last executing test programs: 1m57.181328779s ago: executing program 2 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x3f00, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05020000000000000000120000001800018014000200626f6e645f736c7176655f31000000000800090000000000"], 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000000)={r9, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001480)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) write$sequencer(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r13 = socket$kcm(0x2, 0x200000000000001, 0x106) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$inet(r13, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004047) sendmsg(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000040)="699fca3cb567b7", 0xfffffeeb}], 0x1}, 0x4000) close_range(r12, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 1m33.629677824s ago: executing program 2 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x3f00, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05020000000000000000120000001800018014000200626f6e645f736c7176655f31000000000800090000000000"], 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000000)={r9, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001480)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) write$sequencer(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r13 = socket$kcm(0x2, 0x200000000000001, 0x106) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$inet(r13, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004047) sendmsg(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000040)="699fca3cb567b7", 0xfffffeeb}], 0x1}, 0x4000) close_range(r12, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 1m19.410347148s ago: executing program 2 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x3f00, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05020000000000000000120000001800018014000200626f6e645f736c7176655f31000000000800090000000000"], 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000000)={r9, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001480)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) write$sequencer(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r13 = socket$kcm(0x2, 0x200000000000001, 0x106) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$inet(r13, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004047) sendmsg(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000040)="699fca3cb567b7", 0xfffffeeb}], 0x1}, 0x4000) close_range(r12, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 55.952924266s ago: executing program 2 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x3f00, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05020000000000000000120000001800018014000200626f6e645f736c7176655f31000000000800090000000000"], 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000000)={r9, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001480)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) write$sequencer(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r13 = socket$kcm(0x2, 0x200000000000001, 0x106) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$inet(r13, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004047) sendmsg(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000040)="699fca3cb567b7", 0xfffffeeb}], 0x1}, 0x4000) close_range(r12, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 48.38551487s ago: executing program 0 (id=3012): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) shmget(0x2, 0x3000, 0x40, &(0x7f00009ad000/0x3000)=nil) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x34}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 47.367110877s ago: executing program 0 (id=3016): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4, @remote, 0x5}, 0x1c) r3 = syz_open_dev$sndctrl(&(0x7f00000070c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000100)=""/184) 46.964499623s ago: executing program 0 (id=3018): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 46.230322272s ago: executing program 0 (id=3019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x7, 0xc, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 45.203223259s ago: executing program 0 (id=3022): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = io_uring_setup(0x523e, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x64, 0x98, 0x1c, 0x40, 0x46d, 0x928, 0xc553, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc1, 0x0, 0x0, 0xae, 0xa2, 0xf4, 0x9}}, {{0x9, 0x4, 0xd9, 0x0, 0x0, 0x3f, 0x38, 0x7f}}]}}]}}, 0x0) 44.898118272s ago: executing program 0 (id=3023): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000300"/28], 0x50) r1 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x3fffff, 0x400, 0x2, 0xffffffff}, &(0x7f0000000200), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x9dca, 0x0, 0x0, 0x38e}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="86e04d", 0x3, 0x10}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r8, &(0x7f0000000080)=""/75, 0x8e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r9 = syz_open_dev$vcsu(&(0x7f0000000180), 0x29, 0x0) read$alg(r9, &(0x7f0000000280)=""/74, 0x4a) unshare(0x20060000) 44.749268631s ago: executing program 32 (id=3023): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000300"/28], 0x50) r1 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x3fffff, 0x400, 0x2, 0xffffffff}, &(0x7f0000000200), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x9dca, 0x0, 0x0, 0x38e}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="86e04d", 0x3, 0x10}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r8, &(0x7f0000000080)=""/75, 0x8e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r9 = syz_open_dev$vcsu(&(0x7f0000000180), 0x29, 0x0) read$alg(r9, &(0x7f0000000280)=""/74, 0x4a) unshare(0x20060000) 33.665559087s ago: executing program 2 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x3f00, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05020000000000000000120000001800018014000200626f6e645f736c7176655f31000000000800090000000000"], 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000000)={r9, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001480)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) write$sequencer(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r13 = socket$kcm(0x2, 0x200000000000001, 0x106) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$inet(r13, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004047) sendmsg(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000040)="699fca3cb567b7", 0xfffffeeb}], 0x1}, 0x4000) close_range(r12, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 13.577878146s ago: executing program 5 (id=3093): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = getpgid(0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000140)=r1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x11, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r7, &(0x7f0000000580), 0x0, 0x4}, 0x20) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x3) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 10.758431691s ago: executing program 3 (id=3104): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bind$bt_hci(r0, 0x0, 0x0) 10.728447453s ago: executing program 3 (id=3105): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='no']) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x1010, r6, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, &(0x7f0000000000)=""/73, 0x49) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x0, 0x0) 9.565568855s ago: executing program 1 (id=3109): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x80047c7, 0x4) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @remote}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 8.536217989s ago: executing program 5 (id=3110): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000c80)={0x20, 0xe, 0x2, {0x2, 0x7e8e703122aff25f}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000040)={0x1, @output={0x0, 0xe00, {0xc95, 0x9}, 0x2, 0xb}}) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) 8.527599748s ago: executing program 1 (id=3111): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x60, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9}, 0x80, &(0x7f0000000080)}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000002000000850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000300)=ANY=[]) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) r10 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r10, 0x1a, &(0x7f0000000140), 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r10, {r10}}, './file0\x00'}) 8.486935672s ago: executing program 2 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x3f00, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05020000000000000000120000001800018014000200626f6e645f736c7176655f31000000000800090000000000"], 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000000)={r9, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001480)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) write$sequencer(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r13 = socket$kcm(0x2, 0x200000000000001, 0x106) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$inet(r13, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004047) sendmsg(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000040)="699fca3cb567b7", 0xfffffeeb}], 0x1}, 0x4000) close_range(r12, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 7.429754508s ago: executing program 1 (id=3112): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = io_uring_setup(0x523e, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x64, 0x98, 0x1c, 0x40, 0x46d, 0x928, 0xc553, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc1, 0x0, 0x0, 0xae, 0xa2, 0xf4, 0x9}}, {{0x9, 0x4, 0xd9, 0x0, 0x0, 0x3f, 0x38, 0x7f}}]}}]}}, 0x0) 7.42590449s ago: executing program 3 (id=3113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x3}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r1 = syz_usb_connect(0x6, 0x5a, &(0x7f00000027c0)={{0x12, 0x1, 0x0, 0x9e, 0xb3, 0xf4, 0x20, 0x1608, 0x217, 0x3063, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc1, 0x0, 0x0, 0xce, 0x1d, 0x42, 0x0, [@hid_hid={0x9, 0x21, 0x7, 0x7, 0x1, {0x22, 0x4f1}}, @uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xc, 0xfff7, 0x9}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x2, 0xb1, 0x6, "c3869b", "1cfb"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x5, 0x6, 0x9c, "b96854"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x3, 0x7, 0x4, "e7d9", "02"}]}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x20, 0x31, 0x8, "b94af646ec5d948b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002780)={0xffffffffffffff8f, &(0x7f0000000dc0)=ANY=[@ANYRES64], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)=ANY=[], &(0x7f00000023c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xcd, 0x7, 0x8, 0x40, 0x3}, 0x13, &(0x7f0000002180)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x9, 0xcb}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x5, 0x100}]}, 0x5, [{0xe, &(0x7f0000002840)=@string={0xe, 0x3, "35d1c5289994eece60249598"}}, {0x4, &(0x7f0000002880)=@string={0x0, 0x3, "260c3c6fc40c67b4a6e1c3177ad2d24e36740245e42cdb5091a8bc3539bb88ef32e7b9813a4650df10d47a619af04ae5b17f210c14f99f83a10a8f4548126f205bca734e713f0f51f481edaaa40bf9fd727b590ff1757b14c905d65ca7b013435728488adf7519b47e277a6d33c5249a9397a555fdb78e4b573cf88bdea0e14226110ace331dfd711330ab349448b049ccc1c6b246457e2bf739290983f22ba2b50333bc9d86fcf284fa0d8fab1a900772dcca0a724010b6064426fc8c41ceb34ce997d02011796a3d0937d831e49d6a7c0ea0217800dd3380ff2331620bf37ea9308dda49c1755801836387adebfee9385aff9a3b7762"}}, {0x53, &(0x7f0000002280)=@string={0x53, 0x3, "4e3567dfc68b3f41d5184a8d9ab8bf0cebd5898f726698c9cad7103936556219c00f74e27b3658a8e1d2cea90d1a80589fb568d99293ff7a28c4581202c294f5c4bbdb1c3d90559e456ee0d7f4e6f83c63"}}, {0x68, &(0x7f0000002300)=@string={0x4f, 0x3, "86f0bd6b1a8e33737dd886109ef72533ccac71d737f38a95eb9be84b43042fa82bb6ea083f11ea8b372c8fd4f9e9845db15ca3a2f515b011ce200f2ebfcb2f10b192a8819b6ee0dce60eb04099"}}, {0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x80c}}]}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000200)={0x0, 0x0, 0x3}) r6 = socket(0x200000100000011, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) syz_usb_connect$cdc_ecm(0x3, 0xf4, &(0x7f0000002440)=ANY=[@ANYBLOB="12010002020000ff2505a1a44000010203010902e20001010280a80904002202020600050624060000b505240003000d240f010100008047f0ff0f000c241b05000d0007010e00ff0c241b0300fdff080f00080405240104048924130910f7acbb25809cec2c686926204a7f1e71acd56864d902b395cc3d267651506008536507bef0c7e803d40e4f3f64ff1f7d6b91d536ec6ca0e4724942608c03b36d267e097c24b14e506a3ca0a0c93f8c825201f1b6625047d146d6e61c29269dea3a0ca658295edb12b068697dde4126def69de105db4609058202000207f00409050302100009030f00"/244], &(0x7f0000002740)={0xa, &(0x7f0000002540)={0xa, 0x6, 0x300, 0xb, 0xfd, 0x10, 0x40, 0x4}, 0x6f, &(0x7f0000002580)={0x5, 0xf, 0x6f, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x4, 0x703c}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x7, 0xf, 0x8, [0x3f0f, 0x30, 0x1fe0030, 0xff00, 0xffcf]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x8, 0x83, 0x200, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x1, 0x7, 0x7}, @generic={0x2b, 0x10, 0xa, "0b99ecc72e3ae5c8d40b4df2d4fc559114d2334d9ed9563e0bc848514b1bf6fc0e85aaf496acf4a3"}]}, 0x3, [{0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x34, &(0x7f0000002640)=@string={0x34, 0x3, "0bb0d2def33b81e8b49fdba724be8bf88d0496f53a733a5786de6387a712796b8a3d58ed046db21a966496d7f6c0ab326a7b"}}, {0xbe, &(0x7f0000002680)=ANY=[@ANYBLOB="be038d36e82fea5249b8ea2339aafee62d0969e819b447f259c09885b14e89f1e508b8439420b6bd60a128697956cb32af389b96288f5e98caadcf422f163f157692d8f0a2ed1ff60730d609a470bbbcec68be77ec425e5ca445bc2aa4b6f5a1a1e3e107846922fb9ace31485a73edd6b366eb872b49d34f6bad1f400d107ca607f11d2a58cbef08ba7c1cf0f4e20000000000000000297876356b7c7bf32fda82dc251b26cad1937de22f28ba3d9936fa89576ff8ada3e27e0ed4ee6819"]}]}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x1eff8a1cfddfdce2, 0x6, 0x4, "378e9277"}, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r9, &(0x7f0000000140)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000800000000000000", @ANYRES32, @ANYRESDEC], 0x48) 6.148802489s ago: executing program 5 (id=3117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8048) 6.098907632s ago: executing program 5 (id=3118): socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000003c0)=0x1, &(0x7f0000000400)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$key(0xf, 0x3, 0x2) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000080)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x44}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000340)=0x4) r2 = socket(0x10, 0x803, 0x0) mount$nfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nof']) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x3f, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) getsockname$packet(r2, 0x0, &(0x7f0000000280)) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010201010902120001000000000904000000"], 0x0) memfd_secret(0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) 5.39844875s ago: executing program 1 (id=3121): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = getpgid(0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000140)=r1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x11, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r7, &(0x7f0000000580), 0x0, 0x4}, 0x20) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x3) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 3.824978173s ago: executing program 5 (id=3124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x1d0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) (fail_nth: 4) 3.274135584s ago: executing program 5 (id=3126): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f00000000c0)={0x40, 0x8, 0x31, {0x31, 0x31, "fc162eaf88eb019d625397a3040a7ffb9aa796ede41e125066f1086c31f678daf5c5315d164c9e95acf2c01e52bf34"}}, &(0x7f00000002c0)={0x0, 0x3, 0xda, @string={0xda, 0x3, "27d0a4981c4d8e6a7e93b14c6e696b4134fa5e93e038a9311b906ed57b8c403ddc5dd5d961890ed8f34e69b996c72be7ccf7de67a897cf66227607e640413703f182216320d3b9504db905e33172d72b11839c59e4744b17bcaf1c756b33e7d5f50ce5ef2dacf3a539e26ff3f990aa49ea8ebdf2407d6431d7edc4c2c0e0cad3afa6cda5d6287cc165151bf8101bf05d8cdea8d75c99aeeed065dba714ac55e788681e35d3283e85f9b556fda20e93a9c5a44c6edfc3e4bfcf75bbd51dc5c814e6c92e807c69f0eb6cf911f7e936b4adc185b5559d3eb285"}}}, &(0x7f0000000540)={0x44, &(0x7f0000000180)={0x0, 0x16, 0x63, "15ba9f4a25efc9d25fcaf47813cd994288f6800c7b731b35b67b869d77568df6fc54e659ae4833ad08490addc72dd8a3c9318ea0df97b2d1828658566f4d509044b7c4bba976372e6bf2788793ad395bfea20bee745cdb048093199606939610853d2d"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x81, 0x1, "bf"}, &(0x7f0000000440)={0x20, 0x82, 0x2, "c470"}, &(0x7f0000000480)={0x20, 0x83, 0x1, "8a"}, &(0x7f00000004c0)={0x20, 0x84, 0x1, "a2"}, &(0x7f0000000500)={0x20, 0x85, 0x3, 'X_9'}}) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f00000000c0)={0x40, 0x8, 0x31, {0x31, 0x31, "fc162eaf88eb019d625397a3040a7ffb9aa796ede41e125066f1086c31f678daf5c5315d164c9e95acf2c01e52bf34"}}, &(0x7f00000002c0)={0x0, 0x3, 0xda, @string={0xda, 0x3, "27d0a4981c4d8e6a7e93b14c6e696b4134fa5e93e038a9311b906ed57b8c403ddc5dd5d961890ed8f34e69b996c72be7ccf7de67a897cf66227607e640413703f182216320d3b9504db905e33172d72b11839c59e4744b17bcaf1c756b33e7d5f50ce5ef2dacf3a539e26ff3f990aa49ea8ebdf2407d6431d7edc4c2c0e0cad3afa6cda5d6287cc165151bf8101bf05d8cdea8d75c99aeeed065dba714ac55e788681e35d3283e85f9b556fda20e93a9c5a44c6edfc3e4bfcf75bbd51dc5c814e6c92e807c69f0eb6cf911f7e936b4adc185b5559d3eb285"}}}, &(0x7f0000000540)={0x44, &(0x7f0000000180)={0x0, 0x16, 0x63, "15ba9f4a25efc9d25fcaf47813cd994288f6800c7b731b35b67b869d77568df6fc54e659ae4833ad08490addc72dd8a3c9318ea0df97b2d1828658566f4d509044b7c4bba976372e6bf2788793ad395bfea20bee745cdb048093199606939610853d2d"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x81, 0x1, "bf"}, &(0x7f0000000440)={0x20, 0x82, 0x2, "c470"}, &(0x7f0000000480)={0x20, 0x83, 0x1, "8a"}, &(0x7f00000004c0)={0x20, 0x84, 0x1, "a2"}, &(0x7f0000000500)={0x20, 0x85, 0x3, 'X_9'}}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0xa, 0x36, 0x4, 0x632, 0x18, "c3d2571876c92407346f120b80a12a2675968d"}) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d00)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aad01f05c2b6eb11"], 0x0, 0x0, 0x0}) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe72, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f00000005c0)={0x20, 0xa, 0x1b, {0x1b, 0x6, "860bdf982ecc0a1bfedd7398c687f32f8b1cce9c374d23cee2"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}, &(0x7f0000000640)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "d532b9409ae40b141a8abad0c6295525"}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x5, 0x5, "8d5c09cd", "b01b9597"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0xff, 0xb, 0x0, 0x30, 0xe8}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000780)={0x40, 0x10, 0x24, "bcce3ba511dfc459d79699e3142b646bd401674e51a036deaa65349c4088d0a38fedae0f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x1e0, 0x4, [0xfff]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0xb1}, &(0x7f0000000940)={0x40, 0xb, 0x2, "b4df"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x937}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "9cd6"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0xa8d0}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0xa8}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x84}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, 'eH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.190122587s ago: executing program 3 (id=3131): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x14, 0x0, 0x4f6}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4, @remote, 0x5}, 0x1c) r2 = syz_open_dev$sndctrl(&(0x7f00000070c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000100)=""/184) 1.225814733s ago: executing program 4 (id=3132): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002", 0x5) (async) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002", 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010000000000ecffffff00000000", @ANYRES32=r3, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f000000000006000e"], 0x50}}, 0x0) sendfile(r1, r0, 0x0, 0x3fffff) 1.223628591s ago: executing program 3 (id=3133): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000002c0)={0x18, r1}) (fail_nth: 4) 1.105728781s ago: executing program 4 (id=3134): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1e, 0x0, @thr={&(0x7f0000000280)="5b31938361e324477e127e56d0c24f4539fe27eaa71958cd5c602c6287c10dd65e987f3d8894b22efea4f6247eb5b78d023246a14bfbc8e629ce301be5850a284c9227e2ca7a2a764b1f82e976e9f4bf4f9f169a7621a713250851245bd9e4a8b88a2c0ffd5620fc8dd1058cc4f0d8697e6b035a203012ec5737f4663b86b238658c5b62a4e1fc7eecf675d9c132a5be3886955481277641eec4ab4e4a740435f2ad15", &(0x7f0000000340)="7f102b33c454dc28393b837f7f3e52a026c81755ddbb87c0ef9fcaaff4fdb3c55732ae9af70a7645c29c8ffcc62e243bdc4f529ca98c703b0773cecab28efa9aae8f3d485e851aaa32a7e30bffe4beb785c7"}}, &(0x7f0000000040)=0x0) timer_getoverrun(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x202080, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000840)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x3, [0x0], [], [0x428e050d], [0x0, 0x3ff]}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000140)={r6}) close_range(r2, 0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$FUSE_OPEN(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.100714212s ago: executing program 1 (id=3135): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCFLSH(r4, 0x5424, 0x20000020001100) syz_emit_ethernet(0x5e, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb863145bd94d0962d682df238074df79ddd6001018f0028110020010000000000000000000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000008e2527cbc17505939bfad0d3f172b116"], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xdb, 0xff, 0x6}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x800002}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000003f00007870f351bf1fe700"/28, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x1000000, 0x1000000}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0xde, 0x1bf, 0x1b58}) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x8, 0x4, 0x7fff, 0x0, 0x1b, "7f8c4e976bd29eebc209305eecff36b3dcc93c"}) close_range(r0, 0xffffffffffffffff, 0x0) 762.189348ms ago: executing program 4 (id=3136): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1d, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 738.433126ms ago: executing program 1 (id=3137): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) set_mempolicy(0x3, 0x0, 0x8) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) write$vga_arbiter(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='lock i'], 0x8) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@abs={0x1}, 0x6e) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4) connect$unix(r5, &(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e) (async) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0xce42, 0xc0000) ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x1) (async) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, &(0x7f0000000a80)) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="50010000020205000000000000000000020000040800044000000081280001800c00028005000100880000000c00028005000100880000000c000280050001002f000000900002802c0001"], 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) io_setup(0x2, &(0x7f0000000180)=0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r9, 0x0}]) (async) write$vga_arbiter(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='unlock mem'], 0xb) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xd00, 0x0) 687.822038ms ago: executing program 4 (id=3138): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x80005, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 545.554954ms ago: executing program 4 (id=3139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x8048) 178.141555ms ago: executing program 4 (id=3140): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_clone3(&(0x7f0000000040)={0x200126000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x408b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getrlimit(0xc, &(0x7f00000000c0)) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x10100, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r6, 0x401) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) ustat(0xfffffffeffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[], 0x44}}, 0x4010) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="09000000010082", 0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x400c040}, 0x40) 0s ago: executing program 3 (id=3141): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x80005, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 2) kernel console output (not intermixed with test programs): ooth: hci3: command tx timeout [ 1048.903273][ T933] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1048.913550][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.920249][ T933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.983278][T16905] blktrace: Concurrent blktraces are not allowed on loop2 [ 1048.989968][ T933] usb 1-1: Product: syz [ 1048.994655][ T933] usb 1-1: Manufacturer: syz [ 1048.999429][ T933] usb 1-1: SerialNumber: syz [ 1049.022201][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1049.022236][ T29] audit: type=1326 audit(1733344640.654:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16898 comm="syz.1.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1049.128799][ T1088] bond0 (unregistering): Released all slaves [ 1049.279506][ T29] audit: type=1326 audit(1733344640.654:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16898 comm="syz.1.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1049.362557][ T933] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1049.378228][ T933] usb 1-1: USB disconnect, device number 100 [ 1049.388171][ T29] audit: type=1326 audit(1733344640.654:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16898 comm="syz.1.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1049.449951][ T29] audit: type=1326 audit(1733344640.654:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16898 comm="syz.1.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1049.479432][ T29] audit: type=1326 audit(1733344640.654:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16898 comm="syz.1.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1049.545869][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1049.589210][ T29] audit: type=1326 audit(1733344640.654:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16898 comm="syz.1.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1049.613008][ T29] audit: type=1326 audit(1733344640.663:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16898 comm="syz.1.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1049.637879][ T29] audit: type=1326 audit(1733344640.663:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16898 comm="syz.1.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1049.661750][ T29] audit: type=1326 audit(1733344640.663:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16898 comm="syz.1.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1049.697832][ T29] audit: type=1326 audit(1733344640.663:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16898 comm="syz.1.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1049.940782][T16915] netlink: 'syz.4.2899': attribute type 21 has an invalid length. [ 1049.982572][T16915] netlink: 'syz.4.2899': attribute type 6 has an invalid length. [ 1050.069439][T16915] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2899'. [ 1050.086900][T16875] chnl_net:caif_netlink_parms(): no params data found [ 1050.196258][T16875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.203898][T16875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.211494][T16875] bridge_slave_0: entered allmulticast mode [ 1050.217880][T16875] bridge_slave_0: entered promiscuous mode [ 1050.233864][T16875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.235520][ T933] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1050.241235][T16875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.255869][T16875] bridge_slave_1: entered allmulticast mode [ 1050.262524][T16875] bridge_slave_1: entered promiscuous mode [ 1050.296643][T16875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.307805][T16875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.327376][T16875] team0: Port device team_slave_0 added [ 1050.336301][T16875] team0: Port device team_slave_1 added [ 1050.360093][ T1088] hsr_slave_0: left promiscuous mode [ 1050.365827][ T1088] hsr_slave_1: left promiscuous mode [ 1050.372080][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.379478][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.387321][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.394923][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.413513][ T933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.415513][ T1088] veth1_macvtap: left promiscuous mode [ 1050.432698][ T1088] veth0_macvtap: left promiscuous mode [ 1050.438247][ T933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.438898][ T1088] veth1_vlan: left promiscuous mode [ 1050.448237][ T933] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1050.453510][ T1088] veth0_vlan: left promiscuous mode [ 1050.466643][ T933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.485401][ T5830] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1050.495542][ T933] usb 2-1: config 0 descriptor?? [ 1050.646959][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1050.663376][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 1050.691996][ T5830] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 1050.706131][ T5830] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 1050.720053][ T5830] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1050.753637][ T5830] usb 4-1: config 250 has no interface number 0 [ 1050.774505][ T5830] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1050.792218][ T5830] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1050.804620][ T5830] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 1050.825245][ T5830] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1050.837509][ T5830] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1050.858056][ T5830] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1050.868686][ T5830] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1050.879022][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1050.902691][ T5830] usb 4-1: Product: syz [ 1050.914241][ T5830] usb 4-1: SerialNumber: syz [ 1050.935392][ T5830] hub 4-1:250.228: bad descriptor, ignoring hub [ 1050.970143][ T5830] hub 4-1:250.228: probe with driver hub failed with error -5 [ 1051.079595][T16940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2905'. [ 1051.099774][ T5820] Bluetooth: hci3: command tx timeout [ 1051.204254][ T933] usbhid 2-1:0.0: can't add hid device: -71 [ 1051.231303][ T933] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1051.282704][ T5830] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 73 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1051.449595][ T933] usb 2-1: USB disconnect, device number 90 [ 1051.484511][ T5830] usb 4-1: USB disconnect, device number 73 [ 1051.509357][ T5830] usblp0: removed [ 1051.772817][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1051.851463][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 1051.890114][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 1052.561965][T16875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.568979][T16875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.635484][T16875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.709066][T16927] : renamed from bond0 (while UP) [ 1052.844749][T16875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.852386][T16875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.878466][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1052.977517][T16875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.194262][T16875] hsr_slave_0: entered promiscuous mode [ 1053.558713][ T5820] Bluetooth: hci3: command tx timeout [ 1053.730083][T16875] hsr_slave_1: entered promiscuous mode [ 1053.982455][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1054.935438][ T5870] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1055.094312][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1055.466988][ T865] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1055.527599][T16875] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1055.576022][T16875] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1055.588390][T16875] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1055.604797][ T5870] usb 4-1: config 0 has an invalid interface number: 193 but max is 1 [ 1055.613473][ T5870] usb 4-1: config 0 has an invalid interface number: 217 but max is 1 [ 1055.614993][T16875] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1055.621761][ T5870] usb 4-1: config 0 has no interface number 0 [ 1055.621782][ T5870] usb 4-1: config 0 has no interface number 1 [ 1055.621820][ T5870] usb 4-1: New USB device found, idVendor=046d, idProduct=0928, bcdDevice=c5.53 [ 1055.621844][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.641056][ T865] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.672169][ T5870] usb 4-1: config 0 descriptor?? [ 1055.778526][ T5820] Bluetooth: hci3: command tx timeout [ 1055.835619][T16875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.852545][ T865] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1055.856000][T16875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.880895][ T865] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1055.899314][ T5870] usb 4-1: string descriptor 0 read error: -71 [ 1055.916935][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.924043][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.936261][ T5870] usb 4-1: USB disconnect, device number 74 [ 1055.956612][ T865] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1055.966123][ T865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.981461][ T865] usb 1-1: Product: syz [ 1055.985644][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.985694][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.007023][ T865] usb 1-1: Manufacturer: syz [ 1056.014179][ T865] usb 1-1: SerialNumber: syz [ 1056.020609][T16875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1056.024824][ T865] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1056.065925][ T865] cdc_ncm 1-1:1.0: bind() failure [ 1056.206095][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1056.355478][T16875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1056.405358][T16875] veth0_vlan: entered promiscuous mode [ 1056.427067][T16875] veth1_vlan: entered promiscuous mode [ 1056.475225][T16875] veth0_macvtap: entered promiscuous mode [ 1056.487718][T16875] veth1_macvtap: entered promiscuous mode [ 1056.535070][T16875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.546309][T16875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.556274][T16875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.566888][T16875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.578078][T16875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.588646][T16875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.602608][T16875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1056.624876][T16875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.635731][T16875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.645988][T16875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.656577][T16875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.666762][T16875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.677495][T16875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.688240][T16875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1056.697590][T16875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.706477][T16875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.719268][T16875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.728725][T16875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.780091][T16993] ALSA: mixer_oss: invalid OSS volume 'u' [ 1056.830873][T17007] netlink: 'syz.0.2915': attribute type 21 has an invalid length. [ 1056.839544][T17007] netlink: 'syz.0.2915': attribute type 6 has an invalid length. [ 1056.847409][T17007] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2915'. [ 1057.221452][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.240452][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.276114][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.303865][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.317962][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1058.429849][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1058.545168][ T5870] usb 1-1: USB disconnect, device number 101 [ 1058.547638][T17026] netlink: 'syz.3.2924': attribute type 72 has an invalid length. [ 1058.565552][T17026] netlink: 'syz.3.2924': attribute type 8 has an invalid length. [ 1059.447772][T14599] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1059.488582][ T1088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.541639][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1059.616478][T14599] usb 2-1: Using ep0 maxpacket: 16 [ 1059.639473][T14599] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1059.653252][T14599] usb 2-1: config 0 has no interface number 0 [ 1059.666673][T14599] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1059.688708][T14599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.700646][T14599] usb 2-1: Product: syz [ 1059.710292][T14599] usb 2-1: Manufacturer: syz [ 1059.721109][T14599] usb 2-1: SerialNumber: syz [ 1059.731621][T14599] usb 2-1: config 0 descriptor?? [ 1059.739380][T14599] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1060.346199][T17049] FAULT_INJECTION: forcing a failure. [ 1060.346199][T17049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1060.368424][T17049] CPU: 1 UID: 0 PID: 17049 Comm: syz.4.2933 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 1060.379220][T17049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1060.389286][T17049] Call Trace: [ 1060.392569][T17049] [ 1060.395499][T17049] dump_stack_lvl+0x16c/0x1f0 [ 1060.400186][T17049] should_fail_ex+0x497/0x5b0 [ 1060.404883][T17049] _copy_from_iter+0x2a1/0x1560 [ 1060.409743][T17049] ? trace_lock_acquire+0x14e/0x1f0 [ 1060.414970][T17049] ? __alloc_skb+0x1fe/0x380 [ 1060.419585][T17049] ? __pfx__copy_from_iter+0x10/0x10 [ 1060.424877][T17049] ? __virt_addr_valid+0x1a4/0x590 [ 1060.430011][T17049] ? __virt_addr_valid+0x5e/0x590 [ 1060.435056][T17049] ? __phys_addr_symbol+0x30/0x80 [ 1060.440097][T17049] ? __check_object_size+0x488/0x710 [ 1060.445401][T17049] netlink_sendmsg+0x813/0xd70 [ 1060.450196][T17049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1060.455511][T17049] ____sys_sendmsg+0xaaf/0xc90 [ 1060.460298][T17049] ? copy_msghdr_from_user+0x10b/0x160 [ 1060.465775][T17049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1060.471095][T17049] ___sys_sendmsg+0x135/0x1e0 [ 1060.475785][T17049] ? __pfx____sys_sendmsg+0x10/0x10 [ 1060.481004][T17049] ? __pfx_lock_release+0x10/0x10 [ 1060.486036][T17049] ? trace_lock_acquire+0x14e/0x1f0 [ 1060.491256][T17049] ? __fget_files+0x206/0x3a0 [ 1060.495948][T17049] __sys_sendmsg+0x16e/0x220 [ 1060.500546][T17049] ? __pfx___sys_sendmsg+0x10/0x10 [ 1060.505675][T17049] do_syscall_64+0xcd/0x250 [ 1060.510186][T17049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.516091][T17049] RIP: 0033:0x7f377737ff19 [ 1060.520509][T17049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1060.540130][T17049] RSP: 002b:00007f37780d8058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1060.548546][T17049] RAX: ffffffffffffffda RBX: 00007f3777545fa0 RCX: 00007f377737ff19 [ 1060.556522][T17049] RDX: 0000000000000080 RSI: 0000000020000a00 RDI: 0000000000000004 [ 1060.564489][T17049] RBP: 00007f37780d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1060.572446][T17049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.580407][T17049] R13: 0000000000000000 R14: 00007f3777545fa0 R15: 00007fff57d84528 [ 1060.588373][T17049] [ 1060.591456][ C1] vkms_vblank_simulate: vblank timer overrun [ 1060.650032][T15771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1060.660881][T15771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1060.664083][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1060.669555][T15771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1060.685032][T15771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1060.692759][T15771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1060.700204][T15771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1061.765216][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1061.767527][T14599] gspca_spca1528: reg_w err -110 [ 1061.856715][T14599] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 1062.037143][T17053] chnl_net:caif_netlink_parms(): no params data found [ 1062.127347][T17053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.143910][T17053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.151191][T17053] bridge_slave_0: entered allmulticast mode [ 1062.157953][T17053] bridge_slave_0: entered promiscuous mode [ 1062.384475][T17053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.643389][T17053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.662959][T17053] bridge_slave_1: entered allmulticast mode [ 1062.887724][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1062.945900][T17076] Falling back ldisc for ttyS3. [ 1063.108886][T15771] Bluetooth: hci3: command tx timeout [ 1063.305304][T17053] bridge_slave_1: entered promiscuous mode [ 1063.375074][ T1088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.392838][T17081] netlink: 'syz.3.2938': attribute type 72 has an invalid length. [ 1063.405503][T17081] netlink: 'syz.3.2938': attribute type 8 has an invalid length. [ 1063.448651][T17053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.473723][T17053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.542583][ T1088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.896152][T17053] team0: Port device team_slave_0 added [ 1063.906650][T17053] team0: Port device team_slave_1 added [ 1063.924499][ T1088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.988870][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1064.191009][T17053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.288022][T17053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.451453][T17053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.461173][ T5899] usb 2-1: USB disconnect, device number 91 [ 1064.467339][T17053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.516988][T17097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.526349][T17097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.534553][T17053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.593152][T17053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.718551][T17053] hsr_slave_0: entered promiscuous mode [ 1064.725803][T17053] hsr_slave_1: entered promiscuous mode [ 1064.733766][T17053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1064.742925][T17053] Cannot create hsr debugfs directory [ 1064.765990][ T1088] bridge_slave_1: left allmulticast mode [ 1064.776578][ T1088] bridge_slave_1: left promiscuous mode [ 1064.785179][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.814998][ T1088] bridge_slave_0: left allmulticast mode [ 1064.826953][ T1088] bridge_slave_0: left promiscuous mode [ 1064.832848][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.878587][ T5899] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1065.041381][T17103] netlink: 'syz.3.2944': attribute type 72 has an invalid length. [ 1065.050132][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 1065.055717][T17103] netlink: 'syz.3.2944': attribute type 8 has an invalid length. [ 1065.065359][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.092881][ T5899] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 1065.102981][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.111380][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1065.122383][ T5899] usb 2-1: Product: syz [ 1065.133082][ T5899] usb 2-1: Manufacturer: syz [ 1065.143640][ T5899] usb 2-1: SerialNumber: syz [ 1065.155902][ T5899] usb 2-1: config 0 descriptor?? [ 1065.273270][T15771] Bluetooth: hci3: command tx timeout [ 1065.377391][ T5899] usb 2-1: Cannot retrieve CPort count: -71 [ 1065.386646][ T5899] usb 2-1: Cannot retrieve CPort count: -71 [ 1065.403915][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.404278][ T5899] es2_ap_driver 2-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 1065.431531][ T5899] usb 2-1: USB disconnect, device number 92 [ 1065.439099][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.465609][ T1088] bond0 (unregistering): Released all slaves [ 1066.212507][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1067.324326][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1067.331952][T17120] Falling back ldisc for ttyS3. [ 1067.390215][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1067.390231][ T29] audit: type=1326 audit(1733344657.884:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377737ff19 code=0x7ffc0000 [ 1067.452791][ T29] audit: type=1326 audit(1733344657.884:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377737ff19 code=0x7ffc0000 [ 1067.483189][T17123] blktrace: Concurrent blktraces are not allowed on loop8 [ 1067.498096][ T29] audit: type=1400 audit(1733344657.987:1971): avc: denied { create } for pid=17130 comm="syz.3.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1067.498682][T17131] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 1067.533024][T15771] Bluetooth: hci3: command tx timeout [ 1067.538184][T17131] audit: out of memory in audit_log_start [ 1067.552073][ T29] audit: type=1326 audit(1733344658.033:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f377737ff19 code=0x7ffc0000 [ 1067.577553][T17123] relay: one or more items not logged [item size (64) > sub-buffer size (10)] [ 1067.586728][T17127] wireguard0: entered promiscuous mode [ 1067.593769][T17127] wireguard0: entered allmulticast mode [ 1067.609011][ T29] audit: type=1326 audit(1733344658.052:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377737ff19 code=0x7ffc0000 [ 1067.699992][ T29] audit: type=1326 audit(1733344658.052:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f377737ff19 code=0x7ffc0000 [ 1067.793222][ T29] audit: type=1326 audit(1733344658.052:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377737ff19 code=0x7ffc0000 [ 1067.831495][ T29] audit: type=1326 audit(1733344658.052:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.4.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377737ff19 code=0x7ffc0000 [ 1067.855021][ C1] vkms_vblank_simulate: vblank timer overrun [ 1068.037427][ T1088] hsr_slave_0: left promiscuous mode [ 1068.050038][ T1088] hsr_slave_1: left promiscuous mode [ 1068.080673][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.103849][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.271293][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.386493][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.436160][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1068.876818][ T1088] veth1_macvtap: left promiscuous mode [ 1068.882365][ T1088] veth0_macvtap: left promiscuous mode [ 1068.913948][ T1088] veth1_vlan: left promiscuous mode [ 1068.935313][ T1088] veth0_vlan: left promiscuous mode [ 1069.329613][T17155] Mount JFS Failure: -22 [ 1069.334195][T17155] jfs_mount failed w/return code = -22 [ 1069.547964][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1069.748152][T15771] Bluetooth: hci3: command tx timeout [ 1070.659893][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1071.147434][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 1071.197978][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 1071.782309][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1072.883442][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1073.995285][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1074.475977][T17187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2963'. [ 1074.720701][ T5899] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1074.887166][T17053] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1074.898200][ T5899] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1074.914786][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.940863][ T5899] usb 4-1: Product: syz [ 1074.945096][ T5899] usb 4-1: Manufacturer: syz [ 1074.949858][ T5899] usb 4-1: SerialNumber: syz [ 1074.957241][T17053] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1074.966465][ T5899] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1074.980307][T17053] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1075.117775][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1075.255236][T17053] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1075.496587][ T865] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1075.565968][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 1075.565984][ T29] audit: type=1400 audit(1733344665.526:1994): avc: denied { bind } for pid=17190 comm="syz.1.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1075.592513][T17053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.612999][T17053] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.696580][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.703644][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.733350][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.740491][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.766822][T17053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1076.005592][T17204] FAULT_INJECTION: forcing a failure. [ 1076.005592][T17204] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.018791][T17204] CPU: 0 UID: 0 PID: 17204 Comm: syz.0.2967 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 1076.029575][T17204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1076.035747][T17053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1076.039621][T17204] Call Trace: [ 1076.039633][T17204] [ 1076.039641][T17204] dump_stack_lvl+0x16c/0x1f0 [ 1076.039671][T17204] should_fail_ex+0x497/0x5b0 [ 1076.062023][T17204] ? fs_reclaim_acquire+0xae/0x150 [ 1076.067173][T17204] should_failslab+0xc2/0x120 [ 1076.071869][T17204] __kmalloc_noprof+0xcb/0x510 [ 1076.076651][T17204] lsm_blob_alloc+0x68/0x90 [ 1076.081155][T17204] security_sk_alloc+0x30/0x270 [ 1076.086011][T17204] sk_prot_alloc+0x1c7/0x2a0 [ 1076.090597][T17204] sk_alloc+0x36/0xb90 [ 1076.094667][T17204] __netlink_create+0x5e/0x2c0 [ 1076.099415][T17204] ? __wake_up+0x3f/0x60 [ 1076.103643][T17204] netlink_create+0x3a4/0x630 [ 1076.108306][T17204] ? __pfx_rtnetlink_bind+0x10/0x10 [ 1076.113495][T17204] __sock_create+0x335/0x8d0 [ 1076.118075][T17204] __sys_socket+0x14f/0x260 [ 1076.122567][T17204] ? __pfx___sys_socket+0x10/0x10 [ 1076.127577][T17204] ? ksys_write+0x1ba/0x250 [ 1076.132062][T17204] ? __pfx_ksys_write+0x10/0x10 [ 1076.136912][T17204] __x64_sys_socket+0x72/0xb0 [ 1076.141575][T17204] ? lockdep_hardirqs_on+0x7c/0x110 [ 1076.146759][T17204] do_syscall_64+0xcd/0x250 [ 1076.151252][T17204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.157652][T17204] RIP: 0033:0x7fb9a517ff19 [ 1076.162048][T17204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1076.181638][T17204] RSP: 002b:00007fb9a5ff7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1076.190035][T17204] RAX: ffffffffffffffda RBX: 00007fb9a5345fa0 RCX: 00007fb9a517ff19 [ 1076.197992][T17204] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1076.205958][T17204] RBP: 00007fb9a5ff70a0 R08: 0000000000000000 R09: 0000000000000000 [ 1076.213998][T17204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.221955][T17204] R13: 0000000000000000 R14: 00007fb9a5345fa0 R15: 00007ffe67f597d8 [ 1076.229917][T17204] [ 1076.240340][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1076.250279][T17053] veth0_vlan: entered promiscuous mode [ 1076.272181][T17053] veth1_vlan: entered promiscuous mode [ 1076.297751][T17206] FAULT_INJECTION: forcing a failure. [ 1076.297751][T17206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.311671][T17206] CPU: 0 UID: 0 PID: 17206 Comm: syz.1.2970 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 1076.319606][T17053] veth0_macvtap: entered promiscuous mode [ 1076.322429][T17206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1076.322442][T17206] Call Trace: [ 1076.322449][T17206] [ 1076.343856][T17053] veth1_macvtap: entered promiscuous mode [ 1076.344389][T17206] dump_stack_lvl+0x16c/0x1f0 [ 1076.354795][T17206] should_fail_ex+0x497/0x5b0 [ 1076.359493][T17206] _copy_to_user+0x32/0xd0 [ 1076.359769][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.363912][T17206] simple_read_from_buffer+0xd0/0x160 [ 1076.363947][T17206] proc_fail_nth_read+0x198/0x270 [ 1076.384735][T17206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1076.390307][T17206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1076.395869][T17206] vfs_read+0x1df/0xbe0 [ 1076.400035][T17206] ? __fget_files+0x1fc/0x3a0 [ 1076.404729][T17206] ? __pfx___mutex_lock+0x10/0x10 [ 1076.405946][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.409751][T17206] ? __pfx_vfs_read+0x10/0x10 [ 1076.409784][T17206] ? __fget_files+0x206/0x3a0 [ 1076.428888][T17206] ksys_read+0x12b/0x250 [ 1076.429709][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.433131][T17206] ? __pfx_ksys_read+0x10/0x10 [ 1076.433160][T17206] do_syscall_64+0xcd/0x250 [ 1076.433186][T17206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.444110][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.448293][T17206] RIP: 0033:0x7f999957e92c [ 1076.448312][T17206] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1076.453030][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.458635][T17206] RSP: 002b:00007f999a2a1050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1076.458655][T17206] RAX: ffffffffffffffda RBX: 00007f9999745fa0 RCX: 00007f999957e92c [ 1076.458668][T17206] RDX: 000000000000000f RSI: 00007f999a2a10b0 RDI: 0000000000000004 [ 1076.458680][T17206] RBP: 00007f999a2a10a0 R08: 0000000000000000 R09: 0000000000000000 [ 1076.458691][T17206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.468975][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.472834][T17206] R13: 0000000000000000 R14: 00007f9999745fa0 R15: 00007ffcf2019118 [ 1076.472862][T17206] [ 1076.509537][T17053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1076.649577][ T865] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1076.763573][ T865] ath9k_htc: Failed to initialize the device [ 1076.764768][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.790046][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.933193][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2972'. [ 1076.942410][T17211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2972'. [ 1076.956908][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.998229][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.027940][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.029611][T14599] usb 4-1: USB disconnect, device number 75 [ 1077.038812][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.083692][T14599] usb 4-1: ath9k_htc: USB layer deinitialized [ 1077.146234][ T29] audit: type=1400 audit(1733344667.004:1995): avc: denied { read } for pid=17213 comm="syz.1.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1077.148844][T17053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.228910][T17053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.266879][T17053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.297595][T17053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.307091][T17053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.341531][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1077.402961][T15805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.423810][T15805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.497442][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.506353][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.601888][T14599] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1078.442623][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1079.554376][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1080.179437][ T29] audit: type=1400 audit(1733344669.847:1996): avc: denied { write } for pid=17244 comm="syz.0.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1080.282987][T14599] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.293246][T14599] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1080.304896][T14599] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1080.314126][T14599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.322089][T14599] usb 4-1: Product: syz [ 1080.326429][T14599] usb 4-1: Manufacturer: syz [ 1080.331043][T14599] usb 4-1: SerialNumber: syz [ 1080.490633][T14599] usb 4-1: cannot find UAC_HEADER [ 1080.510151][T14599] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1080.512216][T14599] usb 4-1: USB disconnect, device number 76 [ 1080.570125][ T5956] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1080.655545][ T5899] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 1080.676900][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1080.732380][ T5956] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1080.745921][T17261] FAULT_INJECTION: forcing a failure. [ 1080.745921][T17261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.759380][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.768538][T17261] CPU: 1 UID: 0 PID: 17261 Comm: syz.4.2989 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 1080.779319][T17261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1080.789386][T17261] Call Trace: [ 1080.792670][T17261] [ 1080.795605][T17261] dump_stack_lvl+0x16c/0x1f0 [ 1080.800288][T17261] should_fail_ex+0x497/0x5b0 [ 1080.804949][T17261] _copy_from_iter+0x2a1/0x1560 [ 1080.809786][T17261] ? trace_lock_acquire+0x14e/0x1f0 [ 1080.814962][T17261] ? __alloc_skb+0x1fe/0x380 [ 1080.817536][ T5899] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1080.819528][T17261] ? __pfx__copy_from_iter+0x10/0x10 [ 1080.819551][T17261] ? __virt_addr_valid+0x1a4/0x590 [ 1080.830423][ T5899] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1080.832143][T17261] ? __virt_addr_valid+0x5e/0x590 [ 1080.852194][T17261] ? __phys_addr_symbol+0x30/0x80 [ 1080.857209][T17261] ? __check_object_size+0x488/0x710 [ 1080.862484][T17261] netlink_sendmsg+0x813/0xd70 [ 1080.867240][T17261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1080.872519][T17261] ____sys_sendmsg+0xaaf/0xc90 [ 1080.877268][T17261] ? copy_msghdr_from_user+0x10b/0x160 [ 1080.882708][T17261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1080.887991][T17261] ___sys_sendmsg+0x135/0x1e0 [ 1080.892657][T17261] ? __pfx____sys_sendmsg+0x10/0x10 [ 1080.897868][T17261] ? __pfx_lock_release+0x10/0x10 [ 1080.902877][T17261] ? trace_lock_acquire+0x14e/0x1f0 [ 1080.908068][T17261] ? __fget_files+0x206/0x3a0 [ 1080.912732][T17261] __sys_sendmsg+0x16e/0x220 [ 1080.917306][T17261] ? __pfx___sys_sendmsg+0x10/0x10 [ 1080.922415][T17261] do_syscall_64+0xcd/0x250 [ 1080.926908][T17261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.932785][T17261] RIP: 0033:0x7f377737ff19 [ 1080.937183][T17261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1080.956779][T17261] RSP: 002b:00007f37780d8058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1080.965188][T17261] RAX: ffffffffffffffda RBX: 00007f3777545fa0 RCX: 00007f377737ff19 [ 1080.973229][T17261] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1080.981221][T17261] RBP: 00007f37780d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1080.989174][T17261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.997133][T17261] R13: 0000000000000000 R14: 00007f3777545fa0 R15: 00007fff57d84528 [ 1081.005095][T17261] [ 1081.008126][ C1] vkms_vblank_simulate: vblank timer overrun [ 1081.014672][ T5899] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1081.032663][ T5899] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 52336, setting to 8 [ 1081.049323][ T5899] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1081.056913][ T5899] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1081.068923][T17266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2990'. [ 1081.124759][ T5899] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1081.151917][ T5899] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 52336, setting to 8 [ 1081.184651][ T5899] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1081.192814][ T5899] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1081.208289][ T5956] usb 1-1: config 0 descriptor?? [ 1081.426365][ T5956] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1081.778152][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1082.066166][ T5899] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1082.076127][ T5899] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 52336, setting to 8 [ 1082.536918][ T5899] usb 2-1: string descriptor 0 read error: -22 [ 1082.543269][ T5899] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1082.552741][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.565376][ T5899] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1082.590135][T17247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.598823][T17247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.609320][T17247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.617904][T17247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.628281][T17247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.637263][T17247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.768583][T15805] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.799870][ T5899] usb 2-1: USB disconnect, device number 93 [ 1082.804226][ T5956] gp8psk: usb in 128 operation failed. [ 1082.814022][ T5956] gp8psk: usb in 137 operation failed. [ 1082.819603][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1082.830334][ T5956] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1082.839002][ T5956] usb 1-1: media controller created [ 1082.850796][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1082.862353][ T5956] gp8psk_fe: Frontend attached [ 1082.867119][ T5956] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1082.876196][ T5956] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1082.895349][ T5956] gp8psk: usb in 138 operation failed. [ 1082.900884][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1082.907906][ T5956] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1082.917481][ T5956] gp8psk: found Genpix USB device pID = 203 (hex) [ 1082.926014][ T5956] usb 1-1: USB disconnect, device number 102 [ 1082.949249][ T5956] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1083.494258][T15805] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.012378][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1084.703365][T15805] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.113504][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1085.147758][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1085.252350][T15805] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.341518][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1085.351910][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1085.368195][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1085.379344][ T5820] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1085.395970][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1085.403484][ T5956] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1085.862448][T15805] bridge_slave_1: left allmulticast mode [ 1085.868219][T15805] bridge_slave_1: left promiscuous mode [ 1085.871557][ T5956] usb 1-1: Using ep0 maxpacket: 8 [ 1085.887212][ T5956] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1085.894636][T15805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.895516][ T5956] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1085.932052][ T5956] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1085.944845][ T5956] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1085.955370][ T5956] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1085.976396][ T5956] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1085.990100][T15805] bridge_slave_0: left allmulticast mode [ 1085.995826][T15805] bridge_slave_0: left promiscuous mode [ 1086.011341][T15805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.096506][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.109749][T17312] nft_compat: unsupported protocol 0 [ 1086.225361][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1086.774222][ T5956] usb 1-1: GET_CAPABILITIES returned 0 [ 1086.842196][T17322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3003'. [ 1086.975833][ T5956] usbtmc 1-1:16.0: can't read capabilities [ 1086.992761][T17301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.049744][T17301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.223951][T17301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.233351][T17301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.347861][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1087.419541][T15805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1087.419958][ T5870] usb 1-1: USB disconnect, device number 103 [ 1087.438197][T15805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1087.448360][T15805] bond0 (unregistering): Released all slaves [ 1087.555122][T17302] chnl_net:caif_netlink_parms(): no params data found [ 1087.691625][ T5820] Bluetooth: hci3: command tx timeout [ 1088.151540][T17302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.158866][T17302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.168282][T17302] bridge_slave_0: entered allmulticast mode [ 1088.175592][T17302] bridge_slave_0: entered promiscuous mode [ 1088.215567][T15805] hsr_slave_0: left promiscuous mode [ 1088.221526][T15805] hsr_slave_1: left promiscuous mode [ 1088.227632][T15805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1088.245937][T15805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.257144][T15805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1088.277922][T15805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1088.296117][T15805] veth1_macvtap: left promiscuous mode [ 1088.306423][T15805] veth0_macvtap: left promiscuous mode [ 1088.363316][T15805] veth1_vlan: left promiscuous mode [ 1088.368776][T15805] veth0_vlan: left promiscuous mode [ 1088.459687][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1089.303639][T17346] Falling back ldisc for ttyS3. [ 1089.560806][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1089.903803][ T5820] Bluetooth: hci3: command tx timeout [ 1090.024111][T15805] team0 (unregistering): Port device team_slave_1 removed [ 1090.076611][T15805] team0 (unregistering): Port device team_slave_0 removed [ 1090.117856][ T933] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1090.367657][ T933] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.382611][ T933] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1090.391714][ T933] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1090.672614][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1090.981424][ T933] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1090.990579][ T933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.999501][ T933] usb 4-1: Product: syz [ 1091.018223][ T933] usb 4-1: Manufacturer: syz [ 1091.023958][ T933] usb 4-1: SerialNumber: syz [ 1091.050912][ T933] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1091.058070][ T933] cdc_ncm 4-1:1.0: bind() failure [ 1091.784447][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1092.127075][ T5820] Bluetooth: hci3: command tx timeout [ 1092.896271][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1093.265701][T17302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.275467][T17302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.283388][T17302] bridge_slave_1: entered allmulticast mode [ 1093.289813][T17302] bridge_slave_1: entered promiscuous mode [ 1093.300573][T17379] netlink: 'syz.3.3011': attribute type 21 has an invalid length. [ 1093.310452][T17379] netlink: 'syz.3.3011': attribute type 6 has an invalid length. [ 1093.318805][T17379] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3011'. [ 1093.424644][T17302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.464904][T17302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.498733][T17302] team0: Port device team_slave_0 added [ 1093.518617][T17302] team0: Port device team_slave_1 added [ 1093.532390][T17302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.539792][ T933] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1093.547639][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.581228][T17302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.594186][T17302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.601136][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.627416][T17302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.652830][T17302] hsr_slave_0: entered promiscuous mode [ 1093.661568][T17302] hsr_slave_1: entered promiscuous mode [ 1093.742133][ T933] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.759155][ T933] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1093.771184][ T933] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1093.807408][ T933] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1093.817380][ T933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.825508][ T933] usb 2-1: Product: syz [ 1093.831373][ T933] usb 2-1: Manufacturer: syz [ 1093.835992][ T933] usb 2-1: SerialNumber: syz [ 1093.844720][ T933] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1093.855884][ T933] cdc_ncm 2-1:1.0: bind() failure [ 1093.979753][T15771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1093.990676][T15771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1093.999036][T15771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1094.008142][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1094.016464][T15771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1094.027658][T15771] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1094.034950][T15771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1094.084500][T17302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1094.096576][T17302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1094.106288][T17302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1094.120412][T17302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1094.202017][T17302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.210855][T17392] chnl_net:caif_netlink_parms(): no params data found [ 1094.261045][T17302] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.275148][T17392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.282523][T17392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.290149][T17392] bridge_slave_0: entered allmulticast mode [ 1094.296577][T17392] bridge_slave_0: entered promiscuous mode [ 1094.304148][T17392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.311797][T17392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.319044][T17392] bridge_slave_1: entered allmulticast mode [ 1094.325495][T17392] bridge_slave_1: entered promiscuous mode [ 1094.342035][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.349120][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.350276][ T5820] Bluetooth: hci3: command tx timeout [ 1094.388382][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.395467][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.418406][T17392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.130793][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1095.158885][T17406] netlink: 'syz.1.3021': attribute type 21 has an invalid length. [ 1095.166994][T17406] netlink: 'syz.1.3021': attribute type 6 has an invalid length. [ 1095.174811][T17406] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3021'. [ 1095.277358][T17392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.288791][ T5899] usb 4-1: USB disconnect, device number 77 [ 1095.577910][T17392] team0: Port device team_slave_0 added [ 1095.591069][T17392] team0: Port device team_slave_1 added [ 1095.711823][T17392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.231827][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1096.252324][ T5820] Bluetooth: hci1: command tx timeout [ 1096.258139][T17392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.288981][T17392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.010376][T17392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.023000][T17392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1097.168292][ T5899] usb 2-1: USB disconnect, device number 94 [ 1097.193925][T17392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1097.343696][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1097.796115][T17392] hsr_slave_0: entered promiscuous mode [ 1097.808983][T17392] hsr_slave_1: entered promiscuous mode [ 1097.825152][T17392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1097.833890][T17392] Cannot create hsr debugfs directory [ 1097.855590][T17302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.056441][T17302] veth0_vlan: entered promiscuous mode [ 1098.066594][T17302] veth1_vlan: entered promiscuous mode [ 1098.455491][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1098.498485][ T5820] Bluetooth: hci1: command tx timeout [ 1098.602217][T17302] veth0_macvtap: entered promiscuous mode [ 1098.622956][T17302] veth1_macvtap: entered promiscuous mode [ 1098.635762][T17392] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1098.652523][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.663600][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.679634][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.690208][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.700223][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.710818][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.722038][T17302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.729553][T17392] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1098.739056][T17392] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1098.748179][T17392] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1098.880954][ T29] audit: type=1326 audit(1733344687.283:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.1.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1098.904455][ C1] vkms_vblank_simulate: vblank timer overrun [ 1098.934727][T17439] blktrace: Concurrent blktraces are not allowed on loop2 [ 1098.995998][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.178864][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.203743][ T29] audit: type=1326 audit(1733344687.283:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.1.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1099.227237][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.237364][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.260679][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.278238][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.289086][ T29] audit: type=1326 audit(1733344687.283:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.1.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1099.320303][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.331864][T17439] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1099.341368][T17302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.355489][ T29] audit: type=1326 audit(1733344687.283:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.1.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1099.434709][T17302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.471140][T17302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.498989][ T29] audit: type=1326 audit(1733344687.283:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.1.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1099.545246][T17302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.566481][T17302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.575348][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1099.898683][ T29] audit: type=1326 audit(1733344687.293:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.1.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1099.936471][ T29] audit: type=1326 audit(1733344687.293:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.1.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1100.156613][ T29] audit: type=1326 audit(1733344687.293:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.1.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1100.297098][ T29] audit: type=1326 audit(1733344687.311:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.1.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1100.416674][ T29] audit: type=1326 audit(1733344687.311:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17436 comm="syz.1.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1100.488878][T17392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.551063][T15805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.576910][T15805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.628594][T17392] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.679109][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1100.679176][ T5820] Bluetooth: hci1: command tx timeout [ 1100.714975][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.735095][T15805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.742322][T15805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.760059][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.372053][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.379163][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1101.801543][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1102.158063][T17392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.566577][T17392] veth0_vlan: entered promiscuous mode [ 1102.580031][T17392] veth1_vlan: entered promiscuous mode [ 1102.651945][T17392] veth0_macvtap: entered promiscuous mode [ 1102.672732][T17392] veth1_macvtap: entered promiscuous mode [ 1102.693049][T17392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.703593][T17392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.713708][T17392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.724785][T17392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.735019][T17392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.745758][T17392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.763466][T17392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.902701][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1103.820143][ T5820] Bluetooth: hci1: command tx timeout [ 1103.837038][T17392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.910047][T17495] blktrace: Concurrent blktraces are not allowed on loop6 [ 1103.982165][T17495] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1103.993904][T17392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1104.009103][T17392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.021962][T17392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.025179][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1104.032234][T17392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.061049][T17392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.071665][T17392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.082675][T17392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.093174][T17392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.105532][T17392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.250380][T17392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.293748][T17392] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.871819][T17392] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.880634][T17392] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.889344][T17392] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.137015][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1105.158177][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.220200][T12315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.230927][T12315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.272640][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.317379][T12315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.338736][T12315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.386253][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.473341][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.576985][ T35] bridge_slave_1: left allmulticast mode [ 1105.582642][ T35] bridge_slave_1: left promiscuous mode [ 1105.588372][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.597990][ T35] bridge_slave_0: left allmulticast mode [ 1105.603649][ T35] bridge_slave_0: left promiscuous mode [ 1105.609660][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.891102][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.902509][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1106.248860][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1106.974807][ T35] bond0 (unregistering): Released all slaves [ 1107.350023][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1107.735511][T15771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1107.813798][T16447] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1107.822555][T16447] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1107.830620][T16447] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1107.838751][T16447] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1107.846004][T16447] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1108.078249][ T5956] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1108.292945][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1108.299318][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1108.461838][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1108.780753][ T35] hsr_slave_0: left promiscuous mode [ 1108.818015][ T35] hsr_slave_1: left promiscuous mode [ 1108.938069][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.956436][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.989594][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.027643][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.194412][ T35] veth1_macvtap: left promiscuous mode [ 1109.209980][ T35] veth0_macvtap: left promiscuous mode [ 1109.215634][ T35] veth1_vlan: left promiscuous mode [ 1109.221059][ T35] veth0_vlan: left promiscuous mode [ 1109.573823][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1110.002456][T15771] Bluetooth: hci3: command tx timeout [ 1110.696310][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1111.690369][T13176] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1111.797441][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1111.907931][T17559] Falling back ldisc for ttyS3. [ 1112.207186][T13176] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1112.215455][T13176] usb 6-1: not running at top speed; connect to a high speed hub [ 1112.224104][T13176] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 1112.256969][T15771] Bluetooth: hci3: command tx timeout [ 1112.267904][T13176] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 1112.318011][T13176] usb 6-1: config 129 descriptor has 1 excess byte, ignoring [ 1112.514320][T13176] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1112.549649][T13176] usb 6-1: config 129 has no interface number 0 [ 1112.555951][T13176] usb 6-1: config 129 has no interface number 1 [ 1112.835955][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1112.909082][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1112.940359][ T5956] usb 4-1: device descriptor read/64, error -71 [ 1112.947115][T13176] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1112.960840][T13176] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1112.972252][T13176] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1112.985570][T13176] usb 6-1: config 129 interface 135 has no altsetting 0 [ 1112.992667][T13176] usb 6-1: config 129 interface 5 has no altsetting 0 [ 1113.179075][T17572] ALSA: mixer_oss: invalid OSS volume 'u' [ 1113.320005][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1113.354811][T13176] usb 6-1: string descriptor 0 read error: -22 [ 1113.361172][T13176] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 1113.371214][T13176] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.385256][T13176] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1113.392544][T13176] usb 6-1: MIDIStreaming interface descriptor not found [ 1113.497666][ T5956] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1113.609785][ T5830] usb 6-1: USB disconnect, device number 2 [ 1113.658924][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 1113.670579][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.689876][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1113.708854][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1113.732398][ T5956] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1113.753132][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1113.785041][ T5956] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1113.795545][ T5956] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1113.959399][ T5956] usb 4-1: Manufacturer: syz [ 1113.965500][ T5956] usb 4-1: config 0 descriptor?? [ 1114.025343][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1114.112494][T17522] chnl_net:caif_netlink_parms(): no params data found [ 1114.484896][T15771] Bluetooth: hci3: command tx timeout [ 1114.724910][T17608] netlink: 'syz.3.3061': attribute type 21 has an invalid length. [ 1114.733182][T17608] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3061'. [ 1115.112583][T17522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.132851][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1115.133207][T17522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.176469][T17522] bridge_slave_0: entered allmulticast mode [ 1115.183961][T17522] bridge_slave_0: entered promiscuous mode [ 1115.189963][ T5956] rc_core: IR keymap rc-hauppauge not found [ 1115.195867][ T5956] Registered IR keymap rc-empty [ 1115.203518][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1115.221648][T17522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.242459][T17522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.250673][T17522] bridge_slave_1: entered allmulticast mode [ 1115.261492][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1115.270423][T17522] bridge_slave_1: entered promiscuous mode [ 1115.289542][T17619] overlayfs: failed to resolve './file0': -2 [ 1115.300201][ T5956] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1115.759535][ T5956] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 1115.773662][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1115.795583][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1115.828399][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1115.840434][T17522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.850140][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1115.859244][T17522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.881330][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1115.913515][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1115.956405][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1115.997260][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1116.080028][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1116.107440][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1116.181834][ T5956] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1116.190951][ T5956] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1116.209068][ T5956] usb 4-1: USB disconnect, device number 79 [ 1116.255270][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1116.650529][T17627] Falling back ldisc for ttyS3. [ 1116.714914][T15771] Bluetooth: hci3: command tx timeout [ 1117.300391][T17522] team0: Port device team_slave_0 added [ 1117.355567][T17522] team0: Port device team_slave_1 added [ 1117.361284][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1117.470078][T17522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.478439][T17522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1117.547932][T17522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1117.560610][T17522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1117.567565][T17522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1117.603648][T17522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.616097][T17638] FAULT_INJECTION: forcing a failure. [ 1117.616097][T17638] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.640699][T17638] CPU: 0 UID: 0 PID: 17638 Comm: syz.4.3079 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 1117.651494][T17638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1117.661564][T17638] Call Trace: [ 1117.664841][T17638] [ 1117.667770][T17638] dump_stack_lvl+0x16c/0x1f0 [ 1117.672468][T17638] should_fail_ex+0x497/0x5b0 [ 1117.677180][T17638] ? fs_reclaim_acquire+0xae/0x150 [ 1117.682304][T17638] should_failslab+0xc2/0x120 [ 1117.686987][T17638] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1117.692364][T17638] ? security_file_alloc+0x34/0x2b0 [ 1117.697576][T17638] security_file_alloc+0x34/0x2b0 [ 1117.702613][T17638] init_file+0x93/0x480 [ 1117.706776][T17638] alloc_empty_file+0x91/0x1e0 [ 1117.711553][T17638] path_openat+0xe1/0x2d60 [ 1117.715979][T17638] ? hlock_class+0x4e/0x130 [ 1117.720499][T17638] ? __lock_acquire+0x15a9/0x3c40 [ 1117.725538][T17638] ? __pfx_path_openat+0x10/0x10 [ 1117.730480][T17638] ? __pfx___lock_acquire+0x10/0x10 [ 1117.735679][T17638] ? lock_acquire.part.0+0x11b/0x380 [ 1117.740969][T17638] ? find_held_lock+0x2d/0x110 [ 1117.745747][T17638] do_filp_open+0x20c/0x470 [ 1117.750255][T17638] ? __pfx_do_filp_open+0x10/0x10 [ 1117.755284][T17638] ? find_held_lock+0x2d/0x110 [ 1117.760073][T17638] ? alloc_fd+0x41f/0x760 [ 1117.764414][T17638] do_sys_openat2+0x17a/0x1e0 [ 1117.769105][T17638] ? __pfx_do_sys_openat2+0x10/0x10 [ 1117.774319][T17638] ? __fget_files+0x206/0x3a0 [ 1117.779012][T17638] __x64_sys_openat+0x175/0x210 [ 1117.783874][T17638] ? __pfx___x64_sys_openat+0x10/0x10 [ 1117.789254][T17638] ? ksys_write+0x1ba/0x250 [ 1117.793767][T17638] do_syscall_64+0xcd/0x250 [ 1117.798280][T17638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.804178][T17638] RIP: 0033:0x7f377737ff19 [ 1117.808595][T17638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.828216][T17638] RSP: 002b:00007f37780d8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1117.836634][T17638] RAX: ffffffffffffffda RBX: 00007f3777545fa0 RCX: 00007f377737ff19 [ 1117.844583][T17638] RDX: 000000000000275a RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1117.852558][T17638] RBP: 00007f37780d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 1117.860526][T17638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.868492][T17638] R13: 0000000000000000 R14: 00007f3777545fa0 R15: 00007fff57d84528 [ 1117.876467][T17638] [ 1118.190705][ T5956] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1118.468217][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1118.815738][ T5956] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.831269][ T5956] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1119.088774][T17522] hsr_slave_0: entered promiscuous mode [ 1119.109891][ T5956] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1119.135529][ T5956] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1119.157801][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.168762][T17522] hsr_slave_1: entered promiscuous mode [ 1119.201301][ T5956] usb 2-1: Product: syz [ 1119.215232][ T5956] usb 2-1: Manufacturer: syz [ 1119.232726][ T5956] usb 2-1: SerialNumber: syz [ 1119.319928][ T5956] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1119.358812][ T5956] cdc_ncm 2-1:1.0: bind() failure [ 1119.590721][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1120.563882][ T5830] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1120.585248][T13176] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1120.691891][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1120.709546][T17522] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1120.717991][T17522] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1120.728084][T17522] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1120.736494][T17522] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1120.752052][ T5830] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1120.762323][ T5830] usb 6-1: not running at top speed; connect to a high speed hub [ 1120.770423][T13176] usb 4-1: Using ep0 maxpacket: 16 [ 1120.777093][ T5830] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 1120.786204][ T5830] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 1120.795096][T13176] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.796896][T17522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.805370][T13176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1120.823120][ T5830] usb 6-1: config 129 descriptor has 1 excess byte, ignoring [ 1120.834533][ T5830] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1120.846694][T13176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1120.849838][T17522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.856423][ T5830] usb 6-1: config 129 has no interface number 0 [ 1120.873955][T12315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.880352][T13176] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1120.881031][T12315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.890782][ T5830] usb 6-1: config 129 has no interface number 1 [ 1120.904340][T13176] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1120.918633][ T5830] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1120.932865][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.939932][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.950354][T13176] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1120.960444][T13176] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1120.968431][T13176] usb 4-1: Manufacturer: syz [ 1120.977022][ T5830] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1120.989827][T13176] usb 4-1: config 0 descriptor?? [ 1120.994988][ T5830] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1121.019348][ T5830] usb 6-1: config 129 interface 135 has no altsetting 0 [ 1121.030445][ T5830] usb 6-1: config 129 interface 5 has no altsetting 0 [ 1121.046356][ T5830] usb 6-1: string descriptor 0 read error: -22 [ 1121.052612][ T5830] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 1121.062652][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.079910][ T5830] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1121.087028][ T5830] usb 6-1: MIDIStreaming interface descriptor not found [ 1121.143997][T17522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1121.174243][T17522] veth0_vlan: entered promiscuous mode [ 1121.185712][T17522] veth1_vlan: entered promiscuous mode [ 1121.208624][T17522] veth0_macvtap: entered promiscuous mode [ 1121.216744][T17522] veth1_macvtap: entered promiscuous mode [ 1121.353803][T17522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.364560][T17522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.374983][T17522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.385692][T17522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.395802][T17522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.401024][ T5872] usb 6-1: USB disconnect, device number 3 [ 1121.406504][T17522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.423777][T17522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.434971][T17522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.448923][T17522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1121.803696][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1122.007074][T17673] netlink: 'syz.3.3085': attribute type 21 has an invalid length. [ 1122.014968][T17673] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3085'. [ 1122.026836][T14599] usb 2-1: USB disconnect, device number 95 [ 1122.031920][T17522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.060352][T17522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.070343][T17522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.081081][T17522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.091558][T17522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.102501][T13176] rc_core: IR keymap rc-hauppauge not found [ 1122.108546][T13176] Registered IR keymap rc-empty [ 1122.113464][T13176] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1122.150212][T17522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.162317][T17522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.176251][T13176] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1122.333491][T17522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.373369][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 1122.373406][ T29] audit: type=1326 audit(1733344709.162:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17676 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1122.419887][T13176] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1122.473462][T17522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.491817][T17679] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1122.794127][T13176] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input49 [ 1122.862233][T13176] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1122.871997][ T29] audit: type=1326 audit(1733344709.162:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17676 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1122.915622][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1122.935089][T17522] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.098973][ T29] audit: type=1326 audit(1733344709.172:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17676 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1123.122484][ T29] audit: type=1326 audit(1733344709.172:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17676 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1123.147098][ T29] audit: type=1326 audit(1733344709.172:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17676 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1123.170650][ T29] audit: type=1326 audit(1733344709.172:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17676 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1123.194337][ T29] audit: type=1326 audit(1733344709.172:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17676 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1123.218642][T13176] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1123.218696][ T29] audit: type=1326 audit(1733344709.172:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17676 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1123.268315][T17522] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.277289][ T29] audit: type=1326 audit(1733344709.181:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17676 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1123.364759][T17522] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.373633][T17522] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.383134][T13176] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1124.027398][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1124.381321][T13176] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1124.381452][ T29] audit: type=1326 audit(1733344709.181:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17676 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999957ff19 code=0x7ffc0000 [ 1124.425703][T13176] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1124.859635][T13176] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1124.872198][T13176] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1124.935408][T13176] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1125.014880][T13176] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1125.052347][T13176] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1125.091472][T13176] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1125.149982][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1125.203732][T13176] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1125.232445][T13176] usb 4-1: USB disconnect, device number 80 [ 1125.427123][T17045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.446222][T17045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.507723][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.517695][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.728066][T17718] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3095'. [ 1125.780956][ T5830] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1125.997016][ T5830] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.007334][ T5830] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1126.101910][ T5830] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1126.170752][ T5830] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1126.250997][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1127.357507][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.365562][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1127.373796][ T5830] usb 6-1: Product: syz [ 1127.377999][ T5830] usb 6-1: Manufacturer: syz [ 1127.382596][ T5830] usb 6-1: SerialNumber: syz [ 1127.390313][ T5830] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1127.397183][ T5830] cdc_ncm 6-1:1.0: bind() failure [ 1127.754894][T17735] tipc: Enabling of bearer rejected, failed to enable media [ 1127.926396][T17747] nfs: Unknown parameter 'noev/kvm' [ 1128.474615][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1128.673092][T17753] netlink: 'syz.5.3093': attribute type 21 has an invalid length. [ 1128.681575][T17753] netlink: 'syz.5.3093': attribute type 6 has an invalid length. [ 1128.689508][T17753] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3093'. [ 1129.279351][ T865] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1129.533538][ T865] usb 4-1: Using ep0 maxpacket: 8 [ 1129.586464][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1129.608872][ T865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1129.620573][ T865] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1129.630787][ T865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.642366][ T865] usb 4-1: config 0 descriptor?? [ 1129.881015][ T865] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1130.059451][ T865] usb 6-1: USB disconnect, device number 4 [ 1130.113729][T17769] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3111'. [ 1130.194851][T17045] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.394759][ T5956] usb 4-1: USB disconnect, device number 81 [ 1130.507389][T17045] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.632252][T17045] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.693738][T17045] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.704130][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1130.762471][ T865] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1130.786646][T17045] bridge_slave_1: left allmulticast mode [ 1130.792358][T17045] bridge_slave_1: left promiscuous mode [ 1130.798365][T17045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.806860][T17045] bridge_slave_0: left allmulticast mode [ 1130.812480][T17045] bridge_slave_0: left promiscuous mode [ 1130.818518][T17045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.925550][ T865] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1130.943153][ T865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.954064][ T865] usb 6-1: config 0 descriptor?? [ 1131.130847][T17045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.143824][T17045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.153867][T17045] bond0 (unregistering): Released all slaves [ 1131.243695][T17778] FAULT_INJECTION: forcing a failure. [ 1131.243695][T17778] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.258106][T17778] CPU: 1 UID: 0 PID: 17778 Comm: syz.4.3114 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 1131.268884][T17778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1131.278933][T17778] Call Trace: [ 1131.282200][T17778] [ 1131.285119][T17778] dump_stack_lvl+0x16c/0x1f0 [ 1131.289788][T17778] should_fail_ex+0x497/0x5b0 [ 1131.294454][T17778] ? fs_reclaim_acquire+0xae/0x150 [ 1131.299561][T17778] should_failslab+0xc2/0x120 [ 1131.304224][T17778] __kmalloc_cache_noprof+0x68/0x410 [ 1131.309505][T17778] copy_mount_options+0x55/0x190 [ 1131.314518][T17778] __x64_sys_mount+0x1ad/0x320 [ 1131.319270][T17778] ? __pfx___x64_sys_mount+0x10/0x10 [ 1131.324562][T17778] do_syscall_64+0xcd/0x250 [ 1131.329081][T17778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.334973][T17778] RIP: 0033:0x7f377737ff19 [ 1131.339375][T17778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1131.358971][T17778] RSP: 002b:00007f37780d8058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1131.367369][T17778] RAX: ffffffffffffffda RBX: 00007f3777545fa0 RCX: 00007f377737ff19 [ 1131.375329][T17778] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1131.383285][T17778] RBP: 00007f37780d80a0 R08: 00000000200000c0 R09: 0000000000000000 [ 1131.391237][T17778] R10: 0000000002000420 R11: 0000000000000246 R12: 0000000000000001 [ 1131.399191][T17778] R13: 0000000000000000 R14: 00007f3777545fa0 R15: 00007fff57d84528 [ 1131.407158][T17778] [ 1131.457439][T17767] overlayfs: failed to resolve './file1': -2 [ 1131.501130][ T865] [drm:udl_init] *ERROR* Selecting channel failed [ 1131.528262][ T865] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1131.550585][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1131.560991][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1131.563693][ T865] [drm] Initialized udl on minor 2 [ 1131.574191][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1131.595384][ T865] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1131.596950][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1131.611670][ T5820] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1131.619516][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1131.663364][ T865] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1131.679106][ T5870] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1131.703439][T14599] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1131.719729][T17045] hsr_slave_0: left promiscuous mode [ 1131.727444][ T5870] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1131.738119][ T865] usb 6-1: USB disconnect, device number 5 [ 1131.751588][T17045] hsr_slave_1: left promiscuous mode [ 1131.764223][T17045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1131.785436][T17045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1131.802975][T17045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1131.813635][T17045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1131.820778][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1131.843969][T17045] veth1_macvtap: left promiscuous mode [ 1131.849564][T17045] veth0_macvtap: left promiscuous mode [ 1131.855634][T17045] veth1_vlan: left promiscuous mode [ 1131.860995][T17045] veth0_vlan: left promiscuous mode [ 1131.895892][T13176] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1132.341951][T14599] usb 2-1: config 0 has an invalid interface number: 193 but max is 1 [ 1132.363250][T14599] usb 2-1: config 0 has an invalid interface number: 217 but max is 1 [ 1132.371593][T14599] usb 2-1: config 0 has no interface number 0 [ 1132.377878][T14599] usb 2-1: config 0 has no interface number 1 [ 1132.383977][T14599] usb 2-1: New USB device found, idVendor=046d, idProduct=0928, bcdDevice=c5.53 [ 1132.393069][T14599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.402503][T14599] usb 2-1: config 0 descriptor?? [ 1132.516172][T13176] usb 4-1: Using ep0 maxpacket: 32 [ 1132.525009][T13176] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.542845][T13176] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.571741][T13176] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1132.581431][T13176] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1132.590071][T13176] usb 4-1: Product: syz [ 1132.597527][T13176] usb 4-1: Manufacturer: syz [ 1132.605471][T13176] hub 4-1:4.0: USB hub found [ 1132.625828][T14599] usb 2-1: string descriptor 0 read error: -71 [ 1132.651711][T14599] usb 2-1: USB disconnect, device number 96 [ 1132.870840][T13176] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 1132.877281][T17775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.927379][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1133.081605][T17775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.257064][ T865] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1133.303798][T17045] team0 (unregistering): Port device team_slave_1 removed [ 1133.340080][T17780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.348690][T17045] team0 (unregistering): Port device team_slave_0 removed [ 1133.366259][T17780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.436078][ T865] usb 6-1: Using ep0 maxpacket: 32 [ 1133.455437][ T865] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1133.477861][ T865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1133.486254][ T865] usb 6-1: Product: syz [ 1133.495283][ T865] usb 6-1: Manufacturer: syz [ 1133.500083][T14599] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1133.510137][ T865] usb 6-1: SerialNumber: syz [ 1133.519254][T17805] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3122'. [ 1133.530310][ T865] usb 6-1: config 0 descriptor?? [ 1133.539457][ T865] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1133.675156][T14599] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.685355][T14599] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1133.706822][T14599] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1133.721826][T14599] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1133.731075][T14599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.739157][T14599] usb 2-1: Product: syz [ 1133.743571][T14599] usb 2-1: Manufacturer: syz [ 1133.748261][T14599] usb 2-1: SerialNumber: syz [ 1133.756574][T14599] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1133.763471][T14599] cdc_ncm 2-1:1.0: bind() failure [ 1133.777284][T15771] Bluetooth: hci3: command tx timeout [ 1133.861080][ T865] gspca_stk1135: reg_w 0x2 err -71 [ 1133.869937][ T865] gspca_stk1135: serial bus timeout: status=0x00 [ 1133.876516][ T865] gspca_stk1135: Sensor write failed [ 1133.881975][ T865] gspca_stk1135: serial bus timeout: status=0x00 [ 1133.905850][ T865] gspca_stk1135: Sensor write failed [ 1133.911184][ T865] gspca_stk1135: serial bus timeout: status=0x00 [ 1133.924032][ T865] gspca_stk1135: Sensor read failed [ 1133.929564][ T865] gspca_stk1135: serial bus timeout: status=0x00 [ 1133.968595][ T865] gspca_stk1135: Sensor read failed [ 1133.975338][T17809] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3123'. [ 1133.983697][ T865] gspca_stk1135: Detected sensor type unknown (0x0) [ 1134.006846][ T865] gspca_stk1135: serial bus timeout: status=0x00 [ 1134.025099][ T865] gspca_stk1135: Sensor read failed [ 1134.030443][ T865] gspca_stk1135: serial bus timeout: status=0x00 [ 1134.037189][ T865] gspca_stk1135: Sensor read failed [ 1134.042841][ T865] gspca_stk1135: serial bus timeout: status=0x00 [ 1134.049311][ T865] gspca_stk1135: Sensor write failed [ 1134.049392][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1134.054601][ T865] gspca_stk1135: serial bus timeout: status=0x00 [ 1134.068345][ T865] gspca_stk1135: Sensor write failed [ 1134.074407][ T865] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 1134.418097][ T865] usb 6-1: USB disconnect, device number 6 [ 1134.454114][T17781] chnl_net:caif_netlink_parms(): no params data found [ 1134.824221][T17824] FAULT_INJECTION: forcing a failure. [ 1134.824221][T17824] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.838428][T17817] netlink: 'syz.1.3121': attribute type 21 has an invalid length. [ 1134.846377][T17817] netlink: 'syz.1.3121': attribute type 6 has an invalid length. [ 1134.854089][T17817] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3121'. [ 1134.873228][T17781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.882552][T17781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.882810][T17824] CPU: 0 UID: 0 PID: 17824 Comm: syz.5.3124 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 1134.889719][T17781] bridge_slave_0: entered allmulticast mode [ 1134.900295][T17824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1134.900307][T17824] Call Trace: [ 1134.900314][T17824] [ 1134.900323][T17824] dump_stack_lvl+0x16c/0x1f0 [ 1134.906885][T17781] bridge_slave_0: entered promiscuous mode [ 1134.916199][T17824] should_fail_ex+0x497/0x5b0 [ 1134.937465][T17824] ? fs_reclaim_acquire+0xae/0x150 [ 1134.942558][T17824] should_failslab+0xc2/0x120 [ 1134.947216][T17824] __kmalloc_node_noprof+0xd1/0x510 [ 1134.952395][T17824] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 1134.957832][T17824] __kvmalloc_node_noprof+0xad/0x1a0 [ 1134.963093][T17824] xt_alloc_entry_offsets+0x3a/0x60 [ 1134.968275][T17824] translate_table+0x22e/0x1710 [ 1134.973104][T17824] ? __might_fault+0x13b/0x190 [ 1134.977846][T17824] ? __pfx_lock_release+0x10/0x10 [ 1134.982847][T17824] ? __pfx_translate_table+0x10/0x10 [ 1134.988126][T17824] ? __might_fault+0xe3/0x190 [ 1134.992785][T17824] do_ipt_set_ctl+0x605/0xc30 [ 1134.997440][T17824] ? __mutex_lock+0x1cc/0xa60 [ 1135.002099][T17824] ? mark_held_locks+0x9f/0xe0 [ 1135.006840][T17824] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1135.012024][T17824] ? __mutex_unlock_slowpath+0x164/0x690 [ 1135.017635][T17824] ? sockopt_release_sock+0x52/0x60 [ 1135.022809][T17824] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1135.028788][T17824] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 1135.034745][T17824] nf_setsockopt+0x8a/0xf0 [ 1135.039141][T17824] ip_setsockopt+0xcb/0xf0 [ 1135.043547][T17824] tcp_setsockopt+0xa4/0x100 [ 1135.048125][T17824] smc_setsockopt+0x1b4/0xa00 [ 1135.052778][T17824] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1135.058646][T17824] ? __pfx_smc_setsockopt+0x10/0x10 [ 1135.063836][T17824] ? selinux_socket_setsockopt+0x6a/0x80 [ 1135.069456][T17824] ? __pfx_smc_setsockopt+0x10/0x10 [ 1135.074637][T17824] do_sock_setsockopt+0x222/0x480 [ 1135.079652][T17824] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1135.085185][T17824] ? lock_acquire+0x2f/0xb0 [ 1135.089671][T17824] __sys_setsockopt+0x1a0/0x230 [ 1135.094510][T17824] __x64_sys_setsockopt+0xbd/0x160 [ 1135.099604][T17824] ? do_syscall_64+0x91/0x250 [ 1135.104256][T17824] ? lockdep_hardirqs_on+0x7c/0x110 [ 1135.109430][T17824] do_syscall_64+0xcd/0x250 [ 1135.113909][T17824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.119777][T17824] RIP: 0033:0x7f2c5d97ff19 [ 1135.124169][T17824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1135.143751][T17824] RSP: 002b:00007f2c5e833058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1135.145580][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1135.152132][T17824] RAX: ffffffffffffffda RBX: 00007f2c5db45fa0 RCX: 00007f2c5d97ff19 [ 1135.166915][T17824] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1135.174858][T17824] RBP: 00007f2c5e8330a0 R08: 00000000000003c8 R09: 0000000000000000 [ 1135.182831][T17824] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000001 [ 1135.190790][T17824] R13: 0000000000000000 R14: 00007f2c5db45fa0 R15: 00007fff1cdaa4c8 [ 1135.198744][T17824] [ 1135.201827][ C0] vkms_vblank_simulate: vblank timer overrun [ 1135.223513][T17781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.230598][T17781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.237989][T17781] bridge_slave_1: entered allmulticast mode [ 1135.245128][T17781] bridge_slave_1: entered promiscuous mode [ 1135.307419][T17781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.326176][T17781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.366350][T17781] team0: Port device team_slave_0 added [ 1135.375620][T17781] team0: Port device team_slave_1 added [ 1135.398099][T17781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.406554][T17781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.433036][T17781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.447553][T17781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.455637][T17781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.482014][T17781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.523402][T17781] hsr_slave_0: entered promiscuous mode [ 1135.529800][T17781] hsr_slave_1: entered promiscuous mode [ 1135.605329][ T865] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1135.766290][ T865] usb 6-1: Using ep0 maxpacket: 16 [ 1135.774491][ T865] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1135.789102][ T865] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.799795][ T865] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1136.002713][T15771] Bluetooth: hci3: command tx timeout [ 1136.257418][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1136.304481][ T865] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1136.313620][ T865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.321658][ T865] usb 6-1: Product: syz [ 1136.325834][ T865] usb 6-1: Manufacturer: syz [ 1136.330414][ T865] usb 6-1: SerialNumber: syz [ 1137.195734][T17702] usb 4-1: USB disconnect, device number 82 [ 1137.245084][T17781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1137.253157][T17781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1137.261298][T17781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1137.269347][T17781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1137.302841][T17781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.314060][T17781] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.333276][T17781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1137.343718][T17781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1137.362542][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.369669][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.377055][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1137.387152][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.391392][T17847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3132'. [ 1137.394241][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.422253][ T865] usb 6-1: 0:2 : does not exist [ 1137.509185][T14599] usb 2-1: USB disconnect, device number 97 [ 1137.716883][T17781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.899441][T17862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1137.923986][T17781] veth0_vlan: entered promiscuous mode [ 1137.933308][T17781] veth1_vlan: entered promiscuous mode [ 1137.951699][T17781] veth0_macvtap: entered promiscuous mode [ 1137.969625][T17781] veth1_macvtap: entered promiscuous mode [ 1138.002828][T17781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.033301][T17781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.053429][T17781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.065909][T17869] FAULT_INJECTION: forcing a failure. [ 1138.065909][T17869] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 1138.085452][T17781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.095269][T17781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.119077][T17869] CPU: 1 UID: 0 PID: 17869 Comm: syz.3.3133 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 1138.129857][T17869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1138.139901][T17869] Call Trace: [ 1138.143171][T17869] [ 1138.146090][T17869] dump_stack_lvl+0x16c/0x1f0 [ 1138.150764][T17869] should_fail_ex+0x497/0x5b0 [ 1138.155436][T17869] iommufd_get_object+0x7b/0x440 [ 1138.160368][T17869] ? __pfx_iommufd_get_object+0x10/0x10 [ 1138.165908][T17869] ? __might_fault+0x13b/0x190 [ 1138.170660][T17869] ? __pfx_lock_release+0x10/0x10 [ 1138.175678][T17869] iommufd_ioas_unmap+0xe9/0x4f0 [ 1138.180599][T17869] ? lock_acquire+0x2f/0xb0 [ 1138.185100][T17869] ? __might_fault+0xe3/0x190 [ 1138.189778][T17869] ? __pfx_iommufd_ioas_unmap+0x10/0x10 [ 1138.195309][T17869] ? __might_fault+0xe3/0x190 [ 1138.199983][T17869] iommufd_fops_ioctl+0x359/0x4f0 [ 1138.204997][T17869] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1138.210527][T17869] ? __pfx_lock_release+0x10/0x10 [ 1138.215546][T17869] ? selinux_file_ioctl+0x180/0x270 [ 1138.220736][T17869] ? selinux_file_ioctl+0xb4/0x270 [ 1138.225838][T17869] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1138.231388][T17869] __x64_sys_ioctl+0x190/0x200 [ 1138.236146][T17869] do_syscall_64+0xcd/0x250 [ 1138.240644][T17869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.246528][T17869] RIP: 0033:0x7eff6157ff19 [ 1138.250926][T17869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1138.270516][T17869] RSP: 002b:00007eff622d2058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1138.278913][T17869] RAX: ffffffffffffffda RBX: 00007eff61746080 RCX: 00007eff6157ff19 [ 1138.286869][T17869] RDX: 00000000200002c0 RSI: 0000000000003b86 RDI: 0000000000000003 [ 1138.295089][T17869] RBP: 00007eff622d20a0 R08: 0000000000000000 R09: 0000000000000000 [ 1138.303047][T17869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.311017][T17869] R13: 0000000000000001 R14: 00007eff61746080 R15: 00007ffd6e152398 [ 1138.318980][T17869] [ 1138.331473][T17781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.341342][T17781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.352266][T15771] Bluetooth: hci3: command tx timeout [ 1138.377438][T17781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.389320][T17781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.401871][T17781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.412728][T17781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.423275][T17781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.491825][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1138.555965][T17781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.595351][T17781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.636468][T17781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.657920][ T865] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 1139.592888][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1140.715384][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1141.837882][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1142.960422][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1144.082897][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1145.258915][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1146.381382][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1147.503910][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1148.679887][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1149.802435][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1150.924888][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1152.100997][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1153.223378][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1154.345910][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1155.521865][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1156.644381][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1157.766879][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1158.942906][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1160.065379][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1161.187889][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1162.364069][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1163.486366][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1164.608875][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1165.785161][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1166.907358][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1168.029880][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1169.206338][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1170.328362][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1171.450864][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1172.627028][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1173.749356][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1174.871871][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1176.047827][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1177.170372][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1178.292848][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1179.470094][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1180.591343][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1181.713865][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1182.889832][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1184.012362][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1185.134844][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1186.310862][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1187.433330][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1188.555871][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1189.731871][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1190.854329][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1191.976830][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1193.152834][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1194.275354][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1195.397840][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1196.573799][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1197.696333][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1198.818822][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1199.994851][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1201.117310][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1202.239831][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1203.415799][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1204.538320][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1205.660815][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1206.836825][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1207.959291][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1209.081824][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1210.257811][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1211.380338][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1212.502802][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1213.678880][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1214.801284][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1215.923811][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1217.099792][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1218.222301][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1219.344792][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1220.520805][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1221.643272][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1222.765827][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1223.941762][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1225.064296][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1226.186784][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1227.362787][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1228.485285][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1229.607809][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1230.783776][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1231.906277][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1233.028772][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1234.206014][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1235.327287][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1236.449788][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1237.625749][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1238.748272][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1239.870763][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1241.046781][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1242.169276][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1243.291771][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1244.467744][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1245.590271][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1246.712757][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1247.888748][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1249.011236][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1250.133766][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1250.721681][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1250.728641][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17781/1:b..l [ 1250.737166][ C1] rcu: (detected by 1, t=10506 jiffies, g=68497, q=401 ncpus=2) [ 1250.744965][ C1] task:syz-executor state:R running task stack:23744 pid:17781 tgid:17781 ppid:17773 flags:0x00004002 [ 1250.757479][ C1] Call Trace: [ 1250.760758][ C1] [ 1250.763688][ C1] __schedule+0xe58/0x5ad0 [ 1250.768111][ C1] ? __pfx__prb_read_valid+0x10/0x10 [ 1250.773402][ C1] ? __up_console_sem+0x85/0xe0 [ 1250.778253][ C1] ? __pfx___schedule+0x10/0x10 [ 1250.783114][ C1] ? __up_console_sem+0x8f/0xe0 [ 1250.787962][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1250.793172][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1250.798544][ C1] preempt_schedule_common+0x44/0xc0 [ 1250.803831][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1250.809028][ C1] ? vprintk_emit+0x445/0x6f0 [ 1250.813704][ C1] ? vprintk_emit+0x453/0x6f0 [ 1250.818384][ C1] vprintk_emit+0x458/0x6f0 [ 1250.822890][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1250.827917][ C1] ? find_held_lock+0x2d/0x110 [ 1250.832689][ C1] vprintk+0x7f/0xa0 [ 1250.836587][ C1] _printk+0xc8/0x100 [ 1250.840565][ C1] ? __pfx__printk+0x10/0x10 [ 1250.845151][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1250.850353][ C1] ? batadv_check_known_mac_addr+0x38/0x440 [ 1250.856245][ C1] ? batadv_check_known_mac_addr+0x38/0x440 [ 1250.862148][ C1] ? vprintk+0x86/0xa0 [ 1250.866219][ C1] ? __wake_up_klogd.part.0+0x99/0xf0 [ 1250.871600][ C1] batadv_check_known_mac_addr+0x230/0x440 [ 1250.877415][ C1] batadv_hard_if_event+0x1025/0x1640 [ 1250.882782][ C1] ? smc_pnet_netdev_event+0x8a/0x7c0 [ 1250.888151][ C1] ? lockdep_rtnl_is_held+0x26/0x40 [ 1250.893351][ C1] notifier_call_chain+0xb7/0x410 [ 1250.898379][ C1] ? __pfx_batadv_hard_if_event+0x10/0x10 [ 1250.904099][ C1] call_netdevice_notifiers_info+0xbe/0x140 [ 1250.909995][ C1] dev_set_mac_address+0x370/0x4a0 [ 1250.915103][ C1] ? dev_set_mac_address_user+0x22/0x50 [ 1250.920651][ C1] ? __pfx_dev_set_mac_address+0x10/0x10 [ 1250.926381][ C1] ? __pfx_down_write+0x10/0x10 [ 1250.931238][ C1] ? __kmalloc_noprof+0x23b/0x510 [ 1250.936268][ C1] dev_set_mac_address_user+0x30/0x50 [ 1250.941662][ C1] do_setlink.constprop.0+0x7c4/0x3f70 [ 1250.947136][ C1] ? mark_held_locks+0x9f/0xe0 [ 1250.951901][ C1] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 1250.957797][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1250.963004][ C1] ? osq_unlock+0x8b/0x2a0 [ 1250.967421][ C1] ? __pfx_osq_unlock+0x10/0x10 [ 1250.972275][ C1] ? rcu_is_watching+0x12/0xc0 [ 1250.977042][ C1] ? trace_contention_end+0xee/0x140 [ 1250.982326][ C1] ? __mutex_lock+0x1cc/0xa60 [ 1250.987005][ C1] ? rtnl_newlink+0x5d0/0x1c50 [ 1250.991770][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1250.996792][ C1] ? cap_capable+0x1cf/0x240 [ 1251.001393][ C1] ? netlink_ns_capable+0xfa/0x130 [ 1251.006510][ C1] rtnl_newlink+0x12c7/0x1c50 [ 1251.011199][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1251.016234][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1251.021431][ C1] ? cred_has_capability.isra.0+0x192/0x2f0 [ 1251.027326][ C1] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1251.033570][ C1] ? find_held_lock+0x2d/0x110 [ 1251.038338][ C1] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 1251.043452][ C1] ? __pfx_lock_release+0x10/0x10 [ 1251.048473][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1251.053681][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1251.058708][ C1] rtnetlink_rcv_msg+0x95b/0xea0 [ 1251.063650][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1251.069126][ C1] netlink_rcv_skb+0x16b/0x440 [ 1251.073890][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1251.079354][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1251.084658][ C1] ? netlink_deliver_tap+0x1ae/0xd30 [ 1251.089953][ C1] netlink_unicast+0x53c/0x7f0 [ 1251.094719][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1251.100030][ C1] netlink_sendmsg+0x8b8/0xd70 [ 1251.104799][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.110096][ C1] __sys_sendto+0x488/0x4f0 [ 1251.114609][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1251.119657][ C1] ? __fput+0x686/0xb60 [ 1251.123819][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 1251.128583][ C1] ? do_syscall_64+0x91/0x250 [ 1251.133258][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1251.138459][ C1] do_syscall_64+0xcd/0x250 [ 1251.143050][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.148944][ C1] RIP: 0033:0x7fe970781dac [ 1251.153353][ C1] RSP: 002b:00007ffd879d3610 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1251.161761][ C1] RAX: ffffffffffffffda RBX: 00007fe971474620 RCX: 00007fe970781dac [ 1251.169732][ C1] RDX: 000000000000002c RSI: 00007fe971474670 RDI: 0000000000000003 [ 1251.177694][ C1] RBP: 0000000000000000 R08: 00007ffd879d3664 R09: 000000000000000c [ 1251.185662][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1251.193628][ C1] R13: 0000000000000000 R14: 00007fe971474670 R15: 0000000000000000 [ 1251.201629][ C1] [ 1251.204648][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10481 jiffies! g68497 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1251.216985][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=57135 [ 1251.224871][ C1] rcu: rcu_preempt kthread starved for 10482 jiffies! g68497 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1251.236233][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1251.246202][ C1] rcu: RCU grace-period kthread stack dump: [ 1251.252078][ C1] task:rcu_preempt state:I stack:28240 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1251.262258][ C1] Call Trace: [ 1251.265531][ C1] [ 1251.268462][ C1] __schedule+0xe58/0x5ad0 [ 1251.272880][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1251.278097][ C1] ? __pfx___schedule+0x10/0x10 [ 1251.282950][ C1] ? schedule+0x298/0x350 [ 1251.287273][ C1] ? __pfx_lock_release+0x10/0x10 [ 1251.292295][ C1] ? lock_acquire+0x2f/0xb0 [ 1251.296791][ C1] ? schedule+0x1fd/0x350 [ 1251.301121][ C1] schedule+0xe7/0x350 [ 1251.305188][ C1] schedule_timeout+0x124/0x280 [ 1251.310036][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1251.315402][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1251.320690][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1251.326492][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 1251.331954][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1251.336719][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1251.341997][ C1] ? rcu_gp_init+0xc82/0x1630 [ 1251.346679][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1251.351876][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1251.357681][ C1] rcu_gp_kthread+0x271/0x380 [ 1251.362357][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1251.367551][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1251.372746][ C1] ? __kthread_parkme+0x148/0x220 [ 1251.377773][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1251.382969][ C1] kthread+0x2c1/0x3a0 [ 1251.387047][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1251.392243][ C1] ? __pfx_kthread+0x10/0x10 [ 1251.396832][ C1] ret_from_fork+0x45/0x80 [ 1251.401242][ C1] ? __pfx_kthread+0x10/0x10 [ 1251.405838][ C1] ret_from_fork_asm+0x1a/0x30 [ 1251.410613][ C1] [ 1251.413625][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1251.419944][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1251.425139][ C0] NMI backtrace for cpu 0 [ 1251.425149][ C0] CPU: 0 UID: 0 PID: 17876 Comm: syz.3.3141 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 1251.425165][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1251.425172][ C0] RIP: 0010:lock_release+0x17a/0x6f0 [ 1251.425188][ C0] Code: 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 80 3c 02 00 0f 85 19 05 00 00 49 81 3c 24 a0 17 7c 93 0f 84 65 02 00 00 9c 8f 04 24 48 c7 c7 00 db 6c 8b e8 59 23 b3 09 48 89 ea 83 e5 07 48 b8 00 [ 1251.425200][ C0] RSP: 0018:ffffc90000007cb8 EFLAGS: 00000006 [ 1251.425212][ C0] RAX: dffffc0000000000 RBX: 1ffff92000000f99 RCX: ffffffff8176abc9 [ 1251.425221][ C0] RDX: 1ffffffff1c376a0 RSI: 0000000000000000 RDI: ffff88801eb98adc [ 1251.425230][ C0] RBP: ffffffff905f3734 R08: 0000000000000000 R09: fffffbfff20be082 [ 1251.425239][ C0] R10: ffffffff905f0417 R11: 0000000000000001 R12: ffffffff8e1bb500 [ 1251.425248][ C0] R13: ffff888034ad6400 R14: ffff88801eb98000 R15: ffff888034ad6000 [ 1251.425257][ C0] FS: 00007eff622f36c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1251.425271][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1251.425287][ C0] CR2: 00007eff622f2fb8 CR3: 0000000034bc6000 CR4: 00000000003526f0 [ 1251.425296][ C0] Call Trace: [ 1251.425301][ C0] [ 1251.425306][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1251.425321][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1251.425333][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1251.425348][ C0] ? lock_release+0x17a/0x6f0 [ 1251.425361][ C0] ? default_do_nmi+0x6a/0x160 [ 1251.425374][ C0] ? exc_nmi+0x170/0x1e0 [ 1251.425386][ C0] ? end_repeat_nmi+0xf/0x53 [ 1251.425406][ C0] ? lock_release+0xa9/0x6f0 [ 1251.425419][ C0] ? lock_release+0x17a/0x6f0 [ 1251.425433][ C0] ? lock_release+0x17a/0x6f0 [ 1251.425447][ C0] ? lock_release+0x17a/0x6f0 [ 1251.425461][ C0] [ 1251.425466][ C0] [ 1251.425471][ C0] ? advance_sched+0x6d2/0xc60 [ 1251.425485][ C0] ? __pfx_lock_release+0x10/0x10 [ 1251.425498][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1251.425517][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1251.425532][ C0] ? advance_sched+0x679/0xc60 [ 1251.425545][ C0] ? lock_acquire+0x2f/0xb0 [ 1251.425558][ C0] ? advance_sched+0x679/0xc60 [ 1251.425572][ C0] advance_sched+0x6d7/0xc60 [ 1251.425588][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1251.425604][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1251.425617][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 1251.425636][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1251.425653][ C0] ? read_tsc+0x9/0x20 [ 1251.425670][ C0] ? rcu_is_watching+0x12/0xc0 [ 1251.425689][ C0] hrtimer_interrupt+0x392/0x8e0 [ 1251.425709][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1251.425726][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1251.425741][ C0] [ 1251.425745][ C0] [ 1251.425750][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1251.425767][ C0] RIP: 0010:fixup_red_left+0x0/0x20 [ 1251.425780][ C0] Code: a0 35 8e e8 92 c3 de 02 e9 d4 fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 48 89 f0 66 90 c3 cc cc cc cc f6 47 08 02 74 06 8b 57 [ 1251.425792][ C0] RSP: 0018:ffffc90003ecf6b8 EFLAGS: 00000287 [ 1251.425802][ C0] RAX: 0000000000006000 RBX: ffff888029302000 RCX: ffff888029306000 [ 1251.425810][ C0] RDX: 0000000000000000 RSI: ffff888029302000 RDI: ffff88801b042140 [ 1251.425819][ C0] RBP: ffffffff846184ad R08: 0000000000002000 R09: 0000000000000000 [ 1251.425827][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801b042140 [ 1251.425835][ C0] R13: 0000000000212008 R14: ffff88801b042140 R15: 0000000000000000 [ 1251.425845][ C0] ? tomoyo_realpath_from_path+0x1ad/0x720 [ 1251.425867][ C0] check_slab_allocation+0xa5/0x130 [ 1251.425882][ C0] kfree+0x11e/0x4b0 [ 1251.425894][ C0] ? tomoyo_realpath_from_path+0x1ad/0x720 [ 1251.425913][ C0] tomoyo_realpath_from_path+0x1ad/0x720 [ 1251.425932][ C0] tomoyo_check_open_permission+0x2ad/0x3c0 [ 1251.425947][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1251.425965][ C0] ? avc_has_perm_noaudit+0x119/0x3a0 [ 1251.425990][ C0] ? __pfx_hook_file_open+0x10/0x10 [ 1251.426003][ C0] ? lock_acquire+0x2f/0xb0 [ 1251.426016][ C0] ? mnt_get_write_access+0x6a/0x300 [ 1251.426034][ C0] tomoyo_file_open+0x6b/0x90 [ 1251.426053][ C0] security_file_open+0x84/0x1e0 [ 1251.426070][ C0] do_dentry_open+0x57e/0x1ea0 [ 1251.426085][ C0] ? inode_permission+0xdd/0x5f0 [ 1251.426102][ C0] vfs_open+0x82/0x3f0 [ 1251.426117][ C0] ? may_open+0x1f2/0x400 [ 1251.426135][ C0] path_openat+0x1e6a/0x2d60 [ 1251.426151][ C0] ? __pfx_path_openat+0x10/0x10 [ 1251.426164][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1251.426177][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 1251.426191][ C0] ? find_held_lock+0x2d/0x110 [ 1251.426209][ C0] do_filp_open+0x20c/0x470 [ 1251.426223][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 1251.426236][ C0] ? find_held_lock+0x2d/0x110 [ 1251.426255][ C0] ? __pfx_kfree_link+0x10/0x10 [ 1251.426275][ C0] ? alloc_fd+0x41f/0x760 [ 1251.426295][ C0] do_sys_openat2+0x17a/0x1e0 [ 1251.426311][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1251.426331][ C0] __x64_sys_openat+0x175/0x210 [ 1251.426348][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 1251.426368][ C0] do_syscall_64+0xcd/0x250 [ 1251.426386][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.426402][ C0] RIP: 0033:0x7eff6157e880 [ 1251.426413][ C0] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1251.426425][ C0] RSP: 002b:00007eff622f3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1251.426437][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007eff6157e880 [ 1251.426445][ C0] RDX: 0000000000000002 RSI: 00007eff615f3c6b RDI: 00000000ffffff9c [ 1251.426453][ C0] RBP: 00007eff615f3c6b R08: 0000000000000000 R09: 00007eff622f4000 [ 1251.426462][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1251.426470][ C0] R13: 0000000000000000 R14: 00007eff61745fa0 R15: 00007ffd6e152398 [ 1251.426483][ C0] [ 1252.058176][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1253.180650][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1254.303130][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1255.425642][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1256.548135][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1257.724143][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1258.846609][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1259.969145][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available