last executing test programs: 2m48.716282354s ago: executing program 3 (id=4): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r0, &(0x7f00000010c0)=""/4096, 0x1000) (fail_nth: 4) 2m46.783781288s ago: executing program 3 (id=18): r0 = userfaultfd(0x80001) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) landlock_create_ruleset(0x0, 0x0, 0x700) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m45.947261518s ago: executing program 3 (id=23): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) prlimit64(r0, 0x9, 0x0, &(0x7f0000000200)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x101) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffe01, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x40000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) r8 = openat$cgroup_procs(r7, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x401) sendfile(r9, r9, 0x0, 0x2) sendfile(r6, r6, 0x0, 0x401) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000002b00)={r4, 0xfb}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 2m44.356830991s ago: executing program 3 (id=27): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8c957984312e9d39eaa478a3065afd52404cb058b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='cachefiles_mkdir\x00', r2, 0x0, 0x80000}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r9 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r9, &(0x7f0000000080)=[{&(0x7f0000000340)="a102a933f4eb88ce1fa73d72494c059496e0a9c694b86214b95ce71449c291ada7710d883c86", 0x7fec}], 0x1, 0x8, 0x7, 0x4) write$UHID_INPUT(r9, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r5, 0x0, 0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) 2m28.6348719s ago: executing program 32 (id=27): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='cachefiles_mkdir\x00', r2, 0x0, 0x80000}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r9 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r9, &(0x7f0000000080)=[{&(0x7f0000000340)="a102a933f4eb88ce1fa73d72494c059496e0a9c694b86214b95ce71449c291ada7710d883c86", 0x7fec}], 0x1, 0x8, 0x7, 0x4) write$UHID_INPUT(r9, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r5, 0x0, 0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) 14.519472038s ago: executing program 5 (id=491): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010069703667726500001800028014000700fe8000000000000000000000000000aa08000a00", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0xb3fc0fbaa7d9a132, 0x6, 0x80, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="19f380cebf8e", 0x0, 0x6, 0x20, 0x0, 0x0}) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffd, 0x4, 0x4}) (async) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffd, 0x4, 0x4}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) (async) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) recvmmsg(r4, &(0x7f00000067c0)=[{{&(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000700)=""/127, 0x7f}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/69, 0x45}, {&(0x7f0000000900)=""/239, 0xef}, {&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000001b00)=""/208, 0xd0}], 0x8, &(0x7f0000001c80)=""/220, 0xdc}, 0xfffffff7}, {{&(0x7f0000001d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001f40)=[{&(0x7f00000005c0)=""/33, 0x21}, {&(0x7f0000001e00)=""/124, 0x7c}, {&(0x7f0000001e80)=""/144, 0x90}], 0x3, &(0x7f0000006a00)=""/198, 0xc6}, 0xf12}, {{&(0x7f0000002080)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002100)=""/101, 0x65}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/169, 0xa9}], 0x3, &(0x7f0000003280)=""/231, 0xe7}, 0x9}, {{&(0x7f0000003380)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003400)=""/56, 0x38}, {&(0x7f0000003440)=""/39, 0x27}, {&(0x7f0000003480)=""/253, 0xfd}, {&(0x7f0000003580)=""/62, 0x3e}], 0x4}, 0xf}, {{&(0x7f0000003600)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003680)=""/146, 0x92}, {&(0x7f0000003740)=""/184, 0xb8}, {&(0x7f0000003800)=""/36, 0x24}, {&(0x7f0000003840)=""/92, 0x5c}, {&(0x7f00000038c0)=""/30, 0x1e}, {&(0x7f0000003900)=""/12, 0xc}, {&(0x7f0000001f80)=""/212, 0xd4}], 0x7, &(0x7f0000003ac0)=""/219, 0xdb}, 0x8}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003bc0)=""/213, 0xd5}, {&(0x7f0000003cc0)=""/244, 0xf4}, {&(0x7f0000003dc0)=""/40, 0x28}], 0x3}, 0xc}, {{&(0x7f0000003e40)=@nfc, 0x80, &(0x7f00000061c0)=[{&(0x7f0000003ec0)=""/77, 0x4d}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/117, 0x75}, {&(0x7f0000004fc0)=""/248, 0xf8}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/91, 0x5b}, {&(0x7f0000006140)=""/104, 0x68}], 0x7, &(0x7f0000006240)=""/149, 0x95}, 0x8}, {{&(0x7f0000006300)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000006680)=[{&(0x7f0000006380)=""/93, 0x5d}, {&(0x7f0000006400)=""/211, 0xd3}, {&(0x7f0000006500)=""/74, 0x4a}, {&(0x7f0000006580)=""/243, 0xf3}], 0x4, &(0x7f00000066c0)=""/235, 0xeb}, 0xffff}], 0x8, 0x1, &(0x7f00000069c0)={0x0, 0x3938700}) (async) recvmmsg(r4, &(0x7f00000067c0)=[{{&(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000700)=""/127, 0x7f}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/69, 0x45}, {&(0x7f0000000900)=""/239, 0xef}, {&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000001b00)=""/208, 0xd0}], 0x8, &(0x7f0000001c80)=""/220, 0xdc}, 0xfffffff7}, {{&(0x7f0000001d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001f40)=[{&(0x7f00000005c0)=""/33, 0x21}, {&(0x7f0000001e00)=""/124, 0x7c}, {&(0x7f0000001e80)=""/144, 0x90}], 0x3, &(0x7f0000006a00)=""/198, 0xc6}, 0xf12}, {{&(0x7f0000002080)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002100)=""/101, 0x65}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/169, 0xa9}], 0x3, &(0x7f0000003280)=""/231, 0xe7}, 0x9}, {{&(0x7f0000003380)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003400)=""/56, 0x38}, {&(0x7f0000003440)=""/39, 0x27}, {&(0x7f0000003480)=""/253, 0xfd}, {&(0x7f0000003580)=""/62, 0x3e}], 0x4}, 0xf}, {{&(0x7f0000003600)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003680)=""/146, 0x92}, {&(0x7f0000003740)=""/184, 0xb8}, {&(0x7f0000003800)=""/36, 0x24}, {&(0x7f0000003840)=""/92, 0x5c}, {&(0x7f00000038c0)=""/30, 0x1e}, {&(0x7f0000003900)=""/12, 0xc}, {&(0x7f0000001f80)=""/212, 0xd4}], 0x7, &(0x7f0000003ac0)=""/219, 0xdb}, 0x8}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003bc0)=""/213, 0xd5}, {&(0x7f0000003cc0)=""/244, 0xf4}, {&(0x7f0000003dc0)=""/40, 0x28}], 0x3}, 0xc}, {{&(0x7f0000003e40)=@nfc, 0x80, &(0x7f00000061c0)=[{&(0x7f0000003ec0)=""/77, 0x4d}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/117, 0x75}, {&(0x7f0000004fc0)=""/248, 0xf8}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/91, 0x5b}, {&(0x7f0000006140)=""/104, 0x68}], 0x7, &(0x7f0000006240)=""/149, 0x95}, 0x8}, {{&(0x7f0000006300)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000006680)=[{&(0x7f0000006380)=""/93, 0x5d}, {&(0x7f0000006400)=""/211, 0xd3}, {&(0x7f0000006500)=""/74, 0x4a}, {&(0x7f0000006580)=""/243, 0xf3}], 0x4, &(0x7f00000066c0)=""/235, 0xeb}, 0xffff}], 0x8, 0x1, &(0x7f00000069c0)={0x0, 0x3938700}) syz_open_dev$dri(&(0x7f0000003940), 0x62, 0x18801) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) (async) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r13, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r8, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r9, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x5}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xf4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x28}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xcc}]}, 0x54}, 0x1, 0x0, 0x0, 0x8d1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7, {0x7}}}, 0x24}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 13.966479056s ago: executing program 5 (id=494): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="890c", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x28, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 12.773714841s ago: executing program 5 (id=497): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000a00)=0x1, 0x4) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)={0x20, 0x1, 0x4, "ad610d13"}, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000014c0)={0x44, &(0x7f00000011c0)={0x40, 0x9, 0x5f, "87a2010a64fa4cb786e4ae4b408d7b545a1aeb4481c2e92ee881291e4cc9d3de735c63d0d4b12e77fdcf8d1945d3eae5acad7a627b07d67b5e4b999e0bc57e023196a3ce8e59f209f496b250941970583f2561d51c185dacab1faf9bff1222"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000400)={0x0, 0x21, 0xcd, {0xcd, 0xb, "7dfdcfb77061e5397201d9df03341d08b14d56c3452955ccbd90679268e301f13981b2d10b9e5f9d04ac24171c8d645b5f30b954141c8369b76b0b1cb868f36f8a8f46cd4f1d14ae9bd204cd4bfa4e8623064ed4767785375415f45a08fe4d5d5d189547a63029c227a67fb6f98f76801c755d76a0d3d9f90a9125aaa4da6f320b5c13547b388fd10efd2ac36d922cef21ede8ef3379acef193da0fa4697ed7406d95d2a2ec784e989e1e5d24a939014c8c81f9f6f9220726239c7301a4279bcc59643af89156c1f15fe4b"}}, &(0x7f0000000040)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "f97a8803a562d775a84a15fcd9e4a661581ac2216e476e6aad0f3ba63f30e4f715c7010a0a95d31aaf8f8d99ddd49576987bffa03fc3a967ed98ed7ebdd117c752cc7d806fa08b83992afaed52f9481f448661622b71396b9d0aed3e"}}, &(0x7f00000000c0)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xa, 'bS'}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0x6c}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000640)={0x0, 0x18, 0xc5, "d250c0752d7298669cefc1c65c0d35d1edda857bf12fa766f43a109c59a1541f3bc79d5e26e62a7b7ae3b227ecde4f84bec7089c49373efbfbfc53232fe410fbc53c96ee13bb65a90b3ec2766ad6d9c408a41f8b89c0e8a0f12ec943d89ccb5a01919b7f2f9e23b0469ceef775d526497db100f0595f40862750c455cd3f9253bac8acc7bf88546dd6c87f945c7b9eb9007d38dd6c1237ccfb4ffe521b108a92dbd8f507c682c81bd8c7352ca5a2944139e48d59651246a1f6c01d9d3502cc2a0f3a3b9cd8"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000740)={0x20, 0x1, 0xf4, "151dde1787596e07279b2ee991cc36942939afa91b0b62dc890d271ba2cbbf8ec8b4e212258631b34a8666187b9239f1a821ceb31ba8705b41a0b5990cc3c14e0d76cc83a5a00f1c1f525f27ba9716e283978b67e573914e2bacf27ed9cb4a833d02b8e0d642e2e041f26b08277f74a765f0a6ef6a86e269fc332e1074d868f2e0065ff79262c8c43e4d51493ff93480e4c8e7ed4f8be2d91f43fc84c3b941fee698b327c6b86454eb76f92376bc911604041af65a5c216821bacbe28cd7a9f182f5e79ac6ea6c7d4bae1766f097757e6658cfb96f56d7af463e5116c462d6ec99cc5babec90fe4b45112661ac47c621962d881a"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x80}}) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_ep_read(r0, 0x6, 0x3f, &(0x7f00000008c0)=""/63) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ed000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000340)={0x0, 0xf, 0x2, "72be"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) 10.484763047s ago: executing program 4 (id=502): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0xfffff399, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008f02"]) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffe, 0x42031, 0xffffffffffffffff, 0x0) 8.665884652s ago: executing program 5 (id=505): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = syz_pidfd_open(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="d1922bbd7000fcdbdf251400000008000300", @ANYRES32=r6, @ANYBLOB="050029000a00000042eaa8db72ecc1b246035fbe10c9392366d5a622c7e28f54b5916f63119a7dc03fe472ee65cbe12761c845a13691c97f321d285e190c"], 0x24}, 0x1, 0x0, 0x0, 0x24040014}, 0x4000800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e22, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0, 0xfffe}, 0x90) waitid$P_PIDFD(0x3, r3, 0x0, 0x8, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) syz_usb_connect(0x3, 0x62, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a2405", @ANYRES16], 0x0) 7.732587608s ago: executing program 2 (id=506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC]) mount(0x0, &(0x7f0000000f40)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f0000000f40)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file0\x00') r0 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280), &(0x7f0000000400)=@v3={0x3000000, [{0x8, 0xd}, {0xffff, 0x9}]}, 0xfcae, 0x2) mkdir(&(0x7f0000000080)='./file1\x00', 0x130) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES16=r5, @ANYRESHEX=r2, @ANYRES8=r1, @ANYBLOB="7dd37513ecedfe4a2c1f5ac258d0a82136fccf6c01", @ANYRESOCT=r3], 0x128}, 0x20000014) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x2) dup3(r4, r6, 0x0) (async) r7 = dup3(r4, r6, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={r8, 0x1, 0x30, 0x2, 0x8}, &(0x7f0000000180)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={r8, 0x1, 0x30, 0x2, 0x8}, &(0x7f0000000180)=0x18) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000a1354700000000"], 0x0}, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000a1354700000000"], 0x0}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 6.354583624s ago: executing program 4 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000380)="08f83466bfa573b0069ebb48c156ce2b5906522d7267ac2364db81e5399d11f00e4f300d7633bb2b418968b10231a037c11fb1594b12b7924a73899eface15692fcf86f0afd6eb52e4c53ff3e846cbb299c64a3eb84499bdfbfa2f62d43b708e98869a8bcf0958f027ea5d757b4978b6438bff3e967a59fb3da3920f6ff7b533266f3ff0ba7549480bb7f5ebff15011939df8fb0eb3f82b7d189e447913e332f0ecabd16f2b89c0a04d9894a95727a29a27cd197", 0xb4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendto$inet(r4, &(0x7f0000000540)="e8", 0x1, 0x80, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010425bd70000000000000000000", @ANYRES32, @ANYBLOB="00090001f9616f6e64000000000c00028008"], 0x3c}}, 0x0) 5.45292545s ago: executing program 5 (id=510): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "6455d828effa4c0c3424baf0d6794fd0781b48181698edab65235ff0507da48343d49743"}, 0x2f) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694", 0x2e) write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, {"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", 0x1028}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 5.025500695s ago: executing program 2 (id=511): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000020000100000000000000000002001400000100000000000008000200e0000002080017004e"], 0x34}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f00000004c0), 0xce}, 0x38) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{'ac,'}]}) 5.024586214s ago: executing program 4 (id=512): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="17000000000000"], 0x48) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000180)={[0x3ff]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8f1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x2ea068d3, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0xffffffffffffdfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x3, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) 4.765278358s ago: executing program 5 (id=513): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x108b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.567828037s ago: executing program 1 (id=514): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000015000000000000000000000000000000000000000000000000004ef207d507ca23ac632e84543c6b119a6d590ab7c38113a1f78eced8d2ee211ae98470dad65fb3a8a63098097ce7932844197b8c5db7681cc76919f4eaa1a74618c51bda3754801f1ca94138fe8329d89f07a4"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="180500000000000000000000f7ffffffb7080000000000007b8af8ff00000000b70800003b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="02000000002800000000000000000000f9b36e57ffffff7f960334dd672bd2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0xba87317d461c07c9, 0xfffffffd, 0x4000}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r7 = socket(0xa, 0x3, 0x3a) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r9}, 0xc) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x5, r9, 0xffffff8f}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e24, 0x10f0, @loopback}, {0xa, 0x4e20, 0x100001ac, @mcast2, 0x661}, 0x0, {[0x5, 0x4f, 0x7f, 0x58, 0x2008, 0x7, 0x0, 0xe2f5]}}, 0x5c) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 3.237728384s ago: executing program 1 (id=516): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x447}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x48020) 3.116796773s ago: executing program 1 (id=518): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r1, 0x1, {}, 0xff}, 0x18) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@delnexthop={0x0, 0x69, 0x300, 0x70bd28, 0x25dfdbff, {}, [{0x0, 0x1, 0x1}]}, 0xfffffcf5}}, 0x8000) 3.023373009s ago: executing program 0 (id=519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mount$binderfs(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000140)=ANY=[@ANYBLOB='max=00000000000000000010000,stats=global,stvts=glo']) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0xfffffffffffffeb3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)=@x86={0x5, 0x1, 0x3, 0x0, 0x40, 0x6, 0xfb, 0x89, 0x18, 0xd, 0x7, 0x4, 0x0, 0x1000, 0x1000, 0x2, 0xc, 0x7, 0x19, '\x00', 0x3, 0x8000000000000004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x10010, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) fsopen(0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2, 0x1, 0x0, 0x4}, 0x20) 2.903918709s ago: executing program 1 (id=520): creat(&(0x7f0000000040)='./file0\x00', 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x98) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) mmap(&(0x7f00003c7000/0x2000)=nil, 0x2000, 0x0, 0x8d071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x6, 0x4, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x0, 0x7b7e, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/exec\x00') getdents64(r5, &(0x7f0000001240)=""/4147, 0x1033) getdents(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r6, 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r6, 0xc0485619, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r7 = syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) 2.382995464s ago: executing program 2 (id=521): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000ac0)=0x1) sendto$inet6(r1, 0x0, 0xfffffffffffffe5c, 0x20000048, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4}, &(0x7f00000000c0), &(0x7f0000000180)='%+9llu \x00'}, 0x20) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4090, 0xffa, 0x0, 0x0}, &(0x7f0000000080)=0xfffffffffffffd75) 2.26982547s ago: executing program 0 (id=522): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) io_uring_setup(0x405237, &(0x7f0000001300)={0x0, 0x3, 0x10, 0x0, 0x3}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = openat(r1, 0x0, 0x420842, 0x40) fcntl$setstatus(r2, 0x4, 0x42000) fcntl$setstatus(r1, 0x4, 0x42000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x80000}) r5 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, 0x0) read$FUSE(r5, &(0x7f000000c3c0)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80301, 0x0) 2.207696338s ago: executing program 4 (id=523): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "6455d828effa4c0c3424baf0d6794fd0781b48181698edab65235ff0507da48343d49743"}, 0x2f) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694", 0x2e) write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, {"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", 0x1028}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 2.071658787s ago: executing program 2 (id=524): mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000000)=0x5, 0x4, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$6lowpan_control(r0, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r1]) (async) set_mempolicy_home_node(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) (async) r2 = getpgrp(0xffffffffffffffff) prlimit64(r2, 0x2, &(0x7f00000000c0)={0x8000, 0x7ff}, 0x0) 2.071164961s ago: executing program 4 (id=525): iopl(0x3) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, 0x0, 0x0) shutdown(r2, 0x0) connect$inet(r1, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xa, 0x148, 0x0, 0x10, 0x3e8, 0x2a8, 0x2a8, 0x3e8, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x120, 0x190, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0xa359e000}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4e0) fsopen(0x0, 0x0) 1.499696226s ago: executing program 1 (id=526): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000090) setresuid(0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x401, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0xe0680, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x1, 0x700, 0xb1, 0x81, {{0x26, 0x4, 0x1, 0x1b, 0x98, 0x66, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0xa3, 0x3, 0x4, [{@empty, 0xe}, {@remote, 0x80000000}, {@multicast1, 0xc}, {@remote, 0xf}]}, @lsrr={0x83, 0xb, 0x7a, [@rand_addr=0x64010102, @local]}, @ssrr={0x89, 0xb, 0xe5, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x18, 0x1, [{0x2, 0x12, "0fd3dec2851412ea5c9f433debf0d9bf"}]}, @rr={0x7, 0x1b, 0x33, [@multicast2, @multicast1, @empty, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x25}]}, @cipso={0x86, 0x16, 0x3, [{0x5, 0x10, "81de6293fc2d64e136364e1bc26d"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7818, 0x1, 0xab, 0x7, {{0x11, 0x4, 0x2, 0x1e, 0x44, 0x68, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0x1b, 0x49, [@loopback, @empty, @private=0xa010100, @empty, @remote, @multicast1]}, @lsrr={0x83, 0x13, 0x10, [@local, @private=0xa010102, @remote, @broadcast]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="10002cbd7000fbdbdf2507000000080002000700000060000680080006000b0000001400040000000000000000000000ffffe000000114000400fe88000000000000000000000000000114000400fc02000000000000000000000000000108000300e0000001050002000c00000008000700", @ANYRES32=0x0, @ANYBLOB="08000200040000000500050008000000080002000100000008000400000000002400068008000700", @ANYRES32=r3, @ANYBLOB="fffe020007000000080006000100000100000000414f92c9f3475d6d82b2361175ac74cf4ee908424e7dee4a6a8f01e94cb748fa9ea06c44ed290c38c91008fe615d489851ddd35cb962d4cc1d910ff5ad4d89883d2b5f84a01a886617b4ad608b11585cc9ba941b5a7795f510813241017784df49386535d2161c531a8d4f2bf8d9403995b11dca3039897e5eb4ae137198a44d9138ea1fcb1940b7b0274abc1d14dc320c", @ANYRES32=r4, @ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x8800}, 0x890) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_flowlabel\x00') ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f00000004c0)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000000c0)={0x5, 0x401}) setuid(r9) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@filename='./file0\x00', r9, &(0x7f0000000140)={0x7, 0x5, 0x371, 0x8000000000000001, 0x5d, 0x9c8, 0x1, 0x7, 0x401}) 1.4519195s ago: executing program 0 (id=527): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x2, [@int={0xc, 0x0, 0x0, 0x1, 0x0, 0x13, 0x0, 0x22, 0x7}, @enum={0x2, 0xa, 0x0, 0x6, 0x4, [{0xe, 0x40}, {0x9, 0xc0}, {0xe, 0x5}, {0x3, 0x4}, {0xe, 0x2}, {0x5, 0xd61}, {0x8, 0x7fff}, {0xe, 0xee}, {0x0, 0x2}, {0x9, 0x100}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x1}, @fwd={0x3}]}}, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x10000, @value=r0}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[], 0x1a3) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r3 = getpgrp(0x0) getpgid(r3) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x6100) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.314856904s ago: executing program 0 (id=528): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x447}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x48020) 1.153230507s ago: executing program 2 (id=529): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x1, 0x1, [{{0x2, 0xffff, @local}}]}, 0x110) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x4e21, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) socket$packet(0x11, 0x2, 0x300) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) 1.100003093s ago: executing program 0 (id=530): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1}, 0x0) 871.925773ms ago: executing program 1 (id=531): prctl$PR_SET_THP_DISABLE(0x19, 0x10000000000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fremovexattr(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="6fa9530c73322e29e399264d2d5b005658f73a44b49e584d9c877daabc076252119e7fd2f59fa272fcccdd4a2f3800f9eba1ca684b5ecc0d538966570a20e2f731767fdbfdb162f66a7397748e75cb50d86a8924d1d3fd93ba3d09c280a141debd274306c8095ae220d6f49d075a2fcb487ec38fb7d37c3919dfce02195cfa"]) open_tree(0xffffffffffffffff, 0x0, 0x89981) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') fstatfs(0xffffffffffffffff, &(0x7f00000000c0)=""/143) 50.023963ms ago: executing program 2 (id=532): iopl(0x3) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, 0x0, 0x0) shutdown(r2, 0x0) connect$inet(r1, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xa, 0x148, 0x0, 0x10, 0x3e8, 0x2a8, 0x2a8, 0x3e8, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x120, 0x190, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0xa359e000}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4e0) (fail_nth: 3) fsopen(0x0, 0x0) 13.097923ms ago: executing program 0 (id=533): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="17000000000000"], 0x48) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000180)={[0x3ff]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8f1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x2ea068d3, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0xffffffffffffdfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x3, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) 0s ago: executing program 4 (id=534): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180600000000000000000000000000001830000000000000000000000020000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x90, &(0x7f0000000100)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x57}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="004bdfab2c41c166af856980f3fd3a69081176314847dfc3a7692bccf59567ca7799f38655a640ac65d4518e99348033250b5136373cc9ea22b0794959a18b98037d01a16bc2e1a1c818a186ebf9c45d3fb4daa4887831c8be793f18e64d5d1881f363e2eaa891e82c8586751b5e8c8d7996f9900d08a3ba691f073356a260f09eaf54ba6e0724d9ac62b0d14db1cfcb1e48e20d5c040816024dbdf3b1fb0b563ebb2ed585757a73045fe18e9d99562bf1d8d7cc", 0xb4, 0x1, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x200000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) kernel console output (not intermixed with test programs): ave bond_slave_1): Enslaving as an active interface with an up link [ 72.421936][ T5827] team0: Port device team_slave_1 added [ 72.446366][ T5819] team0: Port device team_slave_0 added [ 72.480842][ T5828] team0: Port device team_slave_0 added [ 72.489498][ T5819] team0: Port device team_slave_1 added [ 72.495711][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.503106][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.529180][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.542330][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.549373][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.576008][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.598481][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.605464][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.635868][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.648446][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.655414][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.681439][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.694367][ T5828] team0: Port device team_slave_1 added [ 72.714632][ T5818] team0: Port device team_slave_0 added [ 72.741403][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.748741][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.775026][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.787907][ T5818] team0: Port device team_slave_1 added [ 72.813244][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.820335][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.847079][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.859569][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.866533][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.892560][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.904333][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.911543][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.937694][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.981231][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.988590][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.014823][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.046587][ T5825] hsr_slave_0: entered promiscuous mode [ 73.053254][ T5825] hsr_slave_1: entered promiscuous mode [ 73.058065][ T5823] Bluetooth: hci2: command tx timeout [ 73.058896][ T5133] Bluetooth: hci0: command tx timeout [ 73.074433][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.082955][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.109006][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.123066][ T5827] hsr_slave_0: entered promiscuous mode [ 73.130973][ T5827] hsr_slave_1: entered promiscuous mode [ 73.137080][ T5133] Bluetooth: hci1: command tx timeout [ 73.137093][ T5823] Bluetooth: hci3: command tx timeout [ 73.138255][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.147183][ T5133] Bluetooth: hci4: command tx timeout [ 73.153922][ T5827] Cannot create hsr debugfs directory [ 73.214911][ T5828] hsr_slave_0: entered promiscuous mode [ 73.221637][ T5828] hsr_slave_1: entered promiscuous mode [ 73.228102][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.235661][ T5828] Cannot create hsr debugfs directory [ 73.288244][ T5819] hsr_slave_0: entered promiscuous mode [ 73.294645][ T5819] hsr_slave_1: entered promiscuous mode [ 73.301098][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.309287][ T5819] Cannot create hsr debugfs directory [ 73.362343][ T5818] hsr_slave_0: entered promiscuous mode [ 73.368656][ T5818] hsr_slave_1: entered promiscuous mode [ 73.374646][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.382958][ T5818] Cannot create hsr debugfs directory [ 73.667388][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.685683][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.711614][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.730206][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.752315][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.768362][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.779838][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.801162][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.833281][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.864764][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.883519][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.915308][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.955899][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.969985][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.002229][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.012179][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.053698][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.076777][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.091011][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.110256][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.171325][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.196618][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.240196][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.253828][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.261135][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.274061][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.304374][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.311495][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.334243][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.354410][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.361572][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.387849][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.399088][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.406188][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.432278][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.439411][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.464871][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.472210][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.504781][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.593523][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.660303][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.667472][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.691264][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.698422][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.728489][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.785185][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.806286][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.813470][ T5106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.872856][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.880043][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.914478][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.971671][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.021577][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.061218][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.110820][ T5827] veth0_vlan: entered promiscuous mode [ 75.138277][ T5133] Bluetooth: hci2: command tx timeout [ 75.138286][ T5823] Bluetooth: hci0: command tx timeout [ 75.160470][ T5828] veth0_vlan: entered promiscuous mode [ 75.181655][ T5827] veth1_vlan: entered promiscuous mode [ 75.191809][ T5828] veth1_vlan: entered promiscuous mode [ 75.217766][ T5823] Bluetooth: hci3: command tx timeout [ 75.227286][ T5823] Bluetooth: hci4: command tx timeout [ 75.227603][ T5133] Bluetooth: hci1: command tx timeout [ 75.281690][ T5828] veth0_macvtap: entered promiscuous mode [ 75.301479][ T5827] veth0_macvtap: entered promiscuous mode [ 75.319925][ T5828] veth1_macvtap: entered promiscuous mode [ 75.329021][ T5827] veth1_macvtap: entered promiscuous mode [ 75.386675][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.405800][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.435800][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.445242][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.463854][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.482278][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.492223][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.503949][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.515149][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.532046][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.545167][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.554362][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.564040][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.573022][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.589092][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.598607][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.607646][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.616369][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.756239][ T5825] veth0_vlan: entered promiscuous mode [ 75.770557][ T5819] veth0_vlan: entered promiscuous mode [ 75.794647][ T5825] veth1_vlan: entered promiscuous mode [ 75.820173][ T5106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.828939][ T5106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.875114][ T5106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.875584][ T5819] veth1_vlan: entered promiscuous mode [ 75.888777][ T5106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.921548][ T5818] veth0_vlan: entered promiscuous mode [ 75.947505][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.955349][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.966447][ T5818] veth1_vlan: entered promiscuous mode [ 75.983192][ T5825] veth0_macvtap: entered promiscuous mode [ 76.012023][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.025573][ T5825] veth1_macvtap: entered promiscuous mode [ 76.046252][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.065109][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.083974][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.100065][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.111189][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.121725][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.135228][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.156244][ T5819] veth0_macvtap: entered promiscuous mode [ 76.166865][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.179732][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.189861][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.200801][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.212087][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.232956][ T5819] veth1_macvtap: entered promiscuous mode [ 76.243904][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.254557][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.284250][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.305921][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.330560][ T5818] veth0_macvtap: entered promiscuous mode [ 76.368636][ T5818] veth1_macvtap: entered promiscuous mode [ 76.517498][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.562283][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.591005][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.635397][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.766097][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.919141][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.959427][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.979014][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.036965][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.047018][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.071959][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.089143][ T5912] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.101076][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.134855][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.145993][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.177019][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.198340][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.217412][ T5133] Bluetooth: hci0: command tx timeout [ 77.227310][ T5133] Bluetooth: hci2: command tx timeout [ 77.265182][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.284490][ T5915] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.286948][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.311826][ T5133] Bluetooth: hci4: command tx timeout [ 77.311854][ T5823] Bluetooth: hci3: command tx timeout [ 77.317287][ T5133] Bluetooth: hci1: command tx timeout [ 77.346983][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.398795][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.413532][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.426759][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.458278][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.469376][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.487605][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.498251][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.528223][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.557181][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.582206][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.601299][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.614531][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.633579][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.653836][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.678154][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.732989][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.762412][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.791863][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.832236][ T5819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.872241][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.875343][ T5819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.908246][ T5819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.934210][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.232278][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.272912][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.354517][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.393745][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.396988][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.511603][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.713934][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.732703][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.336371][ T5830] Bluetooth: hci0: command tx timeout [ 79.341999][ T5823] Bluetooth: hci2: command tx timeout [ 79.367239][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.377524][ T5823] Bluetooth: hci1: command tx timeout [ 79.382951][ T5830] Bluetooth: hci4: command tx timeout [ 79.382996][ T5133] Bluetooth: hci3: command tx timeout [ 79.444271][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.317465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.326134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.335541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 80.345074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 80.355233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.365384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.497951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 80.506647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.684319][ T5953] UHID_CREATE from different security context by process 7 (syz.4.13), this is not allowed. [ 80.707328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.715637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.717343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.301635][ T5957] FAULT_INJECTION: forcing a failure. [ 81.301635][ T5957] name failslab, interval 1, probability 0, space 0, times 1 [ 81.341586][ T5957] CPU: 0 UID: 0 PID: 5957 Comm: syz.3.4 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 81.341612][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 81.341626][ T5957] Call Trace: [ 81.341631][ T5957] [ 81.341637][ T5957] dump_stack_lvl+0x241/0x360 [ 81.341670][ T5957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.341693][ T5957] ? __pfx__printk+0x10/0x10 [ 81.341716][ T5957] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 81.341737][ T5957] ? __pfx___might_resched+0x10/0x10 [ 81.341759][ T5957] should_fail_ex+0x3b0/0x4e0 [ 81.341781][ T5957] should_failslab+0xac/0x100 [ 81.341800][ T5957] __kmalloc_node_noprof+0xe1/0x4d0 [ 81.341818][ T5957] ? alloc_slab_obj_exts+0x3a/0xa0 [ 81.341840][ T5957] alloc_slab_obj_exts+0x3a/0xa0 [ 81.341858][ T5957] __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 81.341889][ T5957] ? alloc_empty_file+0x9e/0x1d0 [ 81.341908][ T5957] ? alloc_empty_file+0x9e/0x1d0 [ 81.341925][ T5957] kmem_cache_alloc_noprof+0x287/0x380 [ 81.341948][ T5957] alloc_empty_file+0x9e/0x1d0 [ 81.341968][ T5957] dentry_open+0x44/0xa0 [ 81.341986][ T5957] big_key_read+0x195/0x2f0 [ 81.342006][ T5957] ? __pfx_big_key_read+0x10/0x10 [ 81.342022][ T5957] ? trace_kmalloc+0x1f/0xd0 [ 81.342039][ T5957] ? __kvmalloc_node_noprof+0x72/0x190 [ 81.342073][ T5957] keyctl_read_key+0x282/0x450 [ 81.342097][ T5957] __se_sys_keyctl+0x326/0x910 [ 81.342119][ T5957] ? __pfx___se_sys_keyctl+0x10/0x10 [ 81.342137][ T5957] ? do_sys_openat2+0x17a/0x1d0 [ 81.342157][ T5957] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.342175][ T5957] ? __fget_files+0x2a/0x410 [ 81.342196][ T5957] ? __fget_files+0x2a/0x410 [ 81.342221][ T5957] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.342242][ T5957] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.342262][ T5957] ? do_syscall_64+0x100/0x230 [ 81.342282][ T5957] ? __x64_sys_keyctl+0x20/0xc0 [ 81.342304][ T5957] do_syscall_64+0xf3/0x230 [ 81.342321][ T5957] ? clear_bhb_loop+0x35/0x90 [ 81.342343][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.342362][ T5957] RIP: 0033:0x7f7896d8cd29 [ 81.342380][ T5957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.342392][ T5957] RSP: 002b:00007f7897b17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 81.342410][ T5957] RAX: ffffffffffffffda RBX: 00007f7896fa5fa0 RCX: 00007f7896d8cd29 [ 81.342421][ T5957] RDX: 00000000200010c0 RSI: 000000000e524438 RDI: 000000000000000b [ 81.342431][ T5957] RBP: 00007f7897b17090 R08: 0000000000000000 R09: 0000000000000000 [ 81.342440][ T5957] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 81.342449][ T5957] R13: 0000000000000000 R14: 00007f7896fa5fa0 R15: 00007ffeb99d3318 [ 81.342473][ T5957] [ 81.722446][ T5965] netlink: 'syz.0.1': attribute type 12 has an invalid length. [ 82.097658][ T3805] cfg80211: failed to load regulatory.db [ 82.286076][ T5963] ax25_connect(): syz.1.16 uses autobind, please contact jreuter@yaina.de [ 82.305860][ T5963] hub 6-0:1.0: USB hub found [ 82.311626][ T5963] hub 6-0:1.0: 1 port detected [ 85.089707][ T5999] netlink: 'syz.4.26': attribute type 2 has an invalid length. [ 85.097579][ T5999] netlink: 72 bytes leftover after parsing attributes in process `syz.4.26'. [ 85.108993][ T5999] Zero length message leads to an empty skb [ 85.168470][ T3805] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.337217][ T3805] usb 3-1: Using ep0 maxpacket: 8 [ 85.535575][ T3805] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=1f.cb [ 85.585969][ T3805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.863256][ T3805] usb 3-1: Product: syz [ 85.875275][ T3805] usb 3-1: Manufacturer: syz [ 85.880385][ T3805] usb 3-1: SerialNumber: syz [ 85.889012][ T3805] usb 3-1: config 0 descriptor?? [ 85.922581][ T3805] gm12u320 3-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 85.963867][ T3805] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5 [ 85.992253][ T3805] usb-storage 3-1:0.0: USB Mass Storage device detected [ 86.008530][ T3805] usb-storage 3-1:0.0: device ignored [ 86.125278][ T5992] syz.2.24 uses obsolete (PF_INET,SOCK_PACKET) [ 86.152305][ T3805] usb 3-1: USB disconnect, device number 2 [ 87.462032][ T6028] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 87.517631][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.535054][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.747032][ T3805] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.897102][ T3805] usb 3-1: Using ep0 maxpacket: 32 [ 87.910849][ T3805] usb 3-1: unable to get BOS descriptor or descriptor too short [ 87.919401][ T3805] usb 3-1: no configurations [ 87.924049][ T3805] usb 3-1: can't read configurations, error -22 [ 88.098349][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.278720][ T25] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 88.287200][ T25] usb 5-1: config 0 has no interface number 0 [ 88.293734][ T25] usb 5-1: too many endpoints for config 0 interface 116 altsetting 114: 105, using maximum allowed: 30 [ 88.305024][ T25] usb 5-1: config 0 interface 116 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 88.319594][ T25] usb 5-1: config 0 interface 116 has no altsetting 0 [ 88.326412][ T25] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 88.335517][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.348386][ T25] usb 5-1: config 0 descriptor?? [ 88.354850][ T25] cp210x 5-1:0.116: cp210x converter detected [ 88.605797][ T25] cp210x 5-1:0.116: failed to get vendor val 0x370b size 1: -121 [ 88.655884][ T25] cp210x 5-1:0.116: querying part number failed [ 88.672188][ T25] usb 5-1: cp210x converter now attached to ttyUSB0 [ 89.051035][ T25] usb 5-1: USB disconnect, device number 2 [ 89.071749][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 89.100444][ T25] cp210x 5-1:0.116: device disconnected [ 89.133188][ T6050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.326508][ T6056] netlink: 56 bytes leftover after parsing attributes in process `syz.0.45'. [ 91.259984][ T6074] Process accounting resumed [ 91.270334][ T6069] loop6: detected capacity change from 0 to 524287999 [ 91.327677][ T6069] loop6: detected capacity change from 524287999 to 0 [ 91.427287][ T5870] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.637535][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 92.012310][ T5870] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 92.020621][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.347050][ T5870] usb 2-1: config 0 has no interface number 0 [ 92.373298][ T5870] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 92.397063][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.426445][ T5870] usb 2-1: Product: syz [ 92.439246][ T5870] usb 2-1: Manufacturer: syz [ 92.498273][ T5870] usb 2-1: SerialNumber: syz [ 92.532279][ T5870] usb 2-1: config 0 descriptor?? [ 92.684926][ T5870] usb 2-1: Found UVC 0.00 device syz (046d:08c3) [ 92.802199][ T5870] usb 2-1: No valid video chain found. [ 92.912171][ T5925] usb 2-1: USB disconnect, device number 2 [ 93.290614][ T6097] FAULT_INJECTION: forcing a failure. [ 93.290614][ T6097] name failslab, interval 1, probability 0, space 0, times 0 [ 93.303581][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.2.56 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 93.303603][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 93.303612][ T6097] Call Trace: [ 93.303619][ T6097] [ 93.303626][ T6097] dump_stack_lvl+0x241/0x360 [ 93.303658][ T6097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.303682][ T6097] ? __pfx__printk+0x10/0x10 [ 93.303707][ T6097] ? __kmalloc_cache_noprof+0x48/0x390 [ 93.303729][ T6097] ? __pfx___might_resched+0x10/0x10 [ 93.303752][ T6097] should_fail_ex+0x3b0/0x4e0 [ 93.303775][ T6097] should_failslab+0xac/0x100 [ 93.303796][ T6097] __kmalloc_cache_noprof+0x70/0x390 [ 93.303814][ T6097] ? wakeup_source_register+0x57/0x250 [ 93.303840][ T6097] wakeup_source_register+0x57/0x250 [ 93.303863][ T6097] ep_insert+0xe94/0x1ab0 [ 93.303902][ T6097] ? __pfx_ep_insert+0x10/0x10 [ 93.303954][ T6097] do_epoll_ctl+0x8bc/0xf80 [ 93.303986][ T6097] __x64_sys_epoll_ctl+0x161/0x1a0 [ 93.304013][ T6097] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 93.304048][ T6097] do_syscall_64+0xf3/0x230 [ 93.304068][ T6097] ? clear_bhb_loop+0x35/0x90 [ 93.304093][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.304112][ T6097] RIP: 0033:0x7f0b5078cd29 [ 93.304127][ T6097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.304140][ T6097] RSP: 002b:00007f0b515dc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 93.304157][ T6097] RAX: ffffffffffffffda RBX: 00007f0b509a6080 RCX: 00007f0b5078cd29 [ 93.304169][ T6097] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000009 [ 93.304178][ T6097] RBP: 00007f0b515dc090 R08: 0000000000000000 R09: 0000000000000000 [ 93.304188][ T6097] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.304197][ T6097] R13: 0000000000000000 R14: 00007f0b509a6080 R15: 00007ffe74a85738 [ 93.304223][ T6097] [ 93.921571][ T6102] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 93.939736][ T6103] usb usb7: usbfs: process 6103 (syz.1.57) did not claim interface 0 before use [ 93.941290][ T6102] Error validating options; rc = [-22] [ 93.966792][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 95.363810][ T6122] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 95.390930][ T6122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.64'. [ 95.413228][ T6122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.64'. [ 95.445959][ T6128] netlink: 44 bytes leftover after parsing attributes in process `syz.1.65'. [ 95.834939][ T6144] ax25_connect(): syz.4.67 uses autobind, please contact jreuter@yaina.de [ 95.851195][ T6144] hub 6-0:1.0: USB hub found [ 95.856074][ T6144] hub 6-0:1.0: 1 port detected [ 96.528263][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'. [ 96.550645][ T6148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.70'. [ 98.650358][ T6182] mkiss: ax0: crc mode is auto. [ 99.184583][ T6184] mkiss: ax0: crc mode is auto. [ 99.464352][ T6189] ax25_connect(): syz.2.82 uses autobind, please contact jreuter@yaina.de [ 99.483374][ T6189] hub 6-0:1.0: USB hub found [ 99.488212][ T6189] hub 6-0:1.0: 1 port detected [ 100.794647][ T6197] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 101.410706][ T6204] netlink: 60 bytes leftover after parsing attributes in process `syz.1.86'. [ 102.164087][ T5133] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 102.175026][ T5133] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 102.183053][ T5133] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 102.199784][ T5133] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 102.208274][ T5133] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 102.215833][ T5133] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 104.062113][ T6206] chnl_net:caif_netlink_parms(): no params data found [ 104.257233][ T5823] Bluetooth: hci5: command tx timeout [ 104.395008][ T6240] ax25_connect(): syz.1.92 uses autobind, please contact jreuter@yaina.de [ 104.468549][ T6240] hub 6-0:1.0: USB hub found [ 104.474002][ T6240] hub 6-0:1.0: 1 port detected [ 105.830749][ T6254] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 105.841666][ T6254] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 106.299814][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.337175][ T5823] Bluetooth: hci5: command tx timeout [ 107.147084][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.162951][ T6206] bridge_slave_0: entered allmulticast mode [ 107.177956][ T6206] bridge_slave_0: entered promiscuous mode [ 107.195421][ T6255] netlink: 'syz.1.96': attribute type 4 has an invalid length. [ 107.207665][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.247330][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.279739][ T6206] bridge_slave_1: entered allmulticast mode [ 107.311984][ T6206] bridge_slave_1: entered promiscuous mode [ 107.391853][ T6264] 9pnet_fd: Insufficient options for proto=fd [ 107.510981][ T6206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.539434][ T6206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.631100][ T6206] team0: Port device team_slave_0 added [ 107.646225][ T6206] team0: Port device team_slave_1 added [ 107.773695][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.808899][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.264904][ T6206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.329171][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.395355][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.427177][ T5823] Bluetooth: hci5: command tx timeout [ 108.499061][ T6206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.602684][ T6206] hsr_slave_0: entered promiscuous mode [ 108.614736][ T6206] hsr_slave_1: entered promiscuous mode [ 109.033317][ T6206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.050176][ T6206] Cannot create hsr debugfs directory [ 109.242817][ T6206] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.251965][ T6206] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.264255][ T6206] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.297811][ T6206] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.476291][ T6206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.495934][ T6206] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.558799][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.565897][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.580944][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.588074][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.034668][ T6206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.507045][ T5823] Bluetooth: hci5: command tx timeout [ 110.517212][ T5900] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 110.681740][ T5900] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 110.989937][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.275777][ T5900] usb 2-1: config 0 descriptor?? [ 111.281783][ T6302] tipc: Started in network mode [ 111.355226][ T6302] tipc: Node identity 1, cluster identity 2 [ 111.387433][ T6302] tipc: Node number set to 1 [ 111.467085][ T6302] tipc: Cannot configure node identity twice [ 111.803832][ T6206] veth0_vlan: entered promiscuous mode [ 111.826868][ T6206] veth1_vlan: entered promiscuous mode [ 111.897114][ T5870] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.915250][ T5900] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 111.924205][ T6206] veth0_macvtap: entered promiscuous mode [ 111.929228][ T5900] [drm] Initialized udl on minor 2 [ 111.944873][ T6206] veth1_macvtap: entered promiscuous mode [ 111.992715][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.024256][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.037073][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.063809][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.086212][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.087628][ T5870] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 112.105016][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.118463][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.129542][ T5870] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 112.131746][ T5900] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 112.146804][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 112.150560][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.168868][ T5870] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 112.179402][ T5900] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 112.201700][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.211948][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.223203][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.233662][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.236692][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.270417][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.278298][ T5870] usb 5-1: config 0 descriptor?? [ 112.298207][ T5870] usb-storage 5-1:0.0: USB Mass Storage device detected [ 112.317753][ T5870] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 112.322001][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.368408][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.378958][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.390095][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.412498][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.423006][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.436567][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.437339][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.446434][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.455063][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.465247][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.509607][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.525686][ T6206] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.534702][ T6206] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.546429][ T6206] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.556057][ T6206] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.597055][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.655603][ T5872] usb 5-1: USB disconnect, device number 3 [ 112.694906][ T5106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.711999][ T5106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.746223][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.765197][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.777162][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 112.807203][ T25] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 112.815478][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.850307][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.882024][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.906995][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.924573][ T6328] overlayfs: failed to resolve './file1': -2 [ 112.927017][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.947186][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.034482][ T6329] capability: warning: `syz.5.85' uses deprecated v2 capabilities in a way that may be insecure [ 113.282555][ T25] usb 3-1: GET_CAPABILITIES returned 0 [ 113.300411][ T25] usbtmc 3-1:16.0: can't read capabilities [ 113.481988][ T6337] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.492175][ T6337] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.501463][ T6337] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.511315][ T6337] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.552862][ T6337] geneve2: entered promiscuous mode [ 113.559238][ T6337] geneve2: entered allmulticast mode [ 113.570634][ T5927] usb 2-1: USB disconnect, device number 3 [ 113.604798][ T5926] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 113.738914][ T5926] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 114.031727][ T6337] syz.5.116 (6337) used greatest stack depth: 17040 bytes left [ 114.516377][ T6343] capability: warning: `syz.2.112' uses 32-bit capabilities (legacy support in use) [ 116.068429][ T6353] FAULT_INJECTION: forcing a failure. [ 116.068429][ T6353] name failslab, interval 1, probability 0, space 0, times 0 [ 116.081213][ T6353] CPU: 0 UID: 0 PID: 6353 Comm: syz.5.119 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 116.081243][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 116.081252][ T6353] Call Trace: [ 116.081258][ T6353] [ 116.081265][ T6353] dump_stack_lvl+0x241/0x360 [ 116.081289][ T6353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.081303][ T6353] ? __pfx__printk+0x10/0x10 [ 116.081317][ T6353] ? __kmalloc_noprof+0xb5/0x4c0 [ 116.081329][ T6353] ? __pfx___might_resched+0x10/0x10 [ 116.081341][ T6353] should_fail_ex+0x3b0/0x4e0 [ 116.081354][ T6353] should_failslab+0xac/0x100 [ 116.081367][ T6353] __kmalloc_noprof+0xdd/0x4c0 [ 116.081377][ T6353] ? memcg_list_lru_alloc+0x2c5/0x9e0 [ 116.081391][ T6353] memcg_list_lru_alloc+0x2c5/0x9e0 [ 116.081404][ T6353] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 116.081421][ T6353] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 116.081437][ T6353] ? get_mem_cgroup_from_objcg+0x1af/0x1d0 [ 116.081449][ T6353] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 116.081463][ T6353] __memcg_slab_post_alloc_hook+0x140/0x7e0 [ 116.081481][ T6353] ? __d_alloc+0x31/0x670 [ 116.081493][ T6353] ? __d_alloc+0x31/0x670 [ 116.081503][ T6353] kmem_cache_alloc_lru_noprof+0x28e/0x390 [ 116.081517][ T6353] __d_alloc+0x31/0x670 [ 116.081531][ T6353] d_alloc_pseudo+0x1f/0xb0 [ 116.081543][ T6353] alloc_file_pseudo+0x123/0x290 [ 116.081557][ T6353] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 116.081574][ T6353] anon_inode_getfd+0xce/0x1e0 [ 116.081586][ T6353] __se_sys_landlock_create_ruleset+0x3d4/0x460 [ 116.081601][ T6353] ? __pfx___se_sys_landlock_create_ruleset+0x10/0x10 [ 116.081616][ T6353] ? do_syscall_64+0x100/0x230 [ 116.081629][ T6353] ? do_syscall_64+0xb6/0x230 [ 116.081641][ T6353] do_syscall_64+0xf3/0x230 [ 116.081651][ T6353] ? clear_bhb_loop+0x35/0x90 [ 116.081665][ T6353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.081677][ T6353] RIP: 0033:0x7fca35f8cd29 [ 116.081686][ T6353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.081694][ T6353] RSP: 002b:00007fca36dd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 116.081705][ T6353] RAX: ffffffffffffffda RBX: 00007fca361a6160 RCX: 00007fca35f8cd29 [ 116.081712][ T6353] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000020000040 [ 116.081718][ T6353] RBP: 00007fca36dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 116.081723][ T6353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.081728][ T6353] R13: 0000000000000000 R14: 00007fca361a6160 R15: 00007ffc98c43818 [ 116.081742][ T6353] [ 116.747142][ T5872] usb 3-1: USB disconnect, device number 5 [ 117.783796][ T6370] netlink: 20 bytes leftover after parsing attributes in process `syz.5.125'. [ 118.467032][ T5872] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.542135][ T6390] hub 2-0:1.0: USB hub found [ 118.547804][ T6390] hub 2-0:1.0: 1 port detected [ 118.637021][ T6391] FAULT_INJECTION: forcing a failure. [ 118.637021][ T6391] name failslab, interval 1, probability 0, space 0, times 0 [ 118.691062][ T5872] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 118.767384][ T6391] CPU: 1 UID: 0 PID: 6391 Comm: syz.1.132 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 118.767412][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 118.767422][ T6391] Call Trace: [ 118.767429][ T6391] [ 118.767436][ T6391] dump_stack_lvl+0x241/0x360 [ 118.767471][ T6391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.767494][ T6391] ? __pfx__printk+0x10/0x10 [ 118.767520][ T6391] ? fs_reclaim_acquire+0x93/0x130 [ 118.767544][ T6391] ? __pfx___might_resched+0x10/0x10 [ 118.767566][ T6391] should_fail_ex+0x3b0/0x4e0 [ 118.767588][ T6391] should_failslab+0xac/0x100 [ 118.767610][ T6391] __kmalloc_noprof+0xdd/0x4c0 [ 118.767629][ T6391] ? tomoyo_encode+0x26f/0x540 [ 118.767656][ T6391] tomoyo_encode+0x26f/0x540 [ 118.767684][ T6391] tomoyo_realpath_from_path+0x59e/0x5e0 [ 118.767718][ T6391] tomoyo_path_number_perm+0x236/0x860 [ 118.767737][ T6391] ? __lock_acquire+0x1397/0x2100 [ 118.767759][ T6391] ? tomoyo_path_number_perm+0x206/0x860 [ 118.767781][ T6391] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 118.767840][ T6391] ? __fget_files+0x2a/0x410 [ 118.767863][ T6391] ? __fget_files+0x2a/0x410 [ 118.767887][ T6391] security_file_ioctl+0xc6/0x2a0 [ 118.767910][ T6391] __se_sys_ioctl+0x46/0x170 [ 118.767935][ T6391] do_syscall_64+0xf3/0x230 [ 118.767955][ T6391] ? clear_bhb_loop+0x35/0x90 [ 118.767979][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.767999][ T6391] RIP: 0033:0x7fded418cd29 [ 118.768014][ T6391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.768033][ T6391] RSP: 002b:00007fded4f8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.768060][ T6391] RAX: ffffffffffffffda RBX: 00007fded43a6080 RCX: 00007fded418cd29 [ 118.768072][ T6391] RDX: 0000000020000300 RSI: 00000000c0cc5616 RDI: 0000000000000003 [ 118.768082][ T6391] RBP: 00007fded4f8d090 R08: 0000000000000000 R09: 0000000000000000 [ 118.768092][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.768102][ T6391] R13: 0000000000000001 R14: 00007fded43a6080 R15: 00007ffc21eab128 [ 118.768129][ T6391] [ 118.768588][ T6391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 118.999383][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.017443][ T5872] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 119.028713][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 119.042568][ T5872] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 119.051697][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.169191][ T5872] usb 5-1: config 0 descriptor?? [ 119.178961][ T5872] usb-storage 5-1:0.0: USB Mass Storage device detected [ 119.618856][ T5872] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 119.735324][ T5872] usb 5-1: USB disconnect, device number 4 [ 119.823310][ T29] audit: type=1326 audit(1737965166.939:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded418cd29 code=0x7ffc0000 [ 119.905650][ T29] audit: type=1326 audit(1737965166.989:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fded418cd29 code=0x7ffc0000 [ 119.981797][ T29] audit: type=1326 audit(1737965166.989:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded418cd29 code=0x7ffc0000 [ 120.052706][ T29] audit: type=1326 audit(1737965166.989:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded418cd29 code=0x7ffc0000 [ 120.077172][ T29] audit: type=1326 audit(1737965166.989:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fded418cd29 code=0x7ffc0000 [ 120.098574][ T29] audit: type=1326 audit(1737965166.989:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded418cd29 code=0x7ffc0000 [ 120.119949][ T29] audit: type=1326 audit(1737965166.989:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded418cd29 code=0x7ffc0000 [ 120.141490][ T29] audit: type=1326 audit(1737965166.989:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fded418cd29 code=0x7ffc0000 [ 120.175444][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 120.216983][ T29] audit: type=1326 audit(1737965166.989:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded418cd29 code=0x7ffc0000 [ 120.291990][ T29] audit: type=1326 audit(1737965166.999:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fded418cd29 code=0x7ffc0000 [ 120.452117][ T6421] FAULT_INJECTION: forcing a failure. [ 120.452117][ T6421] name failslab, interval 1, probability 0, space 0, times 0 [ 120.529646][ T6421] CPU: 1 UID: 0 PID: 6421 Comm: syz.2.140 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 120.529673][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 120.529682][ T6421] Call Trace: [ 120.529687][ T6421] [ 120.529694][ T6421] dump_stack_lvl+0x241/0x360 [ 120.529725][ T6421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.529748][ T6421] ? __pfx__printk+0x10/0x10 [ 120.529773][ T6421] ? kmem_cache_alloc_noprof+0x48/0x380 [ 120.529793][ T6421] ? __pfx___might_resched+0x10/0x10 [ 120.529816][ T6421] should_fail_ex+0x3b0/0x4e0 [ 120.529839][ T6421] should_failslab+0xac/0x100 [ 120.529858][ T6421] ? io_submit_one+0x154/0x18a0 [ 120.529874][ T6421] kmem_cache_alloc_noprof+0x70/0x380 [ 120.529898][ T6421] io_submit_one+0x154/0x18a0 [ 120.529931][ T6421] ? __pfx_io_submit_one+0x10/0x10 [ 120.529948][ T6421] ? __might_fault+0xaa/0x120 [ 120.529971][ T6421] ? __pfx_lock_release+0x10/0x10 [ 120.529995][ T6421] ? lookup_ioctx+0x94/0x6a0 [ 120.530013][ T6421] ? __might_fault+0xaa/0x120 [ 120.530033][ T6421] ? __might_fault+0xc6/0x120 [ 120.530057][ T6421] __se_sys_io_submit+0x171/0x2e0 [ 120.530075][ T6421] ? __pfx___se_sys_io_submit+0x10/0x10 [ 120.530089][ T6421] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.530115][ T6421] ? do_syscall_64+0x100/0x230 [ 120.530136][ T6421] ? do_syscall_64+0xb6/0x230 [ 120.530164][ T6421] do_syscall_64+0xf3/0x230 [ 120.530182][ T6421] ? clear_bhb_loop+0x35/0x90 [ 120.530206][ T6421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.530225][ T6421] RIP: 0033:0x7f0b5078cd29 [ 120.530240][ T6421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.530252][ T6421] RSP: 002b:00007f0b515fd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 120.530270][ T6421] RAX: ffffffffffffffda RBX: 00007f0b509a5fa0 RCX: 00007f0b5078cd29 [ 120.530282][ T6421] RDX: 0000000020000500 RSI: 0000000000000001 RDI: 00007f0b515dc000 [ 120.530292][ T6421] RBP: 00007f0b515fd090 R08: 0000000000000000 R09: 0000000000000000 [ 120.530302][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.530311][ T6421] R13: 0000000000000000 R14: 00007f0b509a5fa0 R15: 00007ffe74a85738 [ 120.530337][ T6421] [ 120.629473][ T6426] netlink: 20 bytes leftover after parsing attributes in process `syz.5.139'. [ 122.048832][ T6446] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 122.057831][ T6446] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 122.163890][ T6446] netlink: 'syz.5.143': attribute type 4 has an invalid length. [ 123.875908][ T6465] Cannot find add_set index 0 as target [ 124.377126][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 124.581524][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 124.610611][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 124.636399][ T9] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.673064][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 124.724542][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 124.771487][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 124.811256][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 124.836957][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.856942][ T9] usb 5-1: Product: syz [ 124.861142][ T9] usb 5-1: Manufacturer: syz [ 124.887074][ T9] usb 5-1: SerialNumber: syz [ 124.982511][ T9] usb 5-1: config 0 descriptor?? [ 124.999786][ T6472] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 125.057756][ T46] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.218651][ T46] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 125.234278][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.437037][ T46] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 125.442752][ T6472] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 125.459112][ T6486] netlink: 104 bytes leftover after parsing attributes in process `syz.5.154'. [ 125.471088][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 125.529888][ T6490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.153'. [ 125.955711][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 126.137336][ T46] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 126.146452][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.202142][ T46] usb 2-1: config 0 descriptor?? [ 126.246033][ T46] usb-storage 2-1:0.0: USB Mass Storage device detected [ 126.309361][ T6495] FAULT_INJECTION: forcing a failure. [ 126.309361][ T6495] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.336643][ T6495] CPU: 0 UID: 0 PID: 6495 Comm: syz.0.157 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 126.336670][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 126.336680][ T6495] Call Trace: [ 126.336689][ T6495] [ 126.336697][ T6495] dump_stack_lvl+0x241/0x360 [ 126.336728][ T6495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.336751][ T6495] ? __pfx__printk+0x10/0x10 [ 126.336783][ T6495] should_fail_ex+0x3b0/0x4e0 [ 126.336805][ T6495] strncpy_from_user+0x36/0x270 [ 126.336824][ T6495] getname_flags+0xf1/0x540 [ 126.336848][ T6495] user_path_at+0x24/0x60 [ 126.336870][ T6495] __se_sys_mount+0x297/0x3c0 [ 126.336894][ T6495] ? __pfx___se_sys_mount+0x10/0x10 [ 126.336911][ T6495] ? do_syscall_64+0x100/0x230 [ 126.336932][ T6495] ? __x64_sys_mount+0x20/0xc0 [ 126.336951][ T6495] do_syscall_64+0xf3/0x230 [ 126.336968][ T6495] ? clear_bhb_loop+0x35/0x90 [ 126.336991][ T6495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.337011][ T6495] RIP: 0033:0x7fbe7378cd29 [ 126.337026][ T6495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.337037][ T6495] RSP: 002b:00007fbe735f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.337055][ T6495] RAX: ffffffffffffffda RBX: 00007fbe739a5fa0 RCX: 00007fbe7378cd29 [ 126.337066][ T6495] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 126.337076][ T6495] RBP: 00007fbe735f9090 R08: 0000000020000100 R09: 0000000000000000 [ 126.337086][ T6495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.337095][ T6495] R13: 0000000000000000 R14: 00007fbe739a5fa0 R15: 00007fff268f1f98 [ 126.337120][ T6495] [ 126.584369][ T46] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 126.914178][ T46] usb 2-1: USB disconnect, device number 4 [ 127.212513][ T5900] usb 5-1: USB disconnect, device number 5 [ 127.280603][ T5872] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.467088][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 127.474936][ T5872] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 127.492056][ T5872] usb 3-1: config 0 has no interface number 0 [ 127.513713][ T5872] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 127.557264][ T5872] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 127.587081][ T46] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 127.694496][ T5872] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 127.694527][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.694547][ T5872] usb 3-1: Product: syz [ 127.694561][ T5872] usb 3-1: Manufacturer: syz [ 127.694576][ T5872] usb 3-1: SerialNumber: syz [ 127.696439][ T5872] usb 3-1: config 0 descriptor?? [ 127.697776][ T6505] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 127.697867][ T6505] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 127.827220][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 127.834901][ T46] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 127.845301][ T46] usb 6-1: config 0 has no interface number 0 [ 127.856631][ T46] usb 6-1: config 0 interface 184 has no altsetting 0 [ 127.869545][ T46] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 127.879221][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.887699][ T46] usb 6-1: Product: syz [ 127.892351][ T46] usb 6-1: Manufacturer: syz [ 127.907625][ T46] usb 6-1: SerialNumber: syz [ 128.124349][ T46] usb 6-1: config 0 descriptor?? [ 128.150804][ T46] smsc75xx v1.0.0 [ 128.277703][ T6523] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.286749][ T6523] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.787227][ T46] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 128.823488][ T46] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 128.847049][ T46] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 128.863382][ T46] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 128.978166][ T5872] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 128.990976][ T5872] asix 3-1:0.251: probe with driver asix failed with error -524 [ 129.357119][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.370649][ T6524] (syz.5.160,6524,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 129.394061][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.402191][ T6524] (syz.5.160,6524,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 129.414717][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.435447][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.522355][ T9] usb 6-1: USB disconnect, device number 2 [ 129.591900][ T6530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.166'. [ 130.098822][ T5823] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 130.108166][ T5823] Bluetooth: hci2: Injecting HCI hardware error event [ 130.119980][ T5133] Bluetooth: hci2: hardware error 0x00 [ 130.284988][ T46] usb 3-1: USB disconnect, device number 6 [ 130.381021][ T6532] xt_cgroup: invalid path, errno=-2 [ 131.303993][ T6540] mkiss: ax0: crc mode is auto. [ 131.948209][ T6552] bridge0: entered allmulticast mode [ 132.663298][ T5133] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 133.207836][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.214262][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.864698][ T6563] netlink: 'syz.0.176': attribute type 1 has an invalid length. [ 134.202162][ T6565] netlink: 28 bytes leftover after parsing attributes in process `syz.5.174'. [ 134.653553][ T6572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.179'. [ 134.724302][ T6565] netlink: 28 bytes leftover after parsing attributes in process `syz.5.174'. [ 134.763621][ T6561] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.773479][ T6565] netlink: 44 bytes leftover after parsing attributes in process `syz.5.174'. [ 134.801286][ T6561] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 135.024902][ T6561] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 135.342258][ T6584] ax25_connect(): syz.1.180 uses autobind, please contact jreuter@yaina.de [ 135.579198][ T6584] hub 6-0:1.0: USB hub found [ 135.585153][ T6584] hub 6-0:1.0: 1 port detected [ 136.028188][ T5823] Bluetooth: hci5: command 0x0405 tx timeout [ 136.498603][ T6561] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.667115][ T6561] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 136.736888][ T6561] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 136.743745][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.812627][ T6561] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.927164][ T6561] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 136.959730][ T6561] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 137.055981][ T6591] mkiss: ax0: crc mode is auto. [ 137.195090][ T6561] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 137.242618][ T6561] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 137.537461][ T6561] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 137.562230][ T6561] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 137.580768][ T6561] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 137.617159][ T6561] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 138.283149][ T6600] netlink: 'syz.4.175': attribute type 29 has an invalid length. [ 138.366381][ T6602] netlink: 'syz.4.175': attribute type 29 has an invalid length. [ 138.367270][ T6599] process 'syz.2.185' launched '/dev/fd/13' with NULL argv: empty string added [ 138.413503][ T6600] netlink: 'syz.4.175': attribute type 29 has an invalid length. [ 138.452310][ T6600] netlink: 'syz.4.175': attribute type 29 has an invalid length. [ 138.474216][ T6600] netlink: 'syz.4.175': attribute type 29 has an invalid length. [ 138.486680][ T6600] netlink: 'syz.4.175': attribute type 29 has an invalid length. [ 138.514440][ T6600] netlink: 'syz.4.175': attribute type 29 has an invalid length. [ 138.526434][ T6600] netlink: 'syz.4.175': attribute type 29 has an invalid length. [ 138.587096][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.679571][ T6600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.175'. [ 138.742007][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 138.742041][ T29] audit: type=1326 audit(1737965185.879:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 138.778153][ T6600] netlink: 'syz.4.175': attribute type 4 has an invalid length. [ 138.817069][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.819598][ T5133] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.837196][ T29] audit: type=1326 audit(1737965185.879:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 138.860092][ T29] audit: type=1326 audit(1737965185.879:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 139.251886][ T5133] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.277648][ T29] audit: type=1326 audit(1737965185.879:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 139.382755][ T29] audit: type=1326 audit(1737965185.879:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 139.411534][ T29] audit: type=1326 audit(1737965185.879:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 139.455571][ T29] audit: type=1326 audit(1737965185.879:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 139.617220][ T5133] Bluetooth: hci5: command 0x0405 tx timeout [ 139.624759][ T29] audit: type=1326 audit(1737965185.879:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 139.695669][ T29] audit: type=1326 audit(1737965185.879:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 139.724409][ T29] audit: type=1326 audit(1737965185.879:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 140.066837][ T6627] bridge0: entered allmulticast mode [ 140.696641][ T5133] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.897106][ T5133] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.903328][ T5133] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.378740][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.697097][ T5823] Bluetooth: hci5: command 0x0405 tx timeout [ 142.687079][ T5927] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 142.742385][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.862301][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.891533][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.907545][ T5927] usb 6-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 142.920464][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.930383][ T5927] usb 6-1: config 0 descriptor?? [ 142.947406][ T5900] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 142.977140][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.130704][ T5900] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 143.149482][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.159992][ T5900] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 143.171068][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 143.186080][ T5900] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 143.197405][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.220683][ T5900] usb 5-1: config 0 descriptor?? [ 143.227630][ T5900] usb-storage 5-1:0.0: USB Mass Storage device detected [ 143.253293][ T5900] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 143.354676][ T5927] hid-generic 0003:05AC:4262.0001: unbalanced delimiter at end of report description [ 143.382264][ T5927] hid-generic 0003:05AC:4262.0001: probe with driver hid-generic failed with error -22 [ 143.457260][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.466713][ T5927] usb 5-1: USB disconnect, device number 6 [ 143.552800][ T9] usb 6-1: USB disconnect, device number 3 [ 143.777137][ T5823] Bluetooth: hci5: command 0x0405 tx timeout [ 144.592012][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 144.640019][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.677938][ T6667] batadv_slave_0: entered promiscuous mode [ 144.702152][ T6669] netlink: 'syz.1.206': attribute type 10 has an invalid length. [ 145.316849][ T6669] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.665544][ T6689] netlink: 3 bytes leftover after parsing attributes in process `syz.4.210'. [ 145.719920][ T6692] netlink: 'syz.2.212': attribute type 13 has an invalid length. [ 145.796863][ T6689] 0X: renamed from caif0 [ 145.829176][ T6692] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 145.881445][ T6689] 0X: entered allmulticast mode [ 145.908362][ T6693] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 145.933803][ T6689] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 146.091789][ T6698] bridge_slave_0: left allmulticast mode [ 146.163383][ T6698] bridge_slave_0: left promiscuous mode [ 146.200586][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.281132][ T6698] bridge_slave_1: left allmulticast mode [ 146.312665][ T6698] bridge_slave_1: left promiscuous mode [ 146.373589][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.391777][ T6678] infiniband syz1: set active [ 146.396868][ T6678] infiniband syz1: added team_slave_0 [ 146.433956][ T6698] bond0: (slave bond_slave_0): Releasing backup interface [ 146.444506][ T6678] syz1: rxe_create_cq: returned err = -12 [ 146.464239][ T6678] infiniband syz1: Couldn't create ib_mad CQ [ 146.504571][ T6698] bond0: (slave bond_slave_1): Releasing backup interface [ 146.517388][ T5871] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 146.601220][ T6698] team0: Failed to send options change via netlink (err -105) [ 146.620218][ T6698] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 146.641543][ T6698] team0: Port device team_slave_0 removed [ 146.692156][ T5871] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 146.717097][ T6678] infiniband syz1: Couldn't open port 1 [ 146.718446][ T6698] team0: Failed to send options change via netlink (err -105) [ 146.739097][ T6678] RDS/IB: syz1: added [ 146.743571][ T6678] smc: adding ib device syz1 with port count 1 [ 146.750271][ T6678] smc: ib device syz1 port 1 has pnetid [ 146.771003][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.772694][ T6698] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 146.781505][ T5871] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 146.805315][ T6698] team0: Port device team_slave_1 removed [ 146.805725][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 146.813760][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.824522][ T5871] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 147.007818][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.192585][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.547080][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.597775][ T5871] usb 3-1: config 0 descriptor?? [ 147.723919][ T5871] usb-storage 3-1:0.0: USB Mass Storage device detected [ 147.739129][ T5871] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 147.967529][ T5900] usb 3-1: USB disconnect, device number 7 [ 148.646284][ T6735] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 148.657784][ T6735] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 148.822596][ T6736] netlink: 'syz.5.221': attribute type 4 has an invalid length. [ 149.454169][ T5900] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 149.675993][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 149.715981][ T5900] usb 1-1: config 1 has an invalid interface number: 3 but max is 2 [ 149.750484][ T5900] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.766659][ T5900] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 149.775874][ T5900] usb 1-1: config 1 has no interface number 1 [ 149.786290][ T5900] usb 1-1: too many endpoints for config 1 interface 3 altsetting 4: 31, using maximum allowed: 30 [ 149.837056][ T5900] usb 1-1: config 1 interface 3 altsetting 4 has an invalid endpoint descriptor of length 6, skipping [ 149.850035][ T5900] usb 1-1: config 1 interface 3 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 31 [ 149.867617][ T5900] usb 1-1: config 1 interface 3 has no altsetting 0 [ 149.879044][ T5900] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.888492][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.896502][ T5900] usb 1-1: Product: syz [ 149.907052][ T5900] usb 1-1: Manufacturer: syz [ 149.917666][ T5900] usb 1-1: SerialNumber: syz [ 150.477848][ T5900] usb 1-1: 0:2 : does not exist [ 150.540208][ T5900] usb 1-1: USB disconnect, device number 2 [ 150.637602][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 150.637619][ T29] audit: type=1326 audit(1737965197.779:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 150.679841][ T29] audit: type=1326 audit(1737965197.779:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 150.747341][ T29] audit: type=1326 audit(1737965197.809:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 151.510669][ T29] audit: type=1326 audit(1737965197.809:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 151.539100][ T29] audit: type=1326 audit(1737965197.809:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 151.638752][ T6801] binder: 6793:6801 ioctl c0306201 200003c0 returned -14 [ 151.661048][ T29] audit: type=1326 audit(1737965197.809:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 151.689326][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.5.229'. [ 151.748628][ T29] audit: type=1326 audit(1737965197.809:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 151.834419][ T29] audit: type=1326 audit(1737965197.809:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 151.957473][ T29] audit: type=1326 audit(1737965197.809:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 152.044188][ T29] audit: type=1326 audit(1737965197.809:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd518cd29 code=0x7ffc0000 [ 152.237018][ T5872] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 152.430013][ T5872] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 152.443562][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.454559][ T5872] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 152.465596][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 152.478874][ T5872] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 152.498869][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.519346][ T5872] usb 1-1: config 0 descriptor?? [ 152.568219][ T5872] usb-storage 1-1:0.0: USB Mass Storage device detected [ 152.590590][ T5872] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 152.672464][ T6827] FAULT_INJECTION: forcing a failure. [ 152.672464][ T6827] name failslab, interval 1, probability 0, space 0, times 0 [ 152.707111][ T6827] CPU: 0 UID: 0 PID: 6827 Comm: syz.2.238 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 152.707137][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 152.707146][ T6827] Call Trace: [ 152.707152][ T6827] [ 152.707160][ T6827] dump_stack_lvl+0x241/0x360 [ 152.707191][ T6827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.707214][ T6827] ? __pfx__printk+0x10/0x10 [ 152.707239][ T6827] ? __kmalloc_noprof+0xb5/0x4c0 [ 152.707260][ T6827] ? __pfx___might_resched+0x10/0x10 [ 152.707284][ T6827] should_fail_ex+0x3b0/0x4e0 [ 152.707306][ T6827] should_failslab+0xac/0x100 [ 152.707327][ T6827] __kmalloc_noprof+0xdd/0x4c0 [ 152.707345][ T6827] ? nla_strdup+0x9c/0x140 [ 152.707362][ T6827] ? __kasan_kmalloc+0x98/0xb0 [ 152.707382][ T6827] nla_strdup+0x9c/0x140 [ 152.707404][ T6827] nf_tables_newtable+0x59b/0x1e10 [ 152.707430][ T6827] ? nfnl_pernet+0x23/0x240 [ 152.707452][ T6827] ? __pfx_nf_tables_newtable+0x10/0x10 [ 152.707483][ T6827] ? __nla_parse+0x40/0x60 [ 152.707506][ T6827] nfnetlink_rcv+0x14e3/0x2ab0 [ 152.707567][ T6827] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 152.707634][ T6827] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.707654][ T6827] ? skb_clone+0x240/0x390 [ 152.707675][ T6827] ? __pfx_lock_release+0x10/0x10 [ 152.707707][ T6827] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.707731][ T6827] netlink_unicast+0x7f6/0x990 [ 152.707758][ T6827] ? __pfx_netlink_unicast+0x10/0x10 [ 152.707772][ T6827] ? __virt_addr_valid+0x45f/0x530 [ 152.707793][ T6827] ? __phys_addr_symbol+0x2f/0x70 [ 152.707813][ T6827] ? __check_object_size+0x47a/0x730 [ 152.707837][ T6827] netlink_sendmsg+0x8e4/0xcb0 [ 152.707868][ T6827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.707903][ T6827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.707922][ T6827] __sock_sendmsg+0x221/0x270 [ 152.707944][ T6827] ____sys_sendmsg+0x52a/0x7e0 [ 152.707975][ T6827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.707995][ T6827] ? __fget_files+0x2a/0x410 [ 152.708017][ T6827] ? __fget_files+0x2a/0x410 [ 152.708045][ T6827] __sys_sendmsg+0x269/0x350 [ 152.708072][ T6827] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.708107][ T6827] ? do_sys_openat2+0x17a/0x1d0 [ 152.708154][ T6827] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.708176][ T6827] ? do_syscall_64+0x100/0x230 [ 152.708197][ T6827] ? do_syscall_64+0xb6/0x230 [ 152.708217][ T6827] do_syscall_64+0xf3/0x230 [ 152.708235][ T6827] ? clear_bhb_loop+0x35/0x90 [ 152.708258][ T6827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.708276][ T6827] RIP: 0033:0x7f0b5078cd29 [ 152.708290][ T6827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.708303][ T6827] RSP: 002b:00007f0b515fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.708321][ T6827] RAX: ffffffffffffffda RBX: 00007f0b509a5fa0 RCX: 00007f0b5078cd29 [ 152.708333][ T6827] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 152.708343][ T6827] RBP: 00007f0b515fd090 R08: 0000000000000000 R09: 0000000000000000 [ 152.708353][ T6827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.708363][ T6827] R13: 0000000000000000 R14: 00007f0b509a5fa0 R15: 00007ffe74a85738 [ 152.708387][ T6827] [ 153.484656][ T5870] usb 1-1: USB disconnect, device number 3 [ 155.769864][ T6853] ax25_connect(): syz.4.241 uses autobind, please contact jreuter@yaina.de [ 156.647311][ T5870] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 157.153367][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 157.531554][ T5870] usb 6-1: device descriptor read/all, error -71 [ 158.053272][ T6873] bridge0: entered allmulticast mode [ 159.698947][ T6876] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 161.335046][ T6888] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 161.347008][ T6888] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 161.618585][ T6888] netlink: 'syz.2.252': attribute type 4 has an invalid length. [ 162.002863][ T6900] netlink: 'syz.0.253': attribute type 8 has an invalid length. [ 162.010689][ T6900] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.253'. [ 163.099802][ T6904] netlink: 'syz.5.256': attribute type 10 has an invalid length. [ 163.107786][ T5900] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.120782][ T6904] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.132739][ T6904] bond0: (slave team0): Enslaving as an active interface with an up link [ 163.147028][ T6904] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 163.279518][ T5900] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 163.297862][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.322482][ T5900] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 163.376817][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 163.401166][ T5900] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 163.411468][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.493297][ T5900] usb 5-1: config 0 descriptor?? [ 163.573113][ T5900] usb-storage 5-1:0.0: USB Mass Storage device detected [ 163.577258][ T6922] netlink: 'syz.5.263': attribute type 7 has an invalid length. [ 164.526126][ T5900] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 164.662747][ T5900] usb 5-1: USB disconnect, device number 7 [ 165.988038][ T6945] netlink: 36 bytes leftover after parsing attributes in process `syz.5.269'. [ 166.080174][ T6947] overlay: ./bus is not a directory [ 166.249969][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 168.484619][ T6970] erspan1: entered promiscuous mode [ 168.688200][ T5927] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 169.157118][ T5927] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 169.176391][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.203789][ T5927] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 169.233885][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 170.237238][ T5927] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 170.246332][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.256285][ T5927] usb 3-1: config 0 descriptor?? [ 170.267783][ T5927] usb-storage 3-1:0.0: USB Mass Storage device detected [ 170.467929][ T5927] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 170.518810][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 170.655389][ T5927] usb 3-1: USB disconnect, device number 8 [ 170.774673][ T6996] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 170.782678][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 171.850250][ T7003] bridge0: entered allmulticast mode [ 172.057129][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 172.057148][ T29] audit: type=1326 audit(1737965219.169:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5078cd29 code=0x7ffc0000 [ 172.197070][ T29] audit: type=1326 audit(1737965219.169:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5078cd29 code=0x7ffc0000 [ 172.233023][ T29] audit: type=1326 audit(1737965219.169:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f0b5078cd29 code=0x7ffc0000 [ 172.280769][ T29] audit: type=1326 audit(1737965219.169:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5078cd29 code=0x7ffc0000 [ 172.309774][ T7017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.293'. [ 172.318841][ T7017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.293'. [ 172.333397][ T7020] FAULT_INJECTION: forcing a failure. [ 172.333397][ T7020] name failslab, interval 1, probability 0, space 0, times 0 [ 172.356398][ T29] audit: type=1326 audit(1737965219.169:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5078cd29 code=0x7ffc0000 [ 172.390745][ T7017] batadv0: entered promiscuous mode [ 172.396167][ T7020] CPU: 0 UID: 0 PID: 7020 Comm: syz.1.294 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 172.396191][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 172.396200][ T7020] Call Trace: [ 172.396205][ T7020] [ 172.396211][ T7020] dump_stack_lvl+0x241/0x360 [ 172.396238][ T7020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.396256][ T7020] ? __pfx__printk+0x10/0x10 [ 172.396275][ T7020] ? __kmalloc_cache_noprof+0x48/0x390 [ 172.396293][ T7020] ? __pfx___might_resched+0x10/0x10 [ 172.396311][ T7020] should_fail_ex+0x3b0/0x4e0 [ 172.396329][ T7020] should_failslab+0xac/0x100 [ 172.396346][ T7020] __kmalloc_cache_noprof+0x70/0x390 [ 172.396360][ T7020] ? nfnetlink_rcv+0x1265/0x2ab0 [ 172.396376][ T7020] nfnetlink_rcv+0x1265/0x2ab0 [ 172.396423][ T7020] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 172.396472][ T7020] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.396488][ T7020] ? skb_clone+0x240/0x390 [ 172.396506][ T7020] ? __pfx_lock_release+0x10/0x10 [ 172.396532][ T7020] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.396550][ T7020] netlink_unicast+0x7f6/0x990 [ 172.396572][ T7020] ? __pfx_netlink_unicast+0x10/0x10 [ 172.396586][ T7020] ? __virt_addr_valid+0x45f/0x530 [ 172.396603][ T7020] ? __phys_addr_symbol+0x2f/0x70 [ 172.396619][ T7020] ? __check_object_size+0x47a/0x730 [ 172.396638][ T7020] netlink_sendmsg+0x8e4/0xcb0 [ 172.396664][ T7020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.396690][ T7020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.396706][ T7020] __sock_sendmsg+0x221/0x270 [ 172.396722][ T7020] ____sys_sendmsg+0x52a/0x7e0 [ 172.396746][ T7020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.396761][ T7020] ? __fget_files+0x2a/0x410 [ 172.396779][ T7020] ? __fget_files+0x2a/0x410 [ 172.396800][ T7020] __sys_sendmsg+0x269/0x350 [ 172.396821][ T7020] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.396848][ T7020] ? do_sys_openat2+0x17a/0x1d0 [ 172.396883][ T7020] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 172.396901][ T7020] ? do_syscall_64+0x100/0x230 [ 172.396923][ T7020] ? do_syscall_64+0xb6/0x230 [ 172.396941][ T7020] do_syscall_64+0xf3/0x230 [ 172.396958][ T7020] ? clear_bhb_loop+0x35/0x90 [ 172.396982][ T7020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.397002][ T7020] RIP: 0033:0x7fded418cd29 [ 172.397017][ T7020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.397029][ T7020] RSP: 002b:00007fded4fae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.397046][ T7020] RAX: ffffffffffffffda RBX: 00007fded43a5fa0 RCX: 00007fded418cd29 [ 172.397058][ T7020] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 172.397068][ T7020] RBP: 00007fded4fae090 R08: 0000000000000000 R09: 0000000000000000 [ 172.397077][ T7020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.397086][ T7020] R13: 0000000000000000 R14: 00007fded43a5fa0 R15: 00007ffc21eab128 [ 172.397113][ T7020] [ 172.682506][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.690316][ T7017] dummy0: entered promiscuous mode [ 172.721339][ T29] audit: type=1326 audit(1737965219.169:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0b5078cd29 code=0x7ffc0000 [ 172.743057][ T29] audit: type=1326 audit(1737965219.169:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5078cd29 code=0x7ffc0000 [ 172.764418][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.770568][ T29] audit: type=1326 audit(1737965219.169:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0b5078cd29 code=0x7ffc0000 [ 172.792071][ T29] audit: type=1326 audit(1737965219.169:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5078cd29 code=0x7ffc0000 [ 172.813434][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.822221][ T29] audit: type=1326 audit(1737965219.169:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5078cd29 code=0x7ffc0000 [ 173.159675][ T6999] vxcan0: entered allmulticast mode [ 173.793732][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.298'. [ 174.160385][ T7039] netlink: 'syz.5.300': attribute type 1 has an invalid length. [ 174.217420][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.300'. [ 174.577114][ T5925] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.634297][ T7050] netlink: 20 bytes leftover after parsing attributes in process `syz.5.303'. [ 175.468289][ T5925] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 175.518012][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.543978][ T5925] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 175.566245][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 175.589428][ T5925] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 175.827010][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.848444][ T5925] usb 1-1: config 0 descriptor?? [ 175.972747][ T5925] usb-storage 1-1:0.0: USB Mass Storage device detected [ 176.160394][ T5925] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 176.258678][ T5925] usb 1-1: USB disconnect, device number 4 [ 176.439010][ T7072] 9pnet_fd: Insufficient options for proto=fd [ 178.621432][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 178.723239][ T7087] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 178.748867][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 178.872920][ T7094] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 178.883534][ T7094] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 178.969721][ T7097] netlink: 76 bytes leftover after parsing attributes in process `syz.5.314'. [ 179.387403][ T7099] netlink: 'syz.5.314': attribute type 21 has an invalid length. [ 179.407337][ T7099] netlink: 152 bytes leftover after parsing attributes in process `syz.5.314'. [ 179.447107][ T7099] netlink: 5 bytes leftover after parsing attributes in process `syz.5.314'. [ 179.457743][ T7094] netlink: 'syz.0.315': attribute type 4 has an invalid length. [ 179.471307][ T7101] netlink: 'syz.2.317': attribute type 10 has an invalid length. [ 179.490728][ T7104] FAULT_INJECTION: forcing a failure. [ 179.490728][ T7104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.532743][ T7105] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 179.564284][ T7101] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.579360][ T7104] CPU: 0 UID: 0 PID: 7104 Comm: syz.4.318 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 179.579385][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 179.579395][ T7104] Call Trace: [ 179.579401][ T7104] [ 179.579407][ T7104] dump_stack_lvl+0x241/0x360 [ 179.579438][ T7104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.579461][ T7104] ? __pfx__printk+0x10/0x10 [ 179.579495][ T7104] should_fail_ex+0x3b0/0x4e0 [ 179.579518][ T7104] _copy_to_user+0x31/0xb0 [ 179.579536][ T7104] rng_dev_read+0x3e5/0x710 [ 179.579554][ T7104] ? mark_lock+0x9a/0x360 [ 179.579580][ T7104] ? __pfx_rng_dev_read+0x10/0x10 [ 179.579602][ T7104] ? bpf_lsm_file_permission+0x9/0x10 [ 179.579621][ T7104] ? rw_verify_area+0x243/0x630 [ 179.579647][ T7104] vfs_readv+0x6bc/0xa80 [ 179.579675][ T7104] ? __pfx_rng_dev_read+0x10/0x10 [ 179.579693][ T7104] ? __pfx_vfs_readv+0x10/0x10 [ 179.579710][ T7104] ? vfs_write+0x7fa/0xd10 [ 179.579744][ T7104] ? __fget_files+0x2a/0x410 [ 179.579765][ T7104] ? __fget_files+0x395/0x410 [ 179.579783][ T7104] ? __fget_files+0x2a/0x410 [ 179.579809][ T7104] __x64_sys_preadv+0x1b7/0x2d0 [ 179.579828][ T7104] ? __pfx___x64_sys_preadv+0x10/0x10 [ 179.579845][ T7104] ? do_syscall_64+0x100/0x230 [ 179.579877][ T7104] ? do_syscall_64+0xb6/0x230 [ 179.579898][ T7104] do_syscall_64+0xf3/0x230 [ 179.579916][ T7104] ? clear_bhb_loop+0x35/0x90 [ 179.579940][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.579959][ T7104] RIP: 0033:0x7f6bd518cd29 [ 179.579974][ T7104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.579987][ T7104] RSP: 002b:00007f6bd5fc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 179.580004][ T7104] RAX: ffffffffffffffda RBX: 00007f6bd53a5fa0 RCX: 00007f6bd518cd29 [ 179.580015][ T7104] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 179.580025][ T7104] RBP: 00007f6bd5fc3090 R08: 0000000000000000 R09: 0000000000000000 [ 179.580035][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.580044][ T7104] R13: 0000000000000000 R14: 00007f6bd53a5fa0 R15: 00007ffdb217cb78 [ 179.580069][ T7104] [ 179.591933][ T7101] bond0: (slave team0): Enslaving as an active interface with an up link [ 179.947027][ T5871] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 180.057159][ T5870] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 180.099046][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.117297][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.135124][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.161148][ T5871] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 180.256478][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.273530][ T5870] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 180.288114][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.334481][ T5870] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 180.375916][ T5871] usb 1-1: config 0 descriptor?? [ 180.436583][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 180.451258][ T5870] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 180.461607][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.542180][ T5870] usb 5-1: config 0 descriptor?? [ 180.566639][ T5870] usb-storage 5-1:0.0: USB Mass Storage device detected [ 180.735890][ T5870] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 180.810306][ T5870] usb 5-1: USB disconnect, device number 8 [ 180.838352][ T5871] betop 0003:11C0:5506.0002: item fetching failed at offset 10/11 [ 180.855103][ T5871] betop 0003:11C0:5506.0002: parse failed [ 180.862166][ T5871] betop 0003:11C0:5506.0002: probe with driver betop failed with error -22 [ 180.921583][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 181.007578][ T7137] netlink: 'syz.1.327': attribute type 1 has an invalid length. [ 181.015391][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 181.034793][ T7139] netlink: 'syz.2.328': attribute type 1 has an invalid length. [ 181.040480][ T5900] usb 1-1: USB disconnect, device number 5 [ 181.045642][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 181.313667][ T7144] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 181.331582][ T7145] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 181.341059][ T7145] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 181.356619][ T7145] netlink: 'syz.2.330': attribute type 4 has an invalid length. [ 183.667351][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.337'. [ 183.830912][ T7175] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 183.893566][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 184.095610][ T7183] x_tables: duplicate underflow at hook 2 [ 185.793822][ T7198] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 185.809385][ T7198] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 185.897246][ T5872] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 185.931250][ T7198] netlink: 'syz.5.343': attribute type 4 has an invalid length. [ 186.111388][ T5872] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 186.216034][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.262623][ T5872] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 186.297084][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 186.371455][ T5872] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 186.397573][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.411917][ T7203] autofs: Unknown parameter 'WP' [ 186.435147][ T5872] usb 1-1: config 0 descriptor?? [ 186.455604][ T5872] usb-storage 1-1:0.0: USB Mass Storage device detected [ 186.478108][ T5872] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 186.679648][ T5872] usb 1-1: USB disconnect, device number 6 [ 186.883803][ T7215] netlink: 'syz.5.350': attribute type 1 has an invalid length. [ 187.126601][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.351'. [ 187.158619][ T7219] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 187.237001][ T5872] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 187.447348][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 187.497398][ T5872] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.583548][ T5872] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.601654][ T7230] x_tables: duplicate underflow at hook 2 [ 187.668479][ T5872] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 187.765847][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.920084][ T5872] usb 6-1: Product: syz [ 187.960187][ T5872] usb 6-1: Manufacturer: syz [ 187.965057][ T5872] usb 6-1: SerialNumber: syz [ 188.197569][ T5872] usb 6-1: 0:2 : does not exist [ 188.216233][ T5872] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 188.256093][ T5872] usb 6-1: USB disconnect, device number 6 [ 188.631019][ T7247] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 188.640151][ T7247] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 188.812070][ T7246] netlink: 'syz.1.359': attribute type 4 has an invalid length. [ 190.274788][ T7270] kvm: kvm [7269]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000064) [ 190.295631][ T7271] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 190.302455][ T7273] Bluetooth: MGMT ver 1.23 [ 190.667249][ T5872] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 190.934222][ T7281] x_tables: duplicate underflow at hook 2 [ 190.988504][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 191.088579][ T5872] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 191.247031][ T5900] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 191.286955][ T5872] usb 3-1: config 0 has no interface number 0 [ 191.295306][ T5872] usb 3-1: too many endpoints for config 0 interface 110 altsetting 99: 40, using maximum allowed: 30 [ 191.337805][ T5872] usb 3-1: config 0 interface 110 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 191.365053][ T5872] usb 3-1: config 0 interface 110 has no altsetting 0 [ 191.439767][ T7289] pim6reg527: entered allmulticast mode [ 191.446727][ T5900] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 191.573811][ T5872] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 191.583071][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.593894][ T5872] usb 3-1: config 0 descriptor?? [ 191.634646][ T7290] hub 6-0:1.0: USB hub found [ 191.640690][ T7290] hub 6-0:1.0: 1 port detected [ 191.677202][ T5925] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.686141][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.697131][ T5900] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 191.707998][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 191.721160][ T5900] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 191.730359][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.750511][ T5900] usb 5-1: config 0 descriptor?? [ 191.761659][ T5900] usb-storage 5-1:0.0: USB Mass Storage device detected [ 191.783353][ T5900] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 191.852879][ T5925] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 191.865862][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.876659][ T5925] usb 1-1: Product: syz [ 191.881104][ T5925] usb 1-1: Manufacturer: syz [ 191.885796][ T5925] usb 1-1: SerialNumber: syz [ 191.895424][ T5925] usb 1-1: config 0 descriptor?? [ 191.971201][ T5925] usb 5-1: USB disconnect, device number 9 [ 192.014549][ T5872] usb 3-1: string descriptor 0 read error: -71 [ 192.024862][ T5872] gspca_main: sunplus-2.14.0 probing 041e:400b [ 192.031468][ T5872] gspca_sunplus: reg_w_riv err -71 [ 192.036849][ T5872] sunplus 3-1:0.110: probe with driver sunplus failed with error -71 [ 192.048039][ T5872] usb 3-1: USB disconnect, device number 9 [ 192.119665][ T7285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.370'. [ 192.368001][ T7269] delete_channel: no stack [ 192.390941][ T5925] usb 1-1: USB disconnect, device number 7 [ 194.592838][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.599241][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.819140][ T7339] ax25_connect(): syz.5.384 uses autobind, please contact jreuter@yaina.de [ 196.830565][ T7339] hub 6-0:1.0: USB hub found [ 196.835447][ T7339] hub 6-0:1.0: 1 port detected [ 196.858220][ T7340] warning: `syz.2.386' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 198.037114][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 198.247129][ T5870] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 198.290848][ T25] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 198.336659][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.352183][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 198.366261][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 198.367635][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.390'. [ 198.385565][ T25] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 198.406972][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.425994][ T25] usb 5-1: config 0 descriptor?? [ 198.437287][ T25] usb-storage 5-1:0.0: USB Mass Storage device detected [ 198.449306][ T5870] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 198.467630][ T25] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 198.485806][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.843630][ T5870] usb 1-1: config 0 descriptor?? [ 199.275387][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.284128][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.339588][ T5872] usb 5-1: USB disconnect, device number 10 [ 200.417412][ T5870] hackrf 1-1:0.0: usb_control_msg() failed -110 request 0f [ 200.424818][ T5870] hackrf 1-1:0.0: Could not detect board [ 200.577093][ T5870] hackrf 1-1:0.0: probe with driver hackrf failed with error -110 [ 200.607531][ T5870] usb 1-1: USB disconnect, device number 8 [ 201.926360][ T5871] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 201.962988][ T7384] netlink: 64 bytes leftover after parsing attributes in process `syz.5.398'. [ 202.028657][ T7386] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 202.261720][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 202.807037][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 202.813967][ T5871] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 202.827114][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.829697][ T7388] netlink: 36 bytes leftover after parsing attributes in process `syz.2.399'. [ 202.971117][ T5871] usb 5-1: config 0 has no interface number 0 [ 203.027787][ T5871] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 203.075396][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.117829][ T5871] usb 5-1: Product: syz [ 203.155588][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 203.160574][ T5871] usb 5-1: Manufacturer: syz [ 203.192070][ T7396] ax25_connect(): syz.0.400 uses autobind, please contact jreuter@yaina.de [ 203.204016][ T7396] hub 6-0:1.0: USB hub found [ 203.209739][ T7396] hub 6-0:1.0: 1 port detected [ 203.225805][ T5871] usb 5-1: SerialNumber: syz [ 203.417033][ T5871] usb 5-1: config 0 descriptor?? [ 203.888928][ T5871] usb 5-1: Found UVC 0.00 device syz (046d:08c3) [ 203.895336][ T5871] usb 5-1: No valid video chain found. [ 204.149174][ T7408] netlink: 'syz.2.404': attribute type 10 has an invalid length. [ 204.214904][ T7412] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 204.220294][ T7408] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 205.298072][ T7423] netlink: 48 bytes leftover after parsing attributes in process `syz.2.407'. [ 206.737300][ T25] usb 5-1: USB disconnect, device number 11 [ 207.171759][ T7444] netlink: 'syz.0.413': attribute type 10 has an invalid length. [ 207.619138][ T7447] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 207.733206][ T7444] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.765698][ T7444] bond0: (slave team0): Enslaving as an active interface with an up link [ 210.904171][ T7486] netlink: 'syz.0.423': attribute type 10 has an invalid length. [ 211.698133][ T7486] syz_tun: entered promiscuous mode [ 211.927887][ T7486] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 212.117165][ T7496] mkiss: ax0: crc mode is auto. [ 212.789806][ T7499] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 212.800479][ T7499] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 213.205727][ T7500] netlink: 'syz.2.427': attribute type 4 has an invalid length. [ 214.983819][ T7518] netlink: 'syz.5.435': attribute type 2 has an invalid length. [ 215.138741][ T7521] netlink: 44 bytes leftover after parsing attributes in process `syz.5.435'. [ 215.965148][ T7524] ax25_connect(): syz.2.436 uses autobind, please contact jreuter@yaina.de [ 215.979952][ T7524] hub 6-0:1.0: USB hub found [ 215.984801][ T7524] hub 6-0:1.0: 1 port detected [ 217.541489][ T7539] x_tables: duplicate underflow at hook 2 [ 217.807152][ T5831] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 218.008194][ T5831] usb 5-1: device descriptor read/64, error -71 [ 218.294830][ T7547] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 218.304256][ T7547] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 218.357235][ T5831] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 218.724232][ T7546] netlink: 'syz.2.442': attribute type 4 has an invalid length. [ 218.753410][ T5831] usb 5-1: device descriptor read/64, error -71 [ 218.874131][ T7553] netlink: 'syz.2.444': attribute type 10 has an invalid length. [ 218.886225][ T7553] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 218.887336][ T5831] usb usb5-port1: attempt power cycle [ 220.150859][ T7560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.197040][ T5831] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 220.262430][ T5831] usb 5-1: device descriptor read/8, error -71 [ 223.789434][ T7604] ax25_connect(): syz.2.448 uses autobind, please contact jreuter@yaina.de [ 223.818059][ T7604] hub 6-0:1.0: USB hub found [ 223.823123][ T7604] hub 6-0:1.0: 1 port detected [ 224.989765][ T7609] netlink: 'syz.2.459': attribute type 10 has an invalid length. [ 224.998351][ T7609] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 225.336803][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 225.336817][ T29] audit: type=1400 audit(1737965272.469:144): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7612 comm="syz.0.460" src=20000 daddr=224.0.0.1 dest=20000 netif=gre0 [ 226.331829][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.468'. [ 226.668284][ T7649] ax25_connect(): syz.2.469 uses autobind, please contact jreuter@yaina.de [ 226.686595][ T7649] hub 6-0:1.0: USB hub found [ 226.691617][ T7649] hub 6-0:1.0: 1 port detected [ 227.038456][ T7652] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 227.047957][ T7652] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 227.131444][ T7653] netlink: 'syz.4.470': attribute type 4 has an invalid length. [ 227.693245][ T7659] No such timeout policy "syz0" [ 228.904571][ T7668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.475'. [ 232.368905][ T7709] ax25_connect(): syz.2.483 uses autobind, please contact jreuter@yaina.de [ 232.385434][ T7709] hub 6-0:1.0: USB hub found [ 232.390374][ T7709] hub 6-0:1.0: 1 port detected [ 232.997539][ T7711] FAULT_INJECTION: forcing a failure. [ 232.997539][ T7711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.023051][ T7711] CPU: 0 UID: 0 PID: 7711 Comm: syz.1.485 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 233.023078][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 233.023089][ T7711] Call Trace: [ 233.023096][ T7711] [ 233.023104][ T7711] dump_stack_lvl+0x241/0x360 [ 233.023146][ T7711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.023170][ T7711] ? __pfx__printk+0x10/0x10 [ 233.023195][ T7711] ? __pfx_lock_release+0x10/0x10 [ 233.023216][ T7711] ? __lock_acquire+0x1397/0x2100 [ 233.023243][ T7711] should_fail_ex+0x3b0/0x4e0 [ 233.023267][ T7711] _copy_from_user+0x2d/0xb0 [ 233.023284][ T7711] kstrtouint_from_user+0xc6/0x190 [ 233.023308][ T7711] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 233.023332][ T7711] ? __pfx_lock_acquire+0x10/0x10 [ 233.023362][ T7711] proc_fail_nth_write+0xaa/0x2d0 [ 233.023381][ T7711] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 233.023400][ T7711] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 233.023424][ T7711] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 233.023445][ T7711] vfs_write+0x29f/0xd10 [ 233.023470][ T7711] ? fdget_pos+0x254/0x320 [ 233.023489][ T7711] ? __mutex_unlock_slowpath+0x227/0x800 [ 233.023512][ T7711] ? __pfx_vfs_write+0x10/0x10 [ 233.023532][ T7711] ? do_sys_openat2+0x17a/0x1d0 [ 233.023556][ T7711] ? __fget_files+0x2a/0x410 [ 233.023577][ T7711] ? __fget_files+0x395/0x410 [ 233.023595][ T7711] ? __fget_files+0x2a/0x410 [ 233.023624][ T7711] ksys_write+0x18f/0x2b0 [ 233.023650][ T7711] ? __pfx_ksys_write+0x10/0x10 [ 233.023673][ T7711] ? do_syscall_64+0x100/0x230 [ 233.023696][ T7711] ? do_syscall_64+0xb6/0x230 [ 233.023718][ T7711] do_syscall_64+0xf3/0x230 [ 233.023737][ T7711] ? clear_bhb_loop+0x35/0x90 [ 233.023768][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.023788][ T7711] RIP: 0033:0x7fded418b7df [ 233.023808][ T7711] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 233.023822][ T7711] RSP: 002b:00007fded4f8d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 233.023840][ T7711] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fded418b7df [ 233.023852][ T7711] RDX: 0000000000000001 RSI: 00007fded4f8d0a0 RDI: 0000000000000003 [ 233.023863][ T7711] RBP: 00007fded4f8d090 R08: 0000000000000000 R09: 0000000000000000 [ 233.023872][ T7711] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 233.023882][ T7711] R13: 0000000000000000 R14: 00007fded43a6080 R15: 00007ffc21eab128 [ 233.023911][ T7711] [ 234.915348][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.491'. [ 234.949771][ T7729] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 234.974287][ T7726] bond1: entered promiscuous mode [ 234.992812][ T7726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.021652][ T7727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.030492][ T7727] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 235.060554][ T7727] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 237.596992][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 237.757357][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 237.785209][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 237.813704][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 237.927799][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 237.943868][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.667512][ T9] usb 6-1: Product: syz [ 238.671736][ T9] usb 6-1: Manufacturer: syz [ 238.676351][ T9] usb 6-1: SerialNumber: syz [ 238.748354][ T9] usb 6-1: config 0 descriptor?? [ 238.796767][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 238.834378][ T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 239.184998][ T7779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.808864][ T7779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.746247][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 240.808667][ T9] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 240.999030][ T9] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 241.014095][ T9] em28xx 6-1:0.0: No AC97 audio processor [ 241.277892][ T9] usb 6-1: USB disconnect, device number 7 [ 241.437116][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 241.515350][ T9] em28xx 6-1:0.0: Freeing device [ 241.848582][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 241.865025][ T7800] No control pipe specified [ 241.884438][ T7801] No control pipe specified [ 242.697001][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 242.708950][ T9] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 242.735719][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.756223][ T9] usb 6-1: config 0 has no interface number 0 [ 242.773424][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 242.792513][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.819209][ T9] usb 6-1: Product: syz [ 242.833803][ T9] usb 6-1: Manufacturer: syz [ 242.849225][ T9] usb 6-1: SerialNumber: syz [ 242.875205][ T9] usb 6-1: config 0 descriptor?? [ 242.917782][ T9] usb 6-1: Found UVC 0.00 device syz (046d:08c3) [ 242.937044][ T9] usb 6-1: No valid video chain found. [ 242.990465][ T7809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.508'. [ 243.288599][ T9] usb 6-1: USB disconnect, device number 8 [ 243.547600][ T7813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.509'. [ 244.774937][ T7823] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 246.065085][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 246.463054][ T7842] netlink: 48 bytes leftover after parsing attributes in process `syz.1.520'. [ 247.497596][ T7859] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 247.944423][ T7863] loop8: detected capacity change from 0 to 7 [ 247.975370][ T7863] Dev loop8: unable to read RDB block 7 [ 247.975538][ T7863] loop8: unable to read partition table [ 247.975682][ T7863] loop8: partition table beyond EOD, truncated [ 247.975703][ T7863] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 247.975703][ T7863] ) failed (rc=-5) [ 249.618271][ T30] INFO: task syz.3.27:6002 blocked for more than 143 seconds. [ 249.855550][ T7876] FAULT_INJECTION: forcing a failure. [ 249.855550][ T7876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.868725][ T7876] CPU: 1 UID: 0 PID: 7876 Comm: syz.2.532 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 249.868740][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 249.868746][ T7876] Call Trace: [ 249.868749][ T7876] [ 249.868753][ T7876] dump_stack_lvl+0x241/0x360 [ 249.868772][ T7876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.868791][ T7876] ? __pfx__printk+0x10/0x10 [ 249.868810][ T7876] should_fail_ex+0x3b0/0x4e0 [ 249.868823][ T7876] _copy_from_user+0x2d/0xb0 [ 249.868832][ T7876] copy_from_sockptr_offset+0x6b/0xb0 [ 249.868844][ T7876] do_ipt_set_ctl+0xbdd/0x1250 [ 249.868856][ T7876] ? nf_setsockopt+0x240/0x2c0 [ 249.868868][ T7876] ? do_ip_setsockopt+0x1f44/0x3cd0 [ 249.868878][ T7876] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 249.868888][ T7876] ? rcu_is_watching+0x15/0xb0 [ 249.868903][ T7876] ? trace_contention_end+0x3c/0x120 [ 249.868921][ T7876] ? __mutex_unlock_slowpath+0x227/0x800 [ 249.868937][ T7876] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.868956][ T7876] nf_setsockopt+0x295/0x2c0 [ 249.868970][ T7876] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 249.868982][ T7876] do_sock_setsockopt+0x3af/0x720 [ 249.868997][ T7876] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 249.869011][ T7876] ? __fget_files+0x395/0x410 [ 249.869021][ T7876] ? __fget_files+0x2a/0x410 [ 249.869036][ T7876] __x64_sys_setsockopt+0x1ee/0x280 [ 249.869051][ T7876] do_syscall_64+0xf3/0x230 [ 249.869062][ T7876] ? clear_bhb_loop+0x35/0x90 [ 249.869076][ T7876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.869087][ T7876] RIP: 0033:0x7f0b5078cd29 [ 249.869097][ T7876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.869104][ T7876] RSP: 002b:00007f0b515fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 249.869115][ T7876] RAX: ffffffffffffffda RBX: 00007f0b509a5fa0 RCX: 00007f0b5078cd29 [ 249.869121][ T7876] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 249.869126][ T7876] RBP: 00007f0b515fd090 R08: 00000000000004e0 R09: 0000000000000000 [ 249.869132][ T7876] R10: 0000000020000500 R11: 0000000000000246 R12: 0000000000000001 [ 249.869138][ T7876] R13: 0000000000000000 R14: 00007f0b509a5fa0 R15: 00007ffe74a85738 [ 249.869152][ T7876] [ 249.869534][ T30] Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 250.149233][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.168022][ T30] task:syz.3.27 state:D stack:22840 pid:6002 tgid:6001 ppid:5819 flags:0x00004004 [ 250.182103][ T30] Call Trace: [ 250.185156][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 250.185451][ T30] [ 250.200740][ T30] __schedule+0x181a/0x4b90 [ 250.205868][ T30] ? __pfx___schedule+0x10/0x10 [ 250.215081][ T30] ? __pfx_lock_release+0x10/0x10 [ 250.223898][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 250.230558][ T30] ? schedule+0x90/0x320 [ 250.235198][ T30] schedule+0x14b/0x320 [ 250.249946][ T30] bit_wait+0x12/0xd0 [ 250.254240][ T30] __wait_on_bit+0xb0/0x2f0 [ 250.263022][ T30] ? __pfx_bit_wait+0x10/0x10 [ 250.268704][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 250.274424][ T30] ? __pfx_bit_wait+0x10/0x10 [ 250.283343][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 250.290347][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 250.296616][ T30] netfs_unbuffered_write_iter_locked+0x594/0x9f0 [ 250.308090][ T30] netfs_unbuffered_write_iter+0x4e1/0x6a0 [ 250.316121][ T30] do_iter_readv_writev+0x71a/0x9d0 [ 250.326737][ T30] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 250.334780][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 250.344424][ T30] vfs_writev+0x38b/0xbc0 [ 250.365985][ T30] ? __pfx_vfs_writev+0x10/0x10 [ 250.371861][ T30] ? __fget_files+0x2a/0x410 [ 250.376649][ T30] ? __fget_files+0x395/0x410 [ 250.388673][ T30] ? __fget_files+0x2a/0x410 [ 250.394151][ T30] __se_sys_pwritev2+0x196/0x2b0 [ 250.410828][ T30] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 250.421504][ T30] ? do_syscall_64+0x100/0x230 [ 250.426513][ T30] ? __x64_sys_pwritev2+0x21/0xf0 [ 250.434816][ T30] do_syscall_64+0xf3/0x230 [ 250.444093][ T30] ? clear_bhb_loop+0x35/0x90 [ 250.465946][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.473751][ T30] RIP: 0033:0x7f7896d8cd29 [ 250.482961][ T30] RSP: 002b:00007f7897b17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 250.491694][ T30] RAX: ffffffffffffffda RBX: 00007f7896fa5fa0 RCX: 00007f7896d8cd29 [ 250.505268][ T30] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 000000000000000b [ 250.513969][ T30] RBP: 00007f7896e0e2a0 R08: 0000000000000007 R09: 0000000000000004 [ 250.528661][ T30] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 250.541220][ T30] R13: 0000000000000000 R14: 00007f7896fa5fa0 R15: 00007ffeb99d3318 [ 250.551802][ T30] [ 250.555490][ T30] [ 250.555490][ T30] Showing all locks held in the system: [ 250.565895][ T30] 1 lock held by khungtaskd/30: [ 250.573257][ T30] #0: ffffffff8e93a020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 250.604948][ T30] 2 locks held by kworker/u8:7/1150: [ 250.611502][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 250.629871][ T30] #1: ffffc9000419fc60 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 250.708533][ T30] 2 locks held by getty/5578: [ 250.714156][ T30] #0: ffff8880344080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 250.741294][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 250.752478][ T7878] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 250.770252][ T30] 2 locks held by syz.3.27/6002: [ 250.775824][ T30] #0: ffff88807f616420 (sb_writers#13){.+.+}-{0:0}, at: vfs_writev+0x2d6/0xbc0 [ 250.795069][ T30] #1: ffff888061318148 (&sb->s_type->i_mutex_key#21){++++}-{4:4}, at: netfs_start_io_direct+0x1d4/0x210 [ 250.814845][ T30] 1 lock held by syz.0.533/7885: [ 250.820030][ T30] 3 locks held by syz.4.534/7883: [ 250.826753][ T30] #0: ffffffff901c6ad0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 250.856102][ T30] #1: ffffffff8fcb1548 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 250.882350][ T30] #2: ffffffff8e93f4f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 250.903876][ T30] [ 250.906402][ T30] ============================================= [ 250.906402][ T30] [ 250.933295][ T30] NMI backtrace for cpu 0 [ 250.933314][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 250.933333][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 250.933344][ T30] Call Trace: [ 250.933351][ T30] [ 250.933357][ T30] dump_stack_lvl+0x241/0x360 [ 250.933388][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.933412][ T30] ? __pfx__printk+0x10/0x10 [ 250.933445][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 250.933474][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 250.933495][ T30] ? _printk+0xd5/0x120 [ 250.933516][ T30] ? __pfx__printk+0x10/0x10 [ 250.933537][ T30] ? __wake_up_klogd+0xcc/0x110 [ 250.933555][ T30] ? __pfx__printk+0x10/0x10 [ 250.933577][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 250.933598][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 250.933624][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 250.933650][ T30] watchdog+0xff6/0x1040 [ 250.933671][ T30] ? watchdog+0x1ea/0x1040 [ 250.933695][ T30] ? __pfx_watchdog+0x10/0x10 [ 250.933713][ T30] kthread+0x7a9/0x920 [ 250.933732][ T30] ? __pfx_kthread+0x10/0x10 [ 250.933753][ T30] ? __pfx_watchdog+0x10/0x10 [ 250.933772][ T30] ? __pfx_kthread+0x10/0x10 [ 250.933789][ T30] ? __pfx_kthread+0x10/0x10 [ 250.933812][ T30] ? __pfx_kthread+0x10/0x10 [ 250.933829][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.933845][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 250.933862][ T30] ? __pfx_kthread+0x10/0x10 [ 250.933881][ T30] ret_from_fork+0x4b/0x80 [ 250.933896][ T30] ? __pfx_kthread+0x10/0x10 [ 250.933916][ T30] ret_from_fork_asm+0x1a/0x30 [ 250.933943][ T30] [ 250.933950][ T30] Sending NMI from CPU 0 to CPUs 1: [ 251.103675][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 251.105074][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 251.120065][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 251.130213][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 251.140265][ T30] Call Trace: [ 251.143539][ T30] [ 251.146464][ T30] dump_stack_lvl+0x241/0x360 [ 251.151149][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.156345][ T30] ? __pfx__printk+0x10/0x10 [ 251.160937][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 251.166922][ T30] ? vscnprintf+0x5d/0x90 [ 251.171247][ T30] panic+0x349/0x880 [ 251.175141][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 251.181293][ T30] ? __pfx_panic+0x10/0x10 [ 251.185701][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 251.191073][ T30] ? __irq_work_queue_local+0x137/0x410 [ 251.196611][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 251.201978][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 251.208127][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 251.214278][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 251.220430][ T30] watchdog+0x1035/0x1040 [ 251.224753][ T30] ? watchdog+0x1ea/0x1040 [ 251.229165][ T30] ? __pfx_watchdog+0x10/0x10 [ 251.233843][ T30] kthread+0x7a9/0x920 [ 251.237914][ T30] ? __pfx_kthread+0x10/0x10 [ 251.242504][ T30] ? __pfx_watchdog+0x10/0x10 [ 251.247179][ T30] ? __pfx_kthread+0x10/0x10 [ 251.251764][ T30] ? __pfx_kthread+0x10/0x10 [ 251.256358][ T30] ? __pfx_kthread+0x10/0x10 [ 251.260944][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 251.266134][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 251.271328][ T30] ? __pfx_kthread+0x10/0x10 [ 251.275918][ T30] ret_from_fork+0x4b/0x80 [ 251.280325][ T30] ? __pfx_kthread+0x10/0x10 [ 251.284916][ T30] ret_from_fork_asm+0x1a/0x30 [ 251.289682][ T30] [ 251.292944][ T30] Kernel Offset: disabled [ 251.297265][ T30] Rebooting in 86400 seconds..