix failed with error -71 [ 417.565721][ T9] usb 1-1: USB disconnect, device number 38 [ 417.633031][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1136'. [ 417.638136][ T9866] usb 3-1: USB disconnect, device number 29 [ 417.654516][ T1176] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 417.664374][T10360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1136'. [ 417.771303][T10360] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1136'. [ 417.814864][ T1176] usb 4-1: device descriptor read/64, error -71 [ 417.959093][T10367] xt_TPROXY: Can be used only with -p tcp or -p udp [ 418.073997][ T1176] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 418.279607][T10376] misc userio: No port type given on /dev/userio [ 418.283468][ T1176] usb 4-1: device descriptor read/64, error -71 [ 418.326194][T10376] misc userio: The device must be registered before sending interrupts [ 418.335154][T10378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.464350][ T1176] usb usb4-port1: attempt power cycle [ 418.473992][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 418.474009][ T29] audit: type=1326 audit(1729111106.528:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.2.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875217dff9 code=0x7ffc0000 [ 418.606061][ T29] audit: type=1326 audit(1729111106.528:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.2.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875217dff9 code=0x7ffc0000 [ 418.752512][ T29] audit: type=1326 audit(1729111106.568:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.2.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f875217dff9 code=0x7ffc0000 [ 418.859999][T10392] fuse: Bad value for 'group_id' [ 418.871084][T10392] fuse: Bad value for 'group_id' [ 418.879466][ T1176] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 418.905951][ T1176] usb 4-1: device descriptor read/8, error -71 [ 419.166204][ T1176] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 419.178042][ T9866] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 419.195825][T10395] FAULT_INJECTION: forcing a failure. [ 419.195825][T10395] name failslab, interval 1, probability 0, space 0, times 0 [ 419.199978][ T29] audit: type=1326 audit(1729111107.248:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71bd97dff9 code=0x7ffc0000 [ 419.259732][T10395] CPU: 1 UID: 0 PID: 10395 Comm: syz.4.1146 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 419.273466][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 419.285906][T10395] Call Trace: [ 419.290686][T10395] [ 419.296667][T10395] dump_stack_lvl+0x241/0x360 [ 419.305163][T10395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.312324][T10395] ? __pfx__printk+0x10/0x10 [ 419.318247][T10395] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 419.327359][T10395] ? __pfx___might_resched+0x10/0x10 [ 419.337584][T10395] should_fail_ex+0x3b0/0x4e0 [ 419.343816][T10395] should_failslab+0xac/0x100 [ 419.353900][T10395] ? __alloc_skb+0x1c3/0x440 [ 419.359325][T10395] kmem_cache_alloc_node_noprof+0x71/0x320 [ 419.365710][T10395] __alloc_skb+0x1c3/0x440 [ 419.372711][T10395] ? __pfx___alloc_skb+0x10/0x10 [ 419.380616][T10395] ? rcu_is_watching+0x15/0xb0 [ 419.385493][T10395] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 419.393128][T10395] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 419.400065][T10395] audit_log_start+0x186/0xa30 [ 419.405397][T10395] ? __pfx_audit_log_start+0x10/0x10 [ 419.415383][T10395] ? migrate_enable+0x395/0x510 [ 419.421000][T10395] ? __pfx_migrate_enable+0x10/0x10 [ 419.426577][T10395] ? __pfx___cant_migrate+0x10/0x10 [ 419.435127][T10395] audit_seccomp+0x63/0x1f0 [ 419.441518][T10395] __seccomp_filter+0xb38/0x1fe0 [ 419.450664][T10395] ? __pfx___might_resched+0x10/0x10 [ 419.457806][T10395] ? __pfx___seccomp_filter+0x10/0x10 [ 419.463941][T10395] ? __might_fault+0xc6/0x120 [ 419.473445][T10395] ? _copy_to_user+0x86/0xb0 [ 419.479294][T10395] ? put_timespec64+0x10a/0x150 [ 419.487090][T10395] ? __pfx_posix_cpu_clock_get+0x10/0x10 [ 419.496533][T10395] ? __pfx_put_timespec64+0x10/0x10 [ 419.504544][T10395] ? __secure_computing+0x125/0x370 [ 419.511384][T10395] syscall_trace_enter+0xa8/0x150 [ 419.519243][T10395] do_syscall_64+0xcc/0x230 [ 419.524365][T10395] ? clear_bhb_loop+0x35/0x90 [ 419.531525][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.539409][T10395] RIP: 0033:0x7f71bd97ca3c [ 419.544398][T10395] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 419.573641][T10395] RSP: 002b:00007f71be6a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 419.584998][T10395] RAX: ffffffffffffffda RBX: 00007f71bdb35f80 RCX: 00007f71bd97ca3c [ 419.596731][T10395] RDX: 000000000000000f RSI: 00007f71be6a70a0 RDI: 0000000000000003 [ 419.605917][T10395] RBP: 00007f71be6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 419.618478][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.630456][T10395] R13: 0000000000000000 R14: 00007f71bdb35f80 R15: 00007f71bdc5fa28 [ 419.638977][T10395] [ 419.644072][ T29] audit: type=1326 audit(1729111107.258:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71bd97c990 code=0x7ffc0000 [ 419.676787][T10395] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 419.693303][ T1176] usb 4-1: device descriptor read/8, error -71 [ 419.701340][T10395] audit: out of memory in audit_log_start [ 419.801792][ T29] audit: type=1326 audit(1729111107.258:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f71bd97cadf code=0x7ffc0000 [ 419.844741][ T1176] usb usb4-port1: unable to enumerate USB device [ 419.855015][ T9866] usb 2-1: Using ep0 maxpacket: 32 [ 419.870520][ T9866] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 419.909604][ T9866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.915864][ T29] audit: type=1326 audit(1729111107.258:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f71bd97dff9 code=0x7ffc0000 [ 419.937527][ T9866] usb 2-1: config 0 descriptor?? [ 419.978332][ T9866] gspca_main: sq930x-2.14.0 probing 041e:403c [ 420.023351][ T29] audit: type=1326 audit(1729111107.818:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f71bd97cadf code=0x7ffc0000 [ 420.223740][T10249] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 420.363994][ T5239] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 420.397040][T10249] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 420.420808][T10249] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 420.446315][T10249] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 420.482831][T10249] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 420.501323][T10249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.524632][T10249] usb 5-1: Product: syz [ 420.529579][T10249] usb 5-1: Manufacturer: syz [ 420.540010][T10249] usb 5-1: SerialNumber: syz [ 420.561225][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.587718][ T5239] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.605208][ T5239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 420.702880][ T5239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 420.724620][ T9866] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 420.735756][ T9866] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 420.815739][ T9866] usb 2-1: USB disconnect, device number 47 [ 420.902640][ T5239] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 421.016226][ T5239] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 421.043325][ T5239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.092749][ T5239] usb 1-1: config 0 descriptor?? [ 421.121489][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.157118][T10401] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 421.227271][T10399] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1148'. [ 421.258581][T10249] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 421.279587][T10249] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 421.294714][T10249] usb 5-1: found format II with max.bitrate = 128, frame size=0 [ 421.314677][T10249] usb 5-1: 2:1: All rates were zero [ 421.430731][T10249] usb 5-1: USB disconnect, device number 25 [ 421.522914][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.552104][ T5230] udevd[5230]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.608299][ T5239] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 421.652363][ T5239] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 421.684657][ T5239] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 421.824808][ T5246] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 421.840600][ T5246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 421.860475][ T5246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 421.886288][ T5246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 421.937127][ T5246] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 421.941267][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.983889][ T5246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 421.985508][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 422.341391][T10424] use of bytesused == 0 is deprecated and will be removed in the future, [ 422.377843][T10424] use the actual size instead. [ 422.478046][T10426] Cannot find add_set index 2 as target [ 422.764636][ T52] bridge_slave_1: left allmulticast mode [ 422.780051][ T52] bridge_slave_1: left promiscuous mode [ 422.827411][ T1176] usb 1-1: USB disconnect, device number 39 [ 422.849694][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.080763][ T52] bridge_slave_0: left allmulticast mode [ 423.143371][ T52] bridge_slave_0: left promiscuous mode [ 423.175408][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.353702][ T1176] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 423.584609][ T1176] usb 1-1: Using ep0 maxpacket: 16 [ 423.704149][ T1176] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.731131][ T1176] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.753899][ T1176] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 423.783274][ T1176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.806342][ T1176] usb 1-1: config 0 descriptor?? [ 424.158665][ T5246] Bluetooth: hci5: command tx timeout [ 424.385227][T10453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.441977][T10453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.496990][ T5287] usb 1-1: USB disconnect, device number 40 [ 424.966271][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.003045][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.038829][ T52] bond0 (unregistering): Released all slaves [ 425.187109][ T5289] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 425.338576][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1161'. [ 425.444216][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1161'. [ 425.537164][T10450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1161'. [ 425.786086][ T5289] usb 1-1: config 0 has no interfaces? [ 425.878628][ T5289] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 426.047047][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.100439][ T5289] usb 1-1: Product: syz [ 426.141362][ T5289] usb 1-1: Manufacturer: syz [ 426.175201][ T5289] usb 1-1: SerialNumber: syz [ 426.206832][ T5289] usb 1-1: config 0 descriptor?? [ 426.258243][ T5246] Bluetooth: hci5: command tx timeout [ 426.647039][T10425] chnl_net:caif_netlink_parms(): no params data found [ 426.865349][ T52] hsr_slave_0: left promiscuous mode [ 426.921152][ T52] hsr_slave_1: left promiscuous mode [ 426.985292][ T5289] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 426.997389][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.041262][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.149521][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.183466][ T5289] usb 2-1: device descriptor read/64, error -71 [ 427.210840][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.472022][ T52] veth1_macvtap: left promiscuous mode [ 427.493732][ T52] veth0_macvtap: left promiscuous mode [ 427.505752][ T52] veth1_vlan: left promiscuous mode [ 427.529534][ T52] veth0_vlan: left promiscuous mode [ 427.542481][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 427.574489][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 427.595998][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 427.612983][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 427.633036][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 427.644650][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 427.785123][ T5289] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 427.936077][ T5289] usb 2-1: device descriptor read/64, error -71 [ 428.094665][ T5289] usb usb2-port1: attempt power cycle [ 428.323715][ T5246] Bluetooth: hci5: command tx timeout [ 428.535335][ T5289] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 428.598227][ T5289] usb 2-1: device descriptor read/8, error -71 [ 428.893464][ T5289] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 428.947223][T10166] usb 1-1: USB disconnect, device number 41 [ 428.990034][ T5289] usb 2-1: device descriptor read/8, error -71 [ 429.142907][T10487] netlink: 'syz.0.1167': attribute type 12 has an invalid length. [ 429.158964][ T5289] usb usb2-port1: unable to enumerate USB device [ 429.164088][T10487] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1167'. [ 429.755742][ T5246] Bluetooth: hci0: command tx timeout [ 430.257462][ T52] team0 (unregistering): Port device team_slave_1 removed [ 430.394492][ T5246] Bluetooth: hci5: command tx timeout [ 430.405837][ T52] team0 (unregistering): Port device team_slave_0 removed [ 431.835213][ T5246] Bluetooth: hci0: command tx timeout [ 431.901694][T10503] FAULT_INJECTION: forcing a failure. [ 431.901694][T10503] name failslab, interval 1, probability 0, space 0, times 0 [ 431.922847][T10503] CPU: 1 UID: 0 PID: 10503 Comm: syz.3.1171 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 431.941701][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 431.957746][T10503] Call Trace: [ 431.962537][T10503] [ 431.966626][T10503] dump_stack_lvl+0x241/0x360 [ 431.974487][T10503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.981143][T10503] ? __pfx__printk+0x10/0x10 [ 431.986570][T10503] ? __lock_acquire+0x1384/0x2050 [ 431.999622][T10503] should_fail_ex+0x3b0/0x4e0 [ 432.005660][T10503] should_failslab+0xac/0x100 [ 432.012719][T10503] ? __alloc_skb+0x1c3/0x440 [ 432.020172][T10503] kmem_cache_alloc_node_noprof+0x71/0x320 [ 432.029792][T10503] __alloc_skb+0x1c3/0x440 [ 432.036931][T10503] ? __pfx___alloc_skb+0x10/0x10 [ 432.042529][T10503] ? skb_clone+0x20c/0x390 [ 432.050557][T10503] ? __lock_acquire+0x2050/0x2050 [ 432.057967][T10503] ? ip6_finish_output+0x41e/0x810 [ 432.066098][T10503] ? udp_v6_send_skb+0xbf5/0x1870 [ 432.075002][T10503] ? __sock_sendmsg+0xef/0x270 [ 432.080537][T10503] ? __sys_sendto+0x39b/0x4f0 [ 432.085627][T10503] ndisc_alloc_skb+0xed/0x2c0 [ 432.092452][T10503] ndisc_ns_create+0x221/0x770 [ 432.100701][T10503] ? __ipv6_chk_addr_and_flags+0x5a9/0x680 [ 432.110743][T10503] ? __ipv6_chk_addr_and_flags+0x90/0x680 [ 432.118946][T10503] ? __pfx_ndisc_ns_create+0x10/0x10 [ 432.126727][T10503] ndisc_solicit+0x39c/0x6a0 [ 432.135491][T10503] ? __pfx_ndisc_solicit+0x10/0x10 [ 432.141140][T10503] ? __skb_clone+0x454/0x6c0 [ 432.151864][T10503] ? __pfx_ndisc_solicit+0x10/0x10 [ 432.159621][T10503] __neigh_event_send+0xed4/0x15b0 [ 432.167345][T10503] neigh_resolve_output+0x1b5/0x740 [ 432.176205][T10503] ? __ipv6_neigh_lookup_noref+0x533/0x730 [ 432.183290][T10503] ip6_finish_output2+0x1001/0x1730 [ 432.192378][T10503] ? ip6_finish_output2+0x75c/0x1730 [ 432.199136][T10503] ? __pfx_lock_release+0x10/0x10 [ 432.204675][T10503] ? __pfx_ip6_finish_output2+0x10/0x10 [ 432.215569][T10503] ? ip6_mtu+0x81/0x3f0 [ 432.221024][T10503] ip6_finish_output+0x41e/0x810 [ 432.229434][T10503] ip6_send_skb+0x1b1/0x3b0 [ 432.238519][T10503] ? ip6_send_skb+0xfd/0x3b0 [ 432.248925][T10503] udp_v6_send_skb+0xbf5/0x1870 [ 432.256311][T10503] udpv6_sendmsg+0x23b6/0x3270 [ 432.264023][T10503] ? release_sock+0x30/0x1f0 [ 432.271735][T10503] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 432.279552][T10503] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 432.286463][T10503] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 432.296294][T10503] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 432.303385][T10503] ? inet_send_prepare+0x1b7/0x260 [ 432.311096][T10503] ? do_raw_spin_unlock+0x13c/0x8b0 [ 432.318473][T10503] ? inet_send_prepare+0x1b7/0x260 [ 432.325943][T10503] __sock_sendmsg+0xef/0x270 [ 432.336242][T10503] __sys_sendto+0x39b/0x4f0 [ 432.341339][T10503] ? __pfx___sys_sendto+0x10/0x10 [ 432.348842][T10503] ? __mutex_unlock_slowpath+0x21d/0x750 [ 432.357107][T10503] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 432.364103][T10503] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 432.374115][T10503] __x64_sys_sendto+0xde/0x100 [ 432.381641][T10503] do_syscall_64+0xf3/0x230 [ 432.387684][T10503] ? clear_bhb_loop+0x35/0x90 [ 432.394365][T10503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.403807][T10503] RIP: 0033:0x7f5062d7dff9 [ 432.410442][T10503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.441099][T10503] RSP: 002b:00007f50627ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 432.454045][T10503] RAX: ffffffffffffffda RBX: 00007f5062f35f80 RCX: 00007f5062d7dff9 [ 432.465380][T10503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 432.480471][T10503] RBP: 00007f50627ff090 R08: 00000000200000c0 R09: 000000000000001c [ 432.496294][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.509770][T10503] R13: 0000000000000000 R14: 00007f5062f35f80 R15: 00007f506305fa28 [ 432.525853][T10503] [ 432.530031][T10503] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 432.627813][T10425] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.643578][T10425] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.665137][T10425] bridge_slave_0: entered allmulticast mode [ 432.708380][T10425] bridge_slave_0: entered promiscuous mode [ 432.845388][T10425] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.926143][T10515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.939908][T10425] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.973366][ T5287] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 432.993558][T10425] bridge_slave_1: entered allmulticast mode [ 433.021301][T10425] bridge_slave_1: entered promiscuous mode [ 433.279413][T10425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.305020][ T5287] usb 2-1: config 0 has no interfaces? [ 433.360613][ T5287] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 433.382498][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.395469][ T5287] usb 2-1: Product: syz [ 433.407682][ T5287] usb 2-1: Manufacturer: syz [ 433.419141][ T5287] usb 2-1: SerialNumber: syz [ 433.426415][T10425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.437495][ T5287] usb 2-1: config 0 descriptor?? [ 433.463393][ T5289] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 433.683304][ T5289] usb 4-1: Using ep0 maxpacket: 8 [ 433.714278][ T5289] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 433.768714][ T5289] usb 4-1: config 246 descriptor has 1 excess byte, ignoring [ 433.807523][ T5289] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 433.833546][ T5289] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 433.879257][ T5289] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 433.936313][ T5246] Bluetooth: hci0: command tx timeout [ 433.954132][ T5289] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 433.973973][ T5289] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 433.999065][ T5289] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 433.999526][T10425] team0: Port device team_slave_0 added [ 434.020595][ T5289] usb 4-1: config 246 descriptor has 1 excess byte, ignoring [ 434.033670][ T5289] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 434.052288][ T5289] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 434.065700][ T5289] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 434.084365][ T5289] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 434.121104][ T5289] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 434.148752][ T5289] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 434.184885][ T5289] usb 4-1: config 246 descriptor has 1 excess byte, ignoring [ 434.202888][ T5289] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 434.253072][ T5289] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 434.281098][ T5289] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 434.300347][ T5289] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 434.316513][ T5289] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 434.341533][ T5289] usb 4-1: string descriptor 0 read error: -22 [ 434.351373][ T5289] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 434.372831][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.404558][ T5289] adutux 4-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 434.485458][T10425] team0: Port device team_slave_1 added [ 434.825432][T10425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.855154][T10425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.937127][T10425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.225119][T10554] netlink: 'syz.0.1181': attribute type 12 has an invalid length. [ 435.279314][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.279537][T10554] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1181'. [ 435.362609][T10485] chnl_net:caif_netlink_parms(): no params data found [ 435.454230][T10425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.462371][T10425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.580797][T10425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.767032][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.993355][ T5246] Bluetooth: hci0: command tx timeout [ 436.100825][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.421158][T10249] usb 2-1: USB disconnect, device number 52 [ 436.488881][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.719152][T10425] hsr_slave_0: entered promiscuous mode [ 436.749854][T10425] hsr_slave_1: entered promiscuous mode [ 436.764220][T10425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.777627][ T5246] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 436.786980][T10425] Cannot create hsr debugfs directory [ 436.866343][T10485] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.880998][T10485] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.897085][T10485] bridge_slave_0: entered allmulticast mode [ 436.904966][T10485] bridge_slave_0: entered promiscuous mode [ 436.961698][T10249] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 436.975627][T10485] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.985409][T10485] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.998978][T10485] bridge_slave_1: entered allmulticast mode [ 437.012163][T10485] bridge_slave_1: entered promiscuous mode [ 437.043563][ T5289] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 437.183658][T10249] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 437.217125][T10249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.229849][T10249] usb 2-1: Product: syz [ 437.237166][ T5289] usb 1-1: Using ep0 maxpacket: 8 [ 437.238545][T10249] usb 2-1: Manufacturer: syz [ 437.259319][ T5289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.261715][T10249] usb 2-1: SerialNumber: syz [ 437.282312][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.357684][ T5289] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 437.386604][T10485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.409067][ T5289] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 437.423130][T10485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.424844][T10249] usb 2-1: config 0 descriptor?? [ 437.498500][ T5287] usb 4-1: USB disconnect, device number 50 [ 437.525411][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.677994][ T5289] usb 1-1: config 0 descriptor?? [ 437.740814][T10249] hso 2-1:0.0: Failed to find INT IN ep [ 437.786772][T10249] usb-storage 2-1:0.0: USB Mass Storage device detected [ 437.802963][ T52] bridge_slave_1: left allmulticast mode [ 437.813909][ T52] bridge_slave_1: left promiscuous mode [ 437.821961][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.866337][ T52] bridge_slave_0: left allmulticast mode [ 437.877461][ T52] bridge_slave_0: left promiscuous mode [ 437.884284][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.055592][ T5239] usb 1-1: USB disconnect, device number 42 [ 438.447087][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.879617][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.320684][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.339534][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.360350][ T52] bond0 (unregistering): Released all slaves [ 439.400387][T10485] team0: Port device team_slave_0 added [ 439.427639][T10578] FAULT_INJECTION: forcing a failure. [ 439.427639][T10578] name failslab, interval 1, probability 0, space 0, times 0 [ 439.478548][T10578] CPU: 0 UID: 0 PID: 10578 Comm: syz.3.1186 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 439.489711][T10591] tipc: Started in network mode [ 439.491303][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 439.500631][T10591] tipc: Node identity 7f000001, cluster identity 4711 [ 439.514056][T10578] Call Trace: [ 439.514079][T10578] [ 439.514090][T10578] dump_stack_lvl+0x241/0x360 [ 439.514121][T10578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.514138][T10578] ? __pfx__printk+0x10/0x10 [ 439.514156][T10578] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 439.514180][T10578] ? __pfx___might_resched+0x10/0x10 [ 439.514206][T10578] should_fail_ex+0x3b0/0x4e0 [ 439.514235][T10578] should_failslab+0xac/0x100 [ 439.525010][T10591] tipc: Enabled bearer , priority 10 [ 439.526480][T10578] ? __alloc_skb+0x1c3/0x440 [ 439.597843][T10578] kmem_cache_alloc_node_noprof+0x71/0x320 [ 439.604657][T10578] __alloc_skb+0x1c3/0x440 [ 439.610436][T10578] ? __pfx___alloc_skb+0x10/0x10 [ 439.619806][T10578] ? netlink_ack_tlv_len+0x6e/0x200 [ 439.628543][T10578] netlink_ack+0x13f/0xa30 [ 439.634094][T10578] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 439.641860][T10578] netlink_rcv_skb+0x262/0x430 [ 439.649065][T10578] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 439.657566][T10578] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 439.663748][T10578] ? netlink_deliver_tap+0x2e/0x1b0 [ 439.669400][T10578] netlink_unicast+0x7f6/0x990 [ 439.675115][T10578] ? __pfx_netlink_unicast+0x10/0x10 [ 439.681691][T10578] ? __virt_addr_valid+0x183/0x530 [ 439.688136][T10578] ? __check_object_size+0x48e/0x900 [ 439.695683][T10578] netlink_sendmsg+0x8e4/0xcb0 [ 439.704007][T10578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.713831][T10578] ? aa_sock_msg_perm+0x91/0x160 [ 439.720222][T10578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.729286][T10578] __sock_sendmsg+0x221/0x270 [ 439.735871][T10578] ____sys_sendmsg+0x52a/0x7e0 [ 439.743331][T10578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.751891][T10578] __sys_sendmsg+0x292/0x380 [ 439.759856][T10578] ? __pfx___sys_sendmsg+0x10/0x10 [ 439.769032][T10578] ? __pfx_vfs_write+0x10/0x10 [ 439.776055][T10578] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 439.784168][T10578] ? do_syscall_64+0x100/0x230 [ 439.791565][T10578] ? do_syscall_64+0xb6/0x230 [ 439.800176][T10578] do_syscall_64+0xf3/0x230 [ 439.806272][T10578] ? clear_bhb_loop+0x35/0x90 [ 439.812754][T10578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.820088][T10578] RIP: 0033:0x7f5062d7dff9 [ 439.825688][T10578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.854474][T10578] RSP: 002b:00007f50627ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.865269][T10578] RAX: ffffffffffffffda RBX: 00007f5062f35f80 RCX: 00007f5062d7dff9 [ 439.877773][T10578] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 439.886372][T10578] RBP: 00007f50627ff090 R08: 0000000000000000 R09: 0000000000000000 [ 439.899664][T10578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.909749][T10578] R13: 0000000000000000 R14: 00007f5062f35f80 R15: 00007f506305fa28 [ 439.920306][T10578] [ 439.925169][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.164230][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.177361][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.202049][T10485] team0: Port device team_slave_1 added [ 440.507166][ T5289] tipc: Node number set to 2130706433 [ 440.680397][T10601] program syz.0.1189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.697439][T10485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.724673][ T5287] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 440.737188][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.743375][ T5239] usb 2-1: USB disconnect, device number 53 [ 440.774746][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.894619][ T5246] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 440.905509][ T5246] Bluetooth: hci2: Injecting HCI hardware error event [ 440.922552][ T5246] Bluetooth: hci2: hardware error 0x00 [ 441.025221][T10485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.075212][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.154933][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.233823][ T5287] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 441.279302][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.322845][ T5287] usb 4-1: config 0 descriptor?? [ 441.450515][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.466750][T10485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.477428][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.683350][ T5239] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 441.775251][T10485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.873112][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 441.966376][T10608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.973324][ T29] audit: type=1326 audit(1729111129.868:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.3.1190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5062d7dff9 code=0x0 [ 442.026524][T10608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.109397][T10608] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 442.185558][ T5287] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 442.282683][ T5287] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 442.349283][ T5287] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 442.445516][ T5287] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 442.464188][ T5239] usb 2-1: config 0 has no interfaces? [ 442.546783][ T5287] lg-g15 0003:046D:C222.0009: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 442.594573][ T5239] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 442.630612][ T5239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.659367][ T5239] usb 2-1: Product: syz [ 442.669692][ T5239] usb 2-1: Manufacturer: syz [ 442.701473][ T5239] usb 2-1: SerialNumber: syz [ 442.782397][ T5239] usb 2-1: config 0 descriptor?? [ 443.034750][ T5246] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 443.349842][T10485] hsr_slave_0: entered promiscuous mode [ 443.381283][T10485] hsr_slave_1: entered promiscuous mode [ 443.415192][T10485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.443464][T10485] Cannot create hsr debugfs directory [ 443.477400][ T52] hsr_slave_0: left promiscuous mode [ 443.525386][ T52] hsr_slave_1: left promiscuous mode [ 443.560429][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.579093][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.591453][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.600850][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.660385][ T52] veth1_macvtap: left promiscuous mode [ 443.670558][ T52] veth0_macvtap: left promiscuous mode [ 443.683602][ T52] veth1_vlan: left promiscuous mode [ 443.690665][ T52] veth0_vlan: left promiscuous mode [ 443.937679][ T5287] usb 4-1: USB disconnect, device number 51 [ 445.185021][T10615] FAULT_INJECTION: forcing a failure. [ 445.185021][T10615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.234052][T10249] usb 2-1: USB disconnect, device number 54 [ 445.254062][T10615] CPU: 1 UID: 0 PID: 10615 Comm: syz.3.1194 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 445.267993][T10615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 445.281804][T10615] Call Trace: [ 445.286084][T10615] [ 445.289415][T10615] dump_stack_lvl+0x241/0x360 [ 445.299349][T10615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.306643][T10615] ? __pfx__printk+0x10/0x10 [ 445.313107][T10615] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 445.320736][T10615] ? __pfx_lock_release+0x10/0x10 [ 445.329915][T10615] ? _raw_spin_lock_irq+0xdf/0x120 [ 445.337750][T10615] should_fail_ex+0x3b0/0x4e0 [ 445.343062][T10615] _copy_from_user+0x2f/0xe0 [ 445.349298][T10615] restore_altstack+0x99/0x150 [ 445.355464][T10615] ? __pfx_restore_altstack+0x10/0x10 [ 445.362866][T10615] ? __task_pid_nr_ns+0x28/0x450 [ 445.369202][T10615] __do_sys_rt_sigreturn+0x17c/0x270 [ 445.376890][T10615] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 445.385376][T10615] ? do_syscall_64+0x100/0x230 [ 445.392038][T10615] ? do_syscall_64+0xb6/0x230 [ 445.397441][T10615] do_syscall_64+0xf3/0x230 [ 445.402978][T10615] ? clear_bhb_loop+0x35/0x90 [ 445.409617][T10615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.418363][T10615] RIP: 0033:0x7f5062d19959 [ 445.424195][T10615] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 445.453218][T10615] RSP: 002b:00007f50627fea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 445.466397][T10615] RAX: ffffffffffffffda RBX: 00007f5062f35f80 RCX: 00007f5062d19959 [ 445.479039][T10615] RDX: 00007f50627fea80 RSI: 00007f50627febb0 RDI: 0000000000000021 [ 445.488467][T10615] RBP: 00007f50627ff090 R08: 0000010000008ebc R09: 0000000000000000 [ 445.500239][T10615] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 445.514460][T10615] R13: 0000000000000000 R14: 00007f5062f35f80 R15: 00007f506305fa28 [ 445.527500][T10615] [ 445.698246][T10625] openvswitch: netlink: Actions may not be safe on all matching packets [ 446.263685][ T52] team0 (unregistering): Port device team_slave_1 removed [ 446.316887][ T5287] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 446.459611][ T52] team0 (unregistering): Port device team_slave_0 removed [ 446.546811][ T5287] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.581427][ T5287] usb 4-1: config 0 has no interfaces? [ 446.645023][ T5287] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 446.659768][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.696843][ T5287] usb 4-1: Product: syz [ 446.702961][ T5287] usb 4-1: Manufacturer: syz [ 446.711364][ T5287] usb 4-1: SerialNumber: syz [ 446.742579][ T5287] usb 4-1: config 0 descriptor?? [ 446.998020][T10632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.068135][T10632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.812251][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.921966][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.178652][ T5289] usb 4-1: USB disconnect, device number 52 [ 449.342885][T10425] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 449.474308][T10425] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 449.498647][T10425] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 449.659208][T10425] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 449.889930][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'. [ 450.273819][T10249] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 450.366400][T10485] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 450.388620][T10485] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 450.415333][T10485] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 450.436121][T10485] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 450.445446][T10249] usb 2-1: Using ep0 maxpacket: 16 [ 450.461857][T10249] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 450.493430][T10249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 450.525129][T10249] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 450.538753][T10249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.552343][T10249] usb 2-1: Product: syz [ 450.557269][T10249] usb 2-1: Manufacturer: syz [ 450.563878][T10249] usb 2-1: SerialNumber: syz [ 450.577658][T10249] usb 2-1: config 0 descriptor?? [ 450.596518][T10249] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 450.627136][T10249] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 450.677587][T10425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.872712][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.873893][ T8] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 451.088913][ T8] usb 4-1: config 0 has no interfaces? [ 451.106420][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.124630][ T8] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 451.148041][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.177816][ T8] usb 4-1: Product: syz [ 451.185142][T10425] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.194655][ T8] usb 4-1: Manufacturer: syz [ 451.200832][ T8] usb 4-1: SerialNumber: syz [ 451.237368][ T8] usb 4-1: config 0 descriptor?? [ 451.285352][T10249] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 451.315941][T10249] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 451.438250][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.499901][T10139] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.509310][T10139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.600993][T10139] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.611454][T10139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.807676][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.000001][T10249] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 452.296525][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 452.326883][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 452.358400][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 452.380961][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 452.396957][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 452.416964][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 452.425477][T10485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.738150][ T52] bridge_slave_1: left allmulticast mode [ 452.757078][ T52] bridge_slave_1: left promiscuous mode [ 452.773490][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.798054][ T52] bridge_slave_0: left allmulticast mode [ 452.808932][ T52] bridge_slave_0: left promiscuous mode [ 452.817570][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.682926][T10249] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 453.737044][T10249] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 453.763673][T10249] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 453.796656][T10249] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 454.317440][ T5289] usb 4-1: USB disconnect, device number 53 [ 454.439281][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.466113][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.481098][ T5246] Bluetooth: hci2: command tx timeout [ 454.500160][ T52] bond0 (unregistering): Released all slaves [ 454.580540][ T1176] usb 2-1: USB disconnect, device number 55 [ 454.778858][ T52] tipc: Disabling bearer [ 454.804017][ T52] tipc: Left network mode [ 454.820731][T10485] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.038516][ T2593] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.047913][ T2593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.220012][ T2593] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.232568][ T2593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.842181][T10485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 455.940396][T10425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.556293][ T5246] Bluetooth: hci2: command tx timeout [ 456.746457][ T52] hsr_slave_0: left promiscuous mode [ 456.858786][ T52] hsr_slave_1: left promiscuous mode [ 456.899323][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.922479][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.944803][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.976859][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.078269][ T52] veth1_macvtap: left promiscuous mode [ 457.103993][ T52] veth0_macvtap: left promiscuous mode [ 457.112297][ T52] veth1_vlan: left promiscuous mode [ 457.142163][ T52] veth0_vlan: left promiscuous mode [ 457.392693][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 457.423575][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 457.441597][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 457.460042][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 457.499006][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 457.524438][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 457.916827][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.635499][ T5246] Bluetooth: hci2: command tx timeout [ 459.039963][ T52] team0 (unregistering): Port device team_slave_1 removed [ 459.123014][ T52] team0 (unregistering): Port device team_slave_0 removed [ 459.594711][ T5246] Bluetooth: hci3: command tx timeout [ 460.145319][T10485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.182824][T10658] chnl_net:caif_netlink_parms(): no params data found [ 460.441178][T10425] veth0_vlan: entered promiscuous mode [ 460.724524][ T5246] Bluetooth: hci2: command tx timeout [ 460.871011][T10658] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.906565][T10658] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.928440][T10658] bridge_slave_0: entered allmulticast mode [ 460.943067][T10658] bridge_slave_0: entered promiscuous mode [ 460.960481][T10425] veth1_vlan: entered promiscuous mode [ 461.076791][T10658] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.095557][T10658] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.124737][T10658] bridge_slave_1: entered allmulticast mode [ 461.141522][T10658] bridge_slave_1: entered promiscuous mode [ 461.197992][T10485] veth0_vlan: entered promiscuous mode [ 461.217165][T10485] veth1_vlan: entered promiscuous mode [ 461.248007][T10485] veth0_macvtap: entered promiscuous mode [ 461.262269][T10485] veth1_macvtap: entered promiscuous mode [ 461.286038][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.303856][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.319096][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.330592][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.345423][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.362309][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.378095][T10485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.542322][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.622576][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.640480][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.663417][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.677504][ T5246] Bluetooth: hci3: command tx timeout [ 461.693821][ T8] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 461.713356][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.739906][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.762134][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.783235][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.810557][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.837275][T10485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.874632][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 461.897726][ T8] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 461.935228][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.980154][ T8] usb 4-1: Product: syz [ 461.995755][ T8] usb 4-1: Manufacturer: syz [ 462.013666][ T8] usb 4-1: SerialNumber: syz [ 462.037025][ T8] r8152-cfgselector 4-1: Unknown version 0x0000 [ 462.053344][ T8] r8152-cfgselector 4-1: config 0 descriptor?? [ 462.079055][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.132442][T10700] chnl_net:caif_netlink_parms(): no params data found [ 462.162667][T10485] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.197182][T10485] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.213420][T10485] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.226574][T10485] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.278197][T10658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.326443][T10658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.443776][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.540602][ T8] r8152-cfgselector 4-1: Unknown version 0x0000 [ 462.604010][ T8] r8152-cfgselector 4-1: bad CDC descriptors [ 462.675663][ T8] r8152-cfgselector 4-1: USB disconnect, device number 54 [ 462.687423][T10425] veth0_macvtap: entered promiscuous mode [ 462.794099][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.885529][T10658] team0: Port device team_slave_0 added [ 462.925878][T10658] team0: Port device team_slave_1 added [ 463.032840][T10425] veth1_macvtap: entered promiscuous mode [ 463.244539][T10658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.282347][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.346371][T10658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.436840][T10777] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 463.506086][T10700] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.546150][T10700] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.617181][T10700] bridge_slave_0: entered allmulticast mode [ 463.656693][T10700] bridge_slave_0: entered promiscuous mode [ 463.708172][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.773238][ T5246] Bluetooth: hci3: command tx timeout [ 463.803386][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.943243][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.005340][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.042445][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.067504][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.125997][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.183252][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.224795][T10425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.258266][T10658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.283461][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.345523][T10658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.421457][T10700] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.442376][T10700] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.477375][T10700] bridge_slave_1: entered allmulticast mode [ 464.518234][T10700] bridge_slave_1: entered promiscuous mode [ 464.625393][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.723569][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.763862][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.784464][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.830123][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.854199][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.878390][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.903416][ T1176] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 464.937161][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.960391][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.990392][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.024852][T10425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.101199][T10425] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.126303][ T1176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.183049][T10425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.184947][ T1176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.257874][T10425] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.267188][ T1176] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 465.301383][ T1176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.323366][T10425] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.345113][ T1176] usb 4-1: config 0 descriptor?? [ 465.519015][T10700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.673639][T10700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.757450][ T2593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.784768][ T29] audit: type=1326 audit(1729111153.848:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10796 comm="syz.3.1219" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5062d7dff9 code=0x0 [ 465.833552][ T5246] Bluetooth: hci3: command tx timeout [ 465.859165][ T2593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.924613][T10811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.959568][T10811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.980619][T10811] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 466.039646][ T1176] lg-g15 0003:046D:C222.000A: unknown main item tag 0x0 [ 466.055790][ T1176] lg-g15 0003:046D:C222.000A: unknown main item tag 0x0 [ 466.063053][ T1176] lg-g15 0003:046D:C222.000A: unknown main item tag 0x0 [ 466.094402][ T1176] lg-g15 0003:046D:C222.000A: unknown main item tag 0x0 [ 466.117229][T10700] team0: Port device team_slave_0 added [ 466.121181][ T1176] lg-g15 0003:046D:C222.000A: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 466.239843][ T52] bridge_slave_1: left allmulticast mode [ 466.277248][ T52] bridge_slave_1: left promiscuous mode [ 466.288198][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.305694][ T52] bridge_slave_0: left allmulticast mode [ 466.335239][ T52] bridge_slave_0: left promiscuous mode [ 466.345852][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.377290][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.418610][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.456921][ T52] bond0 (unregistering): Released all slaves [ 467.500880][T10658] hsr_slave_0: entered promiscuous mode [ 467.522577][T10658] hsr_slave_1: entered promiscuous mode [ 467.599899][T10700] team0: Port device team_slave_1 added [ 467.760583][ T5287] usb 4-1: USB disconnect, device number 55 [ 468.240883][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.280624][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.383728][T10700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.444000][T10700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.520505][T10700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.582207][T10700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.600227][T10700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.763308][T10700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.939457][ T52] hsr_slave_0: left promiscuous mode [ 469.059564][ T52] hsr_slave_1: left promiscuous mode [ 469.186862][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.303298][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.348274][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.423076][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.598701][ T52] veth1_macvtap: left promiscuous mode [ 469.646307][ T52] veth0_macvtap: left promiscuous mode [ 469.686434][ T52] veth1_vlan: left promiscuous mode [ 469.739557][ T52] veth0_vlan: left promiscuous mode [ 471.857879][ T52] team0 (unregistering): Port device team_slave_1 removed [ 472.092890][ T52] team0 (unregistering): Port device team_slave_0 removed [ 474.122744][ T29] audit: type=1804 audit(1729111162.158:28): pid=10845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1225" name="/" dev="pidfs" ino=11144 res=1 errno=0 [ 474.692809][T10700] hsr_slave_0: entered promiscuous mode [ 474.715947][T10700] hsr_slave_1: entered promiscuous mode [ 474.746657][T10700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.764605][T10700] Cannot create hsr debugfs directory [ 474.984619][ T8] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 475.093337][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.117202][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.197948][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 475.245166][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 475.263804][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 475.301727][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.318138][ T9866] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 475.333334][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 475.358936][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.405426][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 475.494706][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.544526][ T9866] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 475.565149][ T8] usb 4-1: config 0 descriptor?? [ 475.603444][T10853] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 475.623638][ T9866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.665144][ T9866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.755004][ T9866] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 475.805306][ T9866] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 475.899801][ T9866] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 475.957500][ T9866] usb 5-1: Manufacturer: syz [ 476.006082][ T9866] usb 5-1: config 0 descriptor?? [ 476.060322][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 476.126332][ T8] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 476.183009][ T8] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 476.507072][ T9866] usbhid 5-1:0.0: can't add hid device: -71 [ 476.555452][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1226'. [ 476.577101][ T9866] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 476.619070][ T9866] usb 5-1: USB disconnect, device number 26 [ 477.346198][ T8] usb 4-1: USB disconnect, device number 56 [ 477.920957][T10890] x_tables: ip_tables: ah match: only valid for protocol 51 [ 478.046827][T10700] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 478.106117][T10700] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 478.179872][T10700] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 478.298876][T10700] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 478.498051][T10887] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 478.555276][T10887] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 478.775471][T10887] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 478.786561][T10658] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 478.804254][T10887] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 479.023950][T10658] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 479.042261][T10887] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 479.074086][T10658] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 479.104794][T10658] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 479.163328][T10887] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 479.386205][T10887] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 479.403468][T10887] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 479.581330][T10909] program syz.4.1232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.498836][T10700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.692977][T10700] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.836112][T10658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.957942][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.966652][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.085078][ T3065] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.098847][ T3065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.223976][T10658] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.255059][ T3065] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.264325][ T3065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.340555][ T3065] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.357674][ T3065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.778720][ T5287] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 481.876153][T10700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.016292][ T5287] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 482.172199][T10658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.246065][ T5287] usb 3-1: config 0 has no interfaces? [ 482.322962][T10658] veth0_vlan: entered promiscuous mode [ 482.365201][ T5287] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 482.440521][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.521577][ T5287] usb 3-1: Product: syz [ 482.563012][T10658] veth1_vlan: entered promiscuous mode [ 482.614299][ T5287] usb 3-1: Manufacturer: syz [ 482.685710][ T5287] usb 3-1: SerialNumber: syz [ 482.857601][T10700] veth0_vlan: entered promiscuous mode [ 482.979834][ T5287] usb 3-1: config 0 descriptor?? [ 483.396300][T10700] veth1_vlan: entered promiscuous mode [ 483.526104][T10658] veth0_macvtap: entered promiscuous mode [ 484.131835][ T3065] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.437092][ T3065] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.746547][T10658] veth1_macvtap: entered promiscuous mode [ 485.123855][ T3065] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.236431][ T3065] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.422975][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.506415][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 485.608134][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.637294][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.687147][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.793618][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 485.819312][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.918211][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 485.919315][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.938926][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 485.953495][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.979658][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 485.988077][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.005403][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 486.026166][T10658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.174850][T10700] veth0_macvtap: entered promiscuous mode [ 486.198147][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 486.208753][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 486.222672][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 486.265345][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 486.284531][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 486.298601][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 486.722763][ T3065] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.804270][ T3065] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.928088][T10955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1241'. [ 487.155621][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.261344][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.361930][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.446374][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.543324][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.614357][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.671937][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.740652][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.797049][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.855730][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.948991][ T5287] usb 3-1: USB disconnect, device number 30 [ 487.978623][T10658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.060696][T10700] veth1_macvtap: entered promiscuous mode [ 488.202602][T10963] kvm: kvm [10962]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0xe55 [ 488.204650][ T3065] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.261708][ T3065] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.320406][T10959] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1242'. [ 488.370714][T10658] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.398679][ T5246] Bluetooth: hci4: command tx timeout [ 488.431417][T10658] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.499750][T10658] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.533206][T10658] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.699008][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.757372][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.782329][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.836980][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.879280][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.903314][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.924965][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.958939][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.980197][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.004401][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.041481][T10700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.071332][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.097759][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.119735][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.140838][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.165533][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.200331][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.219450][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.237519][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.258301][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.280735][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.299786][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.319083][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.344455][T10700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.364496][ T5239] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 489.406669][T10700] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.465288][T10700] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.539245][T10700] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.576075][T10700] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.605333][T10973] can: request_module (can-proto-0) failed. [ 489.703595][ T5239] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 489.738485][ T5239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 489.762710][ T5239] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 489.783890][ T5239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.804959][ T5239] usb 3-1: config 0 descriptor?? [ 490.024743][ T2593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.058414][ T2593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.365330][ T5239] ath6kl: Failed to submit usb control message: -71 [ 490.376574][ T5239] ath6kl: unable to send the bmi data to the device: -71 [ 490.393965][ T5239] ath6kl: Unable to send get target info: -71 [ 490.446161][ T5239] ath6kl: Failed to init ath6kl core: -71 [ 490.477447][ T5246] Bluetooth: hci4: command tx timeout [ 490.498773][ T5239] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 490.528560][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.536338][ T5239] usb 3-1: USB disconnect, device number 31 [ 490.598274][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.642551][T10953] chnl_net:caif_netlink_parms(): no params data found [ 490.722102][ T3065] bridge_slave_1: left allmulticast mode [ 490.757257][ T3065] bridge_slave_1: left promiscuous mode [ 490.766372][T10981] program syz.4.1247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.797377][ T3065] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.839838][ T3065] bridge_slave_0: left allmulticast mode [ 490.881798][ T3065] bridge_slave_0: left promiscuous mode [ 490.925802][ T3065] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.818129][ T5239] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 492.062029][ T5239] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 492.118012][ T5239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 492.158952][ T5239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 492.185299][ T5239] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 492.219514][ T5239] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 492.254705][ T5239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.291368][ T5239] usb 3-1: config 0 descriptor?? [ 492.321985][T10984] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 492.576319][ T5246] Bluetooth: hci4: command tx timeout [ 492.878837][ T3065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.952118][ T3065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.992146][ T3065] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 492.993846][ T5239] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 493.032536][ T3065] bond0 (unregistering): Released all slaves [ 493.032683][ T5239] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 493.086622][ T5239] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 493.685044][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1248'. [ 494.287074][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.354010][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.420737][ T5239] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 494.666232][T10953] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.698239][ T5246] Bluetooth: hci4: command tx timeout [ 494.744026][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.857680][T10953] bridge_slave_0: entered allmulticast mode [ 494.950456][T10953] bridge_slave_0: entered promiscuous mode [ 495.162776][ T3065] hsr_slave_0: left promiscuous mode [ 495.202536][ T3065] 0·: left promiscuous mode [ 495.241335][ T3065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.285013][ T3065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.324372][ T3065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.363395][ T8] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 495.421254][ T3065] veth1_macvtap: left promiscuous mode [ 495.457591][ T3065] veth0_macvtap: left promiscuous mode [ 495.477388][ T3065] veth1_vlan: left promiscuous mode [ 495.485048][ T3065] veth0_vlan: left promiscuous mode [ 495.557886][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 495.605862][ T8] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 495.663440][ T8] usb 1-1: config 0 has no interface number 0 [ 495.746867][T10166] usb 3-1: USB disconnect, device number 32 [ 495.763632][ T8] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 495.860415][ T8] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 495.970152][ T8] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 496.004543][ T8] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 496.079021][ T8] usb 1-1: Product: syz [ 496.121166][ T8] usb 1-1: SerialNumber: syz [ 496.245880][ T8] usb 1-1: config 0 descriptor?? [ 496.300209][ T8] cm109 1-1:0.8: invalid payload size 10, expected 4 [ 496.397612][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input14 [ 496.660835][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 496.682183][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 496.715486][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 496.723730][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 496.756973][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 496.766496][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 496.785024][ T9] usb 1-1: USB disconnect, device number 43 [ 496.806806][T10166] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 497.002892][ T9] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 497.079179][T10166] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 497.224938][T10166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.336865][T10166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.416881][T10166] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 497.498110][T10166] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 497.643249][T10166] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 497.743234][T10166] usb 3-1: Manufacturer: syz [ 497.843659][T10166] usb 3-1: config 0 descriptor?? [ 498.126847][T11024] FAULT_INJECTION: forcing a failure. [ 498.126847][T11024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.203537][T11024] CPU: 0 UID: 0 PID: 11024 Comm: syz.0.1254 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 498.221430][T11024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 498.236693][T11024] Call Trace: [ 498.245166][T11024] [ 498.256913][T11024] dump_stack_lvl+0x241/0x360 [ 498.266624][T11024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.272287][T11024] ? __pfx__printk+0x10/0x10 [ 498.281264][T11024] ? __pfx_lock_release+0x10/0x10 [ 498.295468][T11024] should_fail_ex+0x3b0/0x4e0 [ 498.304648][T11024] _copy_from_user+0x2f/0xe0 [ 498.315042][T11024] restore_sigcontext+0xd8/0x7d0 [ 498.322393][T11024] ? __pfx___might_resched+0x10/0x10 [ 498.328169][T11024] ? __might_fault+0xaa/0x120 [ 498.338612][T11024] ? __pfx_restore_sigcontext+0x10/0x10 [ 498.344839][T11024] ? __task_pid_nr_ns+0x28/0x450 [ 498.354852][T11024] __do_sys_rt_sigreturn+0x1a1/0x270 [ 498.362127][T11024] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 498.373257][T11024] ? do_syscall_64+0x100/0x230 [ 498.378417][T11024] ? do_syscall_64+0xb6/0x230 [ 498.383808][T11024] do_syscall_64+0xf3/0x230 [ 498.389454][T11024] ? clear_bhb_loop+0x35/0x90 [ 498.399618][T11024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.411856][T11024] RIP: 0033:0x7fa9ea519959 [ 498.418771][T11024] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 498.454185][T11024] RSP: 002b:00007fa9eb311a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 498.469603][T11024] RAX: ffffffffffffffda RBX: 00007fa9ea736058 RCX: 00007fa9ea519959 [ 498.479703][T11024] RDX: 00007fa9eb311a80 RSI: 00007fa9eb311bb0 RDI: 0000000000000021 [ 498.496127][T11024] RBP: 00007fa9eb312090 R08: 0000010000008ebc R09: 0000000000000000 [ 498.509460][T11024] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 498.532488][T11024] R13: 0000000000000000 R14: 00007fa9ea736058 R15: 00007fa9ea85fa28 [ 498.544370][T11024] [ 499.006697][T11031] program syz.0.1255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 499.079869][ T3065] team0 (unregistering): Port device team_slave_1 removed [ 499.239694][ T3065] team0 (unregistering): Port device team_slave_0 removed [ 500.159404][ T3065] team0 (unregistering): Port device batadv0 removed [ 501.002931][T10953] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.029267][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.057523][T10953] bridge_slave_1: entered allmulticast mode [ 501.079518][T10953] bridge_slave_1: entered promiscuous mode [ 501.325160][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.376336][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.616935][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.628911][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.773419][T10166] usbhid 3-1:0.0: can't add hid device: -71 [ 501.803540][T10166] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 502.177317][T10166] usb 3-1: USB disconnect, device number 33 [ 502.385418][T11035] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 502.446295][T10953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.504869][T10953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.293584][T11046] binder: 11045:11046 ioctl 4018620d 0 returned -22 [ 503.341112][T10953] team0: Port device team_slave_0 added [ 503.381418][T11046] binder: 11045:11046 ioctl c004aea7 0 returned -22 [ 503.440719][T10953] team0: Port device team_slave_1 added [ 503.657646][T10953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.696724][T10953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.752567][T10953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.780369][T10953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.788785][T10953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.857185][T10953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.566567][T10953] hsr_slave_0: entered promiscuous mode [ 504.633017][T10953] hsr_slave_1: entered promiscuous mode [ 504.661024][T10953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.701707][T10953] Cannot create hsr debugfs directory [ 504.824300][T10166] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 504.843500][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 504.877087][ T5289] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 504.903687][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 505.037128][ T51] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 505.075314][ T5289] usb 3-1: Using ep0 maxpacket: 8 [ 505.104062][T10166] usb 2-1: Using ep0 maxpacket: 8 [ 505.131529][T10166] usb 2-1: unable to get BOS descriptor or descriptor too short [ 505.184021][ T5289] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.229174][T10166] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 505.264858][T10166] usb 2-1: can't read configurations, error -61 [ 505.360717][ T51] usb 5-1: New USB device found, idVendor=0408, idProduct=4030, bcdDevice=fa.f1 [ 505.386051][ T5289] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 505.423355][T10166] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 505.491622][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.561365][ T5289] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 505.596891][T10166] usb 2-1: Using ep0 maxpacket: 8 [ 505.618450][T10166] usb 2-1: unable to get BOS descriptor or descriptor too short [ 505.623202][ T51] usb 5-1: Product: syz [ 505.639034][T10166] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 505.660659][T10166] usb 2-1: can't read configurations, error -61 [ 505.686454][ T3065] bridge_slave_1: left allmulticast mode [ 505.689368][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 505.723338][ T51] usb 5-1: Manufacturer: syz [ 505.744294][ T51] usb 5-1: SerialNumber: syz [ 505.757879][T10166] usb usb2-port1: attempt power cycle [ 505.788163][ T5289] usb 3-1: Product: syz [ 505.796708][ T3065] bridge_slave_1: left promiscuous mode [ 505.796906][ T3065] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.841099][ T3065] bridge_slave_0: left allmulticast mode [ 505.859936][ T5289] usb 3-1: SerialNumber: syz [ 505.880411][ T3065] bridge_slave_0: left promiscuous mode [ 505.902143][ T51] usb 5-1: config 0 descriptor?? [ 505.920721][ T5289] usb 3-1: config 0 descriptor?? [ 505.942075][ T51] usb 5-1: Found UVC 0.00 device syz (0408:4030) [ 505.998630][ T51] usb 5-1: No valid video chain found. [ 506.062759][ T3065] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.270626][ T1176] usb 5-1: USB disconnect, device number 27 [ 506.376933][T10166] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 506.463641][ T51] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 506.576716][T10166] usb 2-1: Using ep0 maxpacket: 8 [ 506.625345][ T51] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 506.660600][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.737031][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.763899][T10166] usb 2-1: unable to get BOS descriptor or descriptor too short [ 506.820812][T10166] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 506.841066][T11099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.877239][T11099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.898795][ T51] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 506.918774][T10166] usb 2-1: can't read configurations, error -61 [ 506.936121][ T51] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 506.977664][ T51] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 507.001558][ T51] usb 1-1: Manufacturer: syz [ 507.021227][ T51] usb 1-1: config 0 descriptor?? [ 507.040779][T11099] xt_ecn: cannot match TCP bits for non-tcp packets [ 507.183273][T10166] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 507.229657][T10166] usb 2-1: Using ep0 maxpacket: 8 [ 507.650297][T10166] usb 2-1: device descriptor read/all, error -71 [ 507.676213][T10166] usb usb2-port1: unable to enumerate USB device [ 507.855467][ T8] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 508.014753][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 508.024865][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.046247][ T8] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 508.059936][ T8] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 508.072325][T11111] nftables ruleset with unbound set [ 508.136415][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.225435][ T8] usb 5-1: config 0 descriptor?? [ 508.614723][ T937] usb 5-1: USB disconnect, device number 28 [ 508.886042][ T1176] usb 3-1: USB disconnect, device number 34 [ 508.943011][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.484490][ T3065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.586416][ T3065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.637460][ T3065] bond0 (unregistering): Released all slaves [ 510.302056][ T51] usbhid 1-1:0.0: can't add hid device: -71 [ 510.334378][ T51] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 510.397760][ T51] usb 1-1: USB disconnect, device number 44 [ 510.459415][T11132] FAULT_INJECTION: forcing a failure. [ 510.459415][T11132] name failslab, interval 1, probability 0, space 0, times 0 [ 510.517362][T11132] CPU: 0 UID: 0 PID: 11132 Comm: syz.0.1274 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 510.538005][T11132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 510.559028][T11132] Call Trace: [ 510.562839][T11132] [ 510.566073][T11132] dump_stack_lvl+0x241/0x360 [ 510.579224][T11132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.588512][T11132] ? __pfx__printk+0x10/0x10 [ 510.598887][T11132] should_fail_ex+0x3b0/0x4e0 [ 510.615703][T11132] should_failslab+0xac/0x100 [ 510.623317][T11132] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 510.635723][T11132] ? nf_ct_ext_add+0x1a2/0x3e0 [ 510.644551][T11132] krealloc_noprof+0x88/0x120 [ 510.653340][T11132] nf_ct_ext_add+0x1a2/0x3e0 [ 510.658750][T11132] nf_ct_ecache_ext_add+0x143/0x220 [ 510.666279][T11132] init_conntrack+0xa25/0x1310 [ 510.677597][T11132] ? __pfx_init_conntrack+0x10/0x10 [ 510.684202][T11132] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 510.700129][T11132] ? __local_bh_enable_ip+0x168/0x200 [ 510.707274][T11132] nf_conntrack_in+0xd5c/0x1890 [ 510.717460][T11132] ? __pfx_nf_conntrack_in+0x10/0x10 [ 510.723678][T11132] ? ipt_do_table+0x312/0x1860 [ 510.735651][T11132] ? __pfx_ipt_do_table+0x10/0x10 [ 510.741232][T11132] ? ipv4_conntrack_defrag+0x2a2/0x5a0 [ 510.753088][T11132] ? ipv4_conntrack_local+0x120/0x200 [ 510.760969][T11132] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 510.770665][T11132] nf_hook_slow+0xc3/0x220 [ 510.778929][T11132] ? __pfx_dst_output+0x10/0x10 [ 510.784559][T11132] nf_hook+0x2c4/0x450 [ 510.789839][T11132] ? nf_hook+0x9e/0x450 [ 510.798777][T11132] ? __pfx_nf_hook+0x10/0x10 [ 510.803703][T11132] ? __pfx_dst_output+0x10/0x10 [ 510.819256][T11132] ? ip_setup_cork+0x4ae/0x8b0 [ 510.826122][T11132] ? ip_fast_csum+0x1f0/0x2b0 [ 510.838843][T11132] __ip_local_out+0x3d9/0x4e0 [ 510.844200][T11132] ? __pfx_dst_output+0x10/0x10 [ 510.857332][T11132] ip_push_pending_frames+0x95/0x150 [ 510.875363][T11132] raw_sendmsg+0x1ac5/0x2490 [ 510.881511][T11132] ? __pfx_raw_sendmsg+0x10/0x10 [ 510.887396][T11132] ? aa_sk_perm+0x96d/0xab0 [ 510.899700][T11132] ? __pfx_aa_sk_perm+0x10/0x10 [ 510.908057][T11132] ? inet_sendmsg+0x330/0x390 [ 510.919541][T11132] __sock_sendmsg+0x1a6/0x270 [ 510.925085][T11132] ____sys_sendmsg+0x52a/0x7e0 [ 510.938136][T11132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.944953][T11132] __sys_sendmsg+0x292/0x380 [ 510.958547][T11132] ? __pfx___sys_sendmsg+0x10/0x10 [ 510.965231][T11132] ? __pfx_vfs_write+0x10/0x10 [ 510.978723][T11132] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 510.986004][T11132] ? do_syscall_64+0x100/0x230 [ 510.997339][T11132] ? do_syscall_64+0xb6/0x230 [ 511.003761][T11132] do_syscall_64+0xf3/0x230 [ 511.008980][T11132] ? clear_bhb_loop+0x35/0x90 [ 511.019514][T11132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.038791][T11132] RIP: 0033:0x7fa9ea57dff9 [ 511.044037][T11132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.081494][T11132] RSP: 002b:00007fa9eb333038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.096166][T11132] RAX: ffffffffffffffda RBX: 00007fa9ea735f80 RCX: 00007fa9ea57dff9 [ 511.110756][T11132] RDX: 0000000000000000 RSI: 0000000020001000 RDI: 0000000000000006 [ 511.123057][T11132] RBP: 00007fa9eb333090 R08: 0000000000000000 R09: 0000000000000000 [ 511.142253][T11132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 511.157752][T11132] R13: 0000000000000000 R14: 00007fa9ea735f80 R15: 00007fa9ea85fa28 [ 511.174663][T11132] [ 511.179970][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.530162][ T3065] hsr_slave_0: left promiscuous mode [ 511.564237][ T3065] hsr_slave_1: left promiscuous mode [ 511.604438][T11141] Cannot find add_set index 0 as target [ 511.662947][ T3065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.699612][ T3065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.803274][T10166] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 511.840627][T11141] Cannot find add_set index 0 as target [ 511.884048][ T3065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.921868][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.946206][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.057221][ T3065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.077038][T10166] usb 1-1: Using ep0 maxpacket: 32 [ 512.094309][T11156] Cannot find add_set index 0 as target [ 512.139005][T10166] usb 1-1: config 0 has an invalid interface number: 37 but max is 1 [ 512.165743][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.217949][T10166] usb 1-1: config 0 has no interface number 1 [ 512.299850][T10166] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 512.341643][ T3065] veth1_macvtap: left promiscuous mode [ 512.342663][T10166] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 512.384004][T10166] usb 1-1: Product: syz [ 512.406903][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.411645][ T3065] veth0_macvtap: left promiscuous mode [ 512.433058][T10166] usb 1-1: Manufacturer: syz [ 512.463790][T10166] usb 1-1: SerialNumber: syz [ 512.509861][ T3065] veth1_vlan: left promiscuous mode [ 512.543270][ T3065] veth0_vlan: left promiscuous mode [ 512.562216][T10166] usb 1-1: config 0 descriptor?? [ 513.194504][T10166] usb 1-1: Could not set interface, error -71 [ 513.296094][T10166] usb 1-1: USB disconnect, device number 45 [ 513.775330][T11177] binder: 11174:11177 ioctl 4018620d 0 returned -22 [ 515.307514][ T3065] team0 (unregistering): Port device team_slave_1 removed [ 515.572888][ T3065] team0 (unregistering): Port device team_slave_0 removed [ 515.635488][T11184] program syz.0.1281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.641174][T11141] IPv6: syztnl2: Disabled Multicast RS [ 518.678142][T11156] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1275'. [ 520.644377][T11199] delete_channel: no stack [ 520.875137][ T1176] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 521.237244][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 521.259012][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 521.278430][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 521.301251][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 521.320219][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 521.419350][ T1176] usb 1-1: config 0 has no interfaces? [ 521.439264][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 521.476806][ T1176] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 521.556242][ T1176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.603613][ T1176] usb 1-1: Product: syz [ 521.630191][ T1176] usb 1-1: Manufacturer: syz [ 521.713003][ T1176] usb 1-1: SerialNumber: syz [ 521.735553][ T1176] usb 1-1: config 0 descriptor?? [ 522.453855][ T8] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 522.663362][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 522.678880][ T8] usb 5-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=46.ac [ 522.733920][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.777545][ T8] usb 5-1: Product: syz [ 522.783093][ T8] usb 5-1: Manufacturer: syz [ 522.801294][ T8] usb 5-1: SerialNumber: syz [ 522.817997][ T8] usb 5-1: config 0 descriptor?? [ 522.858938][ T8] kl5kusb105 5-1:0.0: KL5KUSB105D / PalmConnect converter detected [ 522.922413][ T3065] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.944075][ T8] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 523.065240][T10953] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 523.513800][ T5235] Bluetooth: hci5: command tx timeout [ 523.657409][ T3065] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.779232][T10953] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 523.859042][T10953] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 523.957470][T10953] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 524.255790][ T3065] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.480835][ T3065] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.566015][T11221] chnl_net:caif_netlink_parms(): no params data found [ 524.637695][ T8] usb 5-1: USB disconnect, device number 29 [ 524.678250][ T8] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 524.866344][ T937] usb 1-1: USB disconnect, device number 46 [ 524.919024][ T8] kl5kusb105 5-1:0.0: device disconnected [ 524.999082][T10953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.139834][T11257] Cannot find add_set index 0 as target [ 525.223618][T11221] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.235732][ T8] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 525.263537][T11221] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.319992][T11221] bridge_slave_0: entered allmulticast mode [ 525.341347][T11263] Cannot find add_set index 0 as target [ 525.367918][T11221] bridge_slave_0: entered promiscuous mode [ 525.403271][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 525.407189][T10953] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.435871][ T8] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 525.478450][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.480883][T11266] Cannot find add_set index 0 as target [ 525.528857][ T8] usb 5-1: config 0 descriptor?? [ 525.546147][T11257] IPv6: syztnl2: Disabled Multicast RS [ 525.573828][T11257] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1293'. [ 525.591734][T11221] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.604493][ T5235] Bluetooth: hci5: command tx timeout [ 525.616122][T11221] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.625964][T11221] bridge_slave_1: entered allmulticast mode [ 525.638053][T11221] bridge_slave_1: entered promiscuous mode [ 525.703342][ T2593] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.713663][ T2593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.916272][ T3065] bridge_slave_1: left allmulticast mode [ 525.923084][ T3065] bridge_slave_1: left promiscuous mode [ 525.936431][ T3065] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.981865][ T3065] bridge_slave_0: left allmulticast mode [ 526.009514][ T3065] bridge_slave_0: left promiscuous mode [ 526.020604][T11273] FAULT_INJECTION: forcing a failure. [ 526.020604][T11273] name failslab, interval 1, probability 0, space 0, times 0 [ 526.052251][ T3065] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.052258][T11273] CPU: 1 UID: 0 PID: 11273 Comm: syz.1.1295 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 526.077505][T11273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 526.094239][T11273] Call Trace: [ 526.099621][T11273] [ 526.103793][T11273] dump_stack_lvl+0x241/0x360 [ 526.114225][T11273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.123578][T11273] ? __pfx__printk+0x10/0x10 [ 526.128723][T11273] ? fs_reclaim_acquire+0x93/0x130 [ 526.137287][T11273] ? __pfx___might_resched+0x10/0x10 [ 526.142929][T11273] should_fail_ex+0x3b0/0x4e0 [ 526.149168][T11273] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 526.158454][T11273] should_failslab+0xac/0x100 [ 526.164198][T11273] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 526.176673][T11273] __kmalloc_noprof+0xd8/0x400 [ 526.181849][T11273] tomoyo_realpath_from_path+0xcf/0x5e0 [ 526.194024][T11273] tomoyo_path_number_perm+0x23a/0x880 [ 526.200864][T11273] ? tomoyo_path_number_perm+0x208/0x880 [ 526.212390][T11273] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 526.224973][T11273] ? __fget_files+0x29/0x470 [ 526.237864][T11273] ? __fget_files+0x3f3/0x470 [ 526.244633][T11273] security_file_ioctl+0xc6/0x2a0 [ 526.259050][T11273] __se_sys_ioctl+0x47/0x170 [ 526.264261][T11273] do_syscall_64+0xf3/0x230 [ 526.279554][T11273] ? clear_bhb_loop+0x35/0x90 [ 526.290559][T11273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.300032][T11273] RIP: 0033:0x7f083417dff9 [ 526.305790][T11273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.356707][T11273] RSP: 002b:00007f0834fbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 526.370117][T11273] RAX: ffffffffffffffda RBX: 00007f0834335f80 RCX: 00007f083417dff9 [ 526.384759][T11273] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 526.395979][T11273] RBP: 00007f0834fbd090 R08: 0000000000000000 R09: 0000000000000000 [ 526.416671][T11273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.437196][T11273] R13: 0000000000000000 R14: 00007f0834335f80 R15: 00007f083445fa28 [ 526.451331][T11273] [ 526.457016][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.535876][T11273] ERROR: Out of memory at tomoyo_realpath_from_path. [ 526.638478][ T8] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 526.680952][ T8] asix 5-1:0.0: probe with driver asix failed with error -61 [ 526.849794][T11289] netlink: 'syz.1.1298': attribute type 12 has an invalid length. [ 526.883325][T11289] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.1298'. [ 526.900164][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.502456][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.650168][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.693376][ T5235] Bluetooth: hci5: command tx timeout [ 527.735677][ T3065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.752504][ T3065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.769798][ T3065] bond0 (unregistering): Released all slaves [ 527.832820][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'. [ 528.135299][T11221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.214652][ T9866] usb 5-1: USB disconnect, device number 30 [ 528.307394][T11221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.382722][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.401644][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.672449][T11301] x_tables: ip_tables: ah match: only valid for protocol 51 [ 528.739485][T11221] team0: Port device team_slave_0 added [ 528.766542][T11221] team0: Port device team_slave_1 added [ 529.298665][T11221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.343785][T11221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.383283][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.443320][T11221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.539546][ T3065] hsr_slave_0: left promiscuous mode [ 529.601456][T11320] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 529.663235][ T3065] hsr_slave_1: left promiscuous mode [ 529.703905][T11323] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 529.754622][ T3065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.754982][ T5235] Bluetooth: hci5: command tx timeout [ 529.781963][ T3065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.804297][ T3065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.856996][ T3065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.961043][ T3065] veth1_macvtap: left promiscuous mode [ 529.971696][ T3065] veth0_macvtap: left promiscuous mode [ 529.980194][ T3065] veth1_vlan: left promiscuous mode [ 529.994602][ T3065] veth0_vlan: left promiscuous mode [ 530.236934][ T9866] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 530.457388][ T9866] usb 1-1: config 0 has no interfaces? [ 530.482920][ T9866] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 530.556931][ T9866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.571580][T11340] FAULT_INJECTION: forcing a failure. [ 530.571580][T11340] name failslab, interval 1, probability 0, space 0, times 0 [ 530.572351][ T9866] usb 1-1: config 0 descriptor?? [ 530.645423][T11340] CPU: 0 UID: 0 PID: 11340 Comm: syz.4.1311 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 530.665415][T11340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 530.682906][T11340] Call Trace: [ 530.695895][T11340] [ 530.699717][T11340] dump_stack_lvl+0x241/0x360 [ 530.705145][T11340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.719466][T11340] ? __pfx__printk+0x10/0x10 [ 530.724722][T11340] ? fs_reclaim_acquire+0x93/0x130 [ 530.741576][T11340] ? __pfx___might_resched+0x10/0x10 [ 530.755780][T11340] should_fail_ex+0x3b0/0x4e0 [ 530.763466][T11340] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 530.778629][T11340] should_failslab+0xac/0x100 [ 530.784452][T11340] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 530.799788][T11340] __kmalloc_noprof+0xd8/0x400 [ 530.806188][T11340] tomoyo_realpath_from_path+0xcf/0x5e0 [ 530.820797][T11340] tomoyo_path_number_perm+0x23a/0x880 [ 530.836520][T11340] ? tomoyo_path_number_perm+0x208/0x880 [ 530.844176][T11340] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 530.852605][T11340] ? __fget_files+0x29/0x470 [ 530.859772][T11340] ? __fget_files+0x3f3/0x470 [ 530.864991][T11340] security_file_ioctl+0xc6/0x2a0 [ 530.873144][T11340] __se_sys_ioctl+0x47/0x170 [ 530.879062][T11340] do_syscall_64+0xf3/0x230 [ 530.884784][T11340] ? clear_bhb_loop+0x35/0x90 [ 530.897981][T11340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.911346][T11340] RIP: 0033:0x7fe17af7dff9 [ 530.920667][T11340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.948693][T11340] RSP: 002b:00007fe17bd09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.960418][T11340] RAX: ffffffffffffffda RBX: 00007fe17b135f80 RCX: 00007fe17af7dff9 [ 530.971017][T11340] RDX: 00000000200012c0 RSI: 0000000000008912 RDI: 0000000000000003 [ 530.983494][T11340] RBP: 00007fe17bd09090 R08: 0000000000000000 R09: 0000000000000000 [ 530.995778][T11340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.004549][T11340] R13: 0000000000000000 R14: 00007fe17b135f80 R15: 00007fe17b25fa28 [ 531.018481][T11340] [ 531.068924][T11340] ERROR: Out of memory at tomoyo_realpath_from_path. [ 531.179804][T11330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.217041][T11330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.004061][ T937] usb 1-1: USB disconnect, device number 47 [ 532.523780][ T937] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 532.703432][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 532.722357][ T3065] team0 (unregistering): Port device team_slave_1 removed [ 532.746862][ T937] usb 1-1: config 8 has an invalid interface number: 173 but max is 0 [ 532.777254][ T937] usb 1-1: config 8 has no interface number 0 [ 532.815136][ T937] usb 1-1: config 8 interface 173 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 532.856869][ T937] usb 1-1: config 8 interface 173 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 532.919861][ T937] usb 1-1: New USB device found, idVendor=2013, idProduct=024f, bcdDevice=a0.b2 [ 532.933914][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.956184][ T937] usb 1-1: Product: syz [ 532.974837][ T937] usb 1-1: Manufacturer: syz [ 532.988991][ T3065] team0 (unregistering): Port device team_slave_0 removed [ 532.993498][ T937] usb 1-1: SerialNumber: syz [ 533.037717][T11364] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 533.079442][ T937] em28xx 1-1:8.173: New device syz syz @ 480 Mbps (2013:024f, interface 173, class 173) [ 533.127561][ T937] em28xx 1-1:8.173: Video interface 173 found: bulk [ 533.292632][T11364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.375509][T11364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.464318][ T937] em28xx 1-1:8.173: unknown em28xx chip ID (0) [ 533.680324][ T937] em28xx 1-1:8.173: reading from i2c device at 0xa0 failed (error=-5) [ 533.699392][ T937] em28xx 1-1:8.173: board has no eeprom [ 533.793448][ T937] em28xx 1-1:8.173: Identified as PCTV nanoStick T2 290e (card=78) [ 533.822718][ T937] em28xx 1-1:8.173: Currently, V4L2 is not supported on this model [ 533.839320][ T8] em28xx 1-1:8.173: Binding DVB extension [ 533.877654][ T8] em28xx 1-1:8.173: no endpoint for DVB mode and transfer type 0 [ 533.897078][ T8] em28xx 1-1:8.173: failed to pre-allocate USB transfer buffers for DVB. [ 533.919267][ T937] usb 1-1: USB disconnect, device number 48 [ 533.984676][ T8] em28xx 1-1:8.173: Registering input extension [ 534.000038][ T937] em28xx 1-1:8.173: Disconnecting em28xx [ 534.021092][ T937] em28xx 1-1:8.173: Closing input extension [ 534.159946][ T937] em28xx 1-1:8.173: Freeing device [ 534.904469][T11221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.919842][T11221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.978935][T11221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.374784][T11394] netlink: 'syz.1.1314': attribute type 12 has an invalid length. [ 535.401022][T11221] hsr_slave_0: entered promiscuous mode [ 535.423913][T11221] hsr_slave_1: entered promiscuous mode [ 535.448705][T11394] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.1314'. [ 535.463947][T11221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.490382][T11221] Cannot create hsr debugfs directory [ 535.525678][T10953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 535.733359][ T5289] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 535.963495][ T5289] usb 5-1: Using ep0 maxpacket: 8 [ 536.040325][ T5289] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.159867][ T5289] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 536.305149][ T5289] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 536.333223][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.437902][ T5289] usb 5-1: config 0 descriptor?? [ 536.499090][T10953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.621518][T11411] program syz.0.1317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.716002][ T9] usb 5-1: USB disconnect, device number 31 [ 537.005319][T10953] veth0_vlan: entered promiscuous mode [ 537.066254][T10953] veth1_vlan: entered promiscuous mode [ 537.142511][T11421] input: syz0 as /devices/virtual/input/input16 [ 538.643271][T10953] veth0_macvtap: entered promiscuous mode [ 538.758872][T10953] veth1_macvtap: entered promiscuous mode [ 538.905397][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.950516][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.000350][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.083531][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.153404][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.198776][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.236926][ T937] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 539.263415][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.285283][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.387185][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.405037][T10953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.561782][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.590498][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.681519][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.772605][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.836395][ T937] usb 5-1: config 0 has no interfaces? [ 539.865666][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.975655][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.014446][ T937] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 540.073309][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.115286][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.131736][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.131769][ T937] usb 5-1: Product: syz [ 540.131787][ T937] usb 5-1: Manufacturer: syz [ 540.131804][ T937] usb 5-1: SerialNumber: syz [ 540.217697][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.219903][ T937] usb 5-1: config 0 descriptor?? [ 540.262270][T10953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.458793][T10953] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.565138][T10953] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.584331][T10953] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.660573][T10953] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.842615][T11221] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 541.104676][T11221] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 541.191968][T11221] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 541.274458][ T30] INFO: task syz.2.1061:9897 blocked for more than 143 seconds. [ 541.316131][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.403519][ T30] Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 541.437386][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.465707][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.487031][ T30] task:syz.2.1061 state:D stack:24048 pid:9897 tgid:9894 ppid:9319 flags:0x00004006 [ 541.521320][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.543606][ T30] Call Trace: [ 541.552855][ T30] [ 541.583007][ T30] __schedule+0x1895/0x4b30 [ 541.617774][ T30] ? __pfx___schedule+0x10/0x10 [ 541.637050][ T30] ? __pfx_lock_release+0x10/0x10 [ 541.657411][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 541.711976][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 541.737619][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 541.767156][ T30] ? schedule+0x90/0x320 [ 541.782787][ T30] schedule+0x14b/0x320 [ 541.808858][ T30] ? down_read+0x6a5/0xa40 [ 541.826546][ T30] schedule_preempt_disabled+0x13/0x30 [ 541.853054][ T30] down_read+0x705/0xa40 [ 541.861563][ T30] ? __pfx_down_read+0x10/0x10 [ 541.876898][ T30] ? folio_mapping+0x1b2/0x430 [ 541.893177][ T30] rmap_walk_file+0x765/0x9f0 [ 541.902023][ T30] migrate_pages+0xc29/0x3560 [ 541.921065][ T30] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 541.934629][ T30] ? __pfx_migrate_pages+0x10/0x10 [ 541.941772][ T30] ? __se_sys_mbind+0x1450/0x1a10 [ 541.954704][ T30] ? __pfx_lock_release+0x10/0x10 [ 541.962130][ T30] ? __pfx_remove_migration_pte+0x10/0x10 [ 541.977255][ T30] ? mas_next_slot+0xdc6/0xea0 [ 541.986892][ T30] ? __pfx_up_write+0x10/0x10 [ 541.991948][ T30] __se_sys_mbind+0x14a7/0x1a10 [ 541.999939][ T30] ? __pfx___se_sys_mbind+0x10/0x10 [ 542.012933][ T30] ? do_futex+0x33b/0x560 [ 542.019798][ T30] ? __pfx_do_futex+0x10/0x10 [ 542.026513][ T30] ? do_syscall_64+0x100/0x230 [ 542.037716][ T30] ? __x64_sys_mbind+0x21/0xf0 [ 542.057774][ T30] do_syscall_64+0xf3/0x230 [ 542.064418][ T30] ? clear_bhb_loop+0x35/0x90 [ 542.076765][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.088651][ T30] RIP: 0033:0x7f97aef7dff9 [ 542.093211][ T30] RSP: 002b:00007f97afcbb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 542.102934][ T30] RAX: ffffffffffffffda RBX: 00007f97af136058 RCX: 00007f97aef7dff9 [ 542.125383][ T30] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020001000 [ 542.144436][ T30] RBP: 00007f97aeff0296 R08: 0000000000000000 R09: 0000000000000002 [ 542.166018][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.180749][ T30] R13: 0000000000000000 R14: 00007f97af136058 R15: 00007f97af25fa28 [ 542.198257][ T30] [ 542.201897][ T30] INFO: task syz.2.1061:9905 blocked for more than 144 seconds. [ 542.217752][ T30] Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 542.236817][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.251210][ T30] task:syz.2.1061 state:D stack:23768 pid:9905 tgid:9894 ppid:9319 flags:0x00000004 [ 542.272976][ T30] Call Trace: [ 542.277478][ T30] [ 542.285312][ T30] __schedule+0x1895/0x4b30 [ 542.294759][ T30] ? __pfx___schedule+0x10/0x10 [ 542.313500][ T30] ? __blk_flush_plug+0x449/0x500 [ 542.320628][ T30] ? __pfx_lock_release+0x10/0x10 [ 542.328280][ T30] ? __blk_flush_plug+0x449/0x500 [ 542.336836][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 542.345050][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 542.357209][ T30] ? schedule+0x90/0x320 [ 542.361870][ T30] schedule+0x14b/0x320 [ 542.370639][ T30] io_schedule+0x8d/0x110 [ 542.380231][ T30] folio_wait_bit_common+0x882/0x12b0 [ 542.391346][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 542.400918][ T30] ? filemap_get_entry+0x328/0x3b0 [ 542.410098][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 542.419287][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 542.425567][ T30] __filemap_get_folio+0xaf/0xbd0 [ 542.437974][ T30] ? down_write+0x18c/0x220 [ 542.444093][ T30] hugetlbfs_zero_partial_page+0xb0/0x590 [ 542.463372][ T30] hugetlbfs_fallocate+0xd04/0x10e0 [ 542.477981][ T30] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 542.488950][ T30] vfs_fallocate+0x569/0x6e0 [ 542.497194][ T30] do_madvise+0x1ee3/0x4720 [ 542.506035][ T30] ? __pfx_do_madvise+0x10/0x10 [ 542.520880][ T30] ? __pfx_lock_release+0x10/0x10 [ 542.537481][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 542.544111][ T30] ? mark_lock+0x9a/0x360 [ 542.561868][ T30] ? __lock_acquire+0x1384/0x2050 [ 542.577472][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 542.585286][ T30] ? vma_end_read+0x18/0x170 [ 542.600734][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 542.613476][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 542.625871][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 542.656864][ T30] ? exc_page_fault+0x590/0x8c0 [ 542.688028][ T30] __x64_sys_madvise+0xa6/0xc0 [ 542.698091][ T30] do_syscall_64+0xf3/0x230 [ 542.717390][ T30] ? clear_bhb_loop+0x35/0x90 [ 542.722419][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.741872][ T30] RIP: 0033:0x7f97aef7dff9 [ 542.757936][ T30] RSP: 002b:00007f97ae9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 542.802010][ T30] RAX: ffffffffffffffda RBX: 00007f97af136208 RCX: 00007f97aef7dff9 [ 542.823155][ T30] RDX: 0000000000000009 RSI: 0000000000600003 RDI: 0000000020000000 [ 542.856426][ T30] RBP: 00007f97aeff0296 R08: 0000000000000000 R09: 0000000000000000 [ 542.903838][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.937895][ T30] R13: 0000000000000001 R14: 00007f97af136208 R15: 00007f97af25fa28 [ 542.965068][ T30] [ 542.979687][ T30] [ 542.979687][ T30] Showing all locks held in the system: [ 543.016902][ T30] 3 locks held by kworker/u8:0/11: SYZFAIL: failed to send rpc fd=3 want=38040 sent=0 n=-1 (errno 32: Broken pipe) [ 543.042609][ T30] #0: ffff88802deb9148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 543.105661][ T30] #1: ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 543.166107][ T30] #2: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 543.197956][ T30] 1 lock held by khungtaskd/30: [ 543.218401][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 543.256992][ T30] 6 locks held by kworker/u8:2/35: [ 543.276771][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 543.305896][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 543.367144][ T30] #2: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 543.403487][ T30] #3: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 543.448283][ T30] #4: ffff8880428e1428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_netns_pre_exit+0xba/0x1e0 [ 543.485867][ T30] #5: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 543.540603][ T30] 3 locks held by kworker/u8:3/52: [ 543.559514][ T30] 5 locks held by kworker/u8:8/2593: [ 543.580130][ T30] 3 locks held by kworker/u8:10/3065: [ 543.603475][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 543.683364][ T30] #1: ffffc9000a3b7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 543.724737][ T30] #2: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 543.768972][ T30] 2 locks held by getty/4994: [ 543.784699][ T30] #0: ffff88814c7920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 543.811756][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 543.844982][ T30] 1 lock held by syz.2.1061/9897: [ 543.858097][ T30] #0: ffff8880630ed858 (&hugetlbfs_i_mmap_rwsem_key){++++}-{3:3}, at: rmap_walk_file+0x765/0x9f0 [ 543.884874][ T30] 3 locks held by syz.2.1061/9905: [ 543.898410][ T30] #0: ffff888021ed4420 (sb_writers#13){.+.+}-{0:0}, at: vfs_fallocate+0x4fe/0x6e0 [ 543.952407][ T30] #1: ffff8880630ed588 (&sb->s_type->i_mutex_key#20){+.+.}-{3:3}, at: hugetlbfs_fallocate+0x3d7/0x10e0 [ 543.998973][ T30] #2: ffff8880630ed858 (&hugetlbfs_i_mmap_rwsem_key){++++}-{3:3}, at: hugetlbfs_fallocate+0x4b2/0x10e0 [ 544.036673][ T30] 2 locks held by syz-executor/10485: [ 544.047037][ T30] 1 lock held by syz-executor/10658: [ 544.068072][ T30] #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 544.084167][ T30] 1 lock held by syz-executor/10953: [ 544.096048][ T30] #0: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 544.117712][ T30] 1 lock held by syz-executor/11221: [ 544.124264][ T30] #0: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 544.142695][ T30] 1 lock held by dhcpcd/11452: [ 544.155997][ T30] #0: ffff88807d162608 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 544.183331][ T30] 1 lock held by syz-executor/11453: [ 544.196814][ T30] [ 544.199694][ T30] ============================================= [ 544.199694][ T30] [ 544.219049][ T30] NMI backtrace for cpu 0 [ 544.226278][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 544.258176][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 544.289970][ T30] Call Trace: [ 544.297152][ T30] [ 544.300472][ T30] dump_stack_lvl+0x241/0x360 [ 544.316457][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.322172][ T30] ? __pfx__printk+0x10/0x10 [ 544.327230][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 544.337747][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 544.344452][ T30] ? _printk+0xd5/0x120 [ 544.360087][ T30] ? __pfx__printk+0x10/0x10 [ 544.380213][ T30] ? __wake_up_klogd+0xcc/0x110 [ 544.392655][ T30] ? __pfx__printk+0x10/0x10 [ 544.399995][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 544.406589][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 544.414847][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 544.425483][ T30] watchdog+0xff4/0x1040 [ 544.440155][ T30] ? watchdog+0x1ea/0x1040 [ 544.444796][ T30] ? __pfx_watchdog+0x10/0x10 [ 544.459866][ T30] kthread+0x2f0/0x390 [ 544.469412][ T30] ? __pfx_watchdog+0x10/0x10 [ 544.478830][ T30] ? __pfx_kthread+0x10/0x10 [ 544.491102][ T30] ret_from_fork+0x4b/0x80 [ 544.497620][ T30] ? __pfx_kthread+0x10/0x10 [ 544.506549][ T30] ret_from_fork_asm+0x1a/0x30 [ 544.522037][ T30] [ 544.537937][ T30] Sending NMI from CPU 0 to CPUs 1: [ 544.545063][ C1] NMI backtrace for cpu 1 [ 544.545079][ C1] CPU: 1 UID: 0 PID: 11453 Comm: syz-executor Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 544.545644][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 544.545656][ C1] RIP: 0010:lock_acquire+0x1a3/0x550 [ 544.545686][ C1] Code: 00 00 00 00 00 00 9c 8f 84 24 80 00 00 00 42 80 3c 2b 00 74 08 4c 89 ff e8 fa 42 8e 00 48 8d 5c 24 60 4c 8b bc 24 80 00 00 00 48 c7 c7 a0 d7 0a 8c e8 20 0e 56 0a 65 ff 05 c9 32 92 7e 45 31 [ 544.545700][ C1] RSP: 0018:ffffc900092b75a0 EFLAGS: 00000246 [ 544.545717][ C1] RAX: 0000000000000000 RBX: ffffc900092b7600 RCX: ffffffff817056d4 [ 544.545730][ C1] RDX: 0000000000000000 RSI: ffffffff8c6100c0 RDI: ffffffff8c610080 [ 544.545742][ C1] RBP: ffffc900092b76f8 R08: ffffffff901cfdef R09: 1ffffffff2039fbd [ 544.545755][ C1] R10: dffffc0000000000 R11: fffffbfff2039fbe R12: 1ffff92001256ebc [ 544.545767][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000246 [ 544.545779][ C1] FS: 0000555574713500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 544.545793][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 544.545805][ C1] CR2: 000055b6562ef680 CR3: 000000002f42c000 CR4: 00000000003526f0 [ 544.545820][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 544.545830][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 544.545841][ C1] Call Trace: [ 544.545848][ C1] [ 544.545855][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 544.545876][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 544.545897][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 544.545915][ C1] ? nmi_handle+0x2a/0x5a0 [ 544.545938][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 544.545958][ C1] ? nmi_handle+0x14f/0x5a0 [ 544.545974][ C1] ? nmi_handle+0x2a/0x5a0 [ 544.545990][ C1] ? lock_acquire+0x1a3/0x550 [ 544.546009][ C1] ? default_do_nmi+0x63/0x160 [ 544.546028][ C1] ? exc_nmi+0x123/0x1f0 [ 544.546046][ C1] ? end_repeat_nmi+0xf/0x53 [ 544.546065][ C1] ? lock_acquire+0xd4/0x550 [ 544.546128][ C1] ? lock_acquire+0x1a3/0x550 [ 544.546148][ C1] ? lock_acquire+0x1a3/0x550 [ 544.546168][ C1] ? lock_acquire+0x1a3/0x550 [ 544.546188][ C1] [ 544.546193][ C1] [ 544.546202][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 544.546221][ C1] ? save_stack+0x11f/0x1f0 [ 544.546237][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 544.546257][ C1] ? __pfx_save_stack+0x10/0x10 [ 544.546271][ C1] ? post_alloc_hook+0x1f3/0x230 [ 544.546291][ C1] ? get_page_from_freelist+0x3045/0x3190 [ 544.546307][ C1] ? __alloc_pages_noprof+0x292/0x710 [ 544.546322][ C1] ? alloc_pages_mpol_noprof+0x3e8/0x680 [ 544.546338][ C1] ? __vmalloc_node_range_noprof+0xa2b/0x13f0 [ 544.546354][ C1] ? vmalloc_user_noprof+0x74/0x80 [ 544.546368][ C1] ? kcov_ioctl+0x56/0x640 [ 544.546386][ C1] ? __se_sys_ioctl+0xf9/0x170 [ 544.546407][ C1] ? do_syscall_64+0xf3/0x230 [ 544.546422][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.546447][ C1] ? page_ext_get+0x20/0x2a0 [ 544.546464][ C1] page_ext_get+0x3d/0x2a0 [ 544.546480][ C1] ? page_ext_get+0x20/0x2a0 [ 544.546497][ C1] __set_page_owner+0x9e/0x800 [ 544.546513][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 544.546532][ C1] ? get_page_from_freelist+0x87d/0x3190 [ 544.546549][ C1] ? __pfx_lock_release+0x10/0x10 [ 544.546572][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 544.546592][ C1] post_alloc_hook+0x1f3/0x230 [ 544.546614][ C1] get_page_from_freelist+0x3045/0x3190 [ 544.546636][ C1] ? __alloc_pages_noprof+0x16f/0x710 [ 544.546656][ C1] ? alloc_pages_bulk_noprof+0x729/0xd40 [ 544.546673][ C1] ? fs_reclaim_acquire+0x93/0x130 [ 544.546696][ C1] __alloc_pages_noprof+0x292/0x710 [ 544.546713][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 544.546738][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 544.546759][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 544.546777][ C1] ? rcu_is_watching+0x15/0xb0 [ 544.546794][ C1] ? trace_kmalloc+0x1f/0xd0 [ 544.546812][ C1] ? __vmalloc_node_range_noprof+0x5c3/0x13f0 [ 544.546828][ C1] ? alloc_pages_noprof+0xef/0x170 [ 544.546846][ C1] __vmalloc_node_range_noprof+0xa2b/0x13f0 [ 544.546874][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 544.546895][ C1] vmalloc_user_noprof+0x74/0x80 [ 544.546910][ C1] ? kcov_ioctl+0x56/0x640 [ 544.546927][ C1] kcov_ioctl+0x56/0x640 [ 544.546945][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 544.546964][ C1] __se_sys_ioctl+0xf9/0x170 [ 544.546986][ C1] do_syscall_64+0xf3/0x230 [ 544.547001][ C1] ? clear_bhb_loop+0x35/0x90 [ 544.547018][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.547039][ C1] RIP: 0033:0x7fdf6f37dbfb [ 544.547054][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 544.547068][ C1] RSP: 002b:00007ffe3af9c6e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.559455][ C1] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fdf6f37dbfb [ 544.559471][ C1] RDX: 0000000000040000 RSI: ffffffff80086301 RDI: 00000000000000dc [ 544.559481][ C1] RBP: 00007fdf6f536378 R08: 00000000000000da R09: 0000000000000000 [ 544.559491][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.559500][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 544.559520][ C1] [ 544.559601][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 544.559617][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 544.559640][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 544.559652][ T30] Call Trace: [ 544.559661][ T30] [ 544.559670][ T30] dump_stack_lvl+0x241/0x360 [ 544.559699][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.559718][ T30] ? __pfx__printk+0x10/0x10 [ 544.559743][ T30] ? vscnprintf+0x5d/0x90 [ 544.559765][ T30] panic+0x349/0x880 [ 544.559785][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 544.559809][ T30] ? __pfx_panic+0x10/0x10 [ 544.559824][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 544.559845][ T30] ? __irq_work_queue_local+0x137/0x410 [ 544.559869][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 544.559889][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 544.559911][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 544.559935][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 544.559960][ T30] watchdog+0x1033/0x1040 [ 544.559985][ T30] ? watchdog+0x1ea/0x1040 [ 544.560012][ T30] ? __pfx_watchdog+0x10/0x10 [ 544.560034][ T30] kthread+0x2f0/0x390 [ 544.560052][ T30] ? __pfx_watchdog+0x10/0x10 [ 544.560073][ T30] ? __pfx_kthread+0x10/0x10 [ 544.560090][ T30] ret_from_fork+0x4b/0x80 [ 544.560114][ T30] ? __pfx_kthread+0x10/0x10 [ 544.560132][ T30] ret_from_fork_asm+0x1a/0x30 [ 544.560168][ T30] [ 545.803672][ T30] Kernel Offset: disabled [ 545.810418][ T30] Rebooting in 86400 seconds..