last executing test programs: 38.42101839s ago: executing program 1 (id=1115): socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x3e}, 0x20) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = dup(r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'lo\x00'}) close(r6) socket$netlink(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="7d0dfc35993a", 'vcan0\x00'}}, 0x1e) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000b5000040"]) 35.99784565s ago: executing program 1 (id=1120): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x1f, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x20000000}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x0, 0x0, @private0, 0x7}}]}, 0x190) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006da911b0d632b4e2e86b7ad015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23}, 0x23) socket$inet6(0xa, 0x1, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000540)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) (async) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x1c8, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in6=@loopback, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x8d, 0x14, {{'rmd160\x00'}, 0x208, 0x0, "e863654b40a7ad42118bc1dd69d07e3b05cf0dbc9a9aac6130f0d060cb0c958c133115ff9cbb79de1007f5583249a62fe4273013ec2c2cca44c3a2d388d9483ca3"}}]}, 0x1c8}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r9], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r10, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x234, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000000) (async, rerun: 32) syz_open_dev$vcsn(0x0, 0x0, 0x80) (async, rerun: 32) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) 35.724347453s ago: executing program 1 (id=1123): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 35.538314994s ago: executing program 1 (id=1125): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x0, &(0x7f0000000180)}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESHEX, @ANYRES8=r1, @ANYRESHEX, @ANYRES16=r0, @ANYRES8, @ANYRES16=r0], 0x48}}, 0x4000880) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x0, 0x50}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000080)=ANY=[@ANYBLOB="736563757269747900000000002200000000000000000000000000000000000002"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) sendmmsg$unix(r5, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="000000007323e99b294dd8d5ed0667bfe1631524ce5e4070ac0210a110a3ae2008d6373bfb44c056"], 0x18}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f00000002c0)=0x8001, 0x4) splice(r4, 0x0, r6, 0x0, 0x39000, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x4}, 0x4) r8 = socket(0x11, 0x800000003, 0x0) unshare(0x20000400) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000100)={0x0, 0x0, 0x98, &(0x7f0000000040)}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0xffff, 0x4) 15.935821035s ago: executing program 0 (id=1188): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004200)=[{{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000780)="986eb209e737be0d2c5688a28ea4544ea0f97a50ba874d2976c78b06ad521a81d9f0c75d1b5530f943a9420c8f5748e897fc122694a93878c5ddf522f9b9be50a087c6123551f08f4d95a51e79010268eb5f66529d0615156f193d8b187e9ea6895562b9f76b8048b41cada441363637dae4985a7aa6ace3e4e7d25674c377e12bcef501f0596c8f278226ff0ec93be02089e32bd390c403dc5af49440ef8672776d8f3ce30247c0207a112cb21de7c11a96e0ff489dcfc0b40f227f37dfb61e01486fc74b2c71026c694e59a6e1491b7296ce4ddbe17ffc2b85b0059263b820", 0xe0}], 0x1, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff}}}], 0x40, 0x4040040}}, {{&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000680)="58bc84aaa87f041a582346470344da73811fbb640d26230726b41e1ed21415bbdaa36c64b7b711d86fa77788fcb765b62d4fd443420922d75efe3c1399fb", 0x3e}, {&(0x7f0000000900)="6f5f0e89feebd7a0e27953c6279697de3fe643b397a801f144797131fb3736319dac12b4b04deea8b9cceb4d764746462e800cc44148c2f50e2def246557192aba153fd659cc832bb10c0a59111928ab77477d6b951b8d10c9163d609514c82890f50a9d655b34ae6588e76263b5e3b6c864d9e1648a5602b51cd062eab7e604890c82d7ee47ea5eaee1eca20ad9", 0x8e}, {&(0x7f0000000a40)="b755c265ee1ddf7c10dbafa4ad56521386c10b5610c2b626fd0cfec2b86c9d7192bc2bcbe45a427158742a120a89513c35d1d1cca073496b9239cc5f1250b520488b58fa9a85f449eaa3625875d3b62b61c8f3656f0c9f23c744b27c4d8e80b8998f5e71766179f66d89bd4da8f503c2f5f2bd440b8bc2be648fb19f108aaca8aceb27089c9160f644334b31a8de4cfaed8a85e9cedfdbd5dcd3ecd7a81a1a186f038777272f1977afcedca6e3d76ec954801a8d7c28e37ff158c3b5295af584aeaa80c5", 0xc4}, {&(0x7f0000000b40)="994048ed5c58d94926897430887cdca8a6a91685fe65d57d37b375417c1c7935f7d54f338fd5b7502017be7fc2ada5c898846aab4369b4128a3912143aa668e86b1358ba092aea8a1e9b8b7b20b61ed4221e25a5aa4728714be602d1a50085badfa41473dba740753a111ce4fb82d4ea5356956966d79cee9a2c420619cb4cf49c77aec439b7b4a75c551ed5653fd10ca17ab77a996a67a1e4998f2513ed902a0584012d910fac0bcc43d9f3d71c7907e43948d539728da332051d3fe2ec7da3abd03d54d8de68463152556a2b23f4b5a73d487825a529fe075efbb1a9f1f494f9f3afe8019283bd867d27ba984f97d691ffab85425c1126420d", 0xfa}, {&(0x7f0000000700)="64db2720938b5337f1b7ca549338a86b9c812074ed077083f337192f6a3c0cd8896e202218db12bc3596722a4a67258f6ac43302e322c67ad51be5d1", 0x3c}, {&(0x7f0000000c40)="c885a2b4f687a8cf035c936e28ca106be0bed219f5756c6ad332d662d29b062096adc7e7ea5f70bbba7370b8675683682cd9afeb42c7077828bf5e09da14f3806e5184890723b97f214cdc25fb1c03314e032afbd5881ab99ee73b795fb11784c4821e4e1d7c295b28f0bc7b28a5a4e536d6a3b7271183c3e68505cd07896ea5d8325eea6058635bdfc2c3c9d803d6e9e05636e935e59c9d672993898ebcaa5085b1173e9f4aa0a1edf95b555fd0516021b690175b3da62c3690133b5616db9831fac98e441abdf92d3760d41c34cbdc95c8279a8caf442b63c29d5f763fba4145fdfd7765a838381962403106b9f026dab86543fdf504b2bad64fafe22dd2", 0xff}], 0x6, &(0x7f0000000ec0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, r1, r0]}}], 0x78, 0x40010}}, {{&(0x7f0000000f40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000fc0)="937d6451d77054256237e33fbbf970e7ae279e87b4a4a404559deb4e1b4b8acc0420a4e7553176d36abdf5fa0872292d53c7af1cdc1ba702da357a6f589d94be7a587436ab330e4a33a49109a2c448a225a0321f218f59903ca516abc5a0fd7078351f5b6cf0db3f731be5a0d279278a1f8237bb5b118345f0ca72327b76f6f88d4a5c0e125f590c963258671ab152e2", 0x90}, {&(0x7f0000001080)="062e4ec218bfa95048409672b9e961cd5f3e9b43d3a045c3455250bf4b33112527a977ef76128f7736b129f381958e129c2d3a6e6bccb569657c53f3de6001cc6cba49eabb5adaeb6d562156deb69dfe00200ef45282bc7d26e5629184c22d2828181f3d0fcf27a6ca3898171ca2251c4d9c34b4d8d7d17ad33cec6c4749a0", 0x7f}], 0x2, &(0x7f00000011c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8, 0x419d}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000012c0)="c1f559540631decc771ba630d20899e3cd91c3feee284aed8ea0a5733e01599821f5f4a0f87df385c453dfc3febc6b4a91001c681db141514a5df315414fa91e4750e46c7bbdae395ed434ccfb80254fe953a3d1ef7192280020770f133fc4f283b5fb33c9da424f2999b293cf70f199f806cbd67d362d045496e10216f4c84e2a6865ed02bc2cbd12e5c40495a9bb655f00c2e77ae48a3c5c13ce25475f", 0x9e}, {&(0x7f0000001380)="d892463c0025d9be1c0c8f7a4687ad1f40007b235a50c52f227e1bbb833de01ce9951a415589e1b5c219dbfdf2dfa57633a9421d235395125e05baa658eea7d9d9f44ea110f2c390695974f46c3ebebcf55f2bd931e5442e8d7c0b5515eef08871f799497cc21ae68bb0e2f057276e3109db7c2b6ff733f72b90e18b4b5f5e03624c60c8f0479358a4a68cdf1451e817e3e8238bd287cd4bdbec1e62825d610d7d38e8122e4a426799f24f0629c277", 0xaf}, {&(0x7f0000001440)="a35bafc9bd007e5e9daaf0270f765bd29459738825155366463aba4e6802d5fe818e0f27025d47d4b966326e60924aab74d06ad0307e65bf370e539cef673a0fe26d8b7789ecaf2c79bcbd02bc3dfc0363bc383777c6713ca90a18a866c7122d0a777aa1c6ed4e4c15b0843d259a413433076e6a544230546c8a", 0x7a}, {&(0x7f00000014c0)="303352aaa8fec5fabe8dff65f8852aeb78dae49ecb08175aa3dfa68d68088b7eed4742ea51deceecc34cd3c36570472a6312469183bb5e55fa5c57", 0x3b}, {&(0x7f0000001500)="82e78b8a1f6a086b0201fc4d89acbf7fb57f5ebfbffcfe954d4058130ace7fe2cdaaf8edba0391cf25929859ada02e5aa881462ed61a7dc8cc44ebf874e8a2e1288e4ba4c04d4c1dc2bdf8464f09cfeaf7543bdda0a2ed493d696274bd60f743121d0317534f88de38db05d85123b2854c4f846bf2afc3df5985f573882362857abe45fec5682309c9a4654a60405d5e3cef92382a8175958b9701fcc26b3eaf41b8b870c5dda50b62d1295941ad9aa311af319d8f63377ccf38a8f06441ddffaea58b8843f05fc481501846c5fe28ef6dbefe17ad3635e45bd9c9", 0xdb}, {&(0x7f0000001600)="3b2d45027ebf17e4c3a5c63467325aed151527cc7e686b9c3b170ef16adf075701458d30c07e549b1b6571206fd65a4a6ff952b591cda842bd9e7e6007b7f4e19b66588e73ad60cfeec126b69acc08770c3e9fc30923c6ebe9d5feb30ea4", 0x5e}, {&(0x7f0000001680)="1ee21a78e07752dc97ae57f4cde8cb101012326ac8d030458015ee4ddad19a692eee5aa19ba690ea81a2e10fee53d1b2df5bf60626a226d7552913c7233ad4801392c988fd90870634db429824bdcb8afb77ca78616c17b4c55bde21667f666a20d61ca10ddc86303e528c165f9a6d5c65beb8138a051f512e3077248fa07b68e90b14842f1f1d725f7f2c7f7ca9", 0x8e}, {&(0x7f0000001740)="6040f037fd135b30f5ffb5d87ed451c4dfd5f90dfa1ac2ac6e4889f55d911c3eea83ff8222d31dfb1c8ca5a4dc6405be7beedeac72e217dddefc3fb7f5b8dc3e6b2871f4b15b0a86b9b350", 0x4b}], 0x8, &(0x7f0000001840)=[@rights={{0x10}}], 0x10, 0xd4}}, {{&(0x7f0000001880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003980)="e3c19327148d727a4addb8986114a3df0814f60b1497eedcd6a8a6e6e4dc5fb4a61b1e4e40a5bb3fc289dae16602a700bc57d87a4f86fd7d59ac73d6bd651e20a7f5b648fc6a19bcc6baf22ed30c598356dded40d1eab72ce59bcf6ddbdd714dbe8084ab2cd9b6db931fc7f99fbfdba28c18dd31dad2dd134b3385ee72e3b3094e1acc0e2dc90cb9dba9dc6ab1ed88de9dec0e22640f50098c1fc8583abf0ffc0f574805791a34d9eb97291f9441396d397a44ad8b749316162a637c6c8612dbecb5ab978495f0c1a6994a787d87ac", 0xcf}, {&(0x7f0000003a80)="48efe3bebfca461596a41038446b0a1f9caf2767b78cb9a0bb18008aafe375fecfb5b282495366f8f4e41f8b44ee47d2a6178ecad1aad4054fb79ce207f0d41b2f649f89900b0332c4b46bf04e64bd7d6565293e65ce4d61a4b5116fad00c34eae9a6a50760672cadad54f3fab24fece8ce36c99c61696100aa83064898872e13e7c3a446699ebfa0bc139825bcaa276c545204047c70a126de0c50e084b4d46c45e7a46e5dda3ffef69e2aa1901565e7dc40acd4e295e2ad5241d", 0xbb}], 0x2, &(0x7f0000003b80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}], 0xa0, 0x800}}, {{&(0x7f0000003c40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003cc0)="a8507b0abf94970e1459861a4d1eea0a73ea421fded3300f0d0f92c3e9db76a8eee23db72892123f8bc65b7503782718c62535d2f690f71596c05fbff996c9427986fdfb23698b549d8bdd489d7cab6e2231950fda82517d1e5f7b255c2e0930284b95cb74447328f9093209bc4d4527002e7f43ad33147be845dc8d638b231542182624d084557bb9c1ca0e6d6b8219a111dc84044ec4eb9ce15319b8cf6ae730b0263965d347c9c5f952988c55175e2e5e5986190f983ca4ea9df84f2282d8654d9d0abb77cdde9d6180f65c030c86f3b3f99b6fb63080", 0xd8}, {&(0x7f0000003dc0)="f26261066ceb1216f1c15b6617b6faad924d8b36ef01099626280c9c9111f836f24c5e1d54e6c14350457122792f0088e408fb393332afbbd869bb59c88b9a35e5b27ea2f1", 0x45}, {&(0x7f0000003e40)}, {&(0x7f0000003e80)}, {&(0x7f0000000600)="83082c85c4182ab5a1bc8988ea457c02aee5e53f3df7855c461361353d76d01d32f80bf8cc", 0x25}], 0x5, &(0x7f0000003f80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x70, 0x15}}, {{&(0x7f0000004000)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000004180)=[{&(0x7f0000004080)="01275484061e7f5655cc697fbb3d3c9d1662c6c0d42781eb73c56201c308ea304f55aff4d92da90c054c444f89a0f82458060a078041447bf43a95f9f7ec0b195af3592ce1468bf7608127c241843f30a4944572ccb61076763fa97a999114c8e95af94b75dbd1ff09145112c28ec75b07508f6018a8d12577ee21cd56f1a6b3784ff6db07a86425bb6902aa96e8a3e8237887cdd8f7851d085d8086fe40514700292d12bb319e292ecac723be4c2612fed7df2b47d1580ed07a20bd683bb63326b02b7377b6638dad76935a70b7fef0f6b174259e71d0463ac136d35b0ea9aa22566020dfd14f237558117188860498092b83eac01a6c", 0xf7}], 0x1, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x18, 0xc0}}], 0x7, 0x0) 15.541440121s ago: executing program 0 (id=1190): bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003080)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r3, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x15) r4 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003a40)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a77828403a092626b40d000000010902120001000000000904"], 0x0) 13.744153479s ago: executing program 3 (id=1192): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000000)='./control\x00', 0x0) unlink(0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000040)='./control\x00') r0 = io_uring_setup(0x7c91, &(0x7f0000000640)={0x0, 0x70c0, 0x2, 0x0, 0x20001fe}) r1 = io_uring_setup(0x10f6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffff7fc, 0x100001}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000000)=[0x80000000], 0x2) syz_emit_ethernet(0x6e, &(0x7f0000000540)={@random='\x00b\a\x00', @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x38, 0x3a, 0x0, @empty, @loopback, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x33, 0x0, 0x49, 0x1, 0x0, 0x14, 0x65}]}}}}}}}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x89, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002090000082505a1a4400001020301090277000101fe4005090400cc020206009507240600005ab4052400d0320d240f01040000000000ff0f8005241501001524120a00a317a88b045e4f01a6efbfffcb7e392a07240a068000040424020f052415040007241402100600090581030800180f020905820240000910f8090503020002020503"], &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x8, 0x8, 0x3, 0xff, 0x57}, 0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="050f2c00021c100af8440000000f00070030c000003f3f000006bd0e6a00eaff000b1001024a000780059803"], 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc8299cbd2cc077f7}}, {0x89, &(0x7f0000000200)=ANY=[@ANYBLOB="89033043f662c0071e436d6112a25f4a0955eb6d52f9cfbd2387e49eaa5ffd45e1fe3ee174a7c278453bdf8f19b91b0e73c867f951fb4bad8d0c7229bd0348e0ac42cd22a66aab1e7be9204eebe1ea8f0a7908c89ad56db115a83d7e40d594938575011b6f5e6b540fd5a711400753cef1fe834bb8865a1584f858167dbdfa"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000300)=@lang_id={0xffc3, 0x3, 0x2801}}, {0xd1, &(0x7f00000003c0)=@string={0xd1, 0x3, "ca2df765a26a10d7ef9d7add429759e9181c2b43667f332408a7700fecc0ef5d868fd0492de1f504190f92ef1e8c4d03c76352ed789c5765508f980894869829d286384c5306ad323697b939e68df8e5589b5c72b7eff28e7461ef9e28b84e2cd53dd2fdc98de9433378f0b5d45ce2efc25b1f992cccad49614be4d7ca962e0f3270d31a1a81866500209474785ca8393dc51e171176987d5bee93d61685949c476454bbaf580d84ba08153fa930707fb15bf518dc2fe8d56cceb5c29870a5e12a4b6cf55b220b508a8018008f3369"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42d}}]}) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000240)=ANY=[], 0x0}, 0x90) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x1, 0x8b}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000280)={0x0, 0x1, 0x8, 0x3}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "84fd025abfd2a46750d23c738ae3dc0c0c9b6d51b04ca1d812e9b5aea4d2e68f0b9b88c63bb0c83892d9824fa5b510bbd2fc897f2963416a306ae451a2196867"}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000003c0)={r5}, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000000)={0x0, 0x0, 0x20, "434b32386b7cde2e3b558cc1dc255088cfb78615c5e2d2200c54fb3a762a7b2f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_setup(0x1e97, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x22, 0x0, 0x180, 0x0, r0}) 12.355022912s ago: executing program 0 (id=1194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x0, 0x5, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@private=0xa010102, @rand_addr, @multicast1]}, @rr={0x7, 0xf, 0x0, [@remote, @private, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) 11.084921225s ago: executing program 0 (id=1197): socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c80010000c000100030508000000000004fc000061b71808419bd7b9166299d65da957dfa518f797dc651316c182f93a2563ffb1ad684c557aef73142c3508ae9b84dfc88ea0bfcdc86d86eec53f9fdb9a001165a5b4c540d8e9862867f80f14551240c05a"], 0x15) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRES32], 0x9) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/81, 0x51}, {&(0x7f00000000c0)=""/231, 0xe7}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f0000000280)=""/25, 0x19}], 0x4, 0x337070cc, 0x9) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1}}}, 0x4) r2 = socket(0xa, 0x6, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040), 0xfffffffffffffec4) listen(0xffffffffffffffff, 0x0) accept$inet6(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000003980)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYBLOB="48dea86016a25371ae9c8c909c670f0c5f389ba0d252d67aa2b7359ad998dcf0806e4f7a934093097e76890de3c8bc5eb99c6ec9d5214e3244d1bb61fcb54d96f9cb5b453d3f9efbae8fa294a77b75c475732c95a1cfb9837a8101a439cdb6e050cb9c219683117692832e2371cc734e0e00978980cbdf2abf820831185527324421160c683a18baccf141ceb9ce67548a61e060885e5b3b3167e886f445b85a8043d8654edef095402a64cf57ab0810ea89b43fcc1243401020978510cde3b51aae2236e6f3a4e14a6375c57dff573a48f8f3ca74cd3fa41f2608248664ecef8f12817b80073883", @ANYRES16=r1], 0x1b8}, 0x1, 0x0, 0x0, 0x4404}, 0x4040014) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xb, 0x9, 0xb, 0x61, r1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x3}, 0x48) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) dup(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="680000002a00090000000000000000000400002c5300118006b6650e636e6c7ec587268d144b9e2b8a77284b85e22334c3e7dc8c4e50a66fdc69ec23cc244e9c7fa18742eab743027c2b0269152f038033a7725526362062ce174f160f6fb82027a031c2a97c7900"], 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) 10.76138922s ago: executing program 4 (id=1199): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000004200)=[{{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000780)="986eb209e737be0d2c5688a28ea4544ea0f97a50ba874d2976c78b06ad521a81d9f0c75d1b5530f943a9420c8f5748e897fc122694a93878c5ddf522f9b9be50a087c6123551f08f4d95a51e79010268eb5f66529d0615156f193d8b187e9ea6895562b9f76b8048b41cada441363637dae4985a7aa6ace3e4e7d25674c377e12bcef501f0596c8f278226ff0ec93be02089e32bd390c403dc5af49440ef8672776d8f3ce30247c0207a112cb21de7c11a96e0ff489dcfc0b40f227f37dfb61e01486fc74b2c71026c694e59a6e1491b7296ce4ddbe17ffc2b85b0059263b820", 0xe0}], 0x1, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff}}}], 0x40, 0x4040040}}, {{&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000680)="58bc84aaa87f041a582346470344da73811fbb640d26230726b41e1ed21415bbdaa36c64b7b711d86fa77788fcb765b62d4fd443420922d75efe3c1399fb", 0x3e}, {&(0x7f0000000900)="6f5f0e89feebd7a0e27953c6279697de3fe643b397a801f144797131fb3736319dac12b4b04deea8b9cceb4d764746462e800cc44148c2f50e2def246557192aba153fd659cc832bb10c0a59111928ab77477d6b951b8d10c9163d609514c82890f50a9d655b34ae6588e76263b5e3b6c864d9e1648a5602b51cd062eab7e604890c82d7ee47ea5eaee1eca20ad9", 0x8e}, {&(0x7f0000000a40)="b755c265ee1ddf7c10dbafa4ad56521386c10b5610c2b626fd0cfec2b86c9d7192bc2bcbe45a427158742a120a89513c35d1d1cca073496b9239cc5f1250b520488b58fa9a85f449eaa3625875d3b62b61c8f3656f0c9f23c744b27c4d8e80b8998f5e71766179f66d89bd4da8f503c2f5f2bd440b8bc2be648fb19f108aaca8aceb27089c9160f644334b31a8de4cfaed8a85e9cedfdbd5dcd3ecd7a81a1a186f038777272f1977afcedca6e3d76ec954801a8d7c28e37ff158c3b5295af584aeaa80c5", 0xc4}, {&(0x7f0000000b40)="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", 0xfa}, {&(0x7f0000000700)="64db2720938b5337f1b7ca549338a86b9c812074ed077083f337192f6a3c0cd8896e202218db12bc3596722a4a67258f6ac43302e322c67ad51be5d1", 0x3c}, {&(0x7f0000000c40)="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", 0xff}], 0x6, &(0x7f0000000ec0)=[@rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x30, 0x1, 0x1, [r3, r0, 0xffffffffffffffff, r1, r4, r0, r1, r0]}}], 0x78, 0x40010}}, {{&(0x7f0000000f40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000fc0)="937d6451d77054256237e33fbbf970e7ae279e87b4a4a404559deb4e1b4b8acc0420a4e7553176d36abdf5fa0872292d53c7af1cdc1ba702da357a6f589d94be7a587436ab330e4a33a49109a2c448a225a0321f218f59903ca516abc5a0fd7078351f5b6cf0db3f731be5a0d279278a1f8237bb5b118345f0ca72327b76f6f88d4a5c0e125f590c963258671ab152e2", 0x90}, {&(0x7f0000001080)="062e4ec218bfa95048409672b9e961cd5f3e9b43d3a045c3455250bf4b33112527a977ef76128f7736b129f381958e129c2d3a6e6bccb569657c53f3de6001cc6cba49eabb5adaeb6d562156deb69dfe00200ef45282bc7d26e5629184c22d2828181f3d0fcf27a6ca3898171ca2251c4d9c34b4d8d7d17ad33cec6c4749a0", 0x7f}], 0x2, &(0x7f00000011c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x28, 0x1, 0x1, [r4, r4, r4, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8, 0x419d}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000012c0)="c1f559540631decc771ba630d20899e3cd91c3feee284aed8ea0a5733e01599821f5f4a0f87df385c453dfc3febc6b4a91001c681db141514a5df315414fa91e4750e46c7bbdae395ed434ccfb80254fe953a3d1ef7192280020770f133fc4f283b5fb33c9da424f2999b293cf70f199f806cbd67d362d045496e10216f4c84e2a6865ed02bc2cbd12e5c40495a9bb655f00c2e77ae48a3c5c13ce25475f", 0x9e}, {&(0x7f0000001380)="d892463c0025d9be1c0c8f7a4687ad1f40007b235a50c52f227e1bbb833de01ce9951a415589e1b5c219dbfdf2dfa57633a9421d235395125e05baa658eea7d9d9f44ea110f2c390695974f46c3ebebcf55f2bd931e5442e8d7c0b5515eef08871f799497cc21ae68bb0e2f057276e3109db7c2b6ff733f72b90e18b4b5f5e03624c60c8f0479358a4a68cdf1451e817e3e8238bd287cd4bdbec1e62825d610d7d38e8122e4a426799f24f0629c277", 0xaf}, {&(0x7f0000001440)="a35bafc9bd007e5e9daaf0270f765bd29459738825155366463aba4e6802d5fe818e0f27025d47d4b966326e60924aab74d06ad0307e65bf370e539cef673a0fe26d8b7789ecaf2c79bcbd02bc3dfc0363bc383777c6713ca90a18a866c7122d0a777aa1c6ed4e4c15b0843d259a413433076e6a544230546c8a", 0x7a}, {&(0x7f00000014c0)="303352aaa8fec5fabe8dff65f8852aeb78dae49ecb08175aa3dfa68d68088b7eed4742ea51deceecc34cd3c36570472a6312469183bb5e55fa5c57", 0x3b}, {&(0x7f0000001500)="82e78b8a1f6a086b0201fc4d89acbf7fb57f5ebfbffcfe954d4058130ace7fe2cdaaf8edba0391cf25929859ada02e5aa881462ed61a7dc8cc44ebf874e8a2e1288e4ba4c04d4c1dc2bdf8464f09cfeaf7543bdda0a2ed493d696274bd60f743121d0317534f88de38db05d85123b2854c4f846bf2afc3df5985f573882362857abe45fec5682309c9a4654a60405d5e3cef92382a8175958b9701fcc26b3eaf41b8b870c5dda50b62d1295941ad9aa311af319d8f63377ccf38a8f06441ddffaea58b8843f05fc481501846c5fe28ef6dbefe17ad3635e45bd9c9", 0xdb}, {&(0x7f0000001600)="3b2d45027ebf17e4c3a5c63467325aed151527cc7e686b9c3b170ef16adf075701458d30c07e549b1b6571206fd65a4a6ff952b591cda842bd9e7e6007b7f4e19b66588e73ad60cfeec126b69acc08770c3e9fc30923c6ebe9d5feb30ea4", 0x5e}, {&(0x7f0000001680)="1ee21a78e07752dc97ae57f4cde8cb101012326ac8d030458015ee4ddad19a692eee5aa19ba690ea81a2e10fee53d1b2df5bf60626a226d7552913c7233ad4801392c988fd90870634db429824bdcb8afb77ca78616c17b4c55bde21667f666a20d61ca10ddc86303e528c165f9a6d5c65beb8138a051f512e3077248fa07b68e90b14842f1f1d725f7f2c7f7ca9", 0x8e}, {&(0x7f0000001740)="6040f037fd135b30f5ffb5d87ed451c4dfd5f90dfa1ac2ac6e4889f55d911c3eea83ff8222d31dfb1c8ca5a4dc6405be7beedeac72e217dddefc3fb7f5b8dc3e6b2871f4b15b0a86b9b350", 0x4b}], 0x8, &(0x7f0000001840)=[@rights={{0x10}}], 0x10, 0xd4}}, {{&(0x7f0000001880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003980)="e3c19327148d727a4addb8986114a3df0814f60b1497eedcd6a8a6e6e4dc5fb4a61b1e4e40a5bb3fc289dae16602a700bc57d87a4f86fd7d59ac73d6bd651e20a7f5b648fc6a19bcc6baf22ed30c598356dded40d1eab72ce59bcf6ddbdd714dbe8084ab2cd9b6db931fc7f99fbfdba28c18dd31dad2dd134b3385ee72e3b3094e1acc0e2dc90cb9dba9dc6ab1ed88de9dec0e22640f50098c1fc8583abf0ffc0f574805791a34d9eb97291f9441396d397a44ad8b749316162a637c6c8612dbecb5ab978495f0c1a6994a787d87ac", 0xcf}, {&(0x7f0000003a80)="48efe3bebfca461596a41038446b0a1f9caf2767b78cb9a0bb18008aafe375fecfb5b282495366f8f4e41f8b44ee47d2a6178ecad1aad4054fb79ce207f0d41b2f649f89900b0332c4b46bf04e64bd7d6565293e65ce4d61a4b5116fad00c34eae9a6a50760672cadad54f3fab24fece8ce36c99c61696100aa83064898872e13e7c3a446699ebfa0bc139825bcaa276c545204047c70a126de0c50e084b4d46c45e7a46e5dda3ffef69e2aa1901565e7dc40acd4e295e2ad5241d", 0xbb}], 0x2, &(0x7f0000003b80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}], 0xa0, 0x800}}, {{&(0x7f0000003c40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003cc0)="a8507b0abf94970e1459861a4d1eea0a73ea421fded3300f0d0f92c3e9db76a8eee23db72892123f8bc65b7503782718c62535d2f690f71596c05fbff996c9427986fdfb23698b549d8bdd489d7cab6e2231950fda82517d1e5f7b255c2e0930284b95cb74447328f9093209bc4d4527002e7f43ad33147be845dc8d638b231542182624d084557bb9c1ca0e6d6b8219a111dc84044ec4eb9ce15319b8cf6ae730b0263965d347c9c5f952988c55175e2e5e5986190f983ca4ea9df84f2282d8654d9d0abb77cdde9d6180f65c030c86f3b3f99b6fb63080", 0xd8}, {&(0x7f0000003dc0)="f26261066ceb1216f1c15b6617b6faad924d8b36ef01099626280c9c9111f836f24c5e1d54e6c14350457122792f0088e408fb393332afbbd869bb59c88b9a35e5b27ea2f1", 0x45}, {&(0x7f0000003e40)}, {&(0x7f0000003e80)}, {&(0x7f0000000600)="83082c85c4182ab5a1bc8988ea457c02aee5e53f3df7855c461361353d76d01d32f80bf8cc", 0x25}], 0x5, &(0x7f0000003f80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x70, 0x15}}, {{&(0x7f0000004000)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000004180)=[{&(0x7f0000004080)="01275484061e7f5655cc697fbb3d3c9d1662c6c0d42781eb73c56201c308ea304f55aff4d92da90c054c444f89a0f82458060a078041447bf43a95f9f7ec0b195af3592ce1468bf7608127c241843f30a4944572ccb61076763fa97a999114c8e95af94b75dbd1ff09145112c28ec75b07508f6018a8d12577ee21cd56f1a6b3784ff6db07a86425bb6902aa96e8a3e8237887cdd8f7851d085d8086fe40514700292d12bb319e292ecac723be4c2612fed7df2b47d1580ed07a20bd683bb63326b02b7377b6638dad76935a70b7fef0f6b174259e71d0463ac136d35b0ea9aa22566020dfd14f237558117188860498092b83eac01a6c", 0xf7}], 0x1, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x18, 0xc0}}], 0x7, 0x0) 10.578359683s ago: executing program 4 (id=1200): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty, 0xb4}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.78232599s ago: executing program 4 (id=1201): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000026006bab9a1fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038000a004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb64f69853362ac3407173ec", 0x5b}, {&(0x7f0000000000)="92", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x44001033, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000005cc0)={&(0x7f00000009c0), 0x18, &(0x7f0000000d40)={&(0x7f0000004cc0)="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", 0x6fffff9}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x16, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x58) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 9.188658081s ago: executing program 2 (id=1202): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_targets\x00') lseek(0xffffffffffffffff, 0x80000001, 0x0) sendfile(r0, r1, 0x0, 0x0) 8.974651712s ago: executing program 3 (id=1203): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x14) (fail_nth: 1) 8.660629059s ago: executing program 4 (id=1204): bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003080)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r3, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x15) r4 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000003a40)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a77828403a092626b40d000000010902120001000000000904"], 0x0) 8.319089346s ago: executing program 0 (id=1205): r0 = socket$inet6_sctp(0xa, 0x930d76414dac8097, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x10, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01"]) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f0000000100), 0x840) socket$caif_stream(0x25, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00'}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799de"], 0x398}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') r7 = gettid() sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) tkill(r7, 0x21) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/18, @ANYRES32], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 8.301546816s ago: executing program 2 (id=1206): r0 = socket(0x10, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x7}}) 7.057865943s ago: executing program 3 (id=1207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@private=0xa010102, @rand_addr, @multicast1]}, @rr={0x7, 0xf, 0x0, [@remote, @private, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) 7.055238383s ago: executing program 2 (id=1208): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) rmdir(0x0) syz_emit_vhci(0x0, 0x7) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a2b0c0000000000000000020000000900020073797a32000000000900010073797a30000000002c000480280001800b0001"], 0x80}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) chdir(&(0x7f0000000140)='./bus\x00') mount$tmpfs(0x0, &(0x7f00000006c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 7.045517097s ago: executing program 1 (id=1162): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d4140000000109021200010000400009"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_setup(0x253d, &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = syz_open_dev$radio(0x0, 0x0, 0x2) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e751d7029f063dd8e2d6bf7da997e6509e8"], 0x24) syz_emit_vhci(0x0, 0x102) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r3}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_vhci(&(0x7f00000006c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x11d}, @l2cap_cid_signaling={{0x119}, [@l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x1ff, 0x845}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x3, 0xefe}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x7}}, @l2cap_info_rsp={{0xb, 0x2, 0xff}, {0x40, 0xff, "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"}}]}}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r6, 0x8b2c, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0/../file0\x00'}) 6.561571273s ago: executing program 2 (id=1209): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f00000000c0)="8d", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000080), 0x8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0xe2a2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 6.36442899s ago: executing program 0 (id=1210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'x'}]}], {0x14}}, 0x8c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x8d28, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000e189a87900009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, 0x0, 0x0}, 0x90) syz_open_dev$dri(0x0, 0x0, 0x80000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c, 0x0) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece89c53ebfabe609d7b67f5", 0x23, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x4, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5}}]}, 0x24}}, 0x0) 6.312863581s ago: executing program 3 (id=1211): socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x3) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$HIDIOCGRDESC(r0, 0x90044802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x3b, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x158, r3, 0x400, 0x70bd2d, 0x25dfd9fc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x57}}}}, [@NL80211_ATTR_TESTDATA={0x7b, 0x45, "cb20d08ca8b1e9ba9749fd060e6667ec0e0c09a14896e4372f0892b7c1ba6626f6aa4e962d452008e540a3fc04e58d26fac207ad8b2e34d4ef9bcba31ef65b80c883a67e19832d9511276a6a87305ed483c6b5f910cbf4b5b523d7c8386c030d602744a1867187effdcd6f48d499dae7139e46dedb3aa3"}, @NL80211_ATTR_TESTDATA={0x30, 0x45, "ef97e4bd500da1e3a4d3cbe87ad1a674de573403fd55f82eb15434b8c0c8d4660904ff4fee0bbf57786c5741"}, @NL80211_ATTR_TESTDATA={0x8b, 0x45, "292c9fad365d1f01895016a01c03973c8cf4e635bf6f24f91ddb0b1302a5a12aefee6809073cc88686a1ba1bc04a8bab2380f15b39d265e4113da2319649c05bcbe697b8b50a2113ab8e4e62714fc1b518fe0f296cd83b0715b9025ad940952a52eb5ef9eca1ccdccd9b77a192a4beb822ac4a0b327c57fe9f792eb114aa7b77f7b02dd9011b86"}]}, 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r5, 0x80079a0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r5, 0x0, 0x4) openat$binderfs_ctrl(0xffffff9c, 0x0, 0x800, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 5.340877393s ago: executing program 4 (id=1212): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) listen(r2, 0x3) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2ee9a76aef7ae4476255e8e452164eb5c25a21b96832930ce5da45dafe812abe3ef38759bead4efc1883225293d991833eb1db210538d2a90b3a2e5065a59f0539a4caba5ab7b9296a49661857d02fd4ba5b", 0x52}, {&(0x7f0000000280)="d0e2ce49febeff83a23b79a77fb6293d3daf8341ab30b3f21a8250706b4e678bdb71b5b9c1c0b7f71f5f9827284f2c78e767675d5a4c5f616f06411a45a4245f63aca06c1c2bd77dfefa6d4a3e1b5feb0647e54dcea168178caff8efac748156d2c5", 0x62}, {&(0x7f0000000480)="14f28d0ae0ad84dc1cc3f88e25788863d14861e483765d67244ee960c7a0db0344d59f7f0a3c8a6d7ebb1b1f7e9eb513fdf47133f446cbb50639b1971c6820036b3b4fedf6af9f73c4b20500000036eda7ad137505fb39f6fbb369da2475c56e41ef77106e44259465868b0461f281ad072c2a62252a31e62c41f15df7792900029632cfe31fb2dd9839", 0x8a}], 0x3, &(0x7f000001cf80)=ANY=[@ANYBLOB="10100000000000001001000000000000a4e72d247406e28c1b1b781020a8c9555a5f891eddce32bc690f0cc35e87eab4e5b5f84f7895f46fb3099b37e58bf4a0278831a77f68741ae0a29c29efc50ead061caea6d9abb3986dcfe53669a9cce4c2aaf66a8087405e5567303b108de84a64fbc7bd1e6f4e5cd847c4d0d0b4b09f4136db9e8e2755d148389268937e1f164eab34665478dd4936487cdaf4bf0bd6a3b39560c1b692259bdadf412c9357b01b8f3850ab2c496564b9a44e0071426bf0ea60af7657ca32ae28691025bb610161406f7a030ea0e2acb76dc834125bf4e677f100b08cc03ea2097e55cc19250366b1fe1617bef76f07bb20141d4db1ba42d6f724aba367ca3df4e0749c51f65fcade1905071aef89bfd438e30821bcfe30f6fe7cd937600345844d0b1c06830e2f58e0b3dc1bc2b91627bc5bc0770b0c06788e89d3b646cf90b8416de1f0c523f08c2dd0adb90d3fd43a5956525a0e74c65decdd7b94073387d09fc804b3a88be4454d31e42806f68893a5dfbf513818fe57154a0e8fdb9dc4642336858a75715738553a37b550a5fec11ffad0f1d96c75af1b3ba86ebd816e96ac287b60dc36ad21b290ce0bf4ad8586e126267962f819321ce8499ad8bee7ba8b6a6a0305575e7df4415cfb33e7f5a7b68f89ad1f324ac225f2f16175c431961835680f159fc985f6fc3c3bf93ff9be28fcf3812d22f8d7e4f35de273fda8b9533d7d3d501cf692c3edd34b162c7c1134e3f5d33e9d0cde531f014111eb3c28ae5c58cd90feeea7066cc0ffcbc589d189affe9eb38a3b5abb06de0d02eefb0885b3d5e9770ea3394872a88694df089a722a437f3c86d9c3401ad78f0ef2fcd3fb18be69a5b35cf38261e35d20234fffe0c071ce0802eb6d642aff16e4700595570367aa061dcef6a78ddf02fe8ea65f9c08c17a2a9cfa89e0d5a3abcf30489bea0fbfdf9fdf892356f4e65b072b5154cc15d148459ee1a48c33170e6a4a14b6c2f2b40fc4c7f4e0ef3a5898f7b106ac8a5c1e1aa2468e391c8368b1cd7c1f8810490ea8c36dde7e29796bceabac0dad700df474e6b9535fe5b8b2ce60951ad8ff54904b3248b13128901fa61048d8b64d0754afbfa9410756423a449e7dc554e621599f57d49fde7b58572da124bda3aaf0e26fb4c27675e0a7b7f9803d6ece082655c923a2193b3970d3c4d57d09aa1c1ca20087a4bae49a5df4151050d2d3e80f0f7c3ade0664f2c84834c718cdc634b604397a68d5aa5a6f5c99446165a79c0bfdc6f4dd375bcb204046c1d0fb98c2f1177b72b60d965c807b4426d18f47e8cc7df9879e1b2828598e8fb0eaa36ba1f23d69ce53653d7600d189ed8f8efbf01cd0c879d329e42ed5705b1e05f2deb9968243ec28c21e092afdc93335bb1529e210e6948cfa7fe4735338b857cb3d3e82e13be715391df9b9d1e828501a42b9d6eb6ed0ab94da06f0b3c4a77ce61cfcff26cef2444b7acd19712af8652f9342b77157b41707befc979e357885726d0b75ab07be8a1e62036e4ab9a3665553bce059f285548cfb6cdce3f2f3c0372df7041ad7f6459af1202dcdb638d326c2fd5999e051a39b4da788303f2b3ccde307cc04e2bad7eae5b812ca8a46b255f674910fd1ca78577cb1c7305b650aeb37304c099b7a7f189116d1ff4e48b0cc031d75c601f2815a46dfce2801d805da29ba1310fd360d77de6942311d9da2e67766bab0a60f81b059c0d7e42fa911de8edcb18e9fd07cbf974959d587408e0b8835bdfe2c4a0af6b9c6970900c8c1dc1bb232a38b113186835fb916fe07e99f66284e41c0dac79e5d73eea02def54a26e0fcfa833b36f8c38663907c12ef2909cdfeeb33592b9382b6a08710922a96cdb1e9ed68cfafaa640db7f005002f4a4fb7d558353cb2c689d8c7dd919644f7303c3c9d4ced93ea8ebe0248fb25388db102c4c95650a3ff7cc19b14d74ff108a73ca5108598a92abf18fe2cdcfbcf191b305616b5cb75ab6663d103f6bae0356ffe75700c39340ee372368c1b099d4d9f35e86162c3d93ba5202ea96d4cc525be81fc0764da6ad65f4a3d4e33952abd9c339c98f4adb3c726aa7b277f8356b681b2e6af42b0ee52c0bc91c7128900fb87b99d978827c08d78ab889a097573b26cd794c3870e357a1523941db30d15709c4e82f2b2a292c59afdded48c7e9ab54405865b710143f04145e45778ebc7e50928be0972207dd54bb0ed79426c721d04a336132a05d55d8415668d2a53edebf95be2e856b19f4798ab42eb7b9a7ce32e37d5e906b69044962575e66026a7e922dd9af37a5796d19aedc94e8372e3aa4d70f521a87aa55b9c5e58adc46da2ea4cc2b3ba9bc719151a7892d1845542f5e9c29b0682ae6d6bdbad588c9e2d2045712e0404a8617203b5a14075bb471d001d0f8785d0c72d885db7fd0a0cea8f2145941b9a0c8f141fa0d7dd4130f761f8fe18f3dac4a22c6212a7c713cbdaa8b62ddad3e3cbea36662ddd3f978d6327b46e9c8a374f2019499ee5cb7d8e847233e4342404d2af13d9e81216242b435ac81c3d7f82d6138a00bc3f10e0ae669d023bbfb090bc792c499c5ec4274219f9b0d2c44197f689ec6749d14e45ed5b4d2aa0507318e7cab530e9ed85f689a671afa72c762b9979ca078d943cb2dbfa246355a32bf1e6a320762bd51f78b55570ceda1fc81e2eb1505a680e7e3561729bed683c6c388ad41e28124ce5793fef0460ac26b02c8a3b717d22d268a7e1a3af92adcf1ad0433564e734937aea12d3246071bdbb40e23c4bf0b1c7fa3b9af3c4ce02d1d8ddd674c6aa49e8ccc459fdf3266deaa4a122a5b9d3389ef4ba3cf0107d39542fb9a64a4d82d5f3abcddebc0008b4935ae01d0fe929d854694aa11aa0b6fa470decfb186bce69cd8f28ba43aa20c5e04b98ef4d757324155059b955f0f6fba8c6743089eaa0bb27668064051d2eb5126ef341aacbed063e25d6a04305816a606bc9cfb7075502c27b57bb610db9f235240a271d44ca648dfb4903af170dfe2a1f38de3c4f64f56c78c92166af6878dbfe9cf33aa371cc002c98548d4a79f798194a3e9c86ac0b5577c0a1d38fa0909e5f863e6021924d78da0fdd2ddafdcc9f1f16de19830a1865cde4325e96cdda73b81186d389fb1caa79db10bacc473e0ca135a8791de6ee7b168dae7e9e124f080381587bd06308a2868121fce83ff921a540783bcad44bdb60790f8ff5fa4fc45ab25803a619302e8049eafef18136b89803419f03aecb18da2481ce2abdc671ccdeb42890b98666c78c134974ffb4e17a4817f35d264af16681511b4eef1fff839b166cfc0d58723b325b1cbb4b0998f62add8800e9ca35c5a349d807742de497aae9d900a63ade3009ec2da4f1fe264a06b93ae72cec8aa2269c6e77233b7dbcf54c583cfb94164d272fce68db28297cbb162f743fc090276ea25e3e1d4e39300fd41af3d07d599b651beefe2ff113b73750e3911b7fd37f63a64edd721a42baa880981110ae551899de66c1ec70f675aec4a759a5d02c233f308189a667062acff708d385f55cb077f04a6c064eab308e5566a3f2afee2bc670366d9466a94e3f7be9b8fda6b473522cbf1293c95a94ade7cceaeabcab18a32d1f5f733ef2098a3f9d9fc576c5546528469c2d9f9f5fa3537ac2da92533b118a166fe2ea6992acfdc1c685b54fab9381619878333fa929d553ffc201044009ee6b257fde5479133ac6a1e94e237076cdea9f01bb2bd192c345a77a73b9f6fa4d865e6ae239bf29443ebe0b423cd46b7c8d5562cc01e1ed7f3708f8130a96b12c4cfd2dfd872cbe65d20c7a6df676d7b1a7dfa88da9f2ffc6eb600692f8a146c619a8f065251dde44a5be05997b1c7312bd4cdb9c397b88e4dffd167d171e4a007ddf3ac86f9378d9681925a60cc487bc8b0b713e8050596c8da4eedb7d1d624b8feafca49e316eee86f8e16b89fdf8e45b242a2375c02c590ef3c1536498b5b0c38cfd17717c2b8161c807952686296df9669d8fd027a2035d747e408d42f2e3c658db359310a82f23dddb8d28d46d1e725659049fba0ae8c896125125c8bb13776bd84c9de2012d8b7d2fe0814e3b08effc5c286667bab23e757cf21857f234e8a85583880a85bb640f2dd13b461a33c286135c6c81d72c9155090ca8ce2576cb7c65525f9cf84a7b34516a5e3cf1cde787f6b6f3a1fa3666cbd6a03399b0bfc91bfd9d1554dcd8c781aad4d2f28d746b1b9726af2bc7193bc29a804b91a8e189e07849492ec7d111cb912cca3e4e086958f764352aa9984da7e9c5dd7b66d5fa9849aa6e802474605e123866d2395149bfec005bc592528fa268b4eaed9437c1cd4e6cee2e50b46a1f92167bfe771c72affde38d1030c2eb179833b865c6bae79fcd93aaa02ebad6d379db00f5334d5fcca7866621761ec3168db9a8ef54937c06bd0252cf35f491b63cc6d477f56a361b2532e14bd9ce186639daf9346b4a58632b4e21e097484203ec32568d7048c11637f4d33b5df08e4ea1711c4cd02093a5708cef098f98e3270a48b84c5f971f33bfa50b79725c3a3d3555ba682b6cf367565b2006dcc0d85009fa10aa67ab4edad7296eb828227041f564dbcd3013d2d5fdc0e5d87ff5c74714d754a71e3636ecbc8a2b36adfeda19ee9bb37b6a9b0597567e80e3808ba4c815d03cb53d0eb5a315f39d6e570fd476f10ae9bda842fa4a25012e3a1a3800853be3d16df051749d6987d8670320b1709cb934c60ee4ebbd786d8705e998ec10bda4f8301241b658de4de4041cac5fb5aee6f86340c3285c7145c7d5100d07b48207a791d3afc7963a22c27f1834e86319a16f8a28b8f7233296af0cdd4b861ffb6061229254a0f5e30b75d3e3f4ccc0447975597136a1ac4bdb158b6a81de59cbca55895b4286fcba0036e9e2483f05782011635fd6f2e7805d971c96fdd96a2dc693e5611b594f8fccb2dab91b365"], 0x1268}}, {{&(0x7f0000000540)=@nfc_llcp={0x27, 0x0, 0x1, 0x5, 0x7f, 0xa4, "23539a82c14d0c8dbbc773375b133db3c2275c995df57f85f84c3082ec579d637afbaad813fe9699da8cddae8d39cd83030fd46dd575af2cd273651afce648", 0x3f}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000380)="1749134a59ef3918d23382358d657a535dcfd6c94131b75a35b53da1b76506bbcae73396f36ecc7f27568bc3d3fc0502362e7655f69174c0dedfb7", 0x3b}, {&(0x7f0000000400)}, {&(0x7f00000005c0)}, {&(0x7f00000007c0)="9c28fbeaa1c0b3b708dcc10c1f74fa48e35f0468a8bcee211feaaf8415a19fb88c760b1ac0f1541ce5df9befbcee053e7debbb59510ba9267546bb1ad367f4b5faf31ca7513127af36985f861edeec338c9842ee22adabf11940d6fa900c755ed27feb5b968ba4ad5f38428398258b3dec23386b14eefe0f402fc55b3facbfd9294c69ebace9147441b4d69c8da007e1396d0cef934940c23d620babe4755be479d5867d6331af8363caf886f8edf79e640abd914985ac35", 0xb8}, {&(0x7f0000000600)="93d1a891b7034bdb05916e778e3b0172f9f103b2cff403c0ac0f863e04fbff7cde15d8540db8ab9a5d2ec1d63c24e5a5dbf2179853c9c891ac694c50bb35ac", 0x3f}, {&(0x7f00000006c0)="24b10b15b92fa1b72f6c48f1b5f95a0fd1eb2171ffaa4c04cfd4cc", 0x1b}], 0x6, &(0x7f000001aa80)=[{0xf10, 0x0, 0x80000000, "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"}, {0xc8, 0x6, 0x7, "cbba50936fe3e910c2db45137feb968f8491070173f91c871cf097fee30253e2ee43f63a75adc25a47d695a464b73df32a42dbaa2f82fbe2e5a7de94daba9da211e86e48819e21262c85c03e204cf82e6fb636d1a1f775ad60e201e655b75780e6ce34e55bb1c8f04015ee0807b98a12a75b5e3578c67529cef028bbdcc834c34621447aa66804eebedbaebb4621a61ab9191dce154266db4760abe1001316a2bfd7948238991c966d2ac90e3ee7fed10d1ff2e3"}, {0x60, 0x114, 0x4, "c669ee3b9a0b09b4d757049414229371902f9cd390042455a8e8b84600e03274ef00781106b459baf6531c4621317fefa4f75205ca5df809a8b642543d79506c881817c75518c270927a736b"}, {0x18, 0x101, 0xfc000000, "4bef7f4753d8"}, {0xf0, 0x108, 0x81, "552ca5f7eaed3c36b4560c1fc8a6a842d5b1c0073c3170a45e96bbdc1e5e42bb7b69e1a00cc7be775181b6f5ddeb52c30af5e55a3c26ad6d5ab480742d2d842e9cfa9289ee652b8a5bb288eea4b59de1018d14a46646320e18361687925bccd44c96501a8ea4f598ee3138d80bbcbe734317d84f6481a6f49ce8638964477900e4f8cfa9461e9480d78c523bfb68e33067fc4783dabcc066c00d1f6dce1aa38820564ed035d8c91585b2e0cf8429947dfccdbaf09059c94dd56696e5a1fb430cdc29cb21b48e6fbe5fc25542f01fa5bca3a2d611942c3e1b5e"}], 0x1140}}], 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64]) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000180), 0x4) syz_emit_ethernet(0x31, &(0x7f00000003c0)={@local, @random='\x00 \x00\x00\x00\b', @void, {@arp={0x806, @generic={0x18, 0x892f, 0x6, 0x5, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, "59a68deada", @broadcast, "eccf242df093f76afba0"}}}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c855, &(0x7f0000b63fe4)={0xa, 0x4e21, 0x80000000, @mcast1, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioperm(0x0, 0x23d, 0xe) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000740)={'wg2\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)=@dellinkprop={0x38, 0x6d, 0x103, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'wg2\x00'}]}]}, 0x38}}, 0x0) shutdown(r0, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) 5.208522639s ago: executing program 2 (id=1213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000026006bab9a1fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038000a004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb64f69853362ac3407173ec", 0x5b}, {&(0x7f0000000000)="92", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x44001033, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000005cc0)={&(0x7f00000009c0), 0x18, &(0x7f0000000d40)={&(0x7f0000004cc0)="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", 0x6fffff9}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x16, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x58) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 5.179906419s ago: executing program 3 (id=1214): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x0, &(0x7f0000000180)}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESHEX, @ANYRES8=r1, @ANYRESHEX, @ANYRES16=r0, @ANYRES8, @ANYRES16=r0], 0x48}}, 0x4000880) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x0, 0x50}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000080)=ANY=[@ANYBLOB="736563757269747900000000002200000000000000000000000000000000000002"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) sendmmsg$unix(r5, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="000000007323e99b294dd8d5ed0667bfe1631524ce5e4070ac0210a110a3ae2008d6373bfb44c056"], 0x18}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f00000002c0)=0x8001, 0x4) splice(r4, 0x0, r6, 0x0, 0x39000, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x4}, 0x4) r8 = socket(0x11, 0x800000003, 0x0) unshare(0x20000400) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000100)={0x0, 0x0, 0x98, &(0x7f0000000040)}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0xffff, 0x4) 297.704501ms ago: executing program 4 (id=1215): socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x3e}, 0x20) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = dup(r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="7d0dfc35993a", 'vcan0\x00'}}, 0x1e) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000b5000040"]) 221.493184ms ago: executing program 2 (id=1216): socket$inet6(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="8d", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000080)={r6}, 0x8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0xe2a2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 220.412657ms ago: executing program 1 (id=1217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x159f4000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "26000000001000"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000004c00), 0x0, 0x0) 0s ago: executing program 3 (id=1218): socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="7d0dfc35993a", 'vcan0\x00'}}, 0x1e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.0.822'. [ 338.339995][ T8431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.424811][ T8431] netlink: 160 bytes leftover after parsing attributes in process `syz.0.822'. [ 338.452644][ T8431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.562875][ T5098] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 338.567412][ T8436] fuse: Bad value for 'fd' [ 338.571018][ T5164] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 338.741076][ T5164] usb 4-1: device descriptor read/64, error -71 [ 338.876973][ T5164] usb usb4-port1: attempt power cycle [ 339.332800][ T5164] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 339.425193][ T5164] usb 4-1: device descriptor read/8, error -71 [ 339.576432][ T5133] usb 2-1: USB disconnect, device number 13 [ 339.695267][ T5098] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 339.748512][ T5164] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 339.795495][ T5164] usb 4-1: device descriptor read/8, error -71 [ 339.796488][ T8449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.828'. [ 339.949279][ T5164] usb usb4-port1: unable to enumerate USB device [ 339.989338][ T8450] netlink: 64 bytes leftover after parsing attributes in process `syz.1.827'. [ 340.353105][ T8457] netlink: 'syz.2.829': attribute type 4 has an invalid length. [ 343.120504][ T5098] Bluetooth: hci5: ACL packet for unknown connection handle 1 [ 343.511288][ T8479] fuse: Bad value for 'fd' [ 344.196646][ T5131] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 344.296450][ T5135] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 344.419943][ T5131] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 344.444121][ T5131] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 344.472108][ T5131] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.499227][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 344.512625][ T5135] usb 2-1: no configurations [ 344.518283][ T5131] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 344.529731][ T5135] usb 2-1: can't read configurations, error -22 [ 344.547946][ T5131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 344.572639][ T5131] usb 5-1: SerialNumber: syz [ 344.592208][ T5131] usb 5-1: config 0 descriptor?? [ 344.606530][ T8480] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 344.620540][ T5131] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 344.716457][ T5135] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 344.956484][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 344.969184][ T5135] usb 2-1: no configurations [ 345.004945][ T5135] usb 2-1: can't read configurations, error -22 [ 345.113563][ T8502] netlink: 'syz.0.843': attribute type 4 has an invalid length. [ 345.114185][ T5135] usb usb2-port1: attempt power cycle [ 345.183567][ T1058] usb 5-1: USB disconnect, device number 20 [ 345.553070][ T8502] syz.0.843 (8502) used greatest stack depth: 19168 bytes left [ 345.572005][ T5135] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 345.657205][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 345.675509][ T5135] usb 2-1: no configurations [ 345.685390][ T5135] usb 2-1: can't read configurations, error -22 [ 345.848937][ T8516] netlink: 64 bytes leftover after parsing attributes in process `syz.0.845'. [ 345.856432][ T5135] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 345.917282][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 345.929695][ T5135] usb 2-1: no configurations [ 345.936598][ T5135] usb 2-1: can't read configurations, error -22 [ 345.963062][ T5135] usb usb2-port1: unable to enumerate USB device [ 345.981102][ T8518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.846'. [ 346.053068][ T5098] Bluetooth: hci5: command 0x0406 tx timeout [ 346.393389][ T8526] fuse: Bad value for 'fd' [ 347.865855][ T8535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.242645][ T8535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.284262][ T8535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.853'. [ 348.328615][ T8535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.430920][ T8535] netlink: 160 bytes leftover after parsing attributes in process `syz.1.853'. [ 348.483279][ T8535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.546732][ T5133] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 348.772083][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.803772][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.823043][ T5133] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 348.856379][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.890520][ T5133] usb 4-1: config 0 descriptor?? [ 349.736404][ T5135] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 350.610814][ T8558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.859'. [ 350.719133][ T5135] usb 5-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 350.743244][ T5135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.790441][ T5135] usb 5-1: config 0 descriptor?? [ 350.818874][ T5135] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 350.853454][ T5133] usbhid 4-1:0.0: can't add hid device: -71 [ 350.868244][ T5133] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 350.912229][ T5133] usb 4-1: USB disconnect, device number 29 [ 351.015921][ T8565] fuse: Bad value for 'fd' [ 351.034310][ T5098] Bluetooth: hci5: ACL packet for unknown connection handle 1 [ 351.624904][ T5135] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 351.632018][ T5135] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 351.826460][ T46] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 352.126928][ T5133] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 352.307967][ T5137] usb 5-1: USB disconnect, device number 21 [ 352.336427][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 353.691338][ T5098] Bluetooth: hci5: command 0x0406 tx timeout [ 353.718910][ T5133] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 353.808041][ T46] usb 2-1: no configurations [ 354.261538][ T46] usb 2-1: can't read configurations, error -22 [ 354.269052][ T5133] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 354.357570][ T5133] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.406636][ T5133] usb 3-1: string descriptor 0 read error: -71 [ 354.428650][ T5133] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 354.447446][ T5133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 354.471994][ T5133] usb 3-1: config 0 descriptor?? [ 354.478959][ T46] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 354.683521][ T5133] usb 3-1: can't set config #0, error -71 [ 354.703432][ T5133] usb 3-1: USB disconnect, device number 18 [ 354.736493][ T5083] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 354.757298][ T783] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 355.041492][ T783] usb 1-1: device descriptor read/all, error -71 [ 355.177118][ T5083] usb 4-1: device not accepting address 30, error -71 [ 355.299316][ T8601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.410901][ T8605] netlink: 36 bytes leftover after parsing attributes in process `syz.3.869'. [ 355.477610][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'. [ 355.502277][ T8601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.557695][ T8609] netlink: 160 bytes leftover after parsing attributes in process `syz.3.869'. [ 355.640314][ T8601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.803590][ T54] Bluetooth: hci5: ACL packet for unknown connection handle 1 [ 355.832976][ T8617] fuse: Bad value for 'fd' [ 358.147231][ T46] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 358.766381][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 359.206498][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 359.215543][ T46] usb 5-1: no configurations [ 359.220929][ T46] usb 5-1: can't read configurations, error -22 [ 359.237661][ T5131] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 359.406438][ T46] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 359.448641][ T5131] usb 4-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 359.478593][ T5131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.514679][ T5131] usb 4-1: config 0 descriptor?? [ 359.543641][ T5131] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 359.626417][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 359.640251][ T46] usb 5-1: no configurations [ 359.675776][ T46] usb 5-1: can't read configurations, error -22 [ 359.700136][ T46] usb usb5-port1: attempt power cycle [ 359.828531][ T5131] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 359.835490][ T5131] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 359.850269][ T5131] usb 4-1: USB disconnect, device number 32 [ 359.876487][ T5164] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 360.415648][ T5164] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=cb.23 [ 361.005391][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.054832][ T5164] usb 2-1: config 0 descriptor?? [ 361.062947][ T5164] mdc800 2-1:0.0: probe fails -> wrong Interface [ 361.070077][ T46] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 361.139896][ T46] usb 5-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 361.159733][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.180036][ T8666] fuse: Bad value for 'fd' [ 361.221366][ T46] usb 5-1: config 0 descriptor?? [ 361.246045][ T46] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 361.261185][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'. [ 361.417655][ T5131] usb 2-1: USB disconnect, device number 20 [ 361.561466][ T8672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.887'. [ 361.621138][ T8672] vlan2: entered promiscuous mode [ 361.662562][ T8672] bond0: entered promiscuous mode [ 361.690454][ T8672] bond_slave_0: entered promiscuous mode [ 361.733509][ T8672] bond_slave_1: entered promiscuous mode [ 361.765390][ T8672] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 361.786836][ T46] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 361.793221][ T8680] netlink: 64 bytes leftover after parsing attributes in process `syz.2.886'. [ 361.820200][ T46] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 362.168656][ T8684] fuse: Bad value for 'fd' [ 362.892746][ T783] usb 5-1: USB disconnect, device number 24 [ 364.644555][ T8706] mkiss: ax0: crc mode is auto. [ 364.748014][ T1058] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 365.024258][ T1058] usb 1-1: Using ep0 maxpacket: 8 [ 365.099682][ T1058] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 365.181415][ T1058] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.354146][ T1058] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 365.383682][ T1058] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 365.393595][ T1058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.446611][ T1058] usb 1-1: config 0 descriptor?? [ 366.566582][ T5131] usb 1-1: USB disconnect, device number 21 [ 366.591329][ T8718] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 366.719922][ T8724] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 366.726512][ T8724] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 366.764779][ T8724] vhci_hcd vhci_hcd.0: Device attached [ 366.783429][ T8728] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 366.812281][ T8731] fuse: Bad value for 'fd' [ 366.817772][ T8724] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 366.846514][ T1058] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 366.966519][ T5135] vhci_hcd: vhci_device speed not set [ 367.052003][ T5135] usb 13-1: new full-speed USB device number 5 using vhci_hcd [ 367.071614][ T1058] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=cb.23 [ 367.091189][ T1058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.120372][ T1058] usb 4-1: config 0 descriptor?? [ 367.158339][ T1058] mdc800 4-1:0.0: probe fails -> wrong Interface [ 367.326598][ T5131] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 367.427108][ T1058] usb 4-1: USB disconnect, device number 33 [ 367.626137][ T5131] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 367.641866][ T5131] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 367.675456][ T5131] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.710833][ T5131] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 367.721907][ T5131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 367.734048][ T5131] usb 1-1: SerialNumber: syz [ 367.750772][ T5131] usb 1-1: config 0 descriptor?? [ 367.757302][ T8736] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 367.765668][ T5131] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 367.914056][ T8750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.928812][ T8726] vhci_hcd: connection reset by peer [ 367.988347][ T35] vhci_hcd: stop threads [ 367.992666][ T35] vhci_hcd: release socket [ 368.003334][ T35] vhci_hcd: disconnect device [ 368.169442][ T8755] mkiss: ax0: crc mode is auto. [ 369.144822][ T1058] usb 1-1: USB disconnect, device number 22 [ 370.590281][ T8778] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 370.836542][ T1058] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 371.266002][ T1058] usb 5-1: Using ep0 maxpacket: 8 [ 371.292909][ T1058] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 371.302095][ T8795] syz.3.915[8795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.309559][ T8795] syz.3.915[8795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.336039][ T1058] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.460435][ T1058] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 371.548746][ T1058] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 371.591009][ T1058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.607723][ T1058] usb 5-1: config 0 descriptor?? [ 371.636086][ T8799] netlink: 64 bytes leftover after parsing attributes in process `syz.2.916'. [ 371.735043][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.915'. [ 372.207430][ T5135] vhci_hcd: vhci_device speed not set [ 372.424328][ T1058] usb 5-1: USB disconnect, device number 25 [ 372.636391][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 372.681082][ T8806] mkiss: ax0: crc mode is auto. [ 374.424167][ T5135] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 375.428593][ T5135] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 375.497746][ T5135] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 375.582842][ T5135] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.626916][ T8807] syz.4.919 (8807) used greatest stack depth: 17328 bytes left [ 375.702926][ T5135] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 375.726799][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 375.766352][ T5135] usb 2-1: SerialNumber: syz [ 375.790476][ T5135] usb 2-1: config 0 descriptor?? [ 375.796864][ T8810] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 375.827784][ T8823] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 375.828680][ T5135] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 375.834330][ T8823] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 375.906392][ T8828] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 375.907780][ T8823] vhci_hcd vhci_hcd.0: Device attached [ 375.926785][ T8829] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 375.952891][ T8823] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.020191][ T8831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.925'. [ 376.107302][ T5135] vhci_hcd: vhci_device speed not set [ 376.162199][ T5133] usb 2-1: USB disconnect, device number 21 [ 376.212744][ T5135] usb 13-1: new full-speed USB device number 6 using vhci_hcd [ 376.783350][ T8825] vhci_hcd: connection reset by peer [ 376.799639][ T2855] vhci_hcd: stop threads [ 376.813439][ T2855] vhci_hcd: release socket [ 376.824577][ T2855] vhci_hcd: disconnect device [ 376.827808][ T8848] FAULT_INJECTION: forcing a failure. [ 376.827808][ T8848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.844290][ T8848] CPU: 1 PID: 8848 Comm: syz.0.930 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 376.853972][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 376.864045][ T8848] Call Trace: [ 376.867340][ T8848] [ 376.870275][ T8848] dump_stack_lvl+0x241/0x360 [ 376.874971][ T8848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.880195][ T8848] ? __pfx__printk+0x10/0x10 [ 376.884796][ T8848] ? __pfx_lock_release+0x10/0x10 [ 376.889837][ T8848] should_fail_ex+0x3b0/0x4e0 [ 376.894545][ T8848] _copy_from_user+0x2f/0xe0 [ 376.899166][ T8848] copy_msghdr_from_user+0xae/0x680 [ 376.904390][ T8848] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 376.910243][ T8848] __sys_sendmsg+0x23d/0x3a0 [ 376.914858][ T8848] ? __pfx___sys_sendmsg+0x10/0x10 [ 376.920006][ T8848] ? vfs_write+0x7c4/0xc90 [ 376.924483][ T8848] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 376.930822][ T8848] ? do_syscall_64+0x100/0x230 [ 376.935601][ T8848] ? do_syscall_64+0xb6/0x230 [ 376.940289][ T8848] do_syscall_64+0xf3/0x230 [ 376.944905][ T8848] ? clear_bhb_loop+0x35/0x90 [ 376.949592][ T8848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.955499][ T8848] RIP: 0033:0x7f0134575a19 [ 376.960008][ T8848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.979655][ T8848] RSP: 002b:00007f013533e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.988086][ T8848] RAX: ffffffffffffffda RBX: 00007f0134703f60 RCX: 00007f0134575a19 [ 376.996111][ T8848] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 377.004100][ T8848] RBP: 00007f013533e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 377.012085][ T8848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.020072][ T8848] R13: 000000000000000b R14: 00007f0134703f60 R15: 00007ffd198ccc88 [ 377.028077][ T8848] [ 377.153304][ T8853] overlay: ./bus is not a directory [ 377.417430][ T8862] netlink: 76 bytes leftover after parsing attributes in process `syz.4.935'. [ 377.450823][ T8862] Dead loop on virtual device ipvlan1, fix it urgently! [ 377.746378][ T1058] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 377.766482][ T8862] syz.4.935 (8862) used greatest stack depth: 7288 bytes left [ 377.813279][ T8868] syz.1.936[8868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 377.813452][ T8868] syz.1.936[8868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 377.827402][ T5136] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 377.870874][ T8868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.936'. [ 377.893247][ T8870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.937'. [ 377.948764][ T1058] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=cb.23 [ 377.971380][ T1058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.002639][ T1058] usb 4-1: config 0 descriptor?? [ 378.026475][ T1058] mdc800 4-1:0.0: probe fails -> wrong Interface [ 378.033211][ T5136] usb 1-1: Using ep0 maxpacket: 16 [ 378.052774][ T5136] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=b3.67 [ 378.079071][ T5136] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.101259][ T5136] usb 1-1: Product: syz [ 378.105578][ T5136] usb 1-1: Manufacturer: syz [ 378.114543][ T5136] usb 1-1: SerialNumber: syz [ 378.127324][ T5136] usb 1-1: config 0 descriptor?? [ 378.146834][ T5136] usb_ehset_test 1-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 378.234666][ T5136] usb 4-1: USB disconnect, device number 34 [ 378.344444][ T8880] FAULT_INJECTION: forcing a failure. [ 378.344444][ T8880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.350357][ T1058] usb 1-1: USB disconnect, device number 23 [ 378.358531][ T8880] CPU: 1 PID: 8880 Comm: syz.4.940 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 378.373497][ T8880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 378.383590][ T8880] Call Trace: [ 378.386913][ T8880] [ 378.389876][ T8880] dump_stack_lvl+0x241/0x360 [ 378.394608][ T8880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.399858][ T8880] ? __pfx__printk+0x10/0x10 [ 378.404493][ T8880] ? __pfx_lock_release+0x10/0x10 [ 378.410343][ T8880] should_fail_ex+0x3b0/0x4e0 [ 378.415076][ T8880] _copy_from_user+0x2f/0xe0 [ 378.419710][ T8880] copy_msghdr_from_user+0xae/0x680 [ 378.425304][ T8880] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 378.431180][ T8880] __sys_sendmsg+0x23d/0x3a0 [ 378.435824][ T8880] ? __pfx___sys_sendmsg+0x10/0x10 [ 378.441028][ T8880] ? vfs_write+0x7c4/0xc90 [ 378.445503][ T8880] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 378.451935][ T8880] ? do_syscall_64+0x100/0x230 [ 378.456717][ T8880] ? do_syscall_64+0xb6/0x230 [ 378.461410][ T8880] do_syscall_64+0xf3/0x230 [ 378.465928][ T8880] ? clear_bhb_loop+0x35/0x90 [ 378.470620][ T8880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.476539][ T8880] RIP: 0033:0x7f8d8ed75a19 [ 378.480998][ T8880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.500912][ T8880] RSP: 002b:00007f8d8fab7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.509512][ T8880] RAX: ffffffffffffffda RBX: 00007f8d8ef03f60 RCX: 00007f8d8ed75a19 [ 378.517491][ T8880] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 378.525469][ T8880] RBP: 00007f8d8fab70a0 R08: 0000000000000000 R09: 0000000000000000 [ 378.533453][ T8880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.541451][ T8880] R13: 000000000000000b R14: 00007f8d8ef03f60 R15: 00007ffd19ab7eb8 [ 378.549533][ T8880] [ 379.056431][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.062854][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.406650][ T5164] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 379.470237][ T8888] FAULT_INJECTION: forcing a failure. [ 379.470237][ T8888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.716399][ T8888] CPU: 0 PID: 8888 Comm: syz.2.942 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 379.726121][ T8888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 379.736227][ T8888] Call Trace: [ 379.739546][ T8888] [ 379.742509][ T8888] dump_stack_lvl+0x241/0x360 [ 379.747583][ T8888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.752843][ T8888] ? __pfx__printk+0x10/0x10 [ 379.757484][ T8888] ? __pfx_lock_release+0x10/0x10 [ 379.762555][ T8888] should_fail_ex+0x3b0/0x4e0 [ 379.767288][ T8888] _copy_from_user+0x2f/0xe0 [ 379.771925][ T8888] copy_msghdr_from_user+0xae/0x680 [ 379.777170][ T8888] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 379.783011][ T8888] __sys_sendmsg+0x23d/0x3a0 [ 379.787714][ T8888] ? __pfx___sys_sendmsg+0x10/0x10 [ 379.792857][ T8888] ? lockdep_hardirqs_on+0x99/0x150 [ 379.798104][ T8888] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 379.804966][ T8888] ? do_syscall_64+0x100/0x230 [ 379.809744][ T8888] ? do_syscall_64+0xb6/0x230 [ 379.814458][ T8888] do_syscall_64+0xf3/0x230 [ 379.819005][ T8888] ? clear_bhb_loop+0x35/0x90 [ 379.823694][ T8888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.829600][ T8888] RIP: 0033:0x7fad5e175a19 [ 379.834024][ T8888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.853644][ T8888] RSP: 002b:00007fad5eebb048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.862071][ T8888] RAX: ffffffffffffffda RBX: 00007fad5e303f60 RCX: 00007fad5e175a19 [ 379.870061][ T8888] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 379.878067][ T8888] RBP: 00007fad5eebb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 379.886060][ T8888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.894043][ T8888] R13: 000000000000000b R14: 00007fad5e303f60 R15: 00007ffc28a10a58 [ 379.902041][ T8888] [ 379.940238][ T5164] usb 5-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 379.957038][ T5164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.010301][ T5164] usb 5-1: config 0 descriptor?? [ 380.041272][ T5164] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 380.336534][ T5136] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 380.529470][ T5136] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 380.551138][ T5136] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 380.576430][ T5136] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.587752][ T5164] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 380.611806][ T5136] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 380.617740][ T5164] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 380.633391][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 380.643467][ T5136] usb 4-1: SerialNumber: syz [ 380.652210][ T5136] usb 4-1: config 0 descriptor?? [ 380.666911][ T8891] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 380.676642][ T5136] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 380.749679][ T5133] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 381.022462][ T5164] usb 4-1: USB disconnect, device number 35 [ 381.029854][ T5133] usb 2-1: Using ep0 maxpacket: 32 [ 381.066239][ T5133] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.096819][ T5098] Bluetooth: hci1: command 0x0406 tx timeout [ 381.182117][ T5133] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.265562][ T5133] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 381.326656][ T5135] vhci_hcd: vhci_device speed not set [ 381.417666][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.432034][ T5133] hub 2-1:4.0: USB hub found [ 381.529530][ T8909] netlink: 64 bytes leftover after parsing attributes in process `syz.0.949'. [ 381.735874][ T5133] hub 2-1:4.0: config failed, can't read hub descriptor (err -90) [ 381.744183][ T5164] usb 5-1: USB disconnect, device number 26 [ 381.904902][ T8915] FAULT_INJECTION: forcing a failure. [ 381.904902][ T8915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.928880][ T8900] syz.1.947 uses obsolete (PF_INET,SOCK_PACKET) [ 381.950288][ T8915] CPU: 0 PID: 8915 Comm: syz.4.951 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 381.959990][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 381.970098][ T8915] Call Trace: [ 381.973422][ T8915] [ 381.976393][ T8915] dump_stack_lvl+0x241/0x360 [ 381.981122][ T8915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.986391][ T8915] ? __pfx__printk+0x10/0x10 [ 381.991023][ T8915] ? __pfx_lock_release+0x10/0x10 [ 381.996098][ T8915] should_fail_ex+0x3b0/0x4e0 [ 382.000836][ T8915] _copy_to_iter+0x1f6/0x1960 [ 382.005555][ T8915] ? __virt_addr_valid+0x183/0x530 [ 382.010812][ T8915] ? __pfx_lock_release+0x10/0x10 [ 382.015866][ T8915] ? skb_recv_datagram+0x26c/0x310 [ 382.021038][ T8915] ? __pfx__copy_to_iter+0x10/0x10 [ 382.026182][ T8915] ? __virt_addr_valid+0x183/0x530 [ 382.031339][ T8915] ? __virt_addr_valid+0x183/0x530 [ 382.036570][ T8915] ? __virt_addr_valid+0x45f/0x530 [ 382.041819][ T8915] ? __check_object_size+0x49c/0x900 [ 382.047131][ T8915] bcm_recvmsg+0x171/0x630 [ 382.051590][ T8915] ? __pfx_bcm_recvmsg+0x10/0x10 [ 382.056592][ T8915] ? get_pid_task+0x23/0x1f0 [ 382.061273][ T8915] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 382.066642][ T8915] ? security_socket_recvmsg+0x90/0xb0 [ 382.072114][ T8915] ? __pfx_bcm_recvmsg+0x10/0x10 [ 382.077089][ T8915] sock_recvmsg+0x22f/0x280 [ 382.081801][ T8915] sock_read_iter+0x2ca/0x3e0 [ 382.086507][ T8915] ? __pfx_sock_read_iter+0x10/0x10 [ 382.091732][ T8915] ? bpf_lsm_file_permission+0x9/0x10 [ 382.097223][ T8915] ? security_file_permission+0x7f/0xa0 [ 382.102807][ T8915] vfs_read+0x9bd/0xbc0 [ 382.107000][ T8915] ? __pfx_lock_release+0x10/0x10 [ 382.112068][ T8915] ? __pfx_vfs_read+0x10/0x10 [ 382.116809][ T8915] ksys_read+0x1a0/0x2c0 [ 382.121092][ T8915] ? __pfx_ksys_read+0x10/0x10 [ 382.125878][ T8915] ? do_syscall_64+0x100/0x230 [ 382.130677][ T8915] ? do_syscall_64+0xb6/0x230 [ 382.135497][ T8915] do_syscall_64+0xf3/0x230 [ 382.140054][ T8915] ? clear_bhb_loop+0x35/0x90 [ 382.144854][ T8915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.150876][ T8915] RIP: 0033:0x7f8d8ed75a19 [ 382.155322][ T8915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.174960][ T8915] RSP: 002b:00007f8d8fab7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 382.183406][ T8915] RAX: ffffffffffffffda RBX: 00007f8d8ef03f60 RCX: 00007f8d8ed75a19 [ 382.191421][ T8915] RDX: 0000000000000fe2 RSI: 0000000020001480 RDI: 0000000000000003 [ 382.199457][ T8915] RBP: 00007f8d8fab70a0 R08: 0000000000000000 R09: 0000000000000000 [ 382.207615][ T8915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.215635][ T8915] R13: 000000000000000b R14: 00007f8d8ef03f60 R15: 00007ffd19ab7eb8 [ 382.223761][ T8915] [ 382.426865][ T5133] usbhid 2-1:4.0: can't add hid device: -71 [ 382.487423][ T5133] usbhid 2-1:4.0: probe with driver usbhid failed with error -71 [ 382.628532][ T5133] usb 2-1: USB disconnect, device number 22 [ 383.296886][ T5164] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 383.650180][ T5164] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=cb.23 [ 383.687469][ T5164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.915017][ T5164] usb 3-1: config 0 descriptor?? [ 383.940072][ T5164] mdc800 3-1:0.0: probe fails -> wrong Interface [ 384.006948][ T8944] syz.4.957[8944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.007120][ T8944] syz.4.957[8944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.089883][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.957'. [ 384.172288][ T5164] usb 3-1: USB disconnect, device number 19 [ 385.067192][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.962'. [ 385.923572][ T8972] delete_channel: no stack [ 387.314711][ T8992] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 387.321326][ T8992] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 387.347557][ T8990] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 387.353314][ T8992] vhci_hcd vhci_hcd.0: Device attached [ 387.397873][ T8990] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 387.416390][ T46] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 387.556444][ T5133] vhci_hcd: vhci_device speed not set [ 387.612099][ T46] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=cb.23 [ 387.624717][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.633157][ T5133] usb 11-1: new full-speed USB device number 3 using vhci_hcd [ 387.671243][ T46] usb 5-1: config 0 descriptor?? [ 387.708894][ T46] mdc800 5-1:0.0: probe fails -> wrong Interface [ 387.866393][ T5164] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 387.915046][ T783] usb 5-1: USB disconnect, device number 27 [ 388.023559][ T8993] vhci_hcd: connection reset by peer [ 388.035596][ T11] vhci_hcd: stop threads [ 388.041791][ T11] vhci_hcd: release socket [ 388.060677][ T11] vhci_hcd: disconnect device [ 388.068761][ T5164] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 388.085101][ T5164] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 388.095123][ T5164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.111376][ T5164] usb 4-1: config 0 descriptor?? [ 389.257744][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 390.745529][ T5131] usb 4-1: USB disconnect, device number 36 [ 391.103919][ T9058] FAULT_INJECTION: forcing a failure. [ 391.103919][ T9058] name fail_futex, interval 1, probability 0, space 0, times 1 [ 391.118355][ T9058] CPU: 1 PID: 9058 Comm: syz.3.986 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 391.128042][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 391.138242][ T9058] Call Trace: [ 391.141557][ T9058] [ 391.144525][ T9058] dump_stack_lvl+0x241/0x360 [ 391.149277][ T9058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.154502][ T9058] ? __pfx__printk+0x10/0x10 [ 391.159117][ T9058] ? register_lock_class+0x102/0x980 [ 391.164423][ T9058] ? __pfx_validate_chain+0x10/0x10 [ 391.169644][ T9058] ? __pfx_register_lock_class+0x10/0x10 [ 391.175311][ T9058] should_fail_ex+0x3b0/0x4e0 [ 391.180022][ T9058] get_futex_key+0x17c/0x1050 [ 391.184731][ T9058] ? __pfx_get_futex_key+0x10/0x10 [ 391.189873][ T9058] ? __lock_acquire+0x1346/0x1fd0 [ 391.194919][ T9058] futex_wake+0x12a/0x5c0 [ 391.199269][ T9058] ? __pfx_futex_wake+0x10/0x10 [ 391.204145][ T9058] do_futex+0x392/0x560 [ 391.208319][ T9058] ? __pfx_do_futex+0x10/0x10 [ 391.213095][ T9058] ? __might_fault+0xaa/0x120 [ 391.217818][ T9058] mm_release+0x193/0x430 [ 391.222181][ T9058] ? exit_robust_list+0x2cf/0x2f0 [ 391.227256][ T9058] ? __pfx_mm_release+0x10/0x10 [ 391.232233][ T9058] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.237455][ T9058] ? lockdep_hardirqs_on+0x99/0x150 [ 391.242770][ T9058] exit_mm+0xb0/0x310 [ 391.246865][ T9058] ? __pfx_exit_mm+0x10/0x10 [ 391.251491][ T9058] ? taskstats_exit+0x348/0xa70 [ 391.256461][ T9058] ? tty_audit_exit+0x155/0x200 [ 391.261340][ T9058] do_exit+0x9aa/0x27e0 [ 391.265625][ T9058] ? __pfx_do_exit+0x10/0x10 [ 391.270247][ T9058] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 391.275737][ T9058] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 391.281751][ T9058] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 391.288094][ T9058] ? _raw_spin_lock_irq+0xdf/0x120 [ 391.293313][ T9058] do_group_exit+0x207/0x2c0 [ 391.298025][ T9058] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.303273][ T9058] ? lockdep_hardirqs_on+0x99/0x150 [ 391.308501][ T9058] get_signal+0x16a1/0x1740 [ 391.313151][ T9058] ? __pfx_get_signal+0x10/0x10 [ 391.318053][ T9058] arch_do_signal_or_restart+0x96/0x860 [ 391.323630][ T9058] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 391.329826][ T9058] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 391.335840][ T9058] ? syscall_exit_to_user_mode+0xa3/0x370 [ 391.341673][ T9058] syscall_exit_to_user_mode+0xc9/0x370 [ 391.347330][ T9058] do_syscall_64+0x100/0x230 [ 391.351941][ T9058] ? clear_bhb_loop+0x35/0x90 [ 391.356640][ T9058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.362557][ T9058] RIP: 0033:0x7f5bd9b75a19 [ 391.366986][ T9058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.386782][ T9058] RSP: 002b:00007f5bda9cb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000114 [ 391.395219][ T9058] RAX: fffffffffffffe00 RBX: 00007f5bd9d04110 RCX: 00007f5bd9b75a19 [ 391.403309][ T9058] RDX: 0000000000000af5 RSI: 0000000000000008 RDI: 0000000000000003 [ 391.411295][ T9058] RBP: 00007f5bda9cb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 391.419311][ T9058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.427292][ T9058] R13: 000000000000006e R14: 00007f5bd9d04110 R15: 00007ffc11b399b8 [ 391.435396][ T9058] [ 391.584572][ T9042] delete_channel: no stack [ 392.010010][ T9074] FAULT_INJECTION: forcing a failure. [ 392.010010][ T9074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.054129][ T9074] CPU: 0 PID: 9074 Comm: syz.2.990 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 392.063849][ T9074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 392.074014][ T9074] Call Trace: [ 392.077340][ T9074] [ 392.080308][ T9074] dump_stack_lvl+0x241/0x360 [ 392.085043][ T9074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.090291][ T9074] ? __pfx__printk+0x10/0x10 [ 392.094931][ T9074] ? __pfx_lock_release+0x10/0x10 [ 392.100003][ T9074] ? vfs_write+0x7c4/0xc90 [ 392.104482][ T9074] should_fail_ex+0x3b0/0x4e0 [ 392.109303][ T9074] _copy_from_user+0x2f/0xe0 [ 392.113945][ T9074] __sys_bpf+0x1a4/0x810 [ 392.118247][ T9074] ? __pfx___sys_bpf+0x10/0x10 [ 392.123084][ T9074] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 392.129117][ T9074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 392.135492][ T9074] ? do_syscall_64+0x100/0x230 [ 392.140396][ T9074] __x64_sys_bpf+0x7c/0x90 [ 392.144865][ T9074] do_syscall_64+0xf3/0x230 [ 392.149448][ T9074] ? clear_bhb_loop+0x35/0x90 [ 392.154154][ T9074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.160088][ T9074] RIP: 0033:0x7fad5e175a19 [ 392.164519][ T9074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.184237][ T9074] RSP: 002b:00007fad5eebb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.192694][ T9074] RAX: ffffffffffffffda RBX: 00007fad5e303f60 RCX: 00007fad5e175a19 [ 392.200682][ T9074] RDX: 0000000000000090 RSI: 0000000020000440 RDI: 0000000000000005 [ 392.208701][ T9074] RBP: 00007fad5eebb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 392.216694][ T9074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.224681][ T9074] R13: 000000000000000b R14: 00007fad5e303f60 R15: 00007ffc28a10a58 [ 392.232689][ T9074] [ 392.242157][ T9081] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 392.255618][ T9081] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 392.281651][ T9078] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 392.288243][ T9078] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 392.333367][ T9078] vhci_hcd vhci_hcd.0: Device attached [ 392.391718][ T9085] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 392.516367][ T783] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 393.390640][ T783] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=cb.23 [ 393.424916][ T783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.506089][ T783] usb 5-1: config 0 descriptor?? [ 393.532735][ T783] mdc800 5-1:0.0: probe fails -> wrong Interface [ 393.749148][ T5137] usb 5-1: USB disconnect, device number 28 [ 393.770143][ T9080] vhci_hcd: connection reset by peer [ 393.776567][ T12] vhci_hcd: stop threads [ 393.782930][ T12] vhci_hcd: release socket [ 393.797162][ T12] vhci_hcd: disconnect device [ 393.866577][ T5133] vhci_hcd: vhci_device speed not set [ 394.009833][ T5136] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 394.205455][ T5136] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 394.220103][ T5136] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 394.236402][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.248996][ T5136] usb 3-1: config 0 descriptor?? [ 394.676372][ T9116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1001'. [ 394.734805][ T9116] vlan2: entered promiscuous mode [ 394.757361][ T9116] ip6gretap0: entered promiscuous mode [ 394.996620][ T783] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 395.219354][ T783] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 395.232734][ T783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 395.245466][ T783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 395.259601][ T783] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 395.273253][ T783] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 395.282947][ T783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.294046][ T783] usb 1-1: config 0 descriptor?? [ 395.557376][ T9118] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 395.671629][ T9134] delete_channel: no stack [ 395.919045][ T54] Bluetooth: hci5: ACL packet for unknown connection handle 1 [ 395.931067][ T9140] fuse: Bad value for 'fd' [ 395.992703][ T783] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 396.006870][ T783] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 396.025097][ T783] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 396.247870][ T5136] usb 1-1: USB disconnect, device number 24 [ 396.372618][ T9150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.432296][ T9150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.450904][ T9150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1009'. [ 396.481629][ T9150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.553220][ T9150] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1009'. [ 396.587952][ T9150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.882211][ T5133] usb 3-1: USB disconnect, device number 20 [ 397.399688][ T5137] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 398.290120][ T5137] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=cb.23 [ 398.334094][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.371062][ T5137] usb 1-1: config 0 descriptor?? [ 398.392135][ T5137] mdc800 1-1:0.0: probe fails -> wrong Interface [ 398.676403][ T5135] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 398.704209][ T5131] usb 1-1: USB disconnect, device number 25 [ 398.836611][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 398.857679][ T9183] fuse: Bad value for 'fd' [ 398.965527][ T5135] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 399.036884][ T5135] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 399.099427][ T5135] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.181856][ T5135] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 399.231009][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 399.279931][ T5135] usb 2-1: SerialNumber: syz [ 399.478275][ T9188] Dead loop on virtual device ipvlan1, fix it urgently! [ 399.495024][ T5135] usb 2-1: config 0 descriptor?? [ 399.509472][ T9176] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 399.519601][ T5135] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 399.579460][ T9195] FAULT_INJECTION: forcing a failure. [ 399.579460][ T9195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.594233][ T9195] CPU: 0 PID: 9195 Comm: syz.0.1020 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 399.604038][ T9195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 399.614136][ T9195] Call Trace: [ 399.617452][ T9195] [ 399.620428][ T9195] dump_stack_lvl+0x241/0x360 [ 399.625154][ T9195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.630406][ T9195] ? __pfx__printk+0x10/0x10 [ 399.635048][ T9195] ? __pfx_lock_release+0x10/0x10 [ 399.640306][ T9195] should_fail_ex+0x3b0/0x4e0 [ 399.645043][ T9195] _copy_from_user+0x2f/0xe0 [ 399.649682][ T9195] do_sys_poll+0x23a/0x1300 [ 399.654258][ T9195] ? _parse_integer_limit+0x1b5/0x200 [ 399.659761][ T9195] ? mark_lock+0x9a/0x350 [ 399.664171][ T9195] ? __pfx_do_sys_poll+0x10/0x10 [ 399.669235][ T9195] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 399.675206][ T9195] ? ksys_write+0x23e/0x2c0 [ 399.679769][ T9195] ? __pfx_lock_release+0x10/0x10 [ 399.684880][ T9195] ? __fget_files+0x3f6/0x470 [ 399.689802][ T9195] __se_sys_poll+0x1c5/0x400 [ 399.694536][ T9195] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 399.700576][ T9195] ? __pfx___se_sys_poll+0x10/0x10 [ 399.705734][ T9195] ? do_syscall_64+0x100/0x230 [ 399.710717][ T9195] ? do_syscall_64+0xb6/0x230 [ 399.715433][ T9195] do_syscall_64+0xf3/0x230 [ 399.719973][ T9195] ? clear_bhb_loop+0x35/0x90 [ 399.724714][ T9195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.730656][ T9195] RIP: 0033:0x7f0134575a19 [ 399.735217][ T9195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.755061][ T9195] RSP: 002b:00007f013533e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 399.763616][ T9195] RAX: ffffffffffffffda RBX: 00007f0134703f60 RCX: 00007f0134575a19 [ 399.771635][ T9195] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000000 [ 399.779648][ T9195] RBP: 00007f013533e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 399.787660][ T9195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.795768][ T9195] R13: 000000000000000b R14: 00007f0134703f60 R15: 00007ffd198ccc88 [ 399.803799][ T9195] [ 399.806917][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.008845][ T5136] usb 2-1: USB disconnect, device number 23 [ 400.138394][ T5133] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 400.159919][ T9204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.184021][ T9204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.195061][ T9204] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1024'. [ 400.211392][ T9204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.286790][ T9208] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1025'. [ 400.299523][ T9204] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1024'. [ 400.312822][ T9204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.348849][ T5133] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 400.377835][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 400.409875][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 400.428120][ T5133] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 400.445025][ T5133] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 400.462093][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.467295][ T9211] FAULT_INJECTION: forcing a failure. [ 400.467295][ T9211] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 400.489440][ T9211] CPU: 0 PID: 9211 Comm: syz.0.1026 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 400.491914][ T5133] usb 4-1: config 0 descriptor?? [ 400.499199][ T9211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 400.499220][ T9211] Call Trace: [ 400.499230][ T9211] [ 400.499241][ T9211] dump_stack_lvl+0x241/0x360 [ 400.499279][ T9211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.525800][ T9196] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 400.530417][ T9211] ? __pfx__printk+0x10/0x10 [ 400.542287][ T9211] should_fail_ex+0x3b0/0x4e0 [ 400.547024][ T9211] prepare_alloc_pages+0x1da/0x5d0 [ 400.552201][ T9211] __alloc_pages_noprof+0x166/0x6c0 [ 400.557456][ T9211] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 400.563257][ T9211] alloc_pages_mpol_noprof+0x3e8/0x680 [ 400.568781][ T9211] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 400.574915][ T9211] vma_alloc_folio_noprof+0xf3/0x1f0 [ 400.580348][ T9211] ? do_raw_spin_unlock+0x13c/0x8b0 [ 400.585629][ T9211] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 400.591580][ T9211] ? _raw_spin_unlock+0x28/0x50 [ 400.596477][ T9211] ? __split_huge_pmd+0x25db/0x3950 [ 400.601736][ T9211] folio_prealloc+0x31/0x170 [ 400.606434][ T9211] handle_pte_fault+0xd79/0x7090 [ 400.611432][ T9211] ? __split_huge_pmd+0x257/0x3950 [ 400.616595][ T9211] ? __pfx___split_huge_pmd+0x10/0x10 [ 400.622016][ T9211] ? __pfx_validate_chain+0x10/0x10 [ 400.627356][ T9211] ? mark_lock+0x9a/0x350 [ 400.631732][ T9211] ? __pfx_handle_pte_fault+0x10/0x10 [ 400.637156][ T9211] ? __lock_acquire+0x1346/0x1fd0 [ 400.642360][ T9211] ? mt_find+0x226/0x850 [ 400.646648][ T9211] ? __pfx_lock_release+0x10/0x10 [ 400.651719][ T9211] ? wp_huge_pmd+0x218/0x280 [ 400.656382][ T9211] handle_mm_fault+0xfb0/0x19d0 [ 400.661316][ T9211] ? __pfx_handle_mm_fault+0x10/0x10 [ 400.666763][ T9211] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 400.672180][ T9211] exc_page_fault+0x2b9/0x8c0 [ 400.676914][ T9211] ? __might_fault+0xaa/0x120 [ 400.681646][ T9211] asm_exc_page_fault+0x26/0x30 [ 400.686539][ T9211] RIP: 0010:__put_user_nocheck_4+0x7/0x20 [ 400.692306][ T9211] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 [ 400.711979][ T9211] RSP: 0018:ffffc9000a4efd60 EFLAGS: 00050293 [ 400.718190][ T9211] RAX: 000000000000000c RBX: 0000000000000000 RCX: 0000000020001480 [ 400.726287][ T9211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.734302][ T9211] RBP: 0000000000000000 R08: ffffffff89453e13 R09: 1ffffffff1f590c5 [ 400.742322][ T9211] R10: dffffc0000000000 R11: fffffbfff1f590c6 R12: 0000000020001480 [ 400.750347][ T9211] R13: 000000000000000c R14: 0000000000000000 R15: ffffc9000a4efde0 [ 400.758371][ T9211] ? move_addr_to_user+0x93/0x1d0 [ 400.763456][ T9211] move_addr_to_user+0x16f/0x1d0 [ 400.768461][ T9211] __sys_getsockname+0x1f9/0x2a0 [ 400.773468][ T9211] ? __pfx___sys_getsockname+0x10/0x10 [ 400.778996][ T9211] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 400.785373][ T9211] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 400.791686][ T9211] __x64_sys_getsockname+0x7b/0x90 [ 400.796860][ T9211] do_syscall_64+0xf3/0x230 [ 400.801404][ T9211] ? clear_bhb_loop+0x35/0x90 [ 400.806143][ T9211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.812098][ T9211] RIP: 0033:0x7f0134575a19 [ 400.816556][ T9211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.836215][ T9211] RSP: 002b:00007f013533e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 400.844685][ T9211] RAX: ffffffffffffffda RBX: 00007f0134703f60 RCX: 00007f0134575a19 [ 400.852714][ T9211] RDX: 0000000020001480 RSI: 0000000000000000 RDI: 0000000000000004 [ 400.860736][ T9211] RBP: 00007f013533e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 400.868765][ T9211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.876791][ T9211] R13: 000000000000000b R14: 00007f0134703f60 R15: 00007ffd198ccc88 [ 400.884844][ T9211] [ 400.887990][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.048162][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 401.048183][ T29] audit: type=1326 audit(1721187204.175:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9212 comm="syz.1.1027" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61f9175a19 code=0x0 [ 401.109623][ T5133] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 401.126926][ T5133] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 401.135152][ T9221] fuse: Bad value for 'fd' [ 401.145465][ T5133] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 401.280125][ T9228] FAULT_INJECTION: forcing a failure. [ 401.280125][ T9228] name failslab, interval 1, probability 0, space 0, times 0 [ 401.294219][ T9228] CPU: 0 PID: 9228 Comm: syz.2.1031 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 401.303997][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 401.314093][ T9228] Call Trace: [ 401.317412][ T9228] [ 401.320370][ T9228] dump_stack_lvl+0x241/0x360 [ 401.325106][ T9228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.330354][ T9228] ? __pfx__printk+0x10/0x10 [ 401.334994][ T9228] ? __pfx___might_resched+0x10/0x10 [ 401.340334][ T9228] should_fail_ex+0x3b0/0x4e0 [ 401.345074][ T9228] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 401.350858][ T9228] should_failslab+0x9/0x20 [ 401.355404][ T9228] __kmalloc_noprof+0xd8/0x400 [ 401.360312][ T9228] ? kfree+0x4e/0x360 [ 401.364338][ T9228] tomoyo_realpath_from_path+0xcf/0x5e0 [ 401.369975][ T9228] tomoyo_path_number_perm+0x23a/0x880 [ 401.375489][ T9228] ? tomoyo_path_number_perm+0x208/0x880 [ 401.381165][ T9228] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 401.387243][ T9228] ? __fget_files+0x29/0x470 [ 401.391884][ T9228] ? __fget_files+0x3f6/0x470 [ 401.396686][ T9228] ? __fget_files+0x29/0x470 [ 401.401323][ T9228] security_file_ioctl+0x75/0xb0 [ 401.406308][ T9228] __se_sys_ioctl+0x47/0x170 [ 401.410956][ T9228] do_syscall_64+0xf3/0x230 [ 401.415504][ T9228] ? clear_bhb_loop+0x35/0x90 [ 401.420225][ T9228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.426152][ T9228] RIP: 0033:0x7fad5e175a19 [ 401.430606][ T9228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.450260][ T9228] RSP: 002b:00007fad5eebb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.458728][ T9228] RAX: ffffffffffffffda RBX: 00007fad5e303f60 RCX: 00007fad5e175a19 [ 401.466751][ T9228] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 401.474765][ T9228] RBP: 00007fad5eebb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 401.482865][ T9228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.490878][ T9228] R13: 000000000000000b R14: 00007fad5e303f60 R15: 00007ffc28a10a58 [ 401.498941][ T9228] [ 401.502063][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.528006][ T5136] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 401.550441][ T9228] ERROR: Out of memory at tomoyo_realpath_from_path. [ 401.639704][ T5135] usb 4-1: USB disconnect, device number 37 [ 401.690887][ T9243] x_tables: duplicate underflow at hook 1 [ 401.756599][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 401.774411][ T5136] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 401.789375][ T5136] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 401.802500][ T5136] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 401.822018][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.875727][ T9251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.900972][ T9251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.911909][ T9251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1039'. [ 401.925336][ T9251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.993517][ T9251] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1039'. [ 402.008481][ T9251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.638902][ T5133] usb 5-1: USB disconnect, device number 29 [ 402.656596][ T783] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 402.722736][ T54] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 402.735042][ T9264] fuse: Bad value for 'fd' [ 402.771212][ T9266] FAULT_INJECTION: forcing a failure. [ 402.771212][ T9266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.787602][ T9266] CPU: 1 PID: 9266 Comm: syz.0.1044 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 402.797406][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 402.807501][ T9266] Call Trace: [ 402.810811][ T9266] [ 402.813779][ T9266] dump_stack_lvl+0x241/0x360 [ 402.818508][ T9266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.823762][ T9266] ? __pfx__printk+0x10/0x10 [ 402.828403][ T9266] ? __pfx_lock_release+0x10/0x10 [ 402.833485][ T9266] should_fail_ex+0x3b0/0x4e0 [ 402.838277][ T9266] _copy_from_user+0x2f/0xe0 [ 402.842921][ T9266] copy_msghdr_from_user+0xae/0x680 [ 402.848179][ T9266] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 402.854051][ T9266] __sys_sendmsg+0x23d/0x3a0 [ 402.858834][ T9266] ? __pfx___sys_sendmsg+0x10/0x10 [ 402.863989][ T9266] ? vfs_write+0x7c4/0xc90 [ 402.868473][ T9266] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 402.874822][ T9266] ? do_syscall_64+0x100/0x230 [ 402.879612][ T9266] ? do_syscall_64+0xb6/0x230 [ 402.884307][ T9266] do_syscall_64+0xf3/0x230 [ 402.888856][ T9266] ? clear_bhb_loop+0x35/0x90 [ 402.893551][ T9266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.899461][ T9266] RIP: 0033:0x7f0134575a19 [ 402.903898][ T9266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.923533][ T9266] RSP: 002b:00007f013533e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.931993][ T9266] RAX: ffffffffffffffda RBX: 00007f0134703f60 RCX: 00007f0134575a19 [ 402.939983][ T9266] RDX: 0000000000000000 RSI: 00000000200020c0 RDI: 0000000000000004 [ 402.947966][ T9266] RBP: 00007f013533e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 402.955947][ T9266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.963953][ T9266] R13: 000000000000000b R14: 00007f0134703f60 R15: 00007ffd198ccc88 [ 402.971956][ T9266] [ 403.050823][ T783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.084400][ T783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.104868][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 403.238061][ T783] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 403.399127][ T783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.480059][ T783] usb 4-1: config 0 descriptor?? [ 403.903062][ T54] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 404.111777][ T783] usbhid 4-1:0.0: can't add hid device: -71 [ 404.128129][ T783] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 404.172420][ T783] usb 4-1: USB disconnect, device number 38 [ 404.352438][ T9292] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1047'. [ 404.530111][ T9296] netlink: 'syz.0.1050': attribute type 10 has an invalid length. [ 404.587821][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1050'. [ 404.627098][ T9296] bond0: (slave netdevsim0): Releasing backup interface [ 404.658194][ T9296] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 404.709707][ T9296] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 404.757218][ T9296] team0: Failed to send options change via netlink (err -105) [ 404.868255][ T9296] team0: Port device netdevsim0 added [ 405.125445][ T54] Bluetooth: hci5: ACL packet for unknown connection handle 1 [ 405.155082][ T9310] fuse: Bad value for 'fd' [ 405.490069][ T9317] program syz.1.1058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.503705][ T5136] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 406.718606][ T5136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.766556][ T5136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.797037][ T5136] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 406.823614][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.848134][ T9347] FAULT_INJECTION: forcing a failure. [ 406.848134][ T9347] name failslab, interval 1, probability 0, space 0, times 0 [ 406.860870][ T5136] usb 5-1: config 0 descriptor?? [ 406.873497][ T9347] CPU: 1 PID: 9347 Comm: syz.3.1066 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 406.883287][ T9347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 406.893381][ T9347] Call Trace: [ 406.896689][ T9347] [ 406.899660][ T9347] dump_stack_lvl+0x241/0x360 [ 406.904375][ T9347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.909595][ T9347] ? __pfx__printk+0x10/0x10 [ 406.914213][ T9347] ? __pfx___might_resched+0x10/0x10 [ 406.919537][ T9347] should_fail_ex+0x3b0/0x4e0 [ 406.924363][ T9347] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 406.930215][ T9347] should_failslab+0x9/0x20 [ 406.934744][ T9347] __kmalloc_noprof+0xd8/0x400 [ 406.939544][ T9347] ? kfree+0x4e/0x360 [ 406.943553][ T9347] tomoyo_realpath_from_path+0xcf/0x5e0 [ 406.949146][ T9347] tomoyo_path_number_perm+0x23a/0x880 [ 406.954644][ T9347] ? tomoyo_path_number_perm+0x208/0x880 [ 406.960292][ T9347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 406.966303][ T9347] ? __lock_acquire+0x1346/0x1fd0 [ 406.971389][ T9347] ? __pfx_from_kuid+0x10/0x10 [ 406.976169][ T9347] ? __down_write_common+0x162/0x200 [ 406.981483][ T9347] tomoyo_path_chown+0x42/0xb0 [ 406.986273][ T9347] security_path_chown+0xe3/0x140 [ 406.991319][ T9347] chown_common+0x4b3/0x850 [ 406.995854][ T9347] ? __pfx_chown_common+0x10/0x10 [ 407.000904][ T9347] ? rcu_read_lock_any_held+0xb7/0x160 [ 407.006405][ T9347] ? mnt_get_write_access+0x226/0x2b0 [ 407.011810][ T9347] ksys_fchown+0xea/0x160 [ 407.016163][ T9347] __x64_sys_fchown+0x7a/0x90 [ 407.020855][ T9347] do_syscall_64+0xf3/0x230 [ 407.025372][ T9347] ? clear_bhb_loop+0x35/0x90 [ 407.030062][ T9347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.036056][ T9347] RIP: 0033:0x7f5bd9b75a19 [ 407.040565][ T9347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.060205][ T9347] RSP: 002b:00007f5bdaa0d048 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 407.068647][ T9347] RAX: ffffffffffffffda RBX: 00007f5bd9d03f60 RCX: 00007f5bd9b75a19 [ 407.076635][ T9347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 407.084705][ T9347] RBP: 00007f5bdaa0d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 407.092962][ T9347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.100969][ T9347] R13: 000000000000000b R14: 00007f5bd9d03f60 R15: 00007ffc11b399b8 [ 407.108982][ T9347] [ 407.117782][ T9347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 407.143144][ T9350] FAULT_INJECTION: forcing a failure. [ 407.143144][ T9350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.189123][ T9350] CPU: 1 PID: 9350 Comm: syz.2.1067 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 407.198919][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 407.209016][ T9350] Call Trace: [ 407.212326][ T9350] [ 407.215291][ T9350] dump_stack_lvl+0x241/0x360 [ 407.220019][ T9350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.225263][ T9350] ? __pfx__printk+0x10/0x10 [ 407.229896][ T9350] ? __pfx_lock_release+0x10/0x10 [ 407.234968][ T9350] should_fail_ex+0x3b0/0x4e0 [ 407.239709][ T9350] _copy_from_user+0x2f/0xe0 [ 407.244348][ T9350] copy_msghdr_from_user+0xae/0x680 [ 407.249590][ T9350] ? _parse_integer_limit+0x1b5/0x200 [ 407.255026][ T9350] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 407.260920][ T9350] __sys_sendmmsg+0x374/0x740 [ 407.265651][ T9350] ? __pfx___sys_sendmmsg+0x10/0x10 [ 407.270942][ T9350] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 407.276858][ T9350] ? ksys_write+0x23e/0x2c0 [ 407.281383][ T9350] ? __pfx_lock_release+0x10/0x10 [ 407.286437][ T9350] ? vfs_write+0x7c4/0xc90 [ 407.290888][ T9350] ? __mutex_unlock_slowpath+0x21d/0x750 [ 407.296663][ T9350] ? __pfx_vfs_write+0x10/0x10 [ 407.301480][ T9350] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 407.307499][ T9350] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 407.313857][ T9350] ? do_syscall_64+0x100/0x230 [ 407.318679][ T9350] __x64_sys_sendmmsg+0xa0/0xb0 [ 407.323554][ T9350] do_syscall_64+0xf3/0x230 [ 407.328072][ T9350] ? clear_bhb_loop+0x35/0x90 [ 407.332776][ T9350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.338682][ T9350] RIP: 0033:0x7fad5e175a19 [ 407.343110][ T9350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.362754][ T9350] RSP: 002b:00007fad5ee9a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 407.371188][ T9350] RAX: ffffffffffffffda RBX: 00007fad5e304038 RCX: 00007fad5e175a19 [ 407.379173][ T9350] RDX: 04000000000001c1 RSI: 0000000020002980 RDI: 0000000000000006 [ 407.387162][ T9350] RBP: 00007fad5ee9a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 407.395145][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.403142][ T9350] R13: 000000000000006e R14: 00007fad5e304038 R15: 00007ffc28a10a58 [ 407.411162][ T9350] [ 407.499253][ T54] Bluetooth: hci5: ACL packet for unknown connection handle 1 [ 407.508789][ T9355] fuse: Bad value for 'fd' [ 407.729898][ T5136] usbhid 5-1:0.0: can't add hid device: -71 [ 407.757348][ T5136] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 407.768748][ T5135] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 407.777265][ T5136] usb 5-1: USB disconnect, device number 30 [ 407.969668][ T5135] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.992495][ T5135] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.023086][ T5135] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 408.053886][ T5135] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 408.068726][ T5135] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 408.110730][ T5135] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 408.152769][ T5135] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 408.162345][ T5135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.174522][ T5135] usb 4-1: Product: syz [ 408.178944][ T5135] usb 4-1: Manufacturer: syz [ 408.183948][ T5135] usb 4-1: SerialNumber: syz [ 408.196038][ T5135] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 408.211999][ T5135] cdc_ncm 4-1:1.0: bind() failure [ 408.226031][ T5135] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 408.244764][ T5135] cdc_ncm 4-1:1.1: bind() failure [ 408.403694][ T9371] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1072'. [ 408.471169][ T9371] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 408.540386][ T9371] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 408.618190][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1074'. [ 409.192129][ T9392] FAULT_INJECTION: forcing a failure. [ 409.192129][ T9392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.273588][ T9392] CPU: 1 PID: 9392 Comm: syz.2.1076 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 409.283378][ T9392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 409.293476][ T9392] Call Trace: [ 409.296759][ T9392] [ 409.299696][ T9392] dump_stack_lvl+0x241/0x360 [ 409.304382][ T9392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.309607][ T9392] ? __pfx__printk+0x10/0x10 [ 409.314220][ T9392] ? snprintf+0xda/0x120 [ 409.318487][ T9392] should_fail_ex+0x3b0/0x4e0 [ 409.323206][ T9392] _copy_to_user+0x2f/0xb0 [ 409.327642][ T9392] simple_read_from_buffer+0xca/0x150 [ 409.333078][ T9392] proc_fail_nth_read+0x1e9/0x250 [ 409.338120][ T9392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.343680][ T9392] ? rw_verify_area+0x520/0x6b0 [ 409.348544][ T9392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.354102][ T9392] vfs_read+0x204/0xbc0 [ 409.358294][ T9392] ? __pfx_lock_release+0x10/0x10 [ 409.363327][ T9392] ? do_sock_setsockopt+0x3e2/0x720 [ 409.368569][ T9392] ? __pfx_vfs_read+0x10/0x10 [ 409.373265][ T9392] ? __fget_files+0x29/0x470 [ 409.377961][ T9392] ? __fget_files+0x3f6/0x470 [ 409.382662][ T9392] ksys_read+0x1a0/0x2c0 [ 409.386919][ T9392] ? __pfx_ksys_read+0x10/0x10 [ 409.391787][ T9392] ? do_syscall_64+0x100/0x230 [ 409.396575][ T9392] ? do_syscall_64+0xb6/0x230 [ 409.401267][ T9392] do_syscall_64+0xf3/0x230 [ 409.405780][ T9392] ? clear_bhb_loop+0x35/0x90 [ 409.410479][ T9392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.416400][ T9392] RIP: 0033:0x7fad5e1744fc [ 409.420833][ T9392] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 409.440538][ T9392] RSP: 002b:00007fad5eebb040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 409.448983][ T9392] RAX: ffffffffffffffda RBX: 00007fad5e303f60 RCX: 00007fad5e1744fc [ 409.456959][ T9392] RDX: 000000000000000f RSI: 00007fad5eebb0b0 RDI: 0000000000000004 [ 409.464947][ T9392] RBP: 00007fad5eebb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 409.472932][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.480998][ T9392] R13: 000000000000000b R14: 00007fad5e303f60 R15: 00007ffc28a10a58 [ 409.488996][ T9392] [ 409.942035][ T54] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 409.956996][ T9401] fuse: Bad value for 'fd' [ 410.300440][ T783] usb 4-1: USB disconnect, device number 39 [ 410.499674][ T9412] FAULT_INJECTION: forcing a failure. [ 410.499674][ T9412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.522790][ T9412] CPU: 0 PID: 9412 Comm: syz.4.1084 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 410.532574][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 410.542667][ T9412] Call Trace: [ 410.545972][ T9412] [ 410.548927][ T9412] dump_stack_lvl+0x241/0x360 [ 410.553740][ T9412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.558983][ T9412] ? __pfx__printk+0x10/0x10 [ 410.563607][ T9412] ? __pfx_lock_release+0x10/0x10 [ 410.568662][ T9412] ? vfs_write+0x7c4/0xc90 [ 410.573128][ T9412] should_fail_ex+0x3b0/0x4e0 [ 410.577859][ T9412] _copy_from_user+0x2f/0xe0 [ 410.582530][ T9412] __sys_bpf+0x1a4/0x810 [ 410.586836][ T9412] ? __pfx___sys_bpf+0x10/0x10 [ 410.591664][ T9412] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 410.597683][ T9412] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 410.604049][ T9412] ? do_syscall_64+0x100/0x230 [ 410.608864][ T9412] __x64_sys_bpf+0x7c/0x90 [ 410.613330][ T9412] do_syscall_64+0xf3/0x230 [ 410.617873][ T9412] ? clear_bhb_loop+0x35/0x90 [ 410.622591][ T9412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.628530][ T9412] RIP: 0033:0x7f8d8ed75a19 [ 410.632958][ T9412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.652758][ T9412] RSP: 002b:00007f8d8fab7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 410.661202][ T9412] RAX: ffffffffffffffda RBX: 00007f8d8ef03f60 RCX: 00007f8d8ed75a19 [ 410.669207][ T9412] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000012 [ 410.677324][ T9412] RBP: 00007f8d8fab70a0 R08: 0000000000000000 R09: 0000000000000000 [ 410.685329][ T9412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.693323][ T9412] R13: 000000000000000b R14: 00007f8d8ef03f60 R15: 00007ffd19ab7eb8 [ 410.701334][ T9412] [ 410.704487][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.137705][ T9427] FAULT_INJECTION: forcing a failure. [ 411.137705][ T9427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.151828][ T9427] CPU: 0 PID: 9427 Comm: syz.2.1089 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 411.161584][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 411.171674][ T9427] Call Trace: [ 411.174980][ T9427] [ 411.177957][ T9427] dump_stack_lvl+0x241/0x360 [ 411.182686][ T9427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.187930][ T9427] ? __pfx__printk+0x10/0x10 [ 411.192643][ T9427] ? snprintf+0xda/0x120 [ 411.196944][ T9427] should_fail_ex+0x3b0/0x4e0 [ 411.201692][ T9427] _copy_to_user+0x2f/0xb0 [ 411.206194][ T9427] simple_read_from_buffer+0xca/0x150 [ 411.211642][ T9427] proc_fail_nth_read+0x1e9/0x250 [ 411.216721][ T9427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 411.222412][ T9427] ? rw_verify_area+0x520/0x6b0 [ 411.227318][ T9427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 411.232922][ T9427] vfs_read+0x204/0xbc0 [ 411.237139][ T9427] ? __pfx_lock_release+0x10/0x10 [ 411.242298][ T9427] ? __pfx_vfs_read+0x10/0x10 [ 411.247027][ T9427] ? do_utimes+0x212/0x270 [ 411.251487][ T9427] ? __fget_files+0x29/0x470 [ 411.256119][ T9427] ? __fget_files+0x3f6/0x470 [ 411.260863][ T9427] ksys_read+0x1a0/0x2c0 [ 411.265142][ T9427] ? __pfx_ksys_read+0x10/0x10 [ 411.269962][ T9427] ? do_syscall_64+0x100/0x230 [ 411.274780][ T9427] ? do_syscall_64+0xb6/0x230 [ 411.279560][ T9427] do_syscall_64+0xf3/0x230 [ 411.284105][ T9427] ? clear_bhb_loop+0x35/0x90 [ 411.288827][ T9427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.294767][ T9427] RIP: 0033:0x7fad5e1744fc [ 411.299216][ T9427] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 411.318950][ T9427] RSP: 002b:00007fad5eebb040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 411.327449][ T9427] RAX: ffffffffffffffda RBX: 00007fad5e303f60 RCX: 00007fad5e1744fc [ 411.335472][ T9427] RDX: 000000000000000f RSI: 00007fad5eebb0b0 RDI: 0000000000000004 [ 411.343483][ T9427] RBP: 00007fad5eebb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 411.351492][ T9427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.359510][ T9427] R13: 000000000000000b R14: 00007fad5e303f60 R15: 00007ffc28a10a58 [ 411.367539][ T9427] [ 411.370693][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.572868][ T54] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 411.637381][ T9432] fuse: Bad value for 'fd' [ 411.861070][ T54] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 411.998171][ T9444] netlink: 'syz.1.1092': attribute type 23 has an invalid length. [ 412.006069][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 412.038889][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 412.057595][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 412.068351][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 412.080556][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 412.102212][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 412.116879][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 412.130105][ T9444] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.137935][ T9444] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.175426][ T9444] bridge0: entered promiscuous mode [ 412.236433][ T5135] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 412.268956][ T1044] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.309771][ T9450] Dead loop on virtual device ipvlan1, fix it urgently! [ 412.384488][ T9451] Dead loop on virtual device ipvlan1, fix it urgently! [ 412.448356][ T5135] usb 3-1: Using ep0 maxpacket: 32 [ 412.451108][ T1044] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.472051][ T5135] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 412.512689][ T5135] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 412.532367][ T5135] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 412.556144][ T5135] usb 3-1: Product: syz [ 412.565959][ T5135] usb 3-1: Manufacturer: syz [ 412.578815][ T5135] usb 3-1: SerialNumber: syz [ 412.602033][ T1044] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.619105][ T5135] usb 3-1: config 0 descriptor?? [ 412.634688][ T9443] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 412.751671][ T1044] team0: Port device netdevsim0 removed [ 412.791321][ T1044] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.872044][ T9443] FAULT_INJECTION: forcing a failure. [ 412.872044][ T9443] name failslab, interval 1, probability 0, space 0, times 0 [ 412.884973][ T9443] CPU: 1 PID: 9443 Comm: syz.2.1094 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 412.894808][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 412.904879][ T9443] Call Trace: [ 412.908162][ T9443] [ 412.911094][ T9443] dump_stack_lvl+0x241/0x360 [ 412.915806][ T9443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.921029][ T9443] ? __pfx__printk+0x10/0x10 [ 412.925630][ T9443] should_fail_ex+0x3b0/0x4e0 [ 412.930337][ T9443] ? raw_queue_event+0x8b/0x2e0 [ 412.935201][ T9443] should_failslab+0x9/0x20 [ 412.939717][ T9443] __kmalloc_noprof+0xd8/0x400 [ 412.944515][ T9443] raw_queue_event+0x8b/0x2e0 [ 412.949217][ T9443] gadget_suspend+0x50/0xb0 [ 412.953721][ T9443] ? __pfx_gadget_suspend+0x10/0x10 [ 412.958924][ T9443] set_link_state+0xc81/0x1200 [ 412.963714][ T9443] dummy_pullup+0xcf/0x200 [ 412.968151][ T9443] ? __pfx_dummy_pullup+0x10/0x10 [ 412.973182][ T9443] usb_gadget_disconnect_locked+0x13c/0x4b0 [ 412.979085][ T9443] gadget_unbind_driver+0xca/0x460 [ 412.984206][ T9443] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 412.989929][ T9443] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 412.995653][ T9443] device_release_driver_internal+0x4a9/0x7c0 [ 413.001757][ T9443] driver_detach+0x1fb/0x2d0 [ 413.006397][ T9443] bus_remove_driver+0x1f3/0x320 [ 413.011387][ T9443] usb_gadget_unregister_driver+0x4e/0x70 [ 413.017120][ T9443] raw_release+0xf9/0x1e0 [ 413.021456][ T9443] ? __pfx_raw_release+0x10/0x10 [ 413.026403][ T9443] __fput+0x24a/0x8a0 [ 413.030422][ T9443] task_work_run+0x24f/0x310 [ 413.035112][ T9443] ? __pfx_task_work_run+0x10/0x10 [ 413.040239][ T9443] ? syscall_exit_to_user_mode+0xa3/0x370 [ 413.045972][ T9443] syscall_exit_to_user_mode+0x168/0x370 [ 413.051617][ T9443] do_syscall_64+0x100/0x230 [ 413.056213][ T9443] ? clear_bhb_loop+0x35/0x90 [ 413.060907][ T9443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.066825][ T9443] RIP: 0033:0x7fad5e175a19 [ 413.071271][ T9443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.090913][ T9443] RSP: 002b:00007fad5eebb048 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 413.099361][ T9443] RAX: 0000000000000000 RBX: 00007fad5e303f60 RCX: 00007fad5e175a19 [ 413.107348][ T9443] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 413.115362][ T9443] RBP: 00007fad5eebb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 413.123341][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.131329][ T9443] R13: 000000000000000b R14: 00007fad5e303f60 R15: 00007ffc28a10a58 [ 413.139356][ T9443] [ 413.142452][ T9443] raw-gadget.0 gadget.2: failed to queue suspend event [ 413.200522][ T46] usb 3-1: USB disconnect, device number 21 [ 414.206651][ T54] Bluetooth: hci0: command tx timeout [ 414.561577][ T1044] bridge_slave_1: left allmulticast mode [ 414.575834][ T1044] bridge_slave_1: left promiscuous mode [ 414.605479][ T1044] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.639183][ T1044] bridge_slave_0: left allmulticast mode [ 414.644904][ T1044] bridge_slave_0: left promiscuous mode [ 414.658224][ T1044] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.805882][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 415.849977][ T9494] fuse: Bad value for 'fd' [ 416.237097][ T1044] bond0 (unregistering): left promiscuous mode [ 416.243837][ T1044] bond_slave_0: left promiscuous mode [ 416.256725][ T1044] bond_slave_1: left promiscuous mode [ 416.286685][ T54] Bluetooth: hci0: command tx timeout [ 416.716394][ T5164] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 416.962162][ T5164] usb 5-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 417.046378][ T5164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.059471][ T1044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.072025][ T5164] usb 5-1: config 0 descriptor?? [ 417.091722][ T5164] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 417.110015][ T1044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.139546][ T1044] bond0 (unregistering): Released all slaves [ 417.244707][ T9445] chnl_net:caif_netlink_parms(): no params data found [ 417.431264][ T9508] FAULT_INJECTION: forcing a failure. [ 417.431264][ T9508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.485900][ T9508] CPU: 1 PID: 9508 Comm: syz.1.1105 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 417.495680][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 417.505834][ T9508] Call Trace: [ 417.509140][ T9508] [ 417.512082][ T9508] dump_stack_lvl+0x241/0x360 [ 417.516783][ T9508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.522026][ T9508] ? __pfx__printk+0x10/0x10 [ 417.526648][ T9508] ? scsi_block_when_processing_errors+0x295/0x360 [ 417.533179][ T9508] ? __pfx_lock_release+0x10/0x10 [ 417.538225][ T9508] should_fail_ex+0x3b0/0x4e0 [ 417.542938][ T9508] _copy_from_user+0x2f/0xe0 [ 417.547549][ T9508] sg_write+0x359/0xf10 [ 417.551741][ T9508] ? __pfx_sg_write+0x10/0x10 [ 417.556439][ T9508] ? mark_lock+0x9a/0x350 [ 417.560820][ T9508] ? bpf_lsm_file_permission+0x9/0x10 [ 417.566383][ T9508] ? security_file_permission+0x7f/0xa0 [ 417.572148][ T9508] ? rw_verify_area+0x1d2/0x6b0 [ 417.577020][ T9508] ? __pfx_sg_write+0x10/0x10 [ 417.581908][ T9508] vfs_write+0x2a2/0xc90 [ 417.586269][ T9508] ? __pfx_vfs_write+0x10/0x10 [ 417.591063][ T9508] ? __fget_files+0x29/0x470 [ 417.595669][ T9508] ? __fget_files+0x3f6/0x470 [ 417.600353][ T9508] ? __fget_files+0x29/0x470 [ 417.604963][ T9508] ksys_write+0x1a0/0x2c0 [ 417.609394][ T9508] ? __pfx_ksys_write+0x10/0x10 [ 417.614426][ T9508] ? do_syscall_64+0x100/0x230 [ 417.619201][ T9508] ? do_syscall_64+0xb6/0x230 [ 417.624065][ T9508] do_syscall_64+0xf3/0x230 [ 417.628616][ T9508] ? clear_bhb_loop+0x35/0x90 [ 417.633334][ T9508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.639235][ T9508] RIP: 0033:0x7f61f9175a19 [ 417.643659][ T9508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.663456][ T9508] RSP: 002b:00007f61f9f64048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 417.671972][ T9508] RAX: ffffffffffffffda RBX: 00007f61f9303f60 RCX: 00007f61f9175a19 [ 417.679956][ T9508] RDX: 00000000000000a2 RSI: 0000000000000000 RDI: 0000000000000004 [ 417.687931][ T9508] RBP: 00007f61f9f640a0 R08: 0000000000000000 R09: 0000000000000000 [ 417.695997][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.704155][ T9508] R13: 000000000000000b R14: 00007f61f9303f60 R15: 00007fff2d96f2e8 [ 417.712148][ T9508] [ 417.745487][ T5164] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 417.788054][ T5164] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 418.072840][ T9445] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.247114][ T9445] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.282136][ T9445] bridge_slave_0: entered allmulticast mode [ 418.346562][ T9445] bridge_slave_0: entered promiscuous mode [ 418.356188][ T9445] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.363845][ T9445] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.372301][ T54] Bluetooth: hci0: command tx timeout [ 418.380759][ T9445] bridge_slave_1: entered allmulticast mode [ 418.390175][ T9445] bridge_slave_1: entered promiscuous mode [ 418.526536][ T46] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 418.582387][ T9445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.636094][ T9445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.758625][ T46] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=cb.23 [ 418.778818][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.780308][ T9445] team0: Port device team_slave_0 added [ 418.799880][ T46] usb 2-1: config 0 descriptor?? [ 418.810957][ T9445] team0: Port device team_slave_1 added [ 418.819096][ T46] mdc800 2-1:0.0: probe fails -> wrong Interface [ 418.866402][ T5136] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 418.953905][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.969671][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.995749][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.028482][ T9445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.056941][ T46] usb 5-1: USB disconnect, device number 31 [ 419.068879][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.076490][ T5136] usb 3-1: Using ep0 maxpacket: 32 [ 419.079090][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.107787][ T5136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 419.115406][ T5136] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 419.135262][ T9445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.150933][ T5136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.191919][ T5136] usb 3-1: Product: syz [ 419.200722][ T5135] usb 2-1: USB disconnect, device number 24 [ 419.211330][ T5136] usb 3-1: Manufacturer: syz [ 419.220478][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 419.233227][ T9533] fuse: Bad value for 'fd' [ 419.237792][ T5136] usb 3-1: SerialNumber: syz [ 419.243085][ T5136] usb 3-1: config 0 descriptor?? [ 419.325344][ T9445] hsr_slave_0: entered promiscuous mode [ 419.362091][ T9445] hsr_slave_1: entered promiscuous mode [ 419.378188][ T9445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.385830][ T9445] Cannot create hsr debugfs directory [ 420.447456][ T54] Bluetooth: hci0: command tx timeout [ 424.465843][ T1044] hsr_slave_0: left promiscuous mode [ 424.478125][ T1044] hsr_slave_1: left promiscuous mode [ 424.503808][ T1044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.531017][ T1044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.584294][ T1044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.593057][ T1044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.692275][ T1044] veth1_macvtap: left promiscuous mode [ 424.708017][ T5135] usb 3-1: USB disconnect, device number 22 [ 424.719841][ T1044] veth0_macvtap: left promiscuous mode [ 424.725603][ T1044] veth1_vlan: left promiscuous mode [ 424.770816][ T1044] veth0_vlan: left promiscuous mode [ 425.479656][ T1044] team0 (unregistering): Port device macvlan1 removed [ 426.012620][ T1044] team0 (unregistering): Port device team_slave_1 removed [ 426.069592][ T1044] team0 (unregistering): Port device team_slave_0 removed [ 427.060817][ T54] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 427.137561][ T9583] fuse: Bad value for 'fd' [ 428.263818][ T9445] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 428.325469][ T9445] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 428.385537][ T9445] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 428.428301][ T9445] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 428.800956][ T9445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.874061][ T9445] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.908496][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.915640][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.966400][ T5137] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 428.973401][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.981489][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.175548][ T5137] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 429.222325][ T5137] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 429.247243][ T5137] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.288584][ T5137] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 429.308082][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 429.346375][ T5137] usb 5-1: SerialNumber: syz [ 429.364437][ T5137] usb 5-1: config 0 descriptor?? [ 429.385060][ T9611] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 429.400078][ T5137] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 429.645438][ T5137] usb 5-1: USB disconnect, device number 32 [ 429.729924][ T9445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.891886][ T9445] veth0_vlan: entered promiscuous mode [ 429.961037][ T9445] veth1_vlan: entered promiscuous mode [ 430.072489][ T9445] veth0_macvtap: entered promiscuous mode [ 430.100804][ T9445] veth1_macvtap: entered promiscuous mode [ 430.161470][ T9445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.186378][ T9445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.207021][ T9445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.232151][ T9445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.262593][ T9445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.306495][ T9445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.326481][ T9445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.363363][ T9445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.389846][ T9445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.430068][ T9445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.465886][ T9445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.492645][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 430.501619][ T9445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.508238][ T9631] fuse: Bad value for 'fd' [ 430.564247][ T9445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.623596][ T9445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.657324][ T9445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.712882][ T9445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.748479][ T9445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.781309][ T9445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.815134][ T9445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.844086][ T9445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.887571][ T9445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.922567][ T9445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.072921][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1134'. [ 431.364313][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.390520][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.482144][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.494164][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.673870][ T9653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.725595][ T9653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.791913][ T9653] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1137'. [ 431.884339][ T9658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.977172][ T9653] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1137'. [ 432.023840][ T9653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.104961][ T5137] hid (null): unknown global tag 0xc [ 432.146747][ T5137] hid-generic 0003:0060:0008.0008: unknown global tag 0xc [ 432.178157][ T5137] hid-generic 0003:0060:0008.0008: item 0 0 1 12 parsing failed [ 432.217666][ T5137] hid-generic 0003:0060:0008.0008: probe with driver hid-generic failed with error -22 [ 432.569331][ T54] Bluetooth: hci0: ACL packet for unknown connection handle 1 [ 432.578216][ T54] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 432.588565][ T9676] fuse: Bad value for 'fd' [ 432.786509][ T5137] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 432.796494][ T5136] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 432.882034][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'. [ 433.019581][ T5137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.036903][ T5136] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 433.044327][ T5137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.069926][ T5136] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 433.071053][ T5137] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 433.096970][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.119004][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.120732][ T5136] usb 5-1: config 0 descriptor?? [ 433.145028][ T5137] usb 3-1: config 0 descriptor?? [ 433.777802][ T5137] usbhid 3-1:0.0: can't add hid device: -71 [ 433.784005][ T5137] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 433.808135][ T5137] usb 3-1: USB disconnect, device number 23 [ 433.976642][ T5164] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 434.188862][ T5164] usb 4-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 434.216677][ T5164] usb 4-1: too many endpoints for config 0 interface 0 altsetting 184: 122, using maximum allowed: 30 [ 434.236485][ T5164] usb 4-1: config 0 interface 0 altsetting 184 has 0 endpoint descriptors, different from the interface descriptor's value: 122 [ 434.276295][ T5164] usb 4-1: config 0 interface 0 has no altsetting 0 [ 434.283034][ T5164] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 434.316311][ T5164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.347322][ T5164] usb 4-1: config 0 descriptor?? [ 434.569406][ T9684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1147'. [ 434.600226][ T9684] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1147'. [ 434.658562][ T5164] usb 4-1: string descriptor 0 read error: -71 [ 434.716875][ T5164] usb 4-1: selecting invalid altsetting 0 [ 434.916924][ T46] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 435.008683][ T5164] usb 4-1: USB disconnect, device number 40 [ 435.231209][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.260848][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.307926][ T46] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 435.343682][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.392506][ T46] usb 3-1: config 0 descriptor?? [ 435.520985][ T9] usb 5-1: USB disconnect, device number 33 [ 435.929420][ T9709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.966080][ T9709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.041705][ T9713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1155'. [ 436.111353][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 436.122983][ T9709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.126114][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 436.193455][ T46] usb 3-1: USB disconnect, device number 24 [ 436.208532][ T9709] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1155'. [ 436.243561][ T9709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.511778][ T54] Bluetooth: hci0: ACL packet for unknown connection handle 1 [ 436.536820][ T54] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 436.557291][ T9715] fuse: Bad value for 'fd' [ 436.619935][ T9717] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 436.633457][ T9717] FAULT_INJECTION: forcing a failure. [ 436.633457][ T9717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.648227][ T9717] CPU: 0 PID: 9717 Comm: syz.4.1157 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 436.657998][ T9717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 436.668096][ T9717] Call Trace: [ 436.671409][ T9717] [ 436.674374][ T9717] dump_stack_lvl+0x241/0x360 [ 436.679093][ T9717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.684312][ T9717] ? __pfx__printk+0x10/0x10 [ 436.688948][ T9717] ? __pfx_lock_release+0x10/0x10 [ 436.693992][ T9717] ? __lock_acquire+0x1346/0x1fd0 [ 436.699035][ T9717] should_fail_ex+0x3b0/0x4e0 [ 436.703823][ T9717] _copy_from_iter+0x1f6/0x1960 [ 436.708707][ T9717] ? __pfx__copy_from_iter+0x10/0x10 [ 436.714006][ T9717] ? tun_get_user+0x84c/0x4560 [ 436.718866][ T9717] ? __pfx_lock_release+0x10/0x10 [ 436.723922][ T9717] ? page_copy_sane+0x46/0x260 [ 436.728713][ T9717] copy_page_from_iter+0x7a/0x100 [ 436.733781][ T9717] tun_get_user+0x1f48/0x4560 [ 436.738481][ T9717] ? tun_get_user+0x84c/0x4560 [ 436.743383][ T9717] ? __pfx_tun_get_user+0x10/0x10 [ 436.748451][ T9717] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 436.753935][ T9717] ? tun_get+0x1e/0x2f0 [ 436.758131][ T9717] ? tun_get+0x1e/0x2f0 [ 436.762312][ T9717] ? tun_get+0x27d/0x2f0 [ 436.766579][ T9717] tun_chr_write_iter+0x113/0x1f0 [ 436.771640][ T9717] vfs_write+0xa72/0xc90 [ 436.775908][ T9717] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 436.781474][ T9717] ? __pfx_vfs_write+0x10/0x10 [ 436.786278][ T9717] ksys_write+0x1a0/0x2c0 [ 436.790624][ T9717] ? __pfx_ksys_write+0x10/0x10 [ 436.795480][ T9717] ? do_syscall_64+0x100/0x230 [ 436.800284][ T9717] ? do_syscall_64+0xb6/0x230 [ 436.805065][ T9717] do_syscall_64+0xf3/0x230 [ 436.809583][ T9717] ? clear_bhb_loop+0x35/0x90 [ 436.814274][ T9717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.820202][ T9717] RIP: 0033:0x7f8d8ed7459f [ 436.824715][ T9717] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 436.844342][ T9717] RSP: 002b:00007f8d8fab7010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 436.852775][ T9717] RAX: ffffffffffffffda RBX: 00007f8d8ef03f60 RCX: 00007f8d8ed7459f [ 436.860754][ T9717] RDX: 0000000000000036 RSI: 0000000020000140 RDI: 00000000000000c8 [ 436.868756][ T9717] RBP: 00007f8d8fab70a0 R08: 0000000000000000 R09: 0000000000000000 [ 436.876736][ T9717] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 436.884718][ T9717] R13: 000000000000000b R14: 00007f8d8ef03f60 R15: 00007ffd19ab7eb8 [ 436.892716][ T9717] [ 437.377333][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 437.427268][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 437.666358][ T46] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 437.898836][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 437.933268][ T46] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 437.997308][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.037896][ T46] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 438.062730][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 438.089115][ T46] usb 3-1: SerialNumber: syz [ 438.210566][ T29] audit: type=1326 audit(1721187241.325:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9745 comm="syz.0.1164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f954fd75a19 code=0x0 [ 438.363930][ T46] usb 3-1: config 0 descriptor?? [ 438.377190][ T9727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 438.387739][ T46] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 439.120089][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 439.130484][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 439.139858][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 439.160285][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 439.170289][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 439.177871][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 439.241952][ T5137] usb 3-1: USB disconnect, device number 25 [ 439.449877][ T1044] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.535636][ T5098] Bluetooth: hci0: ACL packet for unknown connection handle 1 [ 439.547559][ T5098] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 439.553130][ T9769] fuse: Bad value for 'fd' [ 439.735070][ T1044] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.859940][ T1044] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.035763][ T1044] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.175087][ T9778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.249226][ T9778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.324711][ T9780] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1171'. [ 440.400848][ T9778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.453826][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.460396][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.491232][ T9780] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1171'. [ 440.511579][ T1044] bridge_slave_1: left allmulticast mode [ 440.540219][ T9778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.550508][ T1044] bridge_slave_1: left promiscuous mode [ 440.568567][ T1044] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.602120][ T1044] bridge_slave_0: left allmulticast mode [ 440.648671][ T1044] bridge_slave_0: left promiscuous mode [ 440.663284][ T1044] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.196725][ T5136] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 441.247770][ T5098] Bluetooth: hci2: command tx timeout [ 441.389059][ T1044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.398442][ T5136] usb 5-1: No LPM exit latency info found, disabling LPM. [ 441.417542][ T5136] usb 5-1: config 1 interface 0 altsetting 204 endpoint 0x82 is Bulk; changing to Interrupt [ 441.428971][ T5136] usb 5-1: config 1 interface 0 altsetting 204 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 441.430046][ T1044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.461097][ T1044] bond0 (unregistering): Released all slaves [ 441.475431][ T5136] usb 5-1: config 1 interface 0 has no altsetting 0 [ 441.490534][ T5136] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.508116][ T5136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.522569][ T5136] usb 5-1: Product: င [ 441.526995][ T5136] usb 5-1: Manufacturer: 䌰拶߀䌞慭ꈒ䩟唉淫勒뷏蜣黤循䗽ﻡꝴ磂㭅迟뤙ป졳不ﭑ굋಍⥲ν䊬⋍檦ẫ丠迪礊절햚녭ꠕ總핀鎔疅ᬁ幯呫픏ᆧ݀칓ﻱ䮃蚸ᕚᙘ뵽ú [ 441.533709][ T9754] chnl_net:caif_netlink_parms(): no params data found [ 441.622193][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 441.641638][ T5136] usb 5-1: SerialNumber: ⠁ [ 441.668891][ T9796] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 441.677146][ T9796] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 442.975015][ T5098] Bluetooth: hci0: ACL packet for unknown connection handle 1 [ 442.985003][ T5098] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 443.062052][ T9814] fuse: Bad value for 'fd' [ 443.137638][ T9821] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1180'. [ 443.326427][ T5098] Bluetooth: hci2: command tx timeout [ 443.357565][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 443.692927][ T9754] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.751021][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.781278][ T9754] bridge_slave_0: entered allmulticast mode [ 443.817551][ T9754] bridge_slave_0: entered promiscuous mode [ 443.860669][ T9754] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.892927][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.930021][ T9754] bridge_slave_1: entered allmulticast mode [ 443.959008][ T9754] bridge_slave_1: entered promiscuous mode [ 444.092469][ T1044] hsr_slave_0: left promiscuous mode [ 444.142855][ T1044] hsr_slave_1: left promiscuous mode [ 444.187031][ T1044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.201397][ T5136] hub 5-1:1.0: bad descriptor, ignoring hub [ 444.223982][ T1044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.236620][ T5136] hub 5-1:1.0: probe with driver hub failed with error -5 [ 444.247993][ T1044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.266913][ T1044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.276912][ T5136] usb 5-1: bad CDC descriptors [ 444.345323][ T5136] usb 5-1: USB disconnect, device number 34 [ 444.395988][ T1044] veth1_macvtap: left promiscuous mode [ 444.422977][ T1044] veth0_macvtap: left promiscuous mode [ 444.453600][ T1044] veth1_vlan: left promiscuous mode [ 444.466520][ T1044] veth0_vlan: left promiscuous mode [ 445.406463][ T5098] Bluetooth: hci2: command tx timeout [ 446.031429][ T1044] team0 (unregistering): Port device team_slave_1 removed [ 446.124272][ T1044] team0 (unregistering): Port device team_slave_0 removed [ 446.939092][ T9754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.972321][ T9754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.538509][ T5098] Bluetooth: hci2: command tx timeout [ 447.856745][ T46] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 448.076542][ T783] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 448.112426][ T9754] team0: Port device team_slave_0 added [ 448.119370][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.494513][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.610874][ T46] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 448.645136][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.658782][ T783] usb 1-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 448.690162][ T783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.702983][ T46] usb 3-1: config 0 descriptor?? [ 448.734832][ T783] usb 1-1: config 0 descriptor?? [ 448.741512][ T9754] team0: Port device team_slave_1 added [ 448.755079][ T783] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 448.774183][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1187'. [ 448.884491][ T9754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.892576][ T9754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.934684][ T9754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.961499][ T9754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.968934][ T9754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.091746][ T9754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.279013][ T783] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 449.307226][ T783] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 449.345176][ T9754] hsr_slave_0: entered promiscuous mode [ 449.354593][ T9754] hsr_slave_1: entered promiscuous mode [ 449.355113][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 449.381365][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 449.424539][ T46] usb 3-1: USB disconnect, device number 26 [ 449.447666][ T9879] Dead loop on virtual device ipvlan1, fix it urgently! [ 449.521681][ T9880] Dead loop on virtual device ipvlan1, fix it urgently! [ 449.566485][ T5131] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 449.769099][ T5131] usb 4-1: No LPM exit latency info found, disabling LPM. [ 449.781849][ T5131] usb 4-1: config 1 interface 0 altsetting 204 endpoint 0x82 is Bulk; changing to Interrupt [ 449.804500][ T5131] usb 4-1: config 1 interface 0 altsetting 204 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 449.835189][ T5131] usb 4-1: config 1 interface 0 has no altsetting 0 [ 449.859290][ T5131] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 449.889424][ T5131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.914863][ T5131] usb 4-1: Product: င [ 449.929173][ T5131] usb 4-1: Manufacturer: 䌰拶߀䌞慭ꈒ䩟唉淫勒뷏蜣黤循䗽ﻡꝴ磂㭅迟뤙ป졳不ﭑ굋಍⥲ν䊬⋍檦ẫ丠迪礊절햚녭ꠕ總핀鎔疅ᬁ幯呫픏ᆧ݀칓ﻱ䮃蚸ᕚᙘ뵽ú [ 449.975217][ T5131] usb 4-1: SerialNumber: ⠁ [ 450.010187][ T9875] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 450.017888][ T9875] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 450.352839][ T783] usb 1-1: USB disconnect, device number 26 [ 450.643234][ T9754] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 450.672440][ T9754] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 450.742291][ T9754] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 450.797763][ T9754] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 451.172058][ T9754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.272464][ T9754] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.335992][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.343336][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.388131][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.395362][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.561794][ T9754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 451.587222][ T783] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 451.615229][ T9754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.684949][ T9875] vivid-002: ================= START STATUS ================= [ 451.713534][ T9875] vivid-002: Radio HW Seek Mode: Bounded [ 451.766840][ T9875] vivid-002: Radio Programmable HW Seek: false [ 451.773203][ T9875] vivid-002: RDS Rx I/O Mode: Block I/O [ 451.822966][ T783] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 451.836059][ T9875] vivid-002: Generate RBDS Instead of RDS: false [ 451.847921][ T783] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 451.883913][ T783] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 451.900045][ T9875] vivid-002: RDS Reception: true [ 451.905074][ T9875] vivid-002: RDS Program Type: 0 inactive [ 451.948518][ T783] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 451.988311][ T783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 452.001632][ T9875] vivid-002: RDS PS Name: inactive [ 452.052236][ T9875] vivid-002: RDS Radio Text: inactive [ 452.092612][ T9875] vivid-002: RDS Traffic Announcement: false inactive [ 452.103849][ T783] usb 3-1: SerialNumber: syz [ 452.128440][ T9875] vivid-002: RDS Traffic Program: false inactive [ 452.156928][ T783] usb 3-1: config 0 descriptor?? [ 452.168710][ T9895] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 452.179319][ T9875] vivid-002: RDS Music: false inactive [ 452.184926][ T9875] vivid-002: ================== END STATUS ================== [ 452.206575][ T783] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 452.277746][ T9905] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1197'. [ 452.453226][ T9754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.488758][ T5131] hub 4-1:1.0: bad descriptor, ignoring hub [ 452.514974][ T5131] hub 4-1:1.0: probe with driver hub failed with error -5 [ 452.563819][ T5131] usb 4-1: bad CDC descriptors [ 452.632581][ T783] usb 3-1: USB disconnect, device number 27 [ 452.651161][ T5131] usb 4-1: USB disconnect, device number 41 [ 452.794997][ T9754] veth0_vlan: entered promiscuous mode [ 452.824735][ T9754] veth1_vlan: entered promiscuous mode [ 452.945214][ T9754] veth0_macvtap: entered promiscuous mode [ 452.974959][ T9754] veth1_macvtap: entered promiscuous mode [ 453.040007][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.066042][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.078424][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.116677][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.140704][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.207120][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.225125][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.236527][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.265157][ T9754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.346169][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.378106][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.425568][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.489067][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.566148][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.624460][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.682761][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.736613][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.809945][ T9754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.850613][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1201'. [ 453.878410][ T9754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.917518][ T9754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.927178][ T9754] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.942358][ T9754] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.214514][ T9931] FAULT_INJECTION: forcing a failure. [ 454.214514][ T9931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.243650][ T9931] CPU: 0 PID: 9931 Comm: syz.3.1203 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 454.253429][ T9931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 454.263495][ T9931] Call Trace: [ 454.266779][ T9931] [ 454.269711][ T9931] dump_stack_lvl+0x241/0x360 [ 454.274400][ T9931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.279603][ T9931] ? __pfx__printk+0x10/0x10 [ 454.284237][ T9931] ? __pfx_lock_release+0x10/0x10 [ 454.289282][ T9931] should_fail_ex+0x3b0/0x4e0 [ 454.294155][ T9931] _copy_from_user+0x2f/0xe0 [ 454.298768][ T9931] sctp_getsockopt_associnfo+0xd2/0x9a0 [ 454.304313][ T9931] ? __local_bh_enable_ip+0x168/0x200 [ 454.309699][ T9931] ? lockdep_hardirqs_on+0x99/0x150 [ 454.314922][ T9931] ? __pfx_sctp_getsockopt_associnfo+0x10/0x10 [ 454.321075][ T9931] ? sctp_getsockopt+0x13a/0xbb0 [ 454.326040][ T9931] sctp_getsockopt+0x938/0xbb0 [ 454.330808][ T9931] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 454.336708][ T9931] do_sock_getsockopt+0x373/0x850 [ 454.341748][ T9931] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 454.347305][ T9931] ? __fget_files+0x3f6/0x470 [ 454.352080][ T9931] __sys_getsockopt+0x271/0x330 [ 454.356956][ T9931] ? __pfx___sys_getsockopt+0x10/0x10 [ 454.362435][ T9931] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 454.368773][ T9931] ? do_syscall_64+0x100/0x230 [ 454.373538][ T9931] __x64_sys_getsockopt+0xb5/0xd0 [ 454.378573][ T9931] do_syscall_64+0xf3/0x230 [ 454.383164][ T9931] ? clear_bhb_loop+0x35/0x90 [ 454.387872][ T9931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.393870][ T9931] RIP: 0033:0x7f5bd9b75a19 [ 454.398474][ T9931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.418097][ T9931] RSP: 002b:00007f5bda9ec048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 454.426521][ T9931] RAX: ffffffffffffffda RBX: 00007f5bd9d04038 RCX: 00007f5bd9b75a19 [ 454.434515][ T9931] RDX: 0000000000000001 RSI: 0000000000000084 RDI: 0000000000000003 [ 454.442492][ T9931] RBP: 00007f5bda9ec0a0 R08: 0000000020000100 R09: 0000000000000000 [ 454.450483][ T9931] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 454.458470][ T9931] R13: 000000000000006e R14: 00007f5bd9d04038 R15: 00007ffc11b399b8 [ 454.466505][ T9931] [ 454.534650][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.552307][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.639215][ T9545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.685152][ T9545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.667163][ T5133] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 455.691317][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1205'. [ 456.045402][ T5133] usb 5-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 456.056183][ T5133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.065069][ T9951] syz.2.1208[9951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.065188][ T9951] syz.2.1208[9951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.085359][ T9951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1208'. [ 456.110178][ T5133] usb 5-1: config 0 descriptor?? [ 456.120182][ T5133] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 456.596678][ T5137] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 456.640095][ T5133] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 456.672095][ T5133] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 456.829713][ T5137] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 456.850343][ T5137] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 456.917184][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.958961][ T5137] usb 2-1: config 0 descriptor?? [ 457.403574][ T5137] usb 5-1: USB disconnect, device number 35 [ 462.581550][ T5131] usb 2-1: USB disconnect, device number 25 [ 501.887354][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 567.836201][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 567.843202][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9981/2:b..l [ 567.851574][ C0] rcu: (detected by 0, t=10503 jiffies, g=50553, q=442 ncpus=2) [ 567.859295][ C0] task:syz.2.1216 state:R running task stack:24272 pid:9981 tgid:9980 ppid:7623 flags:0x00004002 [ 567.872104][ C0] Call Trace: [ 567.875390][ C0] [ 567.878327][ C0] __schedule+0x17ae/0x4a10 [ 567.882840][ C0] ? __pfx_validate_chain+0x10/0x10 [ 567.888054][ C0] ? __pfx___schedule+0x10/0x10 [ 567.892915][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 567.898894][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 567.903923][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 567.909212][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 567.914330][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 567.920588][ C0] irqentry_exit+0x5e/0x90 [ 567.925117][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.931129][ C0] RIP: 0010:lock_is_held_type+0x67/0x190 [ 567.936782][ C0] Code: f1 00 00 00 65 4c 8b 2c 25 80 d4 03 00 41 83 bd dc 0a 00 00 00 0f 85 da 00 00 00 41 89 f6 49 89 ff 48 c7 04 24 00 00 00 00 9c <8f> 04 24 4c 8b 24 24 fa 48 c7 c7 20 c9 ca 8b e8 55 1b 00 00 65 ff [ 567.956397][ C0] RSP: 0018:ffffc90004b4f118 EFLAGS: 00000246 [ 567.962466][ C0] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000080000000 [ 567.970442][ C0] RDX: ffff88802857bc00 RSI: 00000000ffffffff RDI: ffffffff8e333fe0 [ 567.978510][ C0] RBP: 0000000000000001 R08: ffffffff8b798e67 R09: ffffffff8b7a07bb [ 567.986502][ C0] R10: 0000000000000002 R11: ffff88802857bc00 R12: ffffc90004b4f460 [ 567.994499][ C0] R13: ffff88802857bc00 R14: 00000000ffffffff R15: ffffffff8e333fe0 [ 568.002496][ C0] ? xas_find+0xfb/0x960 [ 568.006773][ C0] ? xas_start+0x227/0x7b0 [ 568.011232][ C0] xas_start+0x2d7/0x7b0 [ 568.015492][ C0] ? xas_load+0x24/0x5c0 [ 568.019736][ C0] xas_load+0x2c/0x5c0 [ 568.023812][ C0] xas_find+0x13f/0x960 [ 568.027969][ C0] ? xas_next_entry+0x38a/0x3d0 [ 568.032849][ C0] ? filemap_map_pages+0x24f/0x1e70 [ 568.038048][ C0] next_uptodate_folio+0x29/0xa40 [ 568.043103][ C0] ? filemap_map_pages+0x24f/0x1e70 [ 568.048321][ C0] filemap_map_pages+0x302/0x1e70 [ 568.053386][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 568.058855][ C0] ? handle_pte_fault+0x348/0x7090 [ 568.063990][ C0] ? __pfx_lock_release+0x10/0x10 [ 568.069017][ C0] ? pte_offset_map_nolock+0x137/0x1f0 [ 568.074494][ C0] ? handle_pte_fault+0x222c/0x7090 [ 568.080241][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 568.085732][ C0] ? handle_pte_fault+0x222c/0x7090 [ 568.090953][ C0] handle_pte_fault+0x3b9b/0x7090 [ 568.096010][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 568.101050][ C0] ? __pfx_handle_pte_fault+0x10/0x10 [ 568.106521][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 568.111566][ C0] ? follow_page_pte+0x29a/0x1ee0 [ 568.116616][ C0] ? follow_page_pte+0x83f/0x1ee0 [ 568.121640][ C0] ? __pfx_lock_release+0x10/0x10 [ 568.126726][ C0] ? count_memcg_event_mm+0x3c2/0x420 [ 568.132118][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 568.137322][ C0] ? folio_mark_accessed+0x6f6/0x11b0 [ 568.142704][ C0] handle_mm_fault+0xfb0/0x19d0 [ 568.147577][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 568.152875][ C0] ? __pfx_find_vma+0x10/0x10 [ 568.157555][ C0] ? vma_is_secretmem+0xd/0x50 [ 568.162321][ C0] ? check_vma_flags+0x500/0x5a0 [ 568.167271][ C0] __get_user_pages+0x6ec/0x16a0 [ 568.172259][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 568.177725][ C0] populate_vma_page_range+0x264/0x330 [ 568.183227][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 568.189225][ C0] ? userfaultfd_unmap_complete+0x30c/0x360 [ 568.195229][ C0] ? do_mmap+0x915/0xfa0 [ 568.199479][ C0] __mm_populate+0x27a/0x460 [ 568.204075][ C0] ? __pfx___mm_populate+0x10/0x10 [ 568.209197][ C0] vm_mmap_pgoff+0x2c3/0x3d0 [ 568.213801][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 568.218916][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 568.225243][ C0] ? do_syscall_64+0x100/0x230 [ 568.230009][ C0] ? ksys_mmap_pgoff+0xdf/0x720 [ 568.234860][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 568.239648][ C0] do_syscall_64+0xf3/0x230 [ 568.244149][ C0] ? clear_bhb_loop+0x35/0x90 [ 568.248844][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.254732][ C0] RIP: 0033:0x7fad5e175a19 [ 568.259144][ C0] RSP: 002b:00007fad5eebb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 568.267574][ C0] RAX: ffffffffffffffda RBX: 00007fad5e303f60 RCX: 00007fad5e175a19 [ 568.275541][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 568.283514][ C0] RBP: 00007fad5e1e4e49 R08: ffffffffffffffff R09: 0000000000000000 [ 568.291489][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 568.299458][ C0] R13: 000000000000000b R14: 00007fad5e303f60 R15: 00007ffc28a10a58 [ 568.307459][ C0] [ 568.310490][ C0] rcu: rcu_preempt kthread starved for 10464 jiffies! g50553 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 568.321699][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 568.331703][ C0] rcu: RCU grace-period kthread stack dump: [ 568.337602][ C0] task:rcu_preempt state:R running task stack:26200 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 568.349336][ C0] Call Trace: [ 568.352613][ C0] [ 568.355546][ C0] __schedule+0x17ae/0x4a10 [ 568.360091][ C0] ? __pfx___schedule+0x10/0x10 [ 568.364945][ C0] ? __pfx_lock_release+0x10/0x10 [ 568.369983][ C0] ? __asan_memset+0x23/0x50 [ 568.374611][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 568.380433][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 568.386779][ C0] ? schedule+0x90/0x320 [ 568.391026][ C0] schedule+0x14b/0x320 [ 568.395186][ C0] schedule_timeout+0x1be/0x310 [ 568.400049][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 568.405430][ C0] ? __pfx_process_timeout+0x10/0x10 [ 568.410715][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 568.416271][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 568.421209][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 568.426495][ C0] ? rcu_gp_init+0x1256/0x1630 [ 568.431259][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 568.436196][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 568.442286][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 568.447583][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 568.453509][ C0] ? finish_swait+0xd4/0x1e0 [ 568.458105][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 568.462703][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 568.467903][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 568.473803][ C0] ? __kthread_parkme+0x169/0x1d0 [ 568.478829][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 568.484025][ C0] kthread+0x2f0/0x390 [ 568.488104][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 568.493302][ C0] ? __pfx_kthread+0x10/0x10 [ 568.497894][ C0] ret_from_fork+0x4b/0x80 [ 568.502314][ C0] ? __pfx_kthread+0x10/0x10 [ 568.506903][ C0] ret_from_fork_asm+0x1a/0x30 [ 568.511684][ C0] [ 568.514697][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 568.521020][ C0] Sending NMI from CPU 0 to CPUs 1: [ 568.526258][ C1] NMI backtrace for cpu 1 [ 568.526270][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 568.526288][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 568.526299][ C1] RIP: 0010:lock_release+0x259/0x9f0 [ 568.526323][ C1] Code: e0 0a 00 00 4c 63 e3 41 83 fc 31 0f 83 ff 05 00 00 4f 8d 2c a4 4f 8d 3c ee 4c 89 ff 48 8b 74 24 20 e8 3b c7 0b 0a 89 5c 24 44 <89> da 85 c0 0f 84 05 02 00 00 4d 85 ff 0f 84 19 03 00 00 49 8d 5f [ 568.526338][ C1] RSP: 0018:ffffc90000a18c80 EFLAGS: 00000046 [ 568.526354][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffc90000a18d03 [ 568.526366][ C1] RDX: 1ffff920001431a0 RSI: ffffffff8e34e208 RDI: ffff888017ad8b08 [ 568.526380][ C1] RBP: ffffc90000a18db0 R08: ffffffff8fac862f R09: 1ffffffff1f590c5 [ 568.526393][ C1] R10: dffffc0000000000 R11: fffffbfff1f590c6 R12: 0000000000000001 [ 568.526406][ C1] R13: 0000000000000005 R14: ffff888017ad8ae0 R15: ffff888017ad8b08 [ 568.526418][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 568.526434][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.526446][ C1] CR2: 00007f10aba6d7ab CR3: 0000000021ae4000 CR4: 00000000003526f0 [ 568.526462][ C1] Call Trace: [ 568.526470][ C1] [ 568.526477][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 568.526503][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 568.526523][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 568.526557][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 568.526578][ C1] ? nmi_handle+0x14f/0x5a0 [ 568.526605][ C1] ? nmi_handle+0x2a/0x5a0 [ 568.526631][ C1] ? lock_release+0x259/0x9f0 [ 568.526649][ C1] ? default_do_nmi+0x63/0x160 [ 568.526674][ C1] ? exc_nmi+0x123/0x1f0 [ 568.526697][ C1] ? end_repeat_nmi+0xf/0x53 [ 568.526723][ C1] ? lock_release+0x259/0x9f0 [ 568.526742][ C1] ? lock_release+0x259/0x9f0 [ 568.526761][ C1] ? lock_release+0x259/0x9f0 [ 568.526779][ C1] [ 568.526785][ C1] [ 568.526793][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 568.526812][ C1] ? timekeeping_get_ns+0x5c/0x420 [ 568.526839][ C1] ? __pfx_lock_release+0x10/0x10 [ 568.526857][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 568.526877][ C1] ? __pfx_lock_release+0x10/0x10 [ 568.526898][ C1] ? timekeeping_get_ns+0x5c/0x420 [ 568.526925][ C1] seqcount_lockdep_reader_access+0x10f/0x220 [ 568.526954][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 568.526983][ C1] ? ktime_get+0x3c/0xb0 [ 568.527011][ C1] ? seqcount_lockdep_reader_access+0x1c1/0x220 [ 568.527039][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 568.527067][ C1] ? handle_softirqs+0x7a5/0x970 [ 568.527087][ C1] timekeeping_get_ns+0x5c/0x420 [ 568.527119][ C1] ktime_get+0x89/0xb0 [ 568.527146][ C1] tick_nohz_start_idle+0x109/0x290 [ 568.527173][ C1] ? __irq_exit_rcu+0x136/0x1c0 [ 568.527193][ C1] __irq_exit_rcu+0x136/0x1c0 [ 568.527211][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 568.527240][ C1] irq_exit_rcu+0x9/0x30 [ 568.527256][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 568.527285][ C1] [ 568.527291][ C1] [ 568.527297][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 568.527318][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 568.527340][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d4 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 75 34 aa 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 568.527355][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 568.527369][ C1] RAX: ffff888017ad8000 RBX: ffff88801b2bf064 RCX: 00000000010e2299 [ 568.527382][ C1] RDX: 0000000000000001 RSI: ffff88801b2bf000 RDI: ffff88801b2bf064 [ 568.527395][ C1] RBP: 000000000003a538 R08: ffff8880b9537ccb R09: 1ffff110172a6f99 [ 568.527408][ C1] R10: dffffc0000000000 R11: ffffffff8b7eab60 R12: ffff88801bfc0000 [ 568.527421][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eac0380 [ 568.527435][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 568.527464][ C1] acpi_idle_enter+0xe4/0x140 [ 568.527487][ C1] cpuidle_enter_state+0x112/0x480 [ 568.527508][ C1] ? __pfx_menu_select+0x10/0x10 [ 568.527537][ C1] cpuidle_enter+0x5d/0xa0 [ 568.527561][ C1] do_idle+0x375/0x5d0 [ 568.527586][ C1] ? __pfx_do_idle+0x10/0x10 [ 568.527611][ C1] ? do_idle+0xc/0x5d0 [ 568.527631][ C1] cpu_startup_entry+0x42/0x60 [ 568.527651][ C1] start_secondary+0x100/0x100 [ 568.527672][ C1] common_startup_64+0x13e/0x147 [ 568.527699][ C1] [ 568.994168][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.006785][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.327871][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.334228][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=584 sent=0 n=-1 (errno 32: Broken pipe) [ 570.107655][ T9996] netlink: 'syz.3.1218': attribute type 4 has an invalid length. [ 571.406288][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 571.689349][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 571.717903][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 571.728060][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 571.749236][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 571.757084][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 571.765635][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 571.930546][ T9993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.053992][ T9993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.130618][ T9993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.183538][T10001] chnl_net:caif_netlink_parms(): no params data found [ 572.222533][ T9993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.324683][T10001] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.332849][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.340569][T10001] bridge_slave_0: entered allmulticast mode [ 572.348459][T10001] bridge_slave_0: entered promiscuous mode [ 572.364094][T10001] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.373592][T10001] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.383501][T10001] bridge_slave_1: entered allmulticast mode [ 572.390985][T10001] bridge_slave_1: entered promiscuous mode [ 572.442249][T10001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.451886][ T9993] bridge_slave_1: left allmulticast mode [ 572.458186][ T9993] bridge_slave_1: left promiscuous mode [ 572.463917][ T9993] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.473288][ T9993] bridge_slave_0: left allmulticast mode [ 572.484047][ T9993] bridge_slave_0: left promiscuous mode [ 572.490063][ T9993] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.845389][ T9993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.869489][ T9993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.882024][ T9993] bond0 (unregistering): Released all slaves [ 572.900519][T10001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.977467][T10001] team0: Port device team_slave_0 added [ 572.996073][T10001] team0: Port device team_slave_1 added [ 573.035575][T10001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.042640][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.069576][T10001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.081994][T10001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.089185][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.115884][T10001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.210550][T10001] hsr_slave_0: entered promiscuous mode [ 573.217550][T10001] hsr_slave_1: entered promiscuous mode [ 573.223840][T10001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.231761][T10001] Cannot create hsr debugfs directory [ 573.352500][ T9993] hsr_slave_0: left promiscuous mode [ 573.360855][ T9993] hsr_slave_1: left promiscuous mode [ 573.368664][ T9993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.376107][ T9993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.384223][ T9993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.393020][ T9993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.418480][ T9993] veth1_macvtap: left promiscuous mode [ 573.424056][ T9993] veth0_macvtap: left promiscuous mode [ 573.429853][ T9993] veth1_vlan: left promiscuous mode [ 573.435166][ T9993] veth0_vlan: left promiscuous mode [ 573.812481][ T5098] Bluetooth: hci0: command tx timeout [ 573.926571][ T9993] team0 (unregistering): Port device team_slave_1 removed [ 573.973952][ T9993] team0 (unregistering): Port device team_slave_0 removed [ 574.803744][T10001] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 574.820572][T10001] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 574.840651][T10001] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 574.853982][T10001] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 574.903866][ T9993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.995063][ T9993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.054874][T10001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.088655][ T9993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.113014][T10001] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.128889][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.136041][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.166771][ T9993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.183481][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.190713][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.240110][T10001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 575.394198][ T9993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.457945][T10001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.482870][ T9993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.553497][ T9993] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.575722][T10001] veth0_vlan: entered promiscuous mode [ 575.589117][T10001] veth1_vlan: entered promiscuous mode [ 575.639161][ T9993] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.656214][T10001] veth0_macvtap: entered promiscuous mode [ 575.671177][T10001] veth1_macvtap: entered promiscuous mode [ 575.692869][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.704484][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.714922][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.726630][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.737125][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.748014][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.759360][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.770293][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.782328][T10001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.795134][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.806081][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.817024][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.827546][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.837455][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.848069][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.858993][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.869598][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.881430][T10001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.890884][ T5098] Bluetooth: hci0: command tx timeout [ 575.911753][T10001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.920689][T10001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.930795][T10001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.941593][T10001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.066971][ T9993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.110013][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.126114][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.171739][ T9993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.191077][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.199179][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.253414][ T9993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.350094][ T9993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.476766][ T9993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.560007][ T9993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.664381][ T9993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.741678][ T9993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.851514][ T9993] bridge_slave_1: left allmulticast mode [ 576.858399][ T9993] bridge_slave_1: left promiscuous mode [ 576.864151][ T9993] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.873464][ T9993] bridge_slave_0: left allmulticast mode [ 576.879336][ T9993] bridge_slave_0: left promiscuous mode [ 576.887858][ T9993] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.898628][ T9993] bridge_slave_1: left allmulticast mode [ 576.904423][ T9993] bridge_slave_1: left promiscuous mode [ 576.911192][ T9993] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.921171][ T9993] bridge_slave_0: left allmulticast mode [ 576.928102][ T9993] bridge_slave_0: left promiscuous mode [ 576.933893][ T9993] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.946897][ T9993] bridge_slave_1: left allmulticast mode [ 576.952627][ T9993] bridge_slave_1: left promiscuous mode [ 576.958982][ T9993] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.969098][ T9993] bridge_slave_0: left allmulticast mode [ 576.974776][ T9993] bridge_slave_0: left promiscuous mode [ 576.981064][ T9993] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.995021][ T9993] bridge_slave_1: left allmulticast mode [ 577.001029][ T9993] bridge_slave_1: left promiscuous mode [ 577.008076][ T9993] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.018276][ T9993] bridge_slave_0: left allmulticast mode [ 577.023979][ T9993] bridge_slave_0: left promiscuous mode [ 577.029978][ T9993] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.308655][ T9993] ip6gretap0 (unregistering): left promiscuous mode