last executing test programs: 31.440116628s ago: executing program 4 (id=729): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10}, 0x400, "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"}, 0x418}) r1 = syz_io_uring_setup(0x931, &(0x7f0000000480)={0x0, 0xeff, 0x100, 0xfffffffe, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 30.325448844s ago: executing program 1 (id=741): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x80000, @empty}, 0x1c) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) landlock_create_ruleset(0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x805'}, @typed={0x10, 0x15, 0x0, 0x0, @str='A\x90\x8c\xfd[\xac\x9fj+\x00'}]}]}, 0x34}}, 0x0) fcntl$setsig(r0, 0xa, 0x21) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="3c00000058001f00030300f9002304000a04d65f0800010002010002170003800500000099db9742d5ea7f1e31fd6200b040670000bcf04fd376f73f", 0x3c) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r2) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0xd01, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}]}, 0x30}}, 0x40010) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x0, 0x0, 0x6, "4f982237ba41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x8001) 28.00241323s ago: executing program 0 (id=749): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000780)="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", 0x482, 0x6d91fb6102d8d9cc, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r0, &(0x7f0000000040)="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", 0xfe, 0x4008004, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000024c0)={@remote, @mcast1, @mcast2, 0x3, 0x1, 0x5, 0x400, 0xf5}) 27.510993827s ago: executing program 0 (id=753): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x50, 0x140f, 0x311, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0xffffff6e}, 0x1, 0x0, 0x0, 0x44000}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, r6, 0x0, 0x0, 0x0, 0x80000000, {0x0, 0x0, 0xfffc, 0x0, 0x0, 0x5, 0xfffd, 0x0, 0x6, 0x0, 0x803, 0x0, 0x8000005, 0x0, "b400080000deff00000000e61b00000100000400004e000000000000000040f7"}}) r7 = syz_usb_connect$uac1(0x1, 0xb0, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x58, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x3, 0x1, 0x1a, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x1}, [@processing_unit={0x9, 0x24, 0x7, 0x3, 0x2, 0x0, 'Iy'}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0x1, 0x2}, @processing_unit={0x9, 0x24, 0x7, 0x2, 0x6, 0xf7, "afa9"}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x62, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x2, 0x7, 0x8, "66fa", "f23d"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x3, 0x58, 'f^', 'z'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x3, 0x6, {0x7, 0x25, 0x1, 0x0, 0xf, 0xfffd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x2, 0x3c, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x10, 0x0, 0x3, {0x7, 0x25, 0x1, 0x0, 0x2, 0x5}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0xed, 0x1, 0x1, 0x8, 0x1}, 0x117, &(0x7f0000000480)={0x5, 0xf, 0x117, 0x6, [@generic={0xda, 0x10, 0x3, "0183ae66058a9119d480c15cf5257715d8ec8085d263edf693cc437fe5247dc0882856958883ac425e5892c76eef9f0c54d8fab92c7a8afaee95abea27010eb911cee5204d656e6b65d9e7e6381342725312d008106285237c022ceaa12fe57b3d22369158ddd51e1e3df517956174d36ced5bef679564818eb05b8e0f7306b1ae79d6cd1fda8928ea5c57aaab3ed01825b956c558bf468f05853b8a7f460c3939f3f1291dc4dd66d5587012f9d847fc9de31422ace05fa5fae4b239f74cd40588a4ef99028b96c976e02aad9907a45d2934152e7afd1d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x65, 0x9, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0x79, "b01dd508d61e3c45a6161bff65ae1fee"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf9, "59e41305ac00c5de7831a2e98ec2aa6d"}]}, 0x1, [{0x14, &(0x7f0000000380)=@string={0x14, 0x3, "1cbdc06038285fcccc3770676181f4c90b93"}}]}) syz_usb_control_io(r7, &(0x7f00000007c0)={0x18, &(0x7f0000000600)={0x40, 0xf, 0x14, {0x14, 0x7, "ac265c42ca72e990ba99cb0a53a1dd2540a6"}}, &(0x7f0000000640)={0x0, 0x3, 0xb, @string={0xb, 0x3, "499b8109e53bd9aaf4"}}, &(0x7f0000000700)={0x0, 0xf, 0x70, {0x5, 0xf, 0x70, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x8, 0x6}, @generic={0x5a, 0x10, 0x4, "18dd0360afcef5ecdd7950e907f83d9eae0b656cf0a185f30dd22b77e118c2d8c9f3afdd7ee41d29f0487e3aa0735402023ea65bb4efc75dab1a92c91ec6c4f2c58ffa165ec446c9b56ca267c6a8c7c8647a50feaf58d0"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x9, 0x0, 0x4}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0xff, 0x4, "60b747e2", "20b5a90a"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x18, 0x0, 0x0, 0x7, 0x7, 0x80}}}, &(0x7f0000000c40)={0x44, &(0x7f0000000800)={0x0, 0x14, 0x68, "358698dd508c6f5a2f693da91f188e496e8252674188c17c3a1f9d6d409870f283254f9159736171f2179269e71c084d979b2c8d9b4d3502f368fa1b251dec53743f3777d2c19b577816ebb87fec7eb6eb47e8e1375e318b20f1175bc3c22a0d915791d16b6f4af4"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x120, 0x2}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x687e}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "a782"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @random="5f93d3c7b811"}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @random="fd355c4511d8"}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "76a4"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x7}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001380)='/sys/kernel/notes', 0x0, 0x0) io_setup(0x4, &(0x7f0000001800)=0x0) io_submit(r10, 0x1, &(0x7f0000000b80)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x3}]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r8, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40046602, &(0x7f0000000140)=0x8000) add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 26.845076806s ago: executing program 1 (id=755): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 23.589371331s ago: executing program 3 (id=763): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xfffffffd, 0x2, 0x1}) ioctl$HIDIOCGUSAGE(r1, 0x40184810, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x3}) 22.648891841s ago: executing program 2 (id=764): fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r0, 0x4004) r1 = openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x200000, 0x80) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000100)={0x0, 0x1, 0x6, 0x1, 0x6}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000200)={0x2, 0xa}) epoll_create1(0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@ptr={0x6, 0x0, 0x0, 0x2, 0x1}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x4}, @func={0xf, 0x0, 0x0, 0xc, 0x1}, @func={0xf, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000300)=""/77, 0x4c, 0x4d, 0x1, 0x2, 0x10000, @value=r3}, 0x28) write(r4, 0x0, 0x0) r5 = socket(0x6, 0x80000, 0x3c1c8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r4, 0x20, &(0x7f00000005c0)={&(0x7f00000004c0)=""/187, 0xbb, 0x0, &(0x7f0000000580)}}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000640)={0x0, 0x19, "c4d00f0d70bdd7532a13688dd9b09535aa8bd4001131f205b6"}, &(0x7f0000000680)=0x21) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000006c0)={0x3ff, 0x200, 0xfb00, 0x201, r6}, 0x10) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000700)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000740)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000001780)={{0x0, 0x3, 0x101, 0x5, 0x5, 0xfffffffffffffff8, 0x9, 0x650d, 0x3, 0x5, 0x3, 0x3ff, 0x100000001, 0x80}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001880)={&(0x7f0000001840)='timer_expire_entry\x00', r3, 0x0, 0x8000000000000001}, 0x18) lstat(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000001980)={0x3, {0x9, 0x1, 0x7, 0x7, 0x0, 0x4}}) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000019c0)='cdg\x00', 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001a00)=[@in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x22}, 0x443c5efc}, @in6={0xa, 0x4e21, 0xd, @mcast1, 0x3}], 0x38) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000001c40)={&(0x7f0000001a40), 0xc, &(0x7f0000001c00)={&(0x7f0000001a80)={0x17c, 0x7, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x60}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x266fff43b00dffc1}]}, @NFTA_RULE_EXPRESSIONS={0xd8, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x4c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1cf}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x19, 0x7, 0x1, 0x0, "6fd34369b1fec143bb55aceae2847ee0eb18f7d079"}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$SNDCTL_SEQ_CTRLRATE(r3, 0xc0045103, &(0x7f0000001c80)=0x401) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000001cc0)=0x10001, 0x4) 22.481264152s ago: executing program 2 (id=765): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f000000bdc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f000000be00)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}}, 0x0) r3 = openat$ttyprintk(0xffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x5) r4 = eventfd(0x5) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x2, r4}) msgctl$IPC_SET(0x0, 0x1, 0x0) r5 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) 19.861135175s ago: executing program 3 (id=766): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105511, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b040000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000000080000850000008600000018110000", @ANYRES32=r3, @ANYRESDEC=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x8000) 18.284730209s ago: executing program 3 (id=767): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = fsopen(&(0x7f00000011c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x9) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x22) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000000c0)='./file0\x00') mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f00000002c0)='./file0/file0\x00', 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x8000, 0x7, 0x7ff, 0x7, {{0x1e, 0x4, 0x0, 0x7, 0x78, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1, {[@end, @ssrr={0x89, 0xf, 0x95, [@dev={0xac, 0x14, 0x14, 0x39}, @multicast2, @empty]}, @timestamp={0x44, 0x1c, 0xd8, 0x0, 0x4, [0x0, 0x7fff, 0xb2f9, 0x5, 0x5fb, 0x8]}, @timestamp={0x44, 0x28, 0xcd, 0x0, 0x9, [0x7, 0xeab4, 0x1000, 0x3, 0x4, 0xff, 0x9, 0x9, 0x10]}, @generic={0x0, 0x10, "c331a53412dd503c642cd8a6955b"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x2, 0x4, 0x21, @dev={0xfe, 0x80, '\x00', 0x1e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x80, 0x5, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb}}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x10, 0x8, 0x6, 0x0, {{0x7, 0x4, 0x3, 0x2f, 0x1c, 0x67, 0x0, 0x8d, 0x4, 0x0, @broadcast, @local, {[@rr={0x7, 0x7, 0x20, [@remote]}]}}}}}) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000003b40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003b80)=ANY=[@ANYBLOB='8&\x00\x00', @ANYRES16=r7, @ANYBLOB="000828bd7000ffdbdf250800000000010280f9000400fdef6d230dc0938968a13be94cd873e616bc304a9e233a940b9a528bc0d0c8561a8287fc167307d20930954d1596e97480d0c3dadedae613ee45fc0ae015a1d407420a8cc133197b6dc61685a40fa645f9a333f32f3fb6522cc5da11c9c7d8a65a9b1d5f59b57eb9d13d2d0a27cbc70c1f8c32c31de59b3470a8fce486990caa9872ab595a80471c6e82b42a3038265e38104684cb7cc6927f4ac7f94905bc498316f48a174d8261ba9a8d7edf65afad535d17e73eb4dedc9aa205aed5b2e57111755992b38edeecff3ef38e0318f3d9957c86a26f4b8f3c729206734eb41844d097cc4d5ea63e4e8e08249fc193341a13ebad33bc0000008400018008000300030000000800030003000000140002006e65747063693000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="1400020076657468315f746f5f626f6e640000000800030002000000140002006c6f000000000000000000000000000008000300040000001400020070696d7265673000000000000000000030000180140002006970365f76746930000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080001004c9ca60fd99d1e0a227cae0ccd0febfc786968926108382823adad958d984b127cb5e51a5ba5a5875d33bcf251a7796bb43e6a5841def848ea144c0500000000000000c24484ba9f47aaace834f16f95c0891c664f60fe92551eeb8cc7e8bad64b038d4894aaabb71d7f8dfe", @ANYRES32=r13, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="14000200697036746e6c3000000000000000000008000100", @ANYRES32=r15, @ANYBLOB="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"], 0x2638}, 0x1, 0x0, 0x0, 0x44080}, 0x4c880) symlinkat(&(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000000c0)='./file0\x00') unshare(0x22020600) bind$alg(r1, 0x0, 0x0) 18.232837863s ago: executing program 2 (id=768): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003215124099043e10184e01020301090223000100000000090400000800000000082403010000000009050f333d", @ANYRES16=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="91e7ebfe6de46d65ff1c8cc8bc2780f4f5ba562d32f98e5d0bab474b495d73416e233303fb15eca4840e4161714aae7eb9c7edb9d192cd6cdfa311d8f32f42d3c1ed5c7b4108204fc9a8e940dbf24816a8a22293b12d469fd6d026", @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x40004) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x6da24b7ebfdfaf83}, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000280)=0x4c822503, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x0, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x110, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8}, @TCA_FQ_RATE_ENABLE={0x8}]}}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x7, 0x0, 0x2, 0x2, 0x0, 0x80, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}]}]}, 0x110}}, 0x0) 18.033705292s ago: executing program 3 (id=769): socket$inet(0x2b, 0x801, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\nu5', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@nop, @generic={0x8, 0xd, "36eb1e9a456386bfa14110"}, @window={0x3, 0x3}, @window={0x3, 0x3, 0xff}]}}}}}}}}, 0x0) pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x131a, &(0x7f0000000200), &(0x7f0000000140)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) 17.729922546s ago: executing program 3 (id=770): socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001300050000000000000000000700d1d1", @ANYRES32, @ANYBLOB="00000000000000001c001a8018000580140007800800010000000000080002"], 0x3c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1600", 0x30, 0x2b, 0x0, @private1, @local, {[@hopopts={0x87}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet_sctp(0x2, 0x1, 0x84) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x1000007f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8c}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{0x1, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@bloom_filter={0x1e, 0xdf, 0xc0, 0x91071a85, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0xc, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x11, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1000, &(0x7f0000000500)=""/4096, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x1, 0xb, 0x4, 0x198a}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001640)=[r0, r1, r2], &(0x7f0000001680)=[{0x3, 0x2, 0x5, 0x3}, {0x1, 0x5}, {0x2, 0x2, 0xd, 0x9}, {0x5, 0x1, 0x6, 0xc}, {0x3, 0x3, 0x8, 0x4}, {0x3, 0x1, 0xa}], 0x10, 0x4, @void, @value}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 17.529190259s ago: executing program 1 (id=771): r0 = syz_clone(0x6832091, 0x0, 0x48, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) r2 = syz_io_uring_setup(0x6ce, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x2, 0x0, r2}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {}, 0x400, "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"}, 0x418}) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) io_setup(0x9, &(0x7f00000002c0)) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000700001000005b1b2c55c20be6d2d0000948ec838214d1254bb580c4b437c10882cd0ae0e84309b96a4c665248a704d3fd1d79c0074c5430d48c48ed4908afb4234e0", @ANYRES32=r9, @ANYBLOB="0c0001800800010008000000"], 0x24}}, 0x0) r10 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r10) r11 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r10, 0x0, 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r11) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x89f2, 0x0) 17.434489337s ago: executing program 3 (id=772): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10}, 0x400, "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"}, 0x418}) r1 = syz_io_uring_setup(0x931, &(0x7f0000000480)={0x0, 0xeff, 0x100, 0xfffffffe, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 17.383614593s ago: executing program 4 (id=731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034000180090001007866726d00000000240002800500030000000000080001400000001408000440000000060800024000000005"], 0x2ec0}}, 0x0) (async) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xd8, 0xa, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xb}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xc}, @IPSET_ATTR_PACKETS={0xc}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_virt_wifi\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$^\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000680)={[&(0x7f00000004c0)='syz2\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='!})[-\x00', &(0x7f0000000580)='-@\']!^&\x00', &(0x7f00000005c0)='syz2\x00', &(0x7f0000000600)='&:\x00', &(0x7f0000000640)='ip6gre0\x00']}, &(0x7f0000000780)={[&(0x7f00000006c0)='\x00', &(0x7f0000000700)='},$\x00', &(0x7f0000000740)='syztnl2\x00']}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001840)={{0x2, 0x5, 0xfffffffd, 0x3, 'syz0\x00', 0x1}, 0x6, 0x400, 0x8001, 0x0, 0x0, 0xe, 'syz0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x3, 0x80000001, 0x21, @loopback, @private2, 0x8, 0x700, 0xc00, 0xdd8}}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x8}, @qipcrtr={0x2a, 0xffffffffffffffff, 0xc002}, @xdp={0x2c, 0x2, r2, 0x25}, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)='netdevsim0\x00', 0x1ff, 0x8, 0x1}) 14.540482771s ago: executing program 0 (id=754): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r1], 0x4c}}, 0x0) 12.989241469s ago: executing program 4 (id=773): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_macvtap\x00', 0x0}) r2 = add_key(&(0x7f0000000500)='logon\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="69206e91355df98e76584ddd40234deca00a5b5078f2c0c0d50c4502f1ec4e0ef9be6af54b54366a53429a8cd70c6db3ba8b32fd3788c643363da302a56f81941b84faca80dee4e3ef6e46c32fb2f82d2cd618f01c1e4aeb4cb4a65f47cf77509e6bcec6a1557157fe7641f6bf0148caf0df616179ba236494db884f4c4a36b716dacd145599fbc549e2cce07e008710876d897862c59ad4339a39649790545f4f48a77a3ec8cf", 0xa7, 0xfffffffffffffffa) add_key$user(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000480)="d93a1b690c6beb30777a83bbb9cb2c18c76248c5da1ed6218605945067aa4b593ffe768e4e7f6710fe89e9b26612228fef6abf9bb500caf40275088f9652dbf932526c", 0x43, r2) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x557a}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004045}, 0x0) r3 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000001c0)={r4, 0xfffffffffffffffb, 0x3}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000180)={0x3, 0x0, &(0x7f00000000c0)=""/188, &(0x7f0000000040)=""/2, &(0x7f0000000240)=""/153, 0xf000}) 12.246069408s ago: executing program 2 (id=774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x2]}}}}]}, 0x88}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="28000e00800000000802110000010802110000010802110000000000000000000000000064000000080026006c09000008000c006400000008000d"], 0x5c}}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "a531cef5"}]}}, 0x0}, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000001380)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@hyper}) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000000c0)={{@hyper}, @any, 0x0, 0x0, 0x3, 0x0, 0x116d143d00000000}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000039000701000000000000000001020000290000800800018004000000090002"], 0x2c}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r11, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@hyper, 0x201}, @any, 0xb, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x1}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) 12.065149652s ago: executing program 1 (id=775): r0 = socket(0x15, 0x5, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc, 0x2}, 0x20) unshare(0x22020400) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r4, r5, 0x0, 0x0, 0x0, 0x9, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, "601e6d5768664c53a906ed0230c56df9583a5cec7e491e45d71fca41ec051de6"}}) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) getsockname$tipc(r0, 0x0, &(0x7f0000000080)) 11.977166493s ago: executing program 4 (id=776): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105511, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b040000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000000080000850000008600000018110000", @ANYRES32=r3, @ANYRESDEC=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000140)={0x4, {0x2a, 0x6666, 0x6}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x8000) 11.836367116s ago: executing program 0 (id=777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x8, @mcast1, 0x40}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYRESDEC=r1], &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000340)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r5, 0x1000000, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f00000001c0)={0x4, r1, 0x1}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, 0x0) 6.926455306s ago: executing program 4 (id=779): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000307000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000299000/0x4000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x19) 6.924528615s ago: executing program 1 (id=780): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a31000/0x1000)=nil, 0x1000, 0x3) pread64(r1, 0x0, 0x0, 0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) io_setup(0x3ff, &(0x7f0000000500)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000250, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000080)="4e8fc38e71", 0x5}]) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f00000036c0)=ANY=[], &(0x7f0000003700)=0x24) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'ovf\x00'}, 0x2c) syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000002080045f0002800019078ac1e0001ac1414bb0180907800"/54], 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0xd4) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001800010300000000000000000a800000000300070000000014000100fe8000000000000086"], 0x30}, 0x1, 0x0, 0x0, 0x637d02aa9d69e2f8}, 0x0) 6.729589907s ago: executing program 2 (id=781): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = dup3(r3, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000008000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000007000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff00000000b5090c00000000007baaf0ff00000000bc8608000000000027080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000001600000076000000bf9110000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newtfilter={0x804, 0x2c, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xf, 0xa}, {0xb, 0xffe0}, {0xc, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r6}]}}, @TCA_CHAIN={0x8, 0xb, 0x363}, @TCA_CHAIN={0x8, 0xb, 0x1e9f8471}, @filter_kind_options=@f_basic={{0xa}, {0x7ac, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}, @TCA_BASIC_ACT={0x2a8, 0x3, [@m_tunnel_key={0xbc, 0x6, 0x0, 0x0, {{0xf}, {0x74, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2a}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010100}]}, {0x19, 0x6, "c9685939259caf27470b70415d039ca819d7503b6f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0xb0, 0xf, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x6e, 0x6, "6fc86e6a946bf02a372d930f2a185de09531eb07cf1df60e22a4ecca827c92d58b53ecd5b3e991b3fd1539671becb504c9d4ccd2ef76fcc1803b99182a7fffa724ae324eba5726e1dc617f4dba5421b21ef274d232954603036293a8ecb94834ad3cfe542c5d2b2af90d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_simple={0x84, 0x1e, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0xffffffff, 0x0, 0x10000, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x7, 0x20000000, 0x635, 0x6f}}, @TCA_DEF_DATA={0x8, 0x3, 'u32\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x1, 0x6, 0x0, 0x3}}]}, {0x5, 0x6, "85"}, {0xc}, {0xc, 0x8, {0x6, 0x2}}}}, @m_mirred={0xb4, 0x15, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x6, 0x6, 0x7, 0xd36c}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5, 0x0, 0x1000, 0x2}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0x5b, 0x8, 0xfffff801, 0x7fffffff}, 0x4, r6}}]}, {0x27, 0x6, "2efe64369c4b34d103788e1a168e4049b33c9089d564a563f9934235125893549cadd4"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_ACT={0x94, 0x3, [@m_gact={0x90, 0x1c, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x169b, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x2, 0x4, 0x5, 0x1}}]}, {0x3d, 0x6, "320db3ab3133c30f27e8e777017780c6d30deca9f4b8d0cf6a67f74a263f29046be459847733504732326cfd07719978ebb1ad2b5cd15baf97"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BASIC_POLICE={0x464, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x3, 0x8, 0x10, 0x9, {0x4, 0x2, 0xffff, 0x6d, 0x7f, 0x8}, {0x0, 0x0, 0x2, 0x7, 0x0, 0x10}, 0xd48e, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x7, 0x8001, 0x81, 0xe, 0x9, 0x0, 0x2, 0x0, 0x6, 0x4a, 0x3, 0x1, 0x7, 0x9, 0x80000001, 0x0, 0x8, 0x8, 0x80000000, 0x8, 0x9, 0x2, 0x19f0c72e, 0x5, 0x94, 0x5, 0x3ff8, 0xab, 0x0, 0x8, 0x10000, 0x4, 0x6, 0x101, 0x5, 0x15, 0x6, 0x800000, 0x2, 0x1, 0x502d, 0x4, 0x200, 0xffffff6d, 0x4, 0x2, 0xff, 0x1, 0x8, 0xdd, 0x43b, 0x8, 0x1, 0x5, 0x0, 0x0, 0x8, 0x1, 0xa5, 0x9, 0xb, 0x7, 0x8, 0x7, 0x4035, 0x7, 0x10, 0xff, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x6, 0xfffffbff, 0x6, 0x1, 0x7f, 0x8, 0x400, 0x1, 0x3, 0x6, 0xffff, 0x8, 0xf59, 0x8, 0xa976, 0x80000000, 0x8, 0xe35d, 0x6, 0x5, 0x5, 0x1, 0x4, 0x1, 0x7fffffff, 0x3, 0x1000, 0x7, 0x7, 0xc, 0x0, 0x8, 0x6, 0x5, 0x668, 0x6, 0xa6, 0x0, 0x4, 0x7, 0x0, 0x5, 0xb554, 0x7, 0x1, 0x3, 0x6, 0x6, 0x3, 0x8, 0x9, 0x6, 0x5, 0x2, 0x9, 0x8, 0x8, 0x5, 0xcd, 0x6, 0x3, 0x3, 0xcd, 0x3, 0xfffffff9, 0x81, 0xffff8001, 0x1000, 0x3, 0x6, 0xc71, 0x9, 0xca6d, 0xffff, 0x8, 0x8, 0x7f, 0x9b3a, 0xc9, 0x9, 0x3, 0x5, 0x0, 0x80, 0xc2, 0xb, 0x353151f6, 0xff, 0x8, 0x6d98, 0x1, 0x5, 0x39d, 0xfffff000, 0xe, 0x9, 0x6, 0x2, 0x0, 0x1c, 0x8, 0xfffffffa, 0x2, 0x8, 0x91f, 0x100, 0x4, 0x2, 0x755, 0x7, 0x10, 0x9, 0x2, 0x41, 0x2edbeb2d, 0x80, 0xfffff490, 0x8, 0x6, 0x2, 0xd, 0x8, 0x6, 0x10000, 0xcbcb, 0x3, 0x5, 0xed, 0x5, 0x2, 0x9, 0x8, 0x7, 0x2, 0x44, 0x0, 0x4, 0x8001, 0x6, 0xe, 0x4, 0x4412, 0x9, 0x8, 0x10000, 0x1000, 0x0, 0x40, 0x200, 0x7, 0x8, 0x3, 0x0, 0x3, 0x2, 0x3, 0x481, 0x7, 0x2, 0x7, 0x1, 0x2, 0x7, 0x7, 0x53, 0x8, 0x80000001, 0x100, 0xffff, 0x4, 0x9, 0x84, 0x7fffffff, 0x5, 0x8, 0x3, 0x9, 0x8, 0x80000001, 0x40, 0x81]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6c}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}]}]}}]}, 0x804}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003240)=@newtfilter={0x38, 0x28, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x9}, {0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x10000}]}}]}, 0x38}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280)="b0827a5c99d662eec69ae622cd45414be0ef43d74757905a9e5ca4048fe916eee4fb538155cf7818f3588db3d327965da03bd6529d8c8685b6ba306b8f3b9100b5", 0x41, r1}, 0x64) 6.565221387s ago: executing program 0 (id=782): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105511, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b040000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000000080000850000008600000018110000", @ANYRES32=r3, @ANYRESDEC=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x8000) 5.084996682s ago: executing program 2 (id=783): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffc, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_fuse_handle_req(r3, &(0x7f0000001a40)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet6(r4, &(0x7f0000001a00)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c, 0x0}}], 0x1, 0x24040015) readv(r3, &(0x7f0000000940)=[{&(0x7f0000000600)=""/126, 0x7e}], 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x3) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r6}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xc1, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000680)={'erspan0\x00', 0x0, 0x96f64da1442c422a, 0x7800, 0x4, 0x3, {{0x24, 0x4, 0x0, 0x2, 0x90, 0x68, 0x0, 0x4, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x28}, {[@timestamp_addr={0x44, 0xc, 0xf4, 0x1, 0x1, [{@remote, 0x104312b}]}, @ssrr={0x89, 0x1b, 0x7b, [@empty, @loopback, @private=0xa010102, @multicast2, @broadcast, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0xeb, 0x1, 0x7, [{@empty, 0x4}, {@rand_addr=0x64010101, 0x3}, {@multicast1, 0x84}, {@multicast2, 0x2}, {@local, 0x1}, {@local, 0xfffffff9}, {@private=0xa010101, 0x41}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x7}]}, @noop, @end, @lsrr={0x83, 0x7, 0xdb, [@empty]}, @end]}}}}}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000440)={@dev, @private, 0x0}, &(0x7f00000005c0)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r7, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000800)={0x140, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x140}}, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) creat(0x0, 0xc2) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 54.147944ms ago: executing program 4 (id=784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x401}]}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2808b08}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x9, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x4001, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x2) dup3(r2, r3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48000000100005040011800000000000f7fecb5fe5b694d0bbcddc9eeadf0e4faff82b2d43a241c1b7eb4c497962336eaa190d540b4a9d90790755d8b6322a6160c2fb29ff66e4d4fb3d804721e166284ca3d47cac9c4a14d4926ea21ee4875748c464cd80439f971c6e7894794c700807020ca284bb7e413af52bc675f2e7a638ac7c7cac0fac767173bd415b84d705ac6311c39663ae91cbe3d94e935c36ed9c7c", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800800140000000000050016000000000004001200"], 0x48}}, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0xe0, &(0x7f0000000000), &(0x7f0000000080)=0x4) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000340)=@generic={0x2}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) socket$inet(0x2, 0x2, 0x0) 21.832755ms ago: executing program 0 (id=785): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005000)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000180)="9713edd26dc8a6d022691d7dc77ba83e", 0x10}, {&(0x7f0000000400)="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", 0x501}], 0x2, &(0x7f0000001600)=[@hopopts_2292={{0xac, 0x29, 0x36, {0x0, 0x13, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @pad1, @enc_lim, @calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @ra, @jumbo, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0xac}}], 0x1, 0x8800) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x7) 0s ago: executing program 1 (id=786): r0 = syz_clone(0x6832091, 0x0, 0x48, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) r2 = syz_io_uring_setup(0x6ce, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x2, 0x0, r2}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {}, 0x400, "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"}, 0x418}) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) io_setup(0x9, &(0x7f00000002c0)) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000700001000005b1b2c55c20be6d2d0000948ec838214d1254bb580c4b437c10882cd0ae0e84309b96a4c665248a704d3fd1d79c0074c5430d48c48ed4908afb4234e0", @ANYRES32=r9, @ANYBLOB="0c0001800800010008000000"], 0x24}}, 0x0) r10 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r10) r11 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r10, 0x0, 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r11) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x89f2, 0x0) kernel console output (not intermixed with test programs): er0: entered promiscuous mode [ 242.492076][ T8146] syzkaller0: entered allmulticast mode [ 242.505580][ T8170] netlink: 11 bytes leftover after parsing attributes in process `syz.4.538'. [ 242.594607][ T5237] Bluetooth: hci2: command tx timeout [ 242.716969][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.739665][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.850017][ T8009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.871738][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.878871][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.905521][ T8009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.024044][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.031591][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.039199][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.046775][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.054259][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.061983][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.069406][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.076956][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.084511][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.099054][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.106611][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.114100][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.121619][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.130526][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.137956][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.145514][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.152989][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.160537][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.167957][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.175530][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.184112][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.191607][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.200023][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.207452][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.214969][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.222608][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.230467][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.238262][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.245798][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.253620][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.261303][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.268730][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.276415][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.283942][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.291405][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.299168][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.306952][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.314444][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.322148][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.329565][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.337083][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.344594][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.352138][ T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 243.371288][ T46] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 244.324374][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 244.324394][ T29] audit: type=1326 audit(1728767781.164:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 244.352369][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.359009][ T29] audit: type=1326 audit(1728767781.164:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 244.395270][ T29] audit: type=1326 audit(1728767781.224:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 244.417131][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.423801][ T29] audit: type=1326 audit(1728767781.224:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 244.446057][ T29] audit: type=1326 audit(1728767781.224:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 244.467862][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.711550][ T6710] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 244.882503][ T6710] usb 1-1: config 0 has no interfaces? [ 244.888171][ T6710] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 244.897389][ T6710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.908145][ T6710] usb 1-1: config 0 descriptor?? [ 245.124312][ T29] audit: type=1326 audit(1728767781.964:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 245.164884][ T29] audit: type=1326 audit(1728767782.004:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 245.193693][ T6710] usb 1-1: USB disconnect, device number 24 [ 245.204643][ T29] audit: type=1326 audit(1728767782.004:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000 [ 245.682197][ T8009] hsr_slave_0: entered promiscuous mode [ 245.744638][ T8009] hsr_slave_1: entered promiscuous mode [ 245.771304][ T8009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.778906][ T8009] Cannot create hsr debugfs directory [ 245.867975][ T8208] netlink: 11 bytes leftover after parsing attributes in process `syz.3.550'. [ 246.101127][ T8218] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.554'. [ 246.135565][ T8220] FAULT_INJECTION: forcing a failure. [ 246.135565][ T8220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.150020][ T8220] CPU: 0 UID: 0 PID: 8220 Comm: syz.1.555 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 246.160652][ T8220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 246.170747][ T8220] Call Trace: [ 246.174059][ T8220] [ 246.177015][ T8220] dump_stack_lvl+0x241/0x360 [ 246.181728][ T8220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.186968][ T8220] ? __pfx__printk+0x10/0x10 [ 246.191591][ T8220] ? __pfx_lock_release+0x10/0x10 [ 246.196654][ T8220] should_fail_ex+0x3b0/0x4e0 [ 246.201372][ T8220] _copy_to_iter+0x434/0x1d60 [ 246.206077][ T8220] ? __virt_addr_valid+0x183/0x530 [ 246.211229][ T8220] ? __pfx__copy_to_iter+0x10/0x10 [ 246.216375][ T8220] ? __virt_addr_valid+0x183/0x530 [ 246.221512][ T8220] ? __virt_addr_valid+0x183/0x530 [ 246.226625][ T8220] ? __virt_addr_valid+0x45f/0x530 [ 246.231733][ T8220] ? __phys_addr_symbol+0x2f/0x70 [ 246.236754][ T8220] ? __check_object_size+0x48e/0x900 [ 246.242049][ T8220] seq_read_iter+0xb80/0xd70 [ 246.246658][ T8220] seq_read+0x3a9/0x4f0 [ 246.250815][ T8220] ? __pfx_seq_read+0x10/0x10 [ 246.255494][ T8220] ? debugfs_file_get+0x4cc/0x630 [ 246.260533][ T8220] full_proxy_read+0x119/0x1d0 [ 246.265294][ T8220] ? __pfx_full_proxy_read+0x10/0x10 [ 246.270583][ T8220] vfs_read+0x201/0xbc0 [ 246.274742][ T8220] ? __pfx_lock_release+0x10/0x10 [ 246.279777][ T8220] ? __pfx_vfs_read+0x10/0x10 [ 246.284466][ T8220] ? __fget_files+0x3f3/0x470 [ 246.289166][ T8220] ? fdget_pos+0x24e/0x320 [ 246.293578][ T8220] ksys_read+0x183/0x2b0 [ 246.297815][ T8220] ? __pfx_ksys_read+0x10/0x10 [ 246.302579][ T8220] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 246.309190][ T8220] ? lockdep_hardirqs_on+0x99/0x150 [ 246.314410][ T8220] __do_fast_syscall_32+0xb4/0x110 [ 246.319530][ T8220] ? exc_page_fault+0x590/0x8c0 [ 246.324394][ T8220] do_fast_syscall_32+0x34/0x80 [ 246.329252][ T8220] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.335590][ T8220] RIP: 0023:0xf746d579 [ 246.339653][ T8220] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 246.359254][ T8220] RSP: 002b:00000000f575656c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 246.367672][ T8220] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020015dc0 [ 246.375648][ T8220] RDX: 0000000000001b7f RSI: 0000000000000000 RDI: 0000000000000000 [ 246.383617][ T8220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.391582][ T8220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 246.399552][ T8220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.407533][ T8220] [ 246.410681][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.760224][ T5284] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 246.910916][ T5284] usb 1-1: Using ep0 maxpacket: 8 [ 246.919525][ T5284] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 246.930724][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.938779][ T5284] usb 1-1: Product: syz [ 246.947106][ T5284] usb 1-1: Manufacturer: syz [ 246.957422][ T46] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 246.957454][ T5284] usb 1-1: SerialNumber: syz [ 247.003265][ T5284] usb 1-1: config 0 descriptor?? [ 247.015677][ T5284] gspca_main: se401-2.14.0 probing 047d:5003 [ 247.161728][ T46] usb 4-1: config 0 has no interfaces? [ 247.190925][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 247.210689][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.241223][ T46] usb 4-1: config 0 descriptor?? [ 247.320570][ T8009] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 247.344800][ T8009] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 247.368041][ T8009] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 247.385829][ T8009] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 247.478558][ T5284] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 247.506185][ T5284] se401 1-1:0.0: probe with driver se401 failed with error -71 [ 247.511758][ T46] usb 4-1: USB disconnect, device number 29 [ 247.534907][ T5284] usb 1-1: USB disconnect, device number 25 [ 247.601561][ T8009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.657081][ T8009] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.669108][ T8242] [U]  [ 247.722592][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.729781][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.772850][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.780060][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.940966][ T8009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.084379][ T46] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 248.088674][ T8009] veth0_vlan: entered promiscuous mode [ 248.173933][ T8273] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 248.183015][ T8009] veth1_vlan: entered promiscuous mode [ 248.183603][ T8273] TCP: tcp_parse_options: Illegal window scaling value 255 > 14 received [ 248.283931][ T8009] veth0_macvtap: entered promiscuous mode [ 248.291798][ T46] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 248.302096][ T46] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 248.323264][ T8009] veth1_macvtap: entered promiscuous mode [ 248.342049][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.343765][ T46] usb 2-1: config 0 has no interface number 0 [ 248.352644][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.352668][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.352686][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.352701][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.352716][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.354013][ T8009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.463740][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.476201][ T46] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.478365][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.497157][ T46] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 248.535111][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.546898][ T46] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 248.565451][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.576918][ T46] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 248.583787][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.605278][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.608575][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.632611][ T46] usb 2-1: config 0 descriptor?? [ 248.646896][ T8009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.658567][ T8264] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 248.669668][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 248.687297][ T8284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.706473][ T8284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.732811][ T8284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.760832][ T8284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.808695][ T8009] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.835626][ T8009] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.858226][ T8009] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.885531][ T8009] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.908851][ T46] usb 2-1: USB disconnect, device number 27 [ 248.999951][ T5287] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 249.139400][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.177527][ T5287] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 249.189950][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.198368][ T5287] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.216476][ T5287] usb 4-1: config 0 has no interface number 0 [ 249.236352][ T5287] usb 4-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 249.265317][ T5287] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 249.280110][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.287965][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.309153][ T5287] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 249.322800][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.340326][ T5287] usb 4-1: Product: syz [ 249.350085][ T5287] usb 4-1: Manufacturer: syz [ 249.359850][ T5287] usb 4-1: SerialNumber: syz [ 249.372560][ T5287] usb 4-1: config 0 descriptor?? [ 249.407042][ T5287] HFC-S_USB 4-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 249.775739][ T46] usb 4-1: USB disconnect, device number 30 [ 249.904545][ T6710] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 250.089908][ T6710] usb 1-1: Using ep0 maxpacket: 8 [ 250.109666][ T6710] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 250.120157][ T5289] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 250.123958][ T6710] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 250.151397][ T6710] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.189872][ T6710] usb 1-1: config 0 has no interface number 0 [ 250.196023][ T6710] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.213035][ T6710] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 250.222183][ T6710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.244492][ T6710] usb 1-1: config 0 descriptor?? [ 250.269995][ T5289] usb 2-1: Using ep0 maxpacket: 16 [ 250.286738][ T5289] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 250.306842][ T5289] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 250.349828][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 250.381073][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 250.413504][ T5287] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 250.430975][ T5289] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.453887][ T5289] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 250.479801][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.487865][ T5289] usb 2-1: Product: syz [ 250.508790][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 250.532697][ T5289] usb 2-1: Manufacturer: syz [ 250.537347][ T5289] usb 2-1: SerialNumber: syz [ 250.551091][ T8313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.585087][ T5287] usb 3-1: device descriptor read/64, error -71 [ 250.596830][ T5289] usb 2-1: config 0 descriptor?? [ 250.611790][ T8313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.642110][ T8358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.583'. [ 250.696011][ T5284] usb 1-1: USB disconnect, device number 26 [ 250.839325][ T5289] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 250.848843][ T5289] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 250.861911][ T5287] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 250.897527][ T5289] usb 2-1: USB disconnect, device number 28 [ 250.999924][ T5287] usb 3-1: device descriptor read/64, error -71 [ 251.110280][ T5287] usb usb3-port1: attempt power cycle [ 251.320555][ T8377] FAULT_INJECTION: forcing a failure. [ 251.320555][ T8377] name failslab, interval 1, probability 0, space 0, times 0 [ 251.353938][ T8377] CPU: 1 UID: 0 PID: 8377 Comm: syz.0.586 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 251.364590][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 251.374683][ T8377] Call Trace: [ 251.378002][ T8377] [ 251.380978][ T8377] dump_stack_lvl+0x241/0x360 [ 251.385697][ T8377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.390926][ T8377] ? __pfx__printk+0x10/0x10 [ 251.395548][ T8377] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 251.401127][ T8377] ? __pfx___might_resched+0x10/0x10 [ 251.406452][ T8377] should_fail_ex+0x3b0/0x4e0 [ 251.411167][ T8377] ? sk_prot_alloc+0x58/0x210 [ 251.415877][ T8377] should_failslab+0xac/0x100 [ 251.420582][ T8377] ? sk_prot_alloc+0x58/0x210 [ 251.425282][ T8377] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 251.430681][ T8377] ? __pfx_lock_release+0x10/0x10 [ 251.435741][ T8377] sk_prot_alloc+0x58/0x210 [ 251.440265][ T8377] ? sk_alloc+0x26/0x370 [ 251.444511][ T8377] sk_alloc+0x38/0x370 [ 251.448577][ T8377] inet_create+0x652/0xe70 [ 251.452989][ T8377] ? inet_create+0x9c/0xe70 [ 251.457486][ T8377] ? __sock_create+0x337/0x940 [ 251.462249][ T8377] __sock_create+0x490/0x940 [ 251.466841][ T8377] mptcp_subflow_create_socket+0x132/0xdf0 [ 251.472650][ T8377] ? mark_lock+0x9a/0x360 [ 251.476978][ T8377] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 251.483300][ T8377] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.489630][ T8377] __mptcp_nmpc_sk+0x178/0x800 [ 251.494395][ T8377] ? __local_bh_enable_ip+0x168/0x200 [ 251.499773][ T8377] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 251.505071][ T8377] mptcp_setsockopt+0xf69/0x3bc0 [ 251.510012][ T8377] ? aa_sk_perm+0x96d/0xab0 [ 251.514507][ T8377] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 251.519879][ T8377] ? __pfx_aa_sk_perm+0x10/0x10 [ 251.524721][ T8377] ? __pfx_lock_acquire+0x10/0x10 [ 251.529749][ T8377] ? __fget_files+0x29/0x470 [ 251.534341][ T8377] ? aa_sock_opt_perm+0x79/0x120 [ 251.539273][ T8377] ? sock_common_setsockopt+0x37/0xc0 [ 251.544651][ T8377] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 251.550544][ T8377] do_sock_setsockopt+0x3af/0x720 [ 251.555567][ T8377] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 251.561113][ T8377] ? __fget_files+0x3f3/0x470 [ 251.565785][ T8377] ? __fget_files+0x29/0x470 [ 251.570377][ T8377] __sys_setsockopt+0x1a2/0x250 [ 251.575225][ T8377] __ia32_sys_setsockopt+0xb5/0xd0 [ 251.580335][ T8377] __do_fast_syscall_32+0xb4/0x110 [ 251.585454][ T8377] ? exc_page_fault+0x590/0x8c0 [ 251.590307][ T8377] do_fast_syscall_32+0x34/0x80 [ 251.595156][ T8377] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.601486][ T8377] RIP: 0023:0xf7fd0579 [ 251.605557][ T8377] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 251.625158][ T8377] RSP: 002b:00000000f575656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 251.633592][ T8377] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 251.641573][ T8377] RDX: 000000000000000f RSI: 0000000020000000 RDI: 0000000000000004 [ 251.649811][ T8377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.657802][ T8377] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 251.665786][ T8377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.673779][ T8377] [ 251.750012][ T5287] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 251.802474][ T5287] usb 3-1: device descriptor read/8, error -71 [ 252.180373][ T5287] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 252.309943][ T5287] usb 3-1: device descriptor read/8, error -71 [ 252.370362][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 252.467061][ T5287] usb usb3-port1: unable to enumerate USB device [ 252.639166][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.594'. [ 252.772817][ T29] audit: type=1326 audit(1728767789.604:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 252.831677][ T8417] loop8: detected capacity change from 0 to 7 [ 252.851939][ T29] audit: type=1326 audit(1728767789.604:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 252.884255][ T5243] Bluetooth: hci6: command 0x0406 tx timeout [ 252.919910][ T29] audit: type=1326 audit(1728767789.604:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 252.949429][ T8417] Dev loop8: unable to read RDB block 7 [ 252.950214][ T29] audit: type=1326 audit(1728767789.604:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 252.956199][ T8417] loop8: unable to read partition table [ 252.981114][ T29] audit: type=1326 audit(1728767789.604:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 252.983304][ T8417] loop8: partition table beyond EOD, truncated [ 253.006559][ T29] audit: type=1326 audit(1728767789.644:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 253.011198][ T8417] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 253.011198][ T8417] ) failed (rc=-5) [ 253.033545][ T29] audit: type=1326 audit(1728767789.644:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 253.069445][ T29] audit: type=1326 audit(1728767789.644:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 253.091570][ T29] audit: type=1326 audit(1728767789.644:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 253.117447][ T29] audit: type=1326 audit(1728767789.644:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 253.650119][ T5234] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 253.957775][ T5234] usb 3-1: Using ep0 maxpacket: 16 [ 253.992645][ T5234] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.030432][ T5234] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 254.069576][ T5234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 254.139996][ T5234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 254.151897][ T5234] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.214398][ T5234] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 254.223763][ T5234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.231863][ T5234] usb 3-1: Product: syz [ 254.236037][ T5234] usb 3-1: Manufacturer: syz [ 254.240737][ T5234] usb 3-1: SerialNumber: syz [ 254.248027][ T5234] usb 3-1: config 0 descriptor?? [ 254.334480][ T6710] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 254.488255][ T8450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.606'. [ 254.527893][ T5234] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 254.546556][ T5234] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 254.587611][ T8455] FAULT_INJECTION: forcing a failure. [ 254.587611][ T8455] name failslab, interval 1, probability 0, space 0, times 0 [ 254.596674][ T5284] usb 3-1: USB disconnect, device number 24 [ 254.607750][ T8455] CPU: 0 UID: 0 PID: 8455 Comm: syz.3.608 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 254.618391][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 254.628475][ T8455] Call Trace: [ 254.631784][ T8455] [ 254.634738][ T8455] dump_stack_lvl+0x241/0x360 [ 254.639450][ T8455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.644677][ T8455] ? __pfx__printk+0x10/0x10 [ 254.649302][ T8455] ? fs_reclaim_acquire+0x93/0x130 [ 254.654444][ T8455] ? __pfx___might_resched+0x10/0x10 [ 254.659770][ T8455] should_fail_ex+0x3b0/0x4e0 [ 254.664494][ T8455] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 254.670245][ T8455] should_failslab+0xac/0x100 [ 254.674956][ T8455] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 254.680705][ T8455] __kmalloc_noprof+0xd8/0x400 [ 254.685504][ T8455] tomoyo_realpath_from_path+0xcf/0x5e0 [ 254.691087][ T8455] tomoyo_check_open_permission+0x255/0x500 [ 254.697009][ T8455] ? __lock_acquire+0x1384/0x2050 [ 254.702067][ T8455] ? tomoyo_check_open_permission+0x204/0x500 [ 254.708163][ T8455] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 254.714646][ T8455] ? tomoyo_file_open+0x165/0x220 [ 254.719710][ T8455] security_file_open+0x777/0x990 [ 254.724763][ T8455] do_dentry_open+0x369/0x1460 [ 254.729571][ T8455] vfs_open+0x3e/0x330 [ 254.733672][ T8455] path_openat+0x2c84/0x3590 [ 254.738388][ T8455] ? __lock_acquire+0x1384/0x2050 [ 254.743474][ T8455] ? __pfx_path_openat+0x10/0x10 [ 254.748471][ T8455] do_filp_open+0x235/0x490 [ 254.753004][ T8455] ? __pfx_do_filp_open+0x10/0x10 [ 254.758084][ T8455] ? _raw_spin_unlock+0x28/0x50 [ 254.762965][ T8455] ? alloc_fd+0x5a1/0x640 [ 254.767330][ T8455] do_sys_openat2+0x13e/0x1d0 [ 254.772044][ T8455] ? __pfx_do_sys_openat2+0x10/0x10 [ 254.777281][ T8455] __ia32_compat_sys_openat+0x23f/0x290 [ 254.782865][ T8455] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 254.788969][ T8455] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 254.795591][ T8455] ? lockdep_hardirqs_on+0x99/0x150 [ 254.800822][ T8455] __do_fast_syscall_32+0xb4/0x110 [ 254.805958][ T8455] ? exc_page_fault+0x590/0x8c0 [ 254.810844][ T8455] do_fast_syscall_32+0x34/0x80 [ 254.815723][ T8455] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.822076][ T8455] RIP: 0023:0xf73dd579 [ 254.826169][ T8455] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 254.845804][ T8455] RSP: 002b:00000000f56c656c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 254.854257][ T8455] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000080 [ 254.862256][ T8455] RDX: 00000000001c9003 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.870261][ T8455] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.878260][ T8455] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 254.886257][ T8455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.894272][ T8455] [ 254.902727][ T8455] ERROR: Out of memory at tomoyo_realpath_from_path. [ 254.929150][ T6710] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 254.938070][ T6710] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.949989][ T6710] usb 2-1: config 0 has no interface number 0 [ 254.956130][ T6710] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 254.967325][ T6710] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 255.039852][ T6710] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 255.049156][ T6710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.058887][ T6710] usb 2-1: Product: syz [ 255.064116][ T6710] usb 2-1: Manufacturer: syz [ 255.068761][ T6710] usb 2-1: SerialNumber: syz [ 255.095829][ T6710] usb 2-1: config 0 descriptor?? [ 255.108996][ T6710] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 255.600967][ T5284] usb 2-1: USB disconnect, device number 29 [ 255.666932][ T5579] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.861694][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.870651][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.980094][ T5579] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.402665][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.412004][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.419723][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.427411][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.434765][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 256.451191][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.566753][ T5579] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.684606][ T5579] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.699146][ T6710] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 256.720089][ T936] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 256.892872][ T6710] usb 1-1: Using ep0 maxpacket: 32 [ 256.899680][ T936] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 256.913554][ T6710] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 256.922850][ T6710] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 256.937137][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 256.948359][ T6710] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 256.959803][ T936] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.972993][ T6710] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 256.989064][ T936] usb 3-1: string descriptor 0 read error: -22 [ 256.995588][ T6710] usb 1-1: config 0 interface 0 has no altsetting 0 [ 257.002424][ T936] usb 3-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 257.016390][ T6710] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 257.027200][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.035404][ T6710] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 257.045763][ T6710] usb 1-1: Product: syz [ 257.050807][ T936] usb 3-1: config 0 descriptor?? [ 257.058848][ T6710] usb 1-1: Manufacturer: syz [ 257.063941][ T6710] usb 1-1: SerialNumber: syz [ 257.089228][ T936] em28xx 3-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 257.112260][ T6710] usb 1-1: config 0 descriptor?? [ 257.148449][ T6710] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 257.184460][ T936] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 257.196990][ T5579] bridge_slave_1: left allmulticast mode [ 257.215532][ T5579] bridge_slave_1: left promiscuous mode [ 257.234114][ T6710] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 257.237762][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.281698][ T5579] bridge_slave_0: left allmulticast mode [ 257.299270][ T5579] bridge_slave_0: left promiscuous mode [ 257.317521][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.328306][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.352384][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.400032][ T5289] usb 1-1: USB disconnect, device number 27 [ 257.414947][ T5289] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 257.540281][ T936] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 257.559456][ T936] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 257.592780][ T936] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 257.610645][ T936] em28xx 3-1:0.0: No AC97 audio processor [ 257.665040][ T936] usb 3-1: USB disconnect, device number 25 [ 257.699339][ T936] em28xx 3-1:0.0: Disconnecting em28xx [ 257.732884][ T936] em28xx 3-1:0.0: Freeing device [ 257.942437][ T5244] Bluetooth: hci7: command 0x0406 tx timeout [ 258.500571][ T5237] Bluetooth: hci0: command tx timeout [ 258.569133][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 258.569151][ T29] audit: type=1326 audit(1728767795.404:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 258.602746][ T29] audit: type=1326 audit(1728767795.444:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 258.603082][ T5579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.624614][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.642470][ T29] audit: type=1326 audit(1728767795.484:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 258.674752][ T29] audit: type=1326 audit(1728767795.484:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 258.703088][ T5579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.716052][ T5579] bond0 (unregistering): Released all slaves [ 258.753057][ T8482] chnl_net:caif_netlink_parms(): no params data found [ 258.959643][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 259.492801][ T8540] FAULT_INJECTION: forcing a failure. [ 259.492801][ T8540] name failslab, interval 1, probability 0, space 0, times 0 [ 259.526120][ T8540] CPU: 1 UID: 0 PID: 8540 Comm: syz.2.629 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 259.536775][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 259.546868][ T8540] Call Trace: [ 259.551098][ T8540] [ 259.551122][ T8540] dump_stack_lvl+0x241/0x360 [ 259.558884][ T8540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.564112][ T8540] ? __pfx__printk+0x10/0x10 [ 259.568733][ T8540] ? fs_reclaim_acquire+0x93/0x130 [ 259.573868][ T8540] ? __pfx___might_resched+0x10/0x10 [ 259.579185][ T8540] ? dynamic_dname+0x141/0x1b0 [ 259.583993][ T8540] should_fail_ex+0x3b0/0x4e0 [ 259.588706][ T8540] ? tomoyo_encode+0x26f/0x540 [ 259.593498][ T8540] should_failslab+0xac/0x100 [ 259.598199][ T8540] ? tomoyo_encode+0x26f/0x540 [ 259.602989][ T8540] __kmalloc_noprof+0xd8/0x400 [ 259.607780][ T8540] tomoyo_encode+0x26f/0x540 [ 259.612396][ T8540] ? __pfx_sockfs_dname+0x10/0x10 [ 259.617438][ T8540] tomoyo_realpath_from_path+0x59e/0x5e0 [ 259.623081][ T8540] tomoyo_path_number_perm+0x23a/0x880 [ 259.628545][ T8540] ? tomoyo_path_number_perm+0x208/0x880 [ 259.634179][ T8540] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 259.640174][ T8540] ? __pfx_lock_acquire+0x10/0x10 [ 259.645214][ T8540] ? __fget_files+0x29/0x470 [ 259.649815][ T8540] ? __fget_files+0x3f3/0x470 [ 259.654500][ T8540] security_file_ioctl_compat+0xc6/0x2a0 [ 259.660134][ T8540] __se_compat_sys_ioctl+0xd6/0xc90 [ 259.665334][ T8540] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 259.671140][ T8540] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.677123][ T8540] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.683462][ T8540] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 259.690064][ T8540] ? lockdep_hardirqs_on+0x99/0x150 [ 259.695280][ T8540] __do_fast_syscall_32+0xb4/0x110 [ 259.700396][ T8540] ? exc_page_fault+0x590/0x8c0 [ 259.705256][ T8540] do_fast_syscall_32+0x34/0x80 [ 259.710108][ T8540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.716436][ T8540] RIP: 0023:0xf748d579 [ 259.720509][ T8540] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 259.740117][ T8540] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 259.748534][ T8540] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000541b [ 259.756506][ T8540] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.764496][ T8540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.772467][ T8540] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 259.780442][ T8540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.788428][ T8540] [ 259.791588][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.857598][ T8482] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.896824][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.904756][ T8482] bridge_slave_0: entered allmulticast mode [ 259.908118][ T8540] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.913574][ T8482] bridge_slave_0: entered promiscuous mode [ 259.929009][ T8482] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.937086][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.960048][ T8482] bridge_slave_1: entered allmulticast mode [ 259.967804][ T8482] bridge_slave_1: entered promiscuous mode [ 260.045830][ T8548] FAULT_INJECTION: forcing a failure. [ 260.045830][ T8548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.062291][ T8548] CPU: 0 UID: 0 PID: 8548 Comm: syz.2.631 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 260.072931][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 260.082995][ T8548] Call Trace: [ 260.086276][ T8548] [ 260.089204][ T8548] dump_stack_lvl+0x241/0x360 [ 260.093892][ T8548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.099093][ T8548] ? __pfx__printk+0x10/0x10 [ 260.103693][ T8548] ? snprintf+0xda/0x120 [ 260.108028][ T8548] should_fail_ex+0x3b0/0x4e0 [ 260.112710][ T8548] _copy_to_user+0x2f/0xb0 [ 260.117128][ T8548] simple_read_from_buffer+0xca/0x150 [ 260.122503][ T8548] proc_fail_nth_read+0x1e9/0x250 [ 260.127531][ T8548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.133078][ T8548] ? rw_verify_area+0x55e/0x6f0 [ 260.137928][ T8548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.143480][ T8548] vfs_read+0x201/0xbc0 [ 260.147636][ T8548] ? __pfx_lock_release+0x10/0x10 [ 260.152693][ T8548] ? __pfx_vfs_read+0x10/0x10 [ 260.157372][ T8548] ? __fget_files+0x3f3/0x470 [ 260.162089][ T8548] ? fdget_pos+0x24e/0x320 [ 260.166560][ T8548] ksys_read+0x183/0x2b0 [ 260.170802][ T8548] ? __pfx_ksys_read+0x10/0x10 [ 260.175661][ T8548] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 260.182255][ T8548] ? lockdep_hardirqs_on+0x99/0x150 [ 260.187455][ T8548] __do_fast_syscall_32+0xb4/0x110 [ 260.192585][ T8548] ? exc_page_fault+0x590/0x8c0 [ 260.197490][ T8548] do_fast_syscall_32+0x34/0x80 [ 260.202372][ T8548] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.208719][ T8548] RIP: 0023:0xf748d579 [ 260.212810][ T8548] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 260.232426][ T8548] RSP: 002b:00000000f57765a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 260.240845][ T8548] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5776620 [ 260.248811][ T8548] RDX: 000000000000000f RSI: 00000000f747bff4 RDI: 0000000000000000 [ 260.256779][ T8548] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 260.264746][ T8548] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 260.272714][ T8548] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.280694][ T8548] [ 260.467514][ T8482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.487179][ T8482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.579934][ T5237] Bluetooth: hci0: command tx timeout [ 260.619919][ T46] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 260.663558][ T5579] hsr_slave_0: left promiscuous mode [ 260.684641][ T5579] hsr_slave_1: left promiscuous mode [ 260.696853][ T5579] batman_adv: batadv0: Removing interface: team0 [ 260.706638][ T5579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.711069][ T6710] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 260.719699][ T5579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.742869][ T5579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.764423][ T5579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.789907][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 260.822146][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30768, setting to 1024 [ 260.855479][ T5579] veth1_macvtap: left promiscuous mode [ 260.869866][ T46] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 260.870880][ T6710] usb 3-1: Using ep0 maxpacket: 16 [ 260.884899][ T5579] veth0_macvtap: left promiscuous mode [ 260.896787][ T46] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 260.901342][ T6710] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 260.925974][ T5579] veth1_vlan: left promiscuous mode [ 260.933089][ T6710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.940145][ T46] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 260.949321][ T46] usb 4-1: Product: syz [ 260.961828][ T5579] veth0_vlan: left promiscuous mode [ 260.984104][ T6710] usb 3-1: config 0 descriptor?? [ 260.986251][ T46] usb 4-1: Manufacturer: syz [ 260.999835][ T46] usb 4-1: SerialNumber: syz [ 261.013121][ T6710] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 261.026474][ T46] usb 4-1: config 0 descriptor?? [ 261.065599][ T8550] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 261.319455][ T46] usb 4-1: USB disconnect, device number 31 [ 261.325669][ T5284] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 261.547076][ T5284] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 261.573283][ T5284] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.583533][ T5284] usb 1-1: config 0 has no interface number 0 [ 261.600680][ T5284] usb 1-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 261.627228][ T5284] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 261.678655][ T5284] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 261.688016][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.696757][ T5284] usb 1-1: Product: syz [ 261.701269][ T5284] usb 1-1: Manufacturer: syz [ 261.705930][ T5284] usb 1-1: SerialNumber: syz [ 261.713095][ T5284] usb 1-1: config 0 descriptor?? [ 261.722732][ T5284] HFC-S_USB 1-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 261.816738][ T6710] gspca_sonixj: reg_r err -71 [ 261.822599][ T6710] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 261.835099][ T6710] usb 3-1: USB disconnect, device number 26 [ 262.058495][ T8576] [U]  [ 262.076133][ T5579] team0 (unregistering): Port device team_slave_1 removed [ 262.141923][ T5579] team0 (unregistering): Port device team_slave_0 removed [ 262.720554][ T5237] Bluetooth: hci0: command tx timeout [ 262.802762][ T29] audit: type=1326 audit(1728767799.634:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.1.643" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x0 [ 262.804077][ T5287] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 262.837745][ T8482] team0: Port device team_slave_0 added [ 262.864297][ T8577] netlink: 'syz.0.639': attribute type 25 has an invalid length. [ 262.881538][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.639'. [ 262.897711][ T8482] team0: Port device team_slave_1 added [ 262.982814][ T5287] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.015132][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.020180][ T5287] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.046037][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.049828][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.086393][ T8482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.099480][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.109832][ T5289] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 263.111664][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.123231][ T5287] usb 3-1: Product: syz [ 263.148455][ T5284] usb 1-1: USB disconnect, device number 28 [ 263.164288][ T8482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.176350][ T5287] usb 3-1: Manufacturer: syz [ 263.213357][ T5287] usb 3-1: SerialNumber: syz [ 263.269001][ T5289] usb 2-1: Using ep0 maxpacket: 16 [ 263.276920][ T5289] usb 2-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 263.297806][ T5289] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.321247][ T5289] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.330751][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.338917][ T5289] usb 2-1: Product: syz [ 263.340565][ T8482] hsr_slave_0: entered promiscuous mode [ 263.365429][ T8482] hsr_slave_1: entered promiscuous mode [ 263.367411][ T5289] usb 2-1: Manufacturer: syz [ 263.388484][ T5289] usb 2-1: SerialNumber: syz [ 263.397118][ T8482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.418093][ T8482] Cannot create hsr debugfs directory [ 263.664764][ T8590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.706543][ T8590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.357108][ T5287] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 264.366469][ T5287] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 264.400324][ T5287] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 264.618286][ T8482] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 264.657378][ T8482] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.717849][ T8482] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.749885][ T5237] Bluetooth: hci0: command tx timeout [ 264.763561][ T8482] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.783762][ T5287] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 264.917162][ T5287] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 265.036955][ T5287] usb 3-1: USB disconnect, device number 27 [ 265.070714][ T5287] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 265.343183][ T8482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.396660][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 265.463114][ T8482] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.475422][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.482601][ T5583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.536061][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.543250][ T5579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.216961][ T8482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.234580][ T5289] usb 2-1: 0:168 : does not exist [ 266.260553][ T5289] usb 2-1: USB disconnect, device number 30 [ 266.319671][ T6461] udevd[6461]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.359877][ T6710] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 266.476467][ T8482] veth0_vlan: entered promiscuous mode [ 266.514107][ T8482] veth1_vlan: entered promiscuous mode [ 266.634323][ T8482] veth0_macvtap: entered promiscuous mode [ 266.640508][ T6710] usb 1-1: Using ep0 maxpacket: 16 [ 266.692666][ T8482] veth1_macvtap: entered promiscuous mode [ 266.693803][ T6710] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 266.706731][ T6710] usb 1-1: config 0 has no interface number 0 [ 266.712958][ T6710] usb 1-1: config 0 interface 214 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 266.765218][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.766128][ T6710] usb 1-1: Dual-Role OTG device on HNP port [ 266.787469][ T6710] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 266.802315][ T6710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.809906][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.820248][ T6710] usb 1-1: Product: syz [ 266.820274][ T6710] usb 1-1: Manufacturer: syz [ 266.820292][ T6710] usb 1-1: SerialNumber: syz [ 266.838648][ T6710] usb 1-1: config 0 descriptor?? [ 266.856433][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.887512][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.915342][ T8482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.945271][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.981366][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.002478][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.024712][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.053759][ T8482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.103848][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 267.123378][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 267.134885][ T8482] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.165976][ T8482] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.203302][ T6710] usb 1-1: USB disconnect, device number 29 [ 267.223235][ T8482] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.251359][ T8482] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.320065][ T8681] trusted_key: encrypted_key: insufficient parameters specified [ 267.527416][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.565737][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.592894][ T8688] netlink: 11 bytes leftover after parsing attributes in process `syz.3.662'. [ 267.638351][ T2897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.660573][ T2897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.831006][ T8700] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 267.840723][ T8700] TCP: tcp_parse_options: Illegal window scaling value 255 > 14 received [ 267.992634][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'. [ 268.113462][ T8718] FAULT_INJECTION: forcing a failure. [ 268.113462][ T8718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.159087][ T8718] CPU: 1 UID: 0 PID: 8718 Comm: syz.0.668 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 268.169756][ T8718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 268.179851][ T8718] Call Trace: [ 268.183153][ T8718] [ 268.186103][ T8718] dump_stack_lvl+0x241/0x360 [ 268.190803][ T8718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.196047][ T8718] ? __pfx__printk+0x10/0x10 [ 268.200675][ T8718] ? __pfx_lock_release+0x10/0x10 [ 268.205747][ T8718] ? __lock_acquire+0x1384/0x2050 [ 268.210821][ T8718] should_fail_ex+0x3b0/0x4e0 [ 268.215543][ T8718] _copy_from_user+0x2f/0xe0 [ 268.220181][ T8718] kstrtouint_from_user+0xc6/0x190 [ 268.225325][ T8718] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 268.231081][ T8718] ? __pfx_lock_acquire+0x10/0x10 [ 268.236156][ T8718] proc_fail_nth_write+0xaa/0x2d0 [ 268.241216][ T8718] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 268.247142][ T8718] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 268.252815][ T8718] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 268.258486][ T8718] vfs_write+0x29c/0xc90 [ 268.262763][ T8718] ? __pfx_vfs_write+0x10/0x10 [ 268.267553][ T8718] ? __fget_files+0x3f3/0x470 [ 268.272259][ T8718] ? fdget_pos+0x24e/0x320 [ 268.276706][ T8718] ksys_write+0x183/0x2b0 [ 268.281077][ T8718] ? __pfx_ksys_write+0x10/0x10 [ 268.285959][ T8718] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 268.292585][ T8718] ? lockdep_hardirqs_on+0x99/0x150 [ 268.297821][ T8718] __do_fast_syscall_32+0xb4/0x110 [ 268.302961][ T8718] ? exc_page_fault+0x590/0x8c0 [ 268.307856][ T8718] do_fast_syscall_32+0x34/0x80 [ 268.312745][ T8718] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.319111][ T8718] RIP: 0023:0xf7fd0579 [ 268.323210][ T8718] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 268.342862][ T8718] RSP: 002b:00000000f57355a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 268.350039][ T6710] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 268.351293][ T8718] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5735620 [ 268.351336][ T8718] RDX: 0000000000000001 RSI: 00000000f745bff4 RDI: 0000000000000000 [ 268.374845][ T8718] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 268.382850][ T8718] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 268.390853][ T8718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.398875][ T8718] [ 268.512845][ T6710] usb 4-1: Using ep0 maxpacket: 32 [ 268.523856][ T6710] usb 4-1: too many configurations: 38, using maximum allowed: 8 [ 268.539363][ T6710] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 268.551809][ T6710] usb 4-1: can't read configurations, error -61 [ 268.680089][ T25] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 268.703708][ T6710] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 268.799992][ T8739] netlink: 'syz.0.673': attribute type 1 has an invalid length. [ 268.810955][ T8739] netlink: 'syz.0.673': attribute type 2 has an invalid length. [ 268.871336][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 268.874198][ T6710] usb 4-1: Using ep0 maxpacket: 32 [ 268.878057][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 268.893704][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 268.894589][ T6710] usb 4-1: too many configurations: 38, using maximum allowed: 8 [ 268.917527][ T25] usb 3-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice= 8.55 [ 268.940311][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.947568][ T6710] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 268.948387][ T25] usb 3-1: Product: syz [ 268.969667][ T6710] usb 4-1: can't read configurations, error -61 [ 268.969807][ T25] usb 3-1: Manufacturer: syz [ 268.989387][ T5284] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 268.992906][ T25] usb 3-1: SerialNumber: syz [ 269.011325][ T6710] usb usb4-port1: attempt power cycle [ 269.034745][ T25] usb 3-1: config 0 descriptor?? [ 269.051532][ T25] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 269.152590][ T5284] usb 5-1: config 0 has no interfaces? [ 269.158290][ T5284] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 269.177943][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.219363][ T5284] usb 5-1: config 0 descriptor?? [ 269.369936][ T6710] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 269.400640][ T6710] usb 4-1: Using ep0 maxpacket: 32 [ 269.406613][ T6710] usb 4-1: too many configurations: 38, using maximum allowed: 8 [ 269.420923][ T6710] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 269.432813][ T6710] usb 4-1: can't read configurations, error -61 [ 269.448523][ T5284] usb 5-1: USB disconnect, device number 27 [ 269.591044][ T6710] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 269.630406][ T6710] usb 4-1: Using ep0 maxpacket: 32 [ 269.636409][ T6710] usb 4-1: too many configurations: 38, using maximum allowed: 8 [ 269.667032][ T6710] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 269.676327][ T6710] usb 4-1: can't read configurations, error -61 [ 269.685044][ T6710] usb usb4-port1: unable to enumerate USB device [ 269.721900][ T25] usb 3-1: qt2_attach - failed to power on unit: -71 [ 269.728938][ T25] quatech2 3-1:0.0: probe with driver quatech2 failed with error -71 [ 269.753981][ T25] usb 3-1: USB disconnect, device number 28 [ 269.805617][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 269.818936][ T8787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.684'. [ 269.828422][ T8787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.032182][ T8792] FAULT_INJECTION: forcing a failure. [ 270.032182][ T8792] name failslab, interval 1, probability 0, space 0, times 0 [ 270.045110][ T8792] CPU: 0 UID: 0 PID: 8792 Comm: syz.2.686 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 270.055731][ T8792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 270.065794][ T8792] Call Trace: [ 270.069067][ T8792] [ 270.071997][ T8792] dump_stack_lvl+0x241/0x360 [ 270.076673][ T8792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.081866][ T8792] ? __pfx__printk+0x10/0x10 [ 270.086452][ T8792] ? __kmalloc_node_noprof+0xb7/0x440 [ 270.091827][ T8792] ? __pfx___might_resched+0x10/0x10 [ 270.097108][ T8792] ? __asan_memset+0x23/0x50 [ 270.101721][ T8792] should_fail_ex+0x3b0/0x4e0 [ 270.104242][ T46] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 270.106422][ T8792] should_failslab+0xac/0x100 [ 270.106456][ T8792] __kmalloc_node_noprof+0xdf/0x440 [ 270.106478][ T8792] ? __kvmalloc_node_noprof+0x72/0x190 [ 270.106501][ T8792] __kvmalloc_node_noprof+0x72/0x190 [ 270.106523][ T8792] rhashtable_init_noprof+0x534/0xa60 [ 270.106551][ T8792] rhltable_init_noprof+0x1c/0x60 [ 270.106574][ T8792] nf_tables_newtable+0x7e8/0x1e10 [ 270.106604][ T8792] ? nfnl_pernet+0x23/0x240 [ 270.106639][ T8792] ? __pfx_nf_tables_newtable+0x10/0x10 [ 270.106672][ T8792] ? __nla_parse+0x40/0x60 [ 270.164625][ T8792] nfnetlink_rcv+0x14dc/0x2ab0 [ 270.169401][ T8792] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 270.174530][ T8792] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.179760][ T8792] ? skb_clone+0x240/0x390 [ 270.184201][ T8792] ? __pfx_lock_release+0x10/0x10 [ 270.189233][ T8792] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.194422][ T8792] netlink_unicast+0x7f6/0x990 [ 270.199183][ T8792] ? __pfx_netlink_unicast+0x10/0x10 [ 270.204464][ T8792] ? __virt_addr_valid+0x183/0x530 [ 270.209570][ T8792] ? __check_object_size+0x48e/0x900 [ 270.214856][ T8792] netlink_sendmsg+0x8e4/0xcb0 [ 270.219616][ T8792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.224892][ T8792] ? __pfx_lock_release+0x10/0x10 [ 270.229916][ T8792] ? aa_sock_msg_perm+0x91/0x160 [ 270.234854][ T8792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.240148][ T8792] __sock_sendmsg+0x221/0x270 [ 270.244820][ T8792] ____sys_sendmsg+0x52a/0x7e0 [ 270.249582][ T8792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.254879][ T8792] __sys_sendmsg+0x292/0x380 [ 270.259491][ T8792] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.264614][ T8792] ? __pfx_vfs_write+0x10/0x10 [ 270.269393][ T8792] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 270.275980][ T8792] ? lockdep_hardirqs_on+0x99/0x150 [ 270.281177][ T8792] __do_fast_syscall_32+0xb4/0x110 [ 270.286275][ T8792] ? exc_page_fault+0x590/0x8c0 [ 270.291118][ T8792] do_fast_syscall_32+0x34/0x80 [ 270.295953][ T8792] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 270.302272][ T8792] RIP: 0023:0xf748d579 [ 270.306327][ T8792] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 270.325924][ T8792] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 270.334342][ T8792] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 270.342405][ T8792] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.350372][ T8792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.358331][ T8792] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 270.366331][ T8792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.376056][ T8792] [ 270.379264][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.507585][ T8795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.687'. [ 270.549856][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 270.556989][ T46] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.578954][ T46] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 270.651805][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 270.730141][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.765726][ T46] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 270.780129][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.791638][ T46] usb 2-1: Product: syz [ 270.795844][ T46] usb 2-1: Manufacturer: syz [ 270.803211][ T46] usb 2-1: SerialNumber: syz [ 270.812647][ T46] usb 2-1: config 0 descriptor?? [ 270.833594][ T46] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 270.943900][ T5285] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 271.100709][ T5285] usb 5-1: Using ep0 maxpacket: 16 [ 271.114697][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 271.130422][ T46] rc_core: IR keymap rc-imon-pad not found [ 271.140173][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 271.161663][ T46] Registered IR keymap rc-empty [ 271.171798][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 271.176011][ T46] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 271.193373][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 271.216594][ T46] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 271.246039][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.267078][ T46] rc rc0: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 271.279590][ T5285] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 271.298902][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.320871][ T5285] usb 5-1: Product: syz [ 271.330132][ T46] input: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 271.333022][ T5285] usb 5-1: Manufacturer: syz [ 271.363649][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.371691][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.379700][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.387790][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.395716][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.403644][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.409957][ T5285] usb 5-1: SerialNumber: syz [ 271.411606][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.426053][ T46] imon 2-1:0.0: iMON device (15c2:003b, intf0) on usb<2:31> initialized [ 271.434529][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.442597][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.442985][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.443183][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.445643][ T5285] usb 5-1: config 0 descriptor?? [ 271.451225][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.451614][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.488830][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.497356][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.505372][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.513375][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.521311][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.529217][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.537173][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.545790][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.553921][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.566023][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.574304][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.582279][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.590240][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.598192][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.606188][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.614144][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.622390][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.630540][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.638700][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.646955][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.654942][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.670180][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.678346][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.686338][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.694290][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.702217][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.710180][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.718133][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.726072][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.734018][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.742175][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.750216][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.758170][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.766656][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.774691][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.782694][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.790660][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.798752][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.806970][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.814939][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.822883][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.830796][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.838808][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.846901][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.854853][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.865045][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.873578][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.881620][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.889609][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.897557][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.905568][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.913502][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.921446][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.929381][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.937299][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.945806][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.953743][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.961678][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.970227][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.978169][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.986115][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 271.994468][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.002420][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.010368][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.018332][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.026299][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.034283][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.042281][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.050234][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.057990][ T5285] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 272.058193][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.075228][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.083314][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.091388][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.099350][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.107291][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.115296][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.123283][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.131218][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.139138][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.147071][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.154993][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.162938][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.170879][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.179199][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.187168][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.195106][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.203011][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.210941][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.218892][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.226868][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.234837][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.242862][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.250777][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.258727][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.267047][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.275254][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.284273][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.292211][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.300165][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.308120][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.316056][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.323909][ T46] usb 2-1: USB disconnect, device number 31 [ 272.324013][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 272.370965][ T5285] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 272.443985][ T5285] usb 5-1: USB disconnect, device number 28 [ 272.618166][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'. [ 272.830039][ T25] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 273.001829][ T25] usb 1-1: config 0 has no interfaces? [ 273.031323][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 273.052494][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.066658][ T25] usb 1-1: config 0 descriptor?? [ 273.310731][ T8847] FAULT_INJECTION: forcing a failure. [ 273.310731][ T8847] name failslab, interval 1, probability 0, space 0, times 0 [ 273.335295][ T25] usb 1-1: USB disconnect, device number 30 [ 273.364919][ T8847] CPU: 1 UID: 0 PID: 8847 Comm: syz.1.703 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 273.375537][ T8847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 273.385602][ T8847] Call Trace: [ 273.388874][ T8847] [ 273.391817][ T8847] dump_stack_lvl+0x241/0x360 [ 273.396512][ T8847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.401725][ T8847] ? __pfx__printk+0x10/0x10 [ 273.406331][ T8847] ? fs_reclaim_acquire+0x93/0x130 [ 273.411437][ T8847] ? __pfx___might_resched+0x10/0x10 [ 273.416717][ T8847] should_fail_ex+0x3b0/0x4e0 [ 273.421392][ T8847] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 273.427103][ T8847] should_failslab+0xac/0x100 [ 273.431775][ T8847] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 273.437489][ T8847] __kmalloc_noprof+0xd8/0x400 [ 273.442259][ T8847] tomoyo_realpath_from_path+0xcf/0x5e0 [ 273.447816][ T8847] tomoyo_path_number_perm+0x23a/0x880 [ 273.453275][ T8847] ? tomoyo_path_number_perm+0x208/0x880 [ 273.458900][ T8847] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 273.464884][ T8847] ? __pfx_lock_acquire+0x10/0x10 [ 273.469914][ T8847] ? __rcu_read_unlock+0xa1/0x110 [ 273.474931][ T8847] ? __fget_files+0x29/0x470 [ 273.479509][ T8847] ? __fget_files+0x3f3/0x470 [ 273.484185][ T8847] security_file_ioctl_compat+0xc6/0x2a0 [ 273.489821][ T8847] __se_compat_sys_ioctl+0xd6/0xc90 [ 273.495023][ T8847] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 273.500822][ T8847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.506803][ T8847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.513151][ T8847] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 273.519741][ T8847] ? lockdep_hardirqs_on+0x99/0x150 [ 273.524953][ T8847] __do_fast_syscall_32+0xb4/0x110 [ 273.530053][ T8847] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 273.535680][ T8847] ? lockdep_hardirqs_on+0x99/0x150 [ 273.540902][ T8847] do_fast_syscall_32+0x34/0x80 [ 273.545783][ T8847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.552145][ T8847] RIP: 0023:0xf746d579 [ 273.556247][ T8847] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 273.575886][ T8847] RSP: 002b:00000000f575656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 273.584340][ T8847] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05640 [ 273.592347][ T8847] RDX: 0000000020000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.600341][ T8847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.608315][ T8847] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 273.616284][ T8847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.624280][ T8847] [ 273.672752][ T8847] ERROR: Out of memory at tomoyo_realpath_from_path. [ 275.101797][ T5284] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 275.329721][ T5284] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 275.341778][ T5284] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.381252][ T5284] usb 3-1: config 0 has no interface number 0 [ 275.406000][ T5284] usb 3-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 275.471812][ T5284] usb 3-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 275.492666][ T5284] usb 3-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 275.528139][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.563723][ T8875] fuse: Unknown parameter '184467440737095516150x0000000000000007' [ 275.592302][ T5284] usb 3-1: Product: syz [ 275.596601][ T5284] usb 3-1: Manufacturer: syz [ 275.612119][ T5284] usb 3-1: SerialNumber: syz [ 275.694960][ T5284] usb 3-1: config 0 descriptor?? [ 275.732724][ T5284] HFC-S_USB 3-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 275.927730][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 276.000730][ T8886] netlink: 11 bytes leftover after parsing attributes in process `syz.0.718'. [ 276.050949][ T5284] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 276.060310][ T8868] netlink: 'syz.2.711': attribute type 25 has an invalid length. [ 276.069137][ T8868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.711'. [ 276.122830][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 276.241355][ T5284] usb 2-1: config 0 has no interfaces? [ 276.247082][ T5284] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 276.263119][ T936] usb 3-1: USB disconnect, device number 29 [ 276.274584][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.288424][ T5284] usb 2-1: config 0 descriptor?? [ 276.459895][ T5285] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 276.503573][ T936] usb 2-1: USB disconnect, device number 32 [ 276.609833][ T5285] usb 1-1: Using ep0 maxpacket: 16 [ 276.616590][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 276.627661][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 276.639599][ T5285] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 276.648958][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.657859][ T5285] usb 1-1: Product: syz [ 276.662928][ T5285] usb 1-1: Manufacturer: syz [ 276.667575][ T5285] usb 1-1: SerialNumber: syz [ 276.675937][ T5285] usb 1-1: config 0 descriptor?? [ 276.684545][ T5285] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 276.845161][ T8898] FAULT_INJECTION: forcing a failure. [ 276.845161][ T8898] name failslab, interval 1, probability 0, space 0, times 0 [ 276.867374][ T8898] CPU: 0 UID: 0 PID: 8898 Comm: syz.2.721 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 276.878020][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.888096][ T8898] Call Trace: [ 276.891377][ T8898] [ 276.894314][ T8898] dump_stack_lvl+0x241/0x360 [ 276.898993][ T8898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.904186][ T8898] ? __pfx__printk+0x10/0x10 [ 276.908795][ T8898] ? ref_tracker_alloc+0x332/0x490 [ 276.913906][ T8898] should_fail_ex+0x3b0/0x4e0 [ 276.918584][ T8898] ? skb_clone+0x20c/0x390 [ 276.923009][ T8898] should_failslab+0xac/0x100 [ 276.927707][ T8898] ? skb_clone+0x20c/0x390 [ 276.932133][ T8898] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 276.937686][ T8898] skb_clone+0x20c/0x390 [ 276.941928][ T8898] __netlink_deliver_tap+0x3cc/0x7c0 [ 276.947223][ T8898] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.952413][ T8898] netlink_deliver_tap+0x19d/0x1b0 [ 276.957520][ T8898] netlink_sendskb+0x68/0x140 [ 276.962213][ T8898] netlink_unicast+0x39d/0x990 [ 276.966989][ T8898] ? __asan_memcpy+0x40/0x70 [ 276.971589][ T8898] ? __pfx_netlink_unicast+0x10/0x10 [ 276.976888][ T8898] netlink_rcv_skb+0x262/0x430 [ 276.981661][ T8898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.986687][ T8898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.991991][ T8898] ? __netlink_deliver_tap+0x77e/0x7c0 [ 276.997453][ T8898] genl_rcv+0x28/0x40 [ 277.001431][ T8898] netlink_unicast+0x7f6/0x990 [ 277.006205][ T8898] ? __pfx_netlink_unicast+0x10/0x10 [ 277.011493][ T8898] ? __virt_addr_valid+0x183/0x530 [ 277.016602][ T8898] ? __check_object_size+0x48e/0x900 [ 277.021905][ T8898] netlink_sendmsg+0x8e4/0xcb0 [ 277.026721][ T8898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.032027][ T8898] ? __pfx_lock_release+0x10/0x10 [ 277.037061][ T8898] ? aa_sock_msg_perm+0x91/0x160 [ 277.042003][ T8898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.047285][ T8898] __sock_sendmsg+0x221/0x270 [ 277.051965][ T8898] ____sys_sendmsg+0x52a/0x7e0 [ 277.056729][ T8898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.062022][ T8898] __sys_sendmsg+0x292/0x380 [ 277.066610][ T8898] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.071728][ T8898] ? __pfx_vfs_write+0x10/0x10 [ 277.076511][ T8898] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 277.083100][ T8898] ? lockdep_hardirqs_on+0x99/0x150 [ 277.088311][ T8898] __do_fast_syscall_32+0xb4/0x110 [ 277.093438][ T8898] ? exc_page_fault+0x590/0x8c0 [ 277.098297][ T8898] do_fast_syscall_32+0x34/0x80 [ 277.103148][ T8898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 277.109468][ T8898] RIP: 0023:0xf748d579 [ 277.113534][ T8898] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 277.133138][ T8898] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 277.141553][ T8898] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000140 [ 277.149528][ T8898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.157514][ T8898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 277.165506][ T8898] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 277.173479][ T8898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 277.181459][ T8898] [ 277.668563][ T1098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.679385][ T5285] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 277.743410][ T5284] usb 1-1: USB disconnect, device number 31 [ 277.757105][ T8915] netlink: 44 bytes leftover after parsing attributes in process `syz.1.730'. [ 277.766518][ T8918] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 277.776257][ T8918] TCP: tcp_parse_options: Illegal window scaling value 255 > 14 received [ 277.840618][ T5285] usb 3-1: Using ep0 maxpacket: 16 [ 277.848199][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.879831][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.894706][ T1098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.913398][ T5285] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 277.929254][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.949903][ T5285] usb 3-1: config 0 descriptor?? [ 277.992419][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'. [ 278.004422][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 278.048238][ T8927] netlink: 173 bytes leftover after parsing attributes in process `syz.1.734'. [ 278.117119][ T8923] netlink: 277 bytes leftover after parsing attributes in process `syz.1.734'. [ 278.129996][ T8923] netlink: 277 bytes leftover after parsing attributes in process `syz.1.734'. [ 278.151956][ T1098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.248765][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.264270][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.273127][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.305528][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.320697][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.328031][ T1098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.344723][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.428944][ T5285] hid-alps 0003:044E:120C.0011: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.2-1/input0 [ 278.446445][ T8940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.537144][ T8942] fuse: Unknown parameter '000000000000000000040x0000000000000004' [ 278.588171][ T8945] trusted_key: encrypted_key: insufficient parameters specified [ 278.710913][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.762379][ T1098] bridge_slave_1: left allmulticast mode [ 278.768571][ T1098] bridge_slave_1: left promiscuous mode [ 278.774663][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.786616][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.811331][ T1098] bridge_slave_0: left allmulticast mode [ 278.817038][ T1098] bridge_slave_0: left promiscuous mode [ 278.854226][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.894351][ T8911] GUP no longer grows the stack in syz.2.727 (8911): 20006000-2000a000 (20005000) [ 278.978234][ T8911] CPU: 1 UID: 0 PID: 8911 Comm: syz.2.727 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 278.988878][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 278.998927][ T8911] Call Trace: [ 279.002207][ T8911] [ 279.005129][ T8911] dump_stack_lvl+0x241/0x360 [ 279.009815][ T8911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.015017][ T8911] ? __pfx__printk+0x10/0x10 [ 279.019598][ T8911] ? find_vma+0xf9/0x170 [ 279.023842][ T8911] ? vma_is_secretmem+0xd/0x50 [ 279.028597][ T8911] ? check_vma_flags+0x52b/0x5a0 [ 279.033539][ T8911] __get_user_pages+0x4260/0x48d0 [ 279.038578][ T8911] ? __kernel_text_address+0xd/0x40 [ 279.043791][ T8911] ? __pfx___get_user_pages+0x10/0x10 [ 279.049163][ T8911] ? __pfx_lock_acquire+0x10/0x10 [ 279.054208][ T8911] __gup_longterm_locked+0x3ba/0x17d0 [ 279.059596][ T8911] pin_user_pages+0x137/0x1f0 [ 279.064277][ T8911] ? __pfx_pin_user_pages+0x10/0x10 [ 279.069470][ T8911] ? __kmalloc_node_noprof+0x247/0x440 [ 279.074949][ T8911] xdp_umem_create+0x978/0xf30 [ 279.079716][ T8911] xsk_setsockopt+0x732/0x950 [ 279.084448][ T8911] ? __pfx_xsk_setsockopt+0x10/0x10 [ 279.089654][ T8911] ? __pfx_lock_acquire+0x10/0x10 [ 279.094696][ T8911] ? __fget_files+0x29/0x470 [ 279.099327][ T8911] ? aa_sock_opt_perm+0x79/0x120 [ 279.104300][ T8911] ? __pfx_xsk_setsockopt+0x10/0x10 [ 279.109537][ T8911] do_sock_setsockopt+0x3af/0x720 [ 279.114613][ T8911] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 279.120200][ T8911] ? __fget_files+0x3f3/0x470 [ 279.124916][ T8911] ? __fget_files+0x29/0x470 [ 279.129552][ T8911] __sys_setsockopt+0x1a2/0x250 [ 279.134445][ T8911] __ia32_sys_setsockopt+0xb5/0xd0 [ 279.139598][ T8911] __do_fast_syscall_32+0xb4/0x110 [ 279.144751][ T8911] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 279.150412][ T8911] ? lockdep_hardirqs_on+0x99/0x150 [ 279.155645][ T8911] do_fast_syscall_32+0x34/0x80 [ 279.160522][ T8911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.166876][ T8911] RIP: 0023:0xf748d579 [ 279.170968][ T8911] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 279.190614][ T8911] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 279.199076][ T8911] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 000000000000011b [ 279.207093][ T8911] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000020 [ 279.215102][ T8911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.223110][ T8911] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 279.231113][ T8911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.239125][ T8911] [ 279.480169][ T936] usb 3-1: USB disconnect, device number 30 [ 279.942449][ T6710] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 280.089855][ T6710] usb 2-1: device descriptor read/64, error -71 [ 280.166756][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.177967][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.189916][ T1098] bond0 (unregistering): Released all slaves [ 280.345210][ T6710] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 280.424037][ T5244] Bluetooth: hci0: command tx timeout [ 280.478905][ T8937] chnl_net:caif_netlink_parms(): no params data found [ 280.578956][ T8994] FAULT_INJECTION: forcing a failure. [ 280.578956][ T8994] name failslab, interval 1, probability 0, space 0, times 0 [ 280.590749][ T8988] xt_CT: No such helper "snmp_trap" [ 280.592126][ T8994] CPU: 1 UID: 0 PID: 8994 Comm: syz.2.747 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 280.607799][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 280.617861][ T8994] Call Trace: [ 280.621139][ T8994] [ 280.624066][ T8994] dump_stack_lvl+0x241/0x360 [ 280.628747][ T8994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.633943][ T8994] ? __pfx__printk+0x10/0x10 [ 280.638543][ T8994] ? __pfx_lock_acquire+0x10/0x10 [ 280.643607][ T8994] should_fail_ex+0x3b0/0x4e0 [ 280.648290][ T8994] ? __inet_hash_connect+0xa2e/0x2170 [ 280.653666][ T8994] should_failslab+0xac/0x100 [ 280.658348][ T8994] ? __inet_hash_connect+0xa2e/0x2170 [ 280.663720][ T8994] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 280.669102][ T8994] __inet_hash_connect+0xa2e/0x2170 [ 280.674303][ T8994] ? __pfx___inet6_check_established+0x10/0x10 [ 280.680475][ T8994] ? __pfx___inet_hash_connect+0x10/0x10 [ 280.686118][ T8994] ? inet6_hash_connect+0x7d/0xd0 [ 280.691143][ T8994] tcp_v6_connect+0x1158/0x1e40 [ 280.696008][ T8994] ? __pfx_tcp_v6_connect+0x10/0x10 [ 280.701210][ T8994] ? __local_bh_enable_ip+0x168/0x200 [ 280.706581][ T8994] ? mptcp_connect+0x656/0xb20 [ 280.711345][ T8994] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 280.717061][ T8994] ? mptcp_connect+0x656/0xb20 [ 280.721833][ T8994] ? do_raw_spin_unlock+0x13c/0x8b0 [ 280.727039][ T8994] mptcp_connect+0x701/0xb20 [ 280.731636][ T8994] __inet_stream_connect+0x262/0xf30 [ 280.736931][ T8994] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.743273][ T8994] ? __local_bh_enable_ip+0x168/0x200 [ 280.748654][ T8994] ? lockdep_hardirqs_on+0x99/0x150 [ 280.753855][ T8994] ? __pfx___inet_stream_connect+0x10/0x10 [ 280.759661][ T8994] ? __local_bh_enable_ip+0x168/0x200 [ 280.765040][ T8994] ? inet_stream_connect+0x50/0xa0 [ 280.770160][ T8994] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 280.775886][ T8994] inet_stream_connect+0x65/0xa0 [ 280.780827][ T8994] ? __pfx_inet_stream_connect+0x10/0x10 [ 280.786460][ T8994] __sys_connect+0x2d1/0x300 [ 280.791049][ T8994] ? __pfx___sys_connect+0x10/0x10 [ 280.796172][ T8994] __ia32_sys_connect+0x7a/0x90 [ 280.801018][ T8994] __do_fast_syscall_32+0xb4/0x110 [ 280.806129][ T8994] ? exc_page_fault+0x590/0x8c0 [ 280.810986][ T8994] do_fast_syscall_32+0x34/0x80 [ 280.815834][ T8994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.822165][ T8994] RIP: 0023:0xf748d579 [ 280.826232][ T8994] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 280.845847][ T8994] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 280.854273][ T8994] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 280.862242][ T8994] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 280.870239][ T8994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.878207][ T8994] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 280.886185][ T8994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.894163][ T8994] [ 280.967097][ T6710] usb 2-1: device descriptor read/64, error -71 [ 281.011531][ T8982] libceph: resolve ' [ 281.011531][ T8982] -&fYǝa2i [ 281.011531][ T8982] .?&*&' (ret=-3): failed [ 281.100822][ T6710] usb usb2-port1: attempt power cycle [ 281.370384][ T8937] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.377530][ T8937] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.386796][ T8937] bridge_slave_0: entered allmulticast mode [ 281.396526][ T8937] bridge_slave_0: entered promiscuous mode [ 281.404580][ T8937] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.413983][ T8937] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.421465][ T5284] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 281.433761][ T8937] bridge_slave_1: entered allmulticast mode [ 281.475147][ T8937] bridge_slave_1: entered promiscuous mode [ 281.479943][ T6710] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 281.502806][ T6710] usb 2-1: device descriptor read/8, error -71 [ 281.571420][ T1098] hsr_slave_0: left promiscuous mode [ 281.589118][ T5284] usb 3-1: New USB device found, idVendor=0df6, idProduct=004b, bcdDevice=56.d7 [ 281.608947][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.633850][ T1098] hsr_slave_1: left promiscuous mode [ 281.643179][ T5284] usb 3-1: Product: syz [ 281.673262][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.691600][ T5284] usb 3-1: Manufacturer: syz [ 281.721070][ T5284] usb 3-1: SerialNumber: syz [ 281.731723][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.750366][ T5284] usb 3-1: config 0 descriptor?? [ 281.759238][ T6710] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 281.787283][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.787969][ T5284] r8712u: register rtl8712_netdev_ops to netdev_ops [ 281.817396][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.829231][ T5284] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 281.942676][ T1098] veth1_macvtap: left promiscuous mode [ 281.948242][ T1098] veth0_macvtap: left promiscuous mode [ 281.990802][ T1098] veth1_vlan: left promiscuous mode [ 281.996139][ T1098] veth0_vlan: left promiscuous mode [ 282.002536][ T5284] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 282.011978][ T6710] usb 2-1: device not accepting address 36, error -71 [ 282.030722][ T6710] usb usb2-port1: unable to enumerate USB device [ 282.037208][ T5284] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 282.047081][ T5284] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 282.078113][ T5284] usb 3-1: USB disconnect, device number 31 [ 282.499895][ T5244] Bluetooth: hci0: command tx timeout [ 282.509546][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.530063][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.539514][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.547928][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.556954][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.578051][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.095456][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 283.150937][ T9047] __nla_validate_parse: 2 callbacks suppressed [ 283.150952][ T9047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.757'. [ 283.268867][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 283.370990][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 283.709700][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 283.781671][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 283.877434][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 283.885378][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 283.982965][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 284.071887][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 284.188660][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 284.277212][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 284.348989][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 284.438874][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 284.526936][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 284.592183][ T5243] Bluetooth: hci0: command tx timeout [ 284.594652][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 284.664486][ T5243] Bluetooth: hci1: command tx timeout [ 284.687196][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 284.758589][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 284.855566][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 284.858636][ T8937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.904300][ T8937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.095416][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 285.118869][ T8937] team0: Port device team_slave_0 added [ 285.135517][ T9055] netlink: 'syz.3.758': attribute type 9 has an invalid length. [ 285.173823][ T8937] team0: Port device team_slave_1 added [ 285.396691][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 285.407330][ T8937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.414854][ T8937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.441365][ T8937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.455960][ T8937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.463106][ T8937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.482107][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 285.489364][ T8937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.580878][ T8937] hsr_slave_0: entered promiscuous mode [ 285.588549][ T8937] hsr_slave_1: entered promiscuous mode [ 285.593197][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 285.609932][ T5284] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 285.620128][ T8937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.627874][ T8937] Cannot create hsr debugfs directory [ 285.782196][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 285.848673][ T5284] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 285.870219][ T5284] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.879513][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.899337][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 285.908585][ T5284] usb 4-1: config 0 descriptor?? [ 285.954573][ T5284] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 286.124907][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 286.263522][ T9039] chnl_net:caif_netlink_parms(): no params data found [ 286.365232][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 286.452712][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 286.556366][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 286.637536][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 286.659946][ T5243] Bluetooth: hci0: command tx timeout [ 286.722780][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 286.740140][ T5243] Bluetooth: hci1: command tx timeout [ 286.748555][ T9039] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.787866][ T9039] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.812322][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 286.819453][ T9039] bridge_slave_0: entered allmulticast mode [ 286.845320][ T9039] bridge_slave_0: entered promiscuous mode [ 286.875434][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.882868][ T9039] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.903142][ T9039] bridge_slave_1: entered allmulticast mode [ 286.927190][ T9039] bridge_slave_1: entered promiscuous mode [ 286.938287][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 287.007304][ T9039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.058070][ T9039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.199244][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 287.243037][ T9039] team0: Port device team_slave_0 added [ 287.276764][ T9039] team0: Port device team_slave_1 added [ 287.386470][ T8937] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 287.424857][ T8937] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 287.439070][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 287.468074][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.488683][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.527071][ T9039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.553958][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.568560][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.604456][ T9039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.625581][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 287.631177][ T8937] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 287.653860][ T8937] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 287.763187][ T9039] hsr_slave_0: entered promiscuous mode [ 287.768270][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 287.781745][ T9039] hsr_slave_1: entered promiscuous mode [ 287.791698][ T9039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.809974][ T9039] Cannot create hsr debugfs directory [ 287.938814][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 288.124820][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 288.136822][ T9039] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.302229][ T9039] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.307034][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 288.387713][ T8937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.418837][ T9039] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.477772][ T8937] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.504573][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 288.547868][ T9039] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.590991][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.598172][ T2897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.688566][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.695797][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.714555][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 288.820783][ T5243] Bluetooth: hci1: command tx timeout [ 288.941356][ T8937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.027006][ T9039] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 289.035419][ T936] usb 4-1: USB disconnect, device number 36 [ 289.105476][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 289.118463][ T9039] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 289.131951][ T9039] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 289.169840][ T9039] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 289.353842][ T8937] veth0_vlan: entered promiscuous mode [ 289.388087][ T8937] veth1_vlan: entered promiscuous mode [ 289.439116][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 289.560045][ T9039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.586367][ T9039] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.610450][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.617646][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.682907][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 289.783004][ T8937] veth0_macvtap: entered promiscuous mode [ 289.803021][ T8937] veth1_macvtap: entered promiscuous mode [ 289.829646][ T8937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.860069][ T8937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.889824][ T8937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.909814][ T8937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.921702][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 289.940927][ T8937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.949483][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.956677][ T5579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.023833][ T8937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.035928][ T8937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.048310][ T8937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.059425][ T8937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.073026][ T8937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.199236][ T8937] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.300966][ T8937] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.359439][ T8937] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.399686][ T8937] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.434262][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 290.455739][ T9039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.483877][ T9039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.616298][ T9039] veth0_vlan: entered promiscuous mode [ 290.738656][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 290.744455][ T9039] veth1_vlan: entered promiscuous mode [ 290.858414][ T2897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.879382][ T9039] veth0_macvtap: entered promiscuous mode [ 290.885424][ T2897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.905298][ T5243] Bluetooth: hci1: command tx timeout [ 290.944760][ T9039] veth1_macvtap: entered promiscuous mode [ 290.974667][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.985809][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.996065][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.006872][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.018394][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.028947][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.041664][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.063106][ T9123] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 291.070345][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 291.072778][ T9123] TCP: tcp_parse_options: Illegal window scaling value 255 > 14 received [ 291.089974][ T46] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 291.098550][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.112385][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.126249][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.153614][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.179930][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.206275][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.228083][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.243624][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.269563][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 291.293938][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 59197, setting to 1024 [ 291.309537][ T9032] iou-wrk-9030 (9032): drop_caches: 1 [ 291.317770][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.320029][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 291.345708][ T46] usb 3-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 291.356251][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.364464][ T46] usb 3-1: Product: syz [ 291.368662][ T46] usb 3-1: Manufacturer: syz [ 291.373483][ T46] usb 3-1: SerialNumber: syz [ 291.380802][ T46] usb 3-1: config 0 descriptor?? [ 291.387106][ T9117] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 291.409122][ T9039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.418356][ T9039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.428919][ T9039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.437739][ T9039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.622525][ T2897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.658950][ T5579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.681125][ T2897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.706300][ T5579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.784050][ T5234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.023988][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.820010][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.909935][ T5289] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 294.291497][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.420844][ T5289] usb 2-1: Using ep0 maxpacket: 32 [ 295.920129][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.946797][ T9143] sch_fq: defrate 0 ignored. [ 296.562708][ T46] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.773620][ T5289] usb 2-1: device descriptor read/all, error -71 [ 296.797089][ T9148] netlink: 44 bytes leftover after parsing attributes in process `syz.0.754'. [ 296.820715][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.993259][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.017867][ T46] usb 3-1: USB disconnect, device number 32 [ 297.733197][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.079261][ T5287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.793532][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.951166][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.003885][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.790417][ T5234] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 302.030616][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.070281][ T5234] usb 3-1: Using ep0 maxpacket: 32 [ 302.131831][ T5234] usb 3-1: device descriptor read/all, error -71 [ 302.822173][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.852969][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.880515][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.298547][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.862630][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.339013][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.005980][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.723886][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.745245][ T2897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.432438][ T5284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.689717][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.236001][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.251082][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.262609][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.290607][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.305729][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 311.314502][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.343885][ T46] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 311.600562][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 311.626449][ T46] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 311.668055][ T46] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 311.706072][ T5234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.739863][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 311.769605][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 311.804927][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 311.828830][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.893899][ T46] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 311.939816][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.979376][ T46] usb 2-1: config 0 descriptor?? [ 312.209253][ T46] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 312.270358][ T46] usb 2-1: USB disconnect, device number 39 [ 312.302784][ T46] usblp0: removed [ 312.801390][ T46] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 312.990040][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 313.005132][ T46] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 313.036639][ T46] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 313.062299][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 313.086266][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.111242][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 313.145248][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.165202][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 313.198837][ T46] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 313.225474][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.251704][ T46] usb 2-1: config 0 descriptor?? [ 313.380077][ T5237] Bluetooth: hci3: command tx timeout [ 313.384198][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.514618][ T46] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 313.570155][ T46] usb 2-1: USB disconnect, device number 40 [ 313.598577][ T46] usblp0: removed [ 313.634647][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.713965][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.191309][ T5234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.350979][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.368074][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.378866][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.388803][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.396926][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 314.408418][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.454197][ T5234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.465039][ T5243] Bluetooth: hci3: command tx timeout [ 316.169035][ T9193] ================================================================== [ 316.177198][ T9193] BUG: KASAN: double-free in kref_put+0x4ab/0x7c0 [ 316.183641][ T9193] Free of addr ffff88807fc5f240 by task syz.1.786/9193 [ 316.190514][ T9193] [ 316.192853][ T9193] CPU: 1 UID: 0 PID: 9193 Comm: syz.1.786 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 316.203464][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 316.213635][ T9193] Call Trace: [ 316.216930][ T9193] [ 316.219873][ T9193] dump_stack_lvl+0x241/0x360 [ 316.224579][ T9193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.229797][ T9193] ? __pfx__printk+0x10/0x10 [ 316.234412][ T9193] ? _printk+0xd5/0x120 [ 316.238594][ T9193] ? __virt_addr_valid+0x183/0x530 [ 316.243729][ T9193] ? __virt_addr_valid+0x183/0x530 [ 316.248865][ T9193] print_report+0x169/0x550 [ 316.253392][ T9193] ? __virt_addr_valid+0x183/0x530 [ 316.258525][ T9193] ? __virt_addr_valid+0x183/0x530 [ 316.263663][ T9193] ? __virt_addr_valid+0x45f/0x530 [ 316.268797][ T9193] ? __phys_addr+0xba/0x170 [ 316.273318][ T9193] ? kref_put+0x4ab/0x7c0 [ 316.277668][ T9193] kasan_report_invalid_free+0x11a/0x140 [ 316.283322][ T9193] ? kref_put+0x4ab/0x7c0 [ 316.287671][ T9193] ? kref_put+0x4ab/0x7c0 [ 316.292021][ T9193] check_slab_allocation+0xc6/0x110 [ 316.297245][ T9193] ? kref_put+0x4ab/0x7c0 [ 316.301590][ T9193] kfree+0x151/0x440 [ 316.305504][ T9193] ? kref_put+0x4ab/0x7c0 [ 316.309847][ T9193] kref_put+0x4ab/0x7c0 [ 316.314017][ T9193] raw_release+0x135/0x1e0 [ 316.318475][ T9193] ? __pfx_raw_release+0x10/0x10 [ 316.323449][ T9193] __fput+0x23f/0x880 [ 316.327475][ T9193] __ia32_sys_close+0x7f/0x110 [ 316.332275][ T9193] __do_fast_syscall_32+0xb4/0x110 [ 316.337415][ T9193] ? exc_page_fault+0x590/0x8c0 [ 316.342295][ T9193] do_fast_syscall_32+0x34/0x80 [ 316.347168][ T9193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.353520][ T9193] RIP: 0023:0xf746d579 [ 316.357605][ T9193] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 316.377242][ T9193] RSP: 002b:00000000f5756530 EFLAGS: 00000206 ORIG_RAX: 0000000000000006 [ 316.385684][ T9193] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5756b40 [ 316.393682][ T9193] RDX: 0000000000000000 RSI: 00000000f745bff4 RDI: 0000000000000000 [ 316.401677][ T9193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.409663][ T9193] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 316.417652][ T9193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.425654][ T9193] [ 316.428685][ T9193] [ 316.431023][ T9193] Allocated by task 9219: [ 316.435356][ T9193] kasan_save_track+0x3f/0x80 [ 316.440054][ T9193] __kasan_kmalloc+0x98/0xb0 [ 316.444660][ T9193] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 316.451102][ T9193] memdup_user+0x2b/0xc0 [ 316.455369][ T9193] raw_ioctl+0xd0c/0x3cd0 [ 316.459719][ T9193] __se_compat_sys_ioctl+0x510/0xc90 [ 316.465015][ T9193] __do_fast_syscall_32+0xb4/0x110 [ 316.470148][ T9193] do_fast_syscall_32+0x34/0x80 [ 316.475019][ T9193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.481371][ T9193] [ 316.483704][ T9193] Freed by task 9219: [ 316.487689][ T9193] kasan_save_track+0x3f/0x80 [ 316.492381][ T9193] kasan_save_free_info+0x40/0x50 [ 316.497442][ T9193] __kasan_slab_free+0x59/0x70 [ 316.502226][ T9193] kfree+0x1a0/0x440 [ 316.506139][ T9193] kref_put+0x4ab/0x7c0 [ 316.510307][ T9193] raw_release+0x135/0x1e0 [ 316.514746][ T9193] __fput+0x23f/0x880 [ 316.518746][ T9193] __ia32_sys_close+0x7f/0x110 [ 316.523531][ T9193] __do_fast_syscall_32+0xb4/0x110 [ 316.528661][ T9193] do_fast_syscall_32+0x34/0x80 [ 316.533808][ T9193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.540159][ T9193] [ 316.542496][ T9193] The buggy address belongs to the object at ffff88807fc5f240 [ 316.542496][ T9193] which belongs to the cache kmalloc-16 of size 16 [ 316.556394][ T9193] The buggy address is located 0 bytes inside of [ 316.556394][ T9193] 16-byte region [ffff88807fc5f240, ffff88807fc5f250) [ 316.569438][ T9193] [ 316.571775][ T9193] The buggy address belongs to the physical page: [ 316.578202][ T9193] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fc5f [ 316.587079][ T9193] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 316.594227][ T9193] page_type: f5(slab) [ 316.598234][ T9193] raw: 00fff00000000000 ffff88801ac41640 ffffea0000a16a40 dead000000000002 [ 316.606837][ T9193] raw: 0000000000000000 0000000000800080 00000001f5000000 0000000000000000 [ 316.615436][ T9193] page dumped because: kasan: bad access detected [ 316.621870][ T9193] page_owner tracks the page as allocated [ 316.627595][ T9193] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5787, tgid 5787 (syz-executor), ts 105322918413, free_ts 105322588156 [ 316.647332][ T9193] post_alloc_hook+0x1f3/0x230 [ 316.652131][ T9193] get_page_from_freelist+0x3045/0x3190 [ 316.657732][ T9193] __alloc_pages_noprof+0x292/0x710 [ 316.662953][ T9193] alloc_slab_page+0x59/0x120 [ 316.667646][ T9193] allocate_slab+0x5a/0x2f0 [ 316.672169][ T9193] ___slab_alloc+0xcd1/0x14b0 [ 316.676873][ T9193] __slab_alloc+0x58/0xa0 [ 316.681237][ T9193] __kmalloc_node_noprof+0x286/0x440 [ 316.686540][ T9193] __kvmalloc_node_noprof+0x72/0x190 [ 316.691842][ T9193] xt_replace_table+0x1a2/0x780 [ 316.696712][ T9193] __do_replace+0x1ae/0xa40 [ 316.701231][ T9193] do_ipt_set_ctl+0xd1f/0x1250 [ 316.706016][ T9193] nf_setsockopt+0x295/0x2c0 [ 316.710626][ T9193] do_sock_setsockopt+0x3af/0x720 [ 316.715668][ T9193] __sys_setsockopt+0x1a2/0x250 [ 316.720531][ T9193] __se_compat_sys_socketcall+0x85a/0x1430 [ 316.726356][ T9193] page last free pid 5787 tgid 5787 stack trace: [ 316.732690][ T9193] free_unref_page+0xcfb/0xf20 [ 316.737482][ T9193] vfree+0x186/0x2e0 [ 316.741399][ T9193] compat_copy_entries_to_user+0x550/0x620 [ 316.747223][ T9193] do_ipt_get_ctl+0xe4d/0x1810 [ 316.752006][ T9193] nf_getsockopt+0x299/0x2c0 [ 316.756629][ T9193] ip_getsockopt+0x222/0x2e0 [ 316.761233][ T9193] tcp_getsockopt+0x163/0x1c0 [ 316.765930][ T9193] do_sock_getsockopt+0x3c4/0x7e0 [ 316.770972][ T9193] __sys_getsockopt+0x267/0x330 [ 316.775836][ T9193] __se_compat_sys_socketcall+0x349/0x1430 [ 316.781662][ T9193] __do_fast_syscall_32+0xb4/0x110 [ 316.786791][ T9193] do_fast_syscall_32+0x34/0x80 [ 316.791668][ T9193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.798016][ T9193] [ 316.800346][ T9193] Memory state around the buggy address: [ 316.805982][ T9193] ffff88807fc5f100: 00 01 fc fc 00 00 fc fc 00 01 fc fc 00 05 fc fc [ 316.814053][ T9193] ffff88807fc5f180: 00 00 fc fc 00 00 fc fc fa fb fc fc fa fb fc fc [ 316.822130][ T9193] >ffff88807fc5f200: 00 00 fc fc fa fb fc fc fa fb fc fc 00 06 fc fc [ 316.830640][ T9193] ^ [ 316.836805][ T9193] ffff88807fc5f280: 00 00 fc fc 00 00 fc fc 00 03 fc fc 00 00 fc fc [ 316.844886][ T9193] ffff88807fc5f300: 00 00 fc fc fa fb fc fc 00 01 fc fc 00 01 fc fc [ 316.852970][ T9193] ================================================================== [ 316.951304][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.034057][ T5243] Bluetooth: hci4: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 317.285142][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.328267][ T9199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.784'. [ 317.486861][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.493461][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.749805][ T5243] Bluetooth: hci3: command tx timeout [ 317.899648][ T9193] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 317.906896][ T9193] CPU: 1 UID: 0 PID: 9193 Comm: syz.1.786 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 317.917513][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 317.927592][ T9193] Call Trace: [ 317.930890][ T9193] [ 317.933834][ T9193] dump_stack_lvl+0x241/0x360 [ 317.938531][ T9193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.943748][ T9193] ? __pfx__printk+0x10/0x10 [ 317.948374][ T9193] ? preempt_schedule+0xe1/0xf0 [ 317.953269][ T9193] ? vscnprintf+0x5d/0x90 [ 317.957635][ T9193] panic+0x349/0x880 [ 317.961576][ T9193] ? check_panic_on_warn+0x21/0xb0 [ 317.966731][ T9193] ? __pfx_panic+0x10/0x10 [ 317.971183][ T9193] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 317.977200][ T9193] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 317.983565][ T9193] ? print_report+0x502/0x550 [ 317.988270][ T9193] check_panic_on_warn+0x86/0xb0 [ 317.993235][ T9193] ? kref_put+0x4ab/0x7c0 [ 317.997581][ T9193] end_report+0x77/0x160 [ 318.001844][ T9193] kasan_report_invalid_free+0x12a/0x140 [ 318.007501][ T9193] ? kref_put+0x4ab/0x7c0 [ 318.011896][ T9193] ? kref_put+0x4ab/0x7c0 [ 318.016245][ T9193] check_slab_allocation+0xc6/0x110 [ 318.021466][ T9193] ? kref_put+0x4ab/0x7c0 [ 318.025816][ T9193] kfree+0x151/0x440 [ 318.029732][ T9193] ? kref_put+0x4ab/0x7c0 [ 318.034074][ T9193] kref_put+0x4ab/0x7c0 [ 318.038248][ T9193] raw_release+0x135/0x1e0 [ 318.042688][ T9193] ? __pfx_raw_release+0x10/0x10 [ 318.047663][ T9193] __fput+0x23f/0x880 [ 318.051682][ T9193] __ia32_sys_close+0x7f/0x110 [ 318.056486][ T9193] __do_fast_syscall_32+0xb4/0x110 [ 318.061628][ T9193] ? exc_page_fault+0x590/0x8c0 [ 318.066524][ T9193] do_fast_syscall_32+0x34/0x80 [ 318.071422][ T9193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.077783][ T9193] RIP: 0023:0xf746d579 [ 318.081872][ T9193] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 318.101507][ T9193] RSP: 002b:00000000f5756530 EFLAGS: 00000206 ORIG_RAX: 0000000000000006 [ 318.109953][ T9193] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5756b40 [ 318.117948][ T9193] RDX: 0000000000000000 RSI: 00000000f745bff4 RDI: 0000000000000000 [ 318.125944][ T9193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.133935][ T9193] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 318.141929][ T9193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.149928][ T9193] [ 318.153238][ T9193] Kernel Offset: disabled [ 318.157583][ T9193] Rebooting in 86400 seconds..