last executing test programs: 19.521236358s ago: executing program 0 (id=1019): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6}, @NHA_OIF={0x8, 0x5, r2}]}, 0x3c}}, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000180)={0x1, 0x7ff}, &(0x7f0000000340)) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000780)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/87, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16.028439529s ago: executing program 0 (id=1024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf250700000008003200810000000500330001000000050029000000000008000600", @ANYRES32=0x0, @ANYRESOCT=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8811}, 0x4048800) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000000)='\x00', 0x0, r5) close_range(0xffffffffffffffff, r3, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) fallocate(r6, 0x68, 0x0, 0xffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x9, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x9}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES8=r4, @ANYRESDEC]) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 14.605594937s ago: executing program 0 (id=1026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) 14.413918047s ago: executing program 2 (id=1028): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x60}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r1, &(0x7f0000000200)="6f6dd409e5517aef98d7d816f84aa05bc2a634fda9432e42fac88303efa7a54647823fbb6ce297c59bd95792a5941c", &(0x7f0000000440)=""/211}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf3740e077cf1d64, 0x12, r0, 0xffffc000) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090dc4c6000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050007"], 0x58}}, 0x0) 14.078298491s ago: executing program 0 (id=1030): getresgid(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x40286608, &(0x7f0000000180)={@desc={0x31, 0x2000000, @desc3}}) 13.94208097s ago: executing program 3 (id=1031): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0x6908, &(0x7f0000000340), 0x0, 0x0) io_uring_setup(0x7058, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f000a010000000004"], 0x57) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x3, 0x1, {0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}}, 0x3a) r8 = socket(0x15, 0x5, 0x0) connect$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) getsockname$l2tp6(r8, 0x0, &(0x7f0000000080)) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmmsg$inet(r2, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000800)="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"/294, 0x126}, {&(0x7f00000000c0)="15654d91fd691c85513e1dff9a607c8217479a71a5477af6dc523937c362c891afad759d937a08ca51d28419513cfb2df6efeaf3fc1b3b3a7c6403c4dcaead7eec60576bf60e65ef13a17fdb13fed40d65bd28b50a91ae2edc949328be69b2fac09c2cd5b8c36a0cc78ff862add091c2a40610e313fe192ecb054b57445696a4c6f9c2f8f201920480d6d5e8621d77a88d2087244fd50eee2d6ccfd03b713f3401890c1239064dfae7223cdbedf4edb3f38d590983d394", 0xb7}, {&(0x7f0000006a40)="21aac44f47fbf4f6496ce4e4b9a4d822b78eb9b455598c8b61d8495f74a4a25b52ff51750300f4c4ca6f376903868f6c4549a9614f3fe4b30498a27b658ee69fefa3edb52ed47b2ee8c004e5582c9bec82b153e8cf7f91e72d9054ffffbdbaf0fcd1c048ed3ee937b93ad633ad5a01d52d820466d46fbc4409535896a59dd1d94279d9c4df720e1871a57830a078e3c058ec6a5e0d2b233827600000000000000000ca00"/182, 0xb6}, {&(0x7f0000000180)="47b7ae525821a239fc7a10a2f198314f675756667db1e87b8453f3b2e6864abbac55304b04db64070368248b9b3d488fc59bc48e88b14f23a271edbd512b71e3d47f7f3885bb27e665e04225088a0f126d14ad611079f1fffffffffffffff94141486ed92c2044d31c44b77f94598161dc688a843a0b8fb4ed79cc3c5868cd25c4b1022527ef18f57c4badcf188e8e0f9b068464c66eebd146280afa02cf2a8bf5a08dabe729a88685a8c4e0b6b7157ae487c9e48618ecb59e1d4482ee80cbeaf965158d8fe068f8b6b717a6e3cdf43cb4ac3ea83cf81dc54cd8ac5d217600eb5b7b90fd85a70c1ab6d55ea72dd2dfd49ebce26f30f2fb1c76", 0xf9}, {&(0x7f0000000940)="6e027ae49544c38d0237e5c42138fdaf6115c76df5f52a072b488cec0bfa70182753983b8c0e5e7562ea44da6a850f945b52d76a55e44083ab7b10779b7aaaa7d0fe0e9311044ab003e439d96bc679b653e8650d557945bcaa35ece5901b8e7e7336949ed24d255082669463258aaa72ea97c4a8aaea962e5bffabf911d800a309da1e86a1bed84d250f09511872d39ed896817325fe8cd061616c7df941275b7c977aee6707fd92cab5818d51223c09ce0f34e8b3abab1f5916053c19948cfcd0d9055611ad662d92b077b1a6ba3f8d4f93e07cad00cb1514b124d1fbdd7914a7cbab6d430efb6e3d8894eeffac9f403b4079f49a343bcad4c90420737fca660c74d4df1f4a1ee6e8cf6a5e362ef2d60f2c87d416bd2dee31e6cbfc4cf65d09bdb762da0ec1cf20aea399b3256e81df249c6557bee9078da3703c3fa47a7d9b74bd5535b688dd6fd4410ab114aa578d7b0008000000000000de0468f41be2ce04f7f83f2ca51da575497e63462cc58eb6400b499f6125572c9574f101c951157591256fea210de53243cd8456d455def9eba8c24172b0aa4799a8386e63671f32c349a1febe1fb297eedd15a6dab51c35164e6cded4efbe0c9c639051b63020adda9a8cb4ef00eea57a5aefaf9c6bdd98f67ad68445ce2839fd0fdd349f99eb2f61b002a004c0", 0x1e7}], 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="2400000000000000000000000700000001071336ac1414aaac1414aaac1e080100000000000000001c000000000000000000000008000000", @ANYRES64=r9], 0x48}}], 0x1, 0x0) 12.91661215s ago: executing program 2 (id=1033): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8, &(0x7f0000000600)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x3, &(0x7f00000006c0)={0x0, 0x12, 0x0, @thr={&(0x7f00000005c0)="8d3e9b", &(0x7f00000007c0)="1054d5dd62a85f8784eec6c29ac4d67dc2c2c5924d2d54647362cebedb33a29e2d0339cad51caf9741ce05727c9a5460a70a4c87601ca97f4f8232cf0c006fd9605938bccb6d173abd845685265093"}}, &(0x7f0000000600)) unshare(0x42060b80) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0xec0b9776e3f3d3a5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) mkdirat(0xffffffffffffff9c, 0x0, 0x75) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 12.503910609s ago: executing program 4 (id=1034): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6}, @NHA_OIF={0x8, 0x5, r2}]}, 0x3c}}, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000180)={0x1, 0x7ff}, &(0x7f0000000340)) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000780)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/87, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 12.350083945s ago: executing program 1 (id=1035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/udp6\x00') (async, rerun: 32) r2 = syz_clone(0x4000000, &(0x7f00000000c0)="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", 0xfd, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000500)="2078108aeeb2dd3f00c501d205c4451879639ad8a13954b92d63e59cba11ac8b1536a9bf5882a289bf67cab2a34ef0bb71ec9e3b133007676674814c76c4a699b6da53a73d9c20bc3f86c568b125c5bafa3228271364ff7b38fea1a8e3769386dc0d5aba68980439f2cc3e8ccd7884ecbb7c7bb09166d8359e44ab4043a824e397f823b6c1e5546c64a49a48b9369104ab9c0eaadacb3e762faf00c4cae4976eb417276705fae33fa4dcb9ae66866a86ce45a53f2a33ef115f4de534c52c6df746443e") (async) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x43) (async) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x9, 0x4, 0x1e, 0x1, 0xb2af, r2}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async, rerun: 32) creat(0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000002380)) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={0xffffffffffffffff}, 0x111}}, 0x20) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000001fc0)={0x62, @loopback, 0x4e22, 0x3, 'none\x00', 0x10, 0x400, 0xf}, 0x2c) (rerun: 64) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000640)={0x13, 0x0, 0x7, {0x0, r7}}, 0x18) (async) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) (async) socket(0x10, 0x803, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034000180090001007866726d00000000240002800800014000000000080004400000000005000300000000000800024000000004"], 0x8c}}, 0x0) 12.205267726s ago: executing program 3 (id=1036): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0) socket(0x10, 0xa, 0xfffffffe) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 12.088719609s ago: executing program 1 (id=1037): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @broadcast}}}, 0xfffffffffffffcd8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa90d]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="1e00"]) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000100)=0x100) 11.789941244s ago: executing program 3 (id=1038): fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) rt_sigaction(0x15, &(0x7f00000000c0)={&(0x7f0000000040)="0f01db2ef3440f1ecff3440fa7c08f6860864300bcf3406fc4417c289f001000028f099898d9f3420fbdb7070000006566f3400faef7c441f566fd", 0xc0000002, 0x0}, 0x0, 0x8, &(0x7f0000000200)) r1 = gettid() rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) tkill(r1, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64030102}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000000c0)={r7}, &(0x7f0000000140)=0x8) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB="00020000533af54b01005bb9c481899e8d88c6258c37517573420894d1577fc6cd7d11eb9aff13a0e400000080000000002aa0c890d0d4b9cd2beae80fd1d29a463f1fa83556bdabc30062073694197c4215a90eb2354761d980f7a504546816b86c8d3c5f87debde8d578c06221b027cf159978e0004d6d852e11ac5fc7358592106a2c4a5c7c9e17573d131a0296bfe8", @ANYRES16=r10, @ANYBLOB="010000000000fcdbdf253b000000", @ANYRES32=r11, @ANYBLOB, @ANYRESHEX=r8, @ANYRESHEX=r2], 0x200}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r13 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r13, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRES16=r12, @ANYRESOCT=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) 10.874761191s ago: executing program 1 (id=1039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) getpid() setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x400000000000181, 0x9200000000000000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9d, &(0x7f0000000200)=""/157}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000100)='neigh_update\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x101, 0x5, 0x400, 0x20, 0xffffffffffffffff, 0x401, '\x00', 0x0, r4, 0x3, 0x5, 0x5, 0xa}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r9}, 0x10) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x4) r11 = fcntl$dupfd(r7, 0x0, r7) ioctl$UI_SET_MSCBIT(r11, 0x40045568, 0x0) 9.87707285s ago: executing program 1 (id=1040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) 9.24591286s ago: executing program 3 (id=1041): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff85000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x8]}, 0x8, 0x81000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r4, &(0x7f0000000140), 0x4) 8.306565178s ago: executing program 1 (id=1042): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) socket$packet(0x11, 0x3, 0x300) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb8) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x5) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001e40)="d3c7b9b08767df6c0d06fa9bb88e8ff1b731a753a4ea5fe6e7b874faf7f07bf1cbc89389c4e7e19585788a4bba4de57d2979df3fb780e8edea7ddacaded0c5ad1d42e9", 0x43) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r3, &(0x7f00000021c0)=[{{&(0x7f00000013c0)=@l2tp6={0xa, 0x0, 0x200, @loopback, 0x6, 0x2}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000180)}, {&(0x7f0000001440)="6cf0b27b9bef83357cf58c143c20727a324978147407d9a36ca1e39884311f666a5c955ec6a4137ceffec34a7559a23f8e17d35d931778d84d554aaebb0d7b7475b872", 0x43}, {&(0x7f00000014c0)="11e9ce4b6828af6a2680d65304d52ad42ec0984e34425280de1480d9fcff763eaa0a0c2709c236d55c293fae12c26c8579", 0x31}, {&(0x7f0000001500)="27ffeeb83ce67a2a5f35cee5c656f514350555b499b12e824ee07bcffe04e87d9494969b041dac79d2a3f71e35849cccc42519a4cfd75b4038ed47d359c80d985d178bf58e5541efc7ad5901690d8a7c4eeb866dc451181e1a5b0775746b68a5609636e41b05ef9881f80e3e38e3242a632ae3d2fb9f7e898da9d67875", 0x7d}, {&(0x7f0000001580)="99aabef6647be390481f6652e8ad55cd7e43e1cf80001064ffcb34786285405dfe3e58db24b67c36fb69c38b829128171e87f814af3cb522f1d91f9c765b6605b2c1bd805ea34cead7cfb95b39fb5efe8238d5ce8519a2fee02543ccac0950233e2a8f79afcaa3811a2c46db06947ece4f7817e632814ee04dadf98ae8cfb80a967666ddd86ac837493a6b92caf8355b5cdce0c5d1d1270fd064f39d148907d02625c66b43934f3e7feb1747149653359be0057cc9b9a8bad3f075db2ef2db357ab94f7a5952c21400322986a2457ec43fe9ad8c13c324390cc128071924d1cc", 0xe0}], 0x5, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1d8}}, {{&(0x7f0000001900)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xa9}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001980)="8406430ed707139b884f3fb78f9b00815a85c6db867b35008fd39264df2ae052b3d418ef9e46b05c5e8d68166bd04a0f43ff819c5f841f82a4f473bb9a9dbde86278bc7865de5f2c981a021abc6d0c0bca84e75f4452a5bc45e2f5a101bfdc1e35f28a99cee0f70345195b220ded9b3d335aab3269d59a2bd86e897a0e1e48532f2aeaa1fc6a6085ed63511b1fe1686e87a033383f142c5955de4590fc0cf9890d806cc9a29c6ee3e70b3639641b5a893765bcb98d20b29c4351e40a7b315e", 0xbf}, {&(0x7f0000001a40)="db93f0a754fb8efc470adc820292573bf52fb61cf305002d56b383141c2f6593c275d3633f3ace52699e3afc2d0f3e8dce42ebdcdaca97478334bf7a4fcf8c6676f07ac83552ba6bf8607e32bee7d44b086c0db43f8de68b4322caaa318fb57a033911e8e308aac61f2f42c369f4a3c1dbf0bd1a9bbc2d67aace9807652760286b99", 0x82}, {&(0x7f0000001b00)="376c002fb94533def87e67ff9f4dd5d735bc85061c001181b6cb118b9445cdcb931d28723f33a779274d56d8c6b3b3d9a893f1bdf423e2c508f5d684d3f50f99c9cdc2e11868928d23fa1e88f9db023c0f4574d07fa93f94a541509150431b5592843d374a982acc0fe5b3731746ec930ee5b8560fd46f242f922350ce14ce4b9413fa3cc9470d3881fdc2ac7999", 0x8e}, {&(0x7f0000001bc0)="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", 0xfc}, {&(0x7f0000001cc0)="23039d744be88f6067abe864a9e3faee94609eba69361ab4c557c53b7372b9d9e4743691cc52875abdadfb48522bcc3c31e42ae74884c719d8d585efc3fd51a43ae8ef60748e2746f13772281cb2778d9932eb47d69db91aaaa8d27c4d66e510d0fd390ac8c85708941e6ce2ff0e02a0a0965aa1731e1c21bf5573ad1525a707eff5cc90d38d6fc1ff1ad6dc83fde50c52d9173cf43ebd97c7ad072d838ce5ef57ecc81d0740e990485640cbfdfaf383782186e0cf15d3089deed6560391a8203d9fe0caa0302a94523173115cc4e64cfe3fedfbc2b0941efa569b56e5c2b070ea5b3064909e6d6c176fb6bdf5a26d7cf6c3e7b911e0849c96", 0xf9}], 0x5, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x188}}, {{&(0x7f0000002000)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000002140)=[{&(0x7f0000002080)="f23632925b20270c958abfbe34c248d51c976270e44e4d9ec1562601a563b781", 0x20}, {&(0x7f00000020c0)="cbbd629376a3a14d9cd7a8d0ad963cd3478f93b7069e2cb30cb9f845b0e90493a69782f992036ccdcf1dcdc6ec0255f020b62d44ca48d94c372986805953a3f8ca1abda6a623af2d8116aa37b60a6aa425ea4fffe2358afdbe049f", 0x5b}], 0x2, &(0x7f0000002180)}}], 0x3, 0x20040051) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000040)=@gcm_256={{}, "a2879a2323b8254e", "86dd270f98c60203791922c5acce09cc4c1afd8c02f79131becff587e9572ef9", "770c937d", "5590a6b25e516d6a"}, 0x38) socket$inet(0x2, 0x80000, 0xb2) listen(0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x1e, {0x1e, 0x0, "01267469aea9f7729916720afce6dba7e65d6cc288147818275e6905"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$netlink(r1, &(0x7f0000003480)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000380)={0x1038, 0x3d, 0x40c, 0x70bd29, 0x25dfdbfe, "", [@nested={0x1025, 0x76, 0x0, 0x1, [@typed={0x4, 0x120}, @generic="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", @typed={0x6, 0xbe, 0x0, 0x0, @str='.\x00'}, @generic="8ef99e10fc9d37cb45974f4d1d4c71e52eb48b0d59"]}]}, 0x943}], 0x1, &(0x7f0000000300)=[@cred={{0x1c}}], 0x20, 0x1}, 0x48080) 8.287432245s ago: executing program 3 (id=1043): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9899, @empty, 0xfffffffd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x0, "4102000000ff00eb850c2a06bbff0f00"}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x90) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r3, &(0x7f0000000140)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='gadgetfs\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x7b, 0x101301) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="00004515", @ANYRES16=r6, @ANYBLOB="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"], 0x164}}, 0x40040) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x2, 0x0, 0x0}) 8.133830948s ago: executing program 4 (id=1044): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x388}, @hci_ev_le_ext_adv_report={{}, {0x7, [{0x2, 0x0, @none, 0x5, 0x7, 0x6, 0x7, 0x8, 0xb, 0x73, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc9, "fdf9aae55430f3d6b248c910598f054d3ef492a505a83226f3db04077510d03296fbc39134a5d5c992ea8db94864af543d9e611820d150ae028baf6456830d392958e78a2bf94287853c62269d378ce77ab0c7b2907f5a4e9270bbf7fee7f14878ced335f1a4a7b3c16bdd9539b7be7239ebc6023413547793547d2864ed911848e0f7cde8e58d146aed0f87993f93133a067901163ba7f5ee8ecb05966f8e25760cb03f16db8732ef121c3d656d86d5f93cefcd6c8de67ae4ac3c14325ec0f0fb5905241e7b9bc0df"}, {0x12, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x20, 0x46, 0x2, 0x4, 0x1, 0x80, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xd8, "2e9df7b036dfdfe3cfe8535bfe0cf816235717a20c7d7adf35c15331ee2c65eaf720a0e40db73df6c2647349c018eabc5e53655504bfd8905dab35ef145494b5b6ef0521c0b66418c9c40bfdf80209f456dc9f6dd7a573e4b9acc445f44269700a2bc876189b775333ccfa93b02d76aa06e201b6f3a654bf73db01aad81054610b7f90df307b94a879ab1237c104cd207aa401ddb3e9506ef113699229e463f0fe08f6791eae463a3fd71a2cf8a265fd1d65917cef50848d9ca7ae10358699e8da78b241cdcef886ececfb264f26ebe8c87d91263b6b321d"}, {0x12, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xff, 0x9, 0x80, 0xff, 0x4, 0x1, 0x6, @any, 0xa6, "0aa0bc230ec76e1b89e8dd52900872e546cad620efba961b98f2878dffab23c8165f995bc84485035e075e00fd926e4d8e271ca5e669e451ee22bde46cda9a779691730fe389b45dc2af183cf0cfb551bd67362e7225e368765eb16c771a35447511a0d8474b327216c4019f6879bf6138bf2b656548e3f3208cfbd2fa8613df1170d513ed69a4ec9004d60b79488a0a83a142396a9a630136a3a4e9ec7776d3abf506de6b66"}, {0x15, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x3, 0x4, 0x7, 0x7, 0x4, 0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, {0x4, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x8c, 0x3, 0xff, 0xd, 0x5, 0xe, @none, 0x4b, "56b02fe29c602453cba802da4497c6cfa5c3fd72bb54c5bfb2c8158d42a9eec36d8346150a1748e8e5d8a9d50942aced05192aca90a098dd052d6516f5ae908441f4d68a0ec1b852361eb4"}, {0x13, 0x0, @none, 0x2, 0x2, 0x0, 0x9, 0x4, 0x1ff, 0x1, @none, 0x2c, "56e880ff736c1f7ae3b959e2080878ec4a5669b4dc6991ee8f21fd4b5548b3d3b90e256df6e30d1c688e9084"}, {0x10, 0x1, @none, 0x0, 0x0, 0xc, 0x0, 0x5, 0x0, 0x0, @any, 0x20, "848eceb0fb21170c3787a763a0404f89bad4463902cad87f3d4e6438966372aa"}]}}}}, 0x38b) vmsplice(r0, &(0x7f0000000740)=[{&(0x7f0000000580)="07adc03297651d0cf43af0ea5cbc74b6fb6cf42a8c053e1f076d7f9036758a93de5394baf2e968f61ed49c052d5a9072f3d18d9bf5fd221005613781f4b31a93cb9550d383272575e64154b0e2d122d246621ce89f424fbdbb49980e6261d3532f850ce59b850b5886f93382d36e62e6a9760b1f9856125b12b5a64873d2705ad66006e6bc82f99196837445", 0x8c}, {&(0x7f0000000640)="6d53d58bd4fff8194feace94709b1a9600da396dd1d20949c5b6839895af5e20cfa39f8a6809cb3ecc8d391fb0ffa79c8a1c5f9deb15388d02", 0x39}, {&(0x7f0000000680)="e020da849c7ece525ffe6f45db70c10b00003eb88fff74874edc38aca12c5b2ca55fc328ca612c", 0x27}, {&(0x7f00000006c0)="0eb313219806564fd376b0673727d9d422f82f05bc952aaaee1b52732abbda1075e53abaef248816b2a4f5b56fd913a56fbf97011075f77c81ccf348babd26a9820b6541741d50d8e769b5dfeab49ab75d8cb3959552cd6776382611c4c21b8d8ee5bcc1e7b0", 0x66}], 0x4, 0x6) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x184, 0x7, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x785c2b01}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xb9, 0x7, 0x1, 0x0, "4410fb8b80486b60055ebfb69084f9e0bfed39da7373df06a39e0d58f3ee11ef5c7217856e19c3c300dba9b040fec44c5b4078e3e722199b4bbde4d31cfee64541f2bf4d9e61e538f98664ed10326f3aa86f9e7a777ed2ee4010da490ba95d9df952d13d4dcf9587c96ec3159b907c3d1ad2bbdbb51b57863b784c028756bc8d7d52c590b6e4b7e6e9292d5b1d27fc8c007b044df0889b618abf81894b22f4841078b2ac47f131bdacd70240d3d1f65a80aa9adaf7"}, @NFTA_RULE_USERDATA={0x7f, 0x7, 0x1, 0x0, "1c04b4bc10c03dc844b4f31ce1d6bfb843c7de5b307c2c176e15b5cef03c89caf00224408d204ee0e31bf734eaa9edc0724ce4abae068b6fb7a01dddc8b811bd385727ba5350bc9ab877ae83365195b0986581166e3b50698185b4ca3ecf6745682d9ba49136d1494c901abc52d913f8e4b9fad4cd715503ae08e3"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x184}, 0x1, 0x0, 0x0, 0xc844}, 0x0) setrlimit(0xc, &(0x7f0000000a00)={0x0, 0x8}) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000e80)={0x80000000, 0x1, 0x5}, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}]) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000001140)={0x8, 0x100, 0x4, {0x4, 0x8, 0x2f5, 0x100}}) syz_emit_vhci(&(0x7f0000001180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x9, 0xa}, {0x4, 0x0, 0xb, 0x9}}}}, 0x17) openat$vnet(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) 7.919151651s ago: executing program 2 (id=1045): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000540)={0xfffffffffffffffc, 0x1022000, 0x800}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000400)=""/173, 0xad}, 0x3}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000712000/0x4000)=nil, 0x4000, 0x0, 0x812, r7, 0x0) mmap(&(0x7f0000de4000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f0000439000/0x4000)=nil, 0x4000, 0x0, 0x852, r7, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) flock(r6, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7200fedbdf251500000008000300f98de9a98394ec3c12a8", @ANYRES32=r9, @ANYBLOB="0c0099004c010000040000000a001a00ffffffffffff00000a001a00ffffffffffff00000a0006000802110000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) 7.701506946s ago: executing program 4 (id=1046): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r0, 0xd, &(0x7f0000000140)={0x7, 0xc574}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000480)=r0, 0x12) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x8, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x420140, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x80000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008084) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) mlock(&(0x7f0000409000/0x1000)=nil, 0x1000) 6.450589853s ago: executing program 0 (id=1047): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$binfmt_script(r3, &(0x7f0000000540)={'#! ', './file0'}, 0xb) (fail_nth: 2) write(r1, 0x0, 0x0) 6.349440586s ago: executing program 2 (id=1048): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x2a020400) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) unshare(0x2000400) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000000)="0f074ca24572716533e2c8a785608ca22e5c4784f303604044b87327e755d12dd4dad598b0b6d27a4c20fbb159fbe123c70da242aa43185498", &(0x7f0000000040)=""/91, &(0x7f00000000c0)="c817b5128bfe1d5fcf2fe0eaad39afd355041ad7569ebf7636414c6d7f8d681aaec86017e21b7ce2123742bd16653e34920f1e3f97873158023f7a2e546dad8dbad17f3f0ec4f05581d36087e346c4f1859f80a38879b8e5d2bf92436a056fe373863379a298ef1e3cb3600f2e85b30763b4f4e1a35bfc0971264f01897ee10cfb9f3e9190bbfd92335dae70ac94933b0f230b34c539a33fdcf2c60f7cffd0c9b8afc49e6841144043ebc3c41aa39fe9ab2049e9e44ca1e7baf6b31c85807216", &(0x7f0000000180)="f9dff26e6d06b6b56917b9e6500133f47e3cdb1371d233f150abe7045573842c1fa49ea3c3a2932124820e69214694dc4a6be5c9a2a2a06f5eb336d4aa69caecb2ddc82acf8f11b47561e2ace0c0a49a75b55b6814998c3717df88c9f1697b0f8fc6817c7e1ab5bc466baa2b1beb2b435e19453e741652a515604d98b59b642cba30108ad85b25ccddaa2eb38b58fb8d7526077b10be40a1b8a435a687019a170a3228233cc024c22d6611fa5150c64efd1f4a61347227fa31960a69cff7dadfb036b5cfe1938cbb2d5e5fdaa5e7b0f70d8819b0ea62a3f8f47b441d34ebe09889835176fb27ef26bf6c96cd7452ce", 0x400, r0}, 0x38) 5.536971006s ago: executing program 0 (id=1049): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) gettid() socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x42d3f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@gettaction={0x60, 0x32, 0x6620c249b5bcdf6f, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x60}}, 0x4000044) r2 = fanotify_init(0x0, 0x0) r3 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xc9\xa7\xb1S\x80:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\x1c\rt\xe6\n\x02\x9c\x02)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\xb7\xc1\x00\x00\x00\x00\x00\x00$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcd\xcax\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3}\xc4\x1e \x10\x9d\x94:\x18;;\xb6\xdc\xa3m\xb8\xc9CN\xd1\xcf\xc10\x8a\xee,\x7f\x91\xf7\xf7\xad)\xdbb\r @\xb8\x93\xd8\xd7\xe3\x0476\n\xe0\x0e\xcez\xc1z\xd8\xd4\xbc#;\x18\xe1\xc1Z\xf7\x8c-\xea\f\r!\xde\xa7\x99\xfc%Q\x89\xc5\xce O\xc6\xdd\x0f\xc5\xd3Y\xd8\a\xcclX\xb1}\xde\x15p\xae\f\xc02\x1a\x82\x97\\Z\xb6:\x9c\x9b\xde=\x85v\bY\x87\x12Br\xf4\xee\x1f\fA\xa6z\x8b\fs)[\x8e\xb4\xe7\x91\xa3\xca\xff\xbf<\xd1\xbc8\x06\xa1\xcd_\xa7\xdaZ\xab\x17\xb4\xebZoX\\\xc26\xb5f\xf8\xa6\xb8\x8e\xe6\xab\x17Wh\xb4(\x1b\xe1\xec\xd3I\xb1x0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) getpid() setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x400000000000181, 0x9200000000000000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9d, &(0x7f0000000200)=""/157}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000100)='neigh_update\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x101, 0x5, 0x400, 0x20, 0xffffffffffffffff, 0x401, '\x00', 0x0, r4, 0x3, 0x5, 0x5, 0xa}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r9}, 0x10) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x4) r11 = fcntl$dupfd(r7, 0x0, r7) ioctl$UI_SET_MSCBIT(r11, 0x40045568, 0x0) 5.06545201s ago: executing program 2 (id=1051): socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x8, 0x0, 0xfffffffb, 0x20, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0xa}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setgroups(0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) setuid(0xee01) sendmmsg$inet(r3, &(0x7f0000005240), 0x264e33, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) 4.213789787s ago: executing program 4 (id=1052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) 704.92753ms ago: executing program 3 (id=1053): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff85000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x8]}, 0x8, 0x81000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r4, &(0x7f0000000140), 0x4) 525.859394ms ago: executing program 1 (id=1054): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6}, @NHA_OIF={0x8}]}, 0x3c}}, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000180)={0x1, 0x7ff}, &(0x7f0000000340)) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000780)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/87, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 14.003799ms ago: executing program 2 (id=1055): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x10001, &(0x7f0000000180)=0x4) 0s ago: executing program 4 (id=1056): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x385}, @hci_ev_le_ext_adv_report={{}, {0x7, [{0x2, 0x0, @none, 0x5, 0x7, 0x6, 0x7, 0x8, 0xb, 0x73, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc9, "fdf9aae55430f3d6b248c910598f054d3ef492a505a83226f3db04077510d03296fbc39134a5d5c992ea8db94864af543d9e611820d150ae028baf6456830d392958e78a2bf94287853c62269d378ce77ab0c7b2907f5a4e9270bbf7fee7f14878ced335f1a4a7b3c16bdd9539b7be7239ebc6023413547793547d2864ed911848e0f7cde8e58d146aed0f87993f93133a067901163ba7f5ee8ecb05966f8e25760cb03f16db8732ef121c3d656d86d5f93cefcd6c8de67ae4ac3c14325ec0f0fb5905241e7b9bc0df"}, {0x12, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x20, 0x46, 0x2, 0x4, 0x1, 0x80, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xd8, "2e9df7b036dfdfe3cfe8535bfe0cf816235717a20c7d7adf35c15331ee2c65eaf720a0e40db73df6c2647349c018eabc5e53655504bfd8905dab35ef145494b5b6ef0521c0b66418c9c40bfdf80209f456dc9f6dd7a573e4b9acc445f44269700a2bc876189b775333ccfa93b02d76aa06e201b6f3a654bf73db01aad81054610b7f90df307b94a879ab1237c104cd207aa401ddb3e9506ef113699229e463f0fe08f6791eae463a3fd71a2cf8a265fd1d65917cef50848d9ca7ae10358699e8da78b241cdcef886ececfb264f26ebe8c87d91263b6b321d"}, {0x12, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xff, 0x9, 0x80, 0xff, 0x4, 0x1, 0x6, @any, 0xa6, "0aa0bc230ec76e1b89e8dd52900872e546cad620efba961b98f2878dffab23c8165f995bc84485035e075e00fd926e4d8e271ca5e669e451ee22bde46cda9a779691730fe389b45dc2af183cf0cfb551bd67362e7225e368765eb16c771a35447511a0d8474b327216c4019f6879bf6138bf2b656548e3f3208cfbd2fa8613df1170d513ed69a4ec9004d60b79488a0a83a142396a9a630136a3a4e9ec7776d3abf506de6b66"}, {0x15, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x3, 0x4, 0x7, 0x7, 0x4, 0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, {0x4, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x8c, 0x3, 0xff, 0xd, 0x5, 0xe, @none, 0x4b, "56b02fe29c602453cba802da4497c6cfa5c3fd72bb54c5bfb2c8158d42a9eec36d8346150a1748e8e5d8a9d50942aced05192aca90a098dd052d6516f5ae908441f4d68a0ec1b852361eb4"}, {0x13, 0x0, @none, 0x2, 0x2, 0x0, 0x9, 0x4, 0x1ff, 0x1, @none, 0x2c, "56e880ff736c1f7ae3b959e2080878ec4a5669b4dc6991ee8f21fd4b5548b3d3b90e256df6e30d1c688e9084"}, {0x10, 0x1, @none, 0x0, 0x0, 0xc, 0x0, 0x5, 0x0, 0x0, @any, 0x1d, "848eceb0fb21170c3787a763a0404f89bad4463902cad87f3d4e643896"}]}}}}, 0x388) vmsplice(r0, &(0x7f0000000740)=[{&(0x7f0000000580)="07adc03297651d0cf43af0ea5cbc74b6fb6cf42a8c053e1f076d7f9036758a93de5394baf2e968f61ed49c052d5a9072f3d18d9bf5fd221005613781f4b31a93cb9550d383272575e64154b0e2d122d246621ce89f424fbdbb49980e6261d3532f850ce59b850b5886f93382d36e62e6a9760b1f9856125b12b5a64873d2705ad66006e6bc82f99196837445", 0x8c}, {&(0x7f0000000640)="6d53d58bd4fff8194feace94709b1a9600da396dd1d20949c5b6839895af5e20cfa39f8a6809cb3ecc8d391fb0ffa79c8a1c5f9deb15388d02", 0x39}, {&(0x7f0000000680)="e020da849c7ece525ffe6f45db70c10b00003eb88fff74874edc38aca12c5b2ca55fc328ca612c", 0x27}, {&(0x7f00000006c0)="0eb313219806564fd376b0673727d9d422f82f05bc952aaaee1b52732abbda1075e53abaef248816b2a4f5b56fd913a56fbf97011075f77c81ccf348babd26a9820b6541741d50d8e769b5dfeab49ab75d8cb3959552cd6776382611c4c21b8d8ee5bcc1e7b0", 0x66}], 0x4, 0x6) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x184, 0x7, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x785c2b01}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xb9, 0x7, 0x1, 0x0, "4410fb8b80486b60055ebfb69084f9e0bfed39da7373df06a39e0d58f3ee11ef5c7217856e19c3c300dba9b040fec44c5b4078e3e722199b4bbde4d31cfee64541f2bf4d9e61e538f98664ed10326f3aa86f9e7a777ed2ee4010da490ba95d9df952d13d4dcf9587c96ec3159b907c3d1ad2bbdbb51b57863b784c028756bc8d7d52c590b6e4b7e6e9292d5b1d27fc8c007b044df0889b618abf81894b22f4841078b2ac47f131bdacd70240d3d1f65a80aa9adaf7"}, @NFTA_RULE_USERDATA={0x7f, 0x7, 0x1, 0x0, "1c04b4bc10c03dc844b4f31ce1d6bfb843c7de5b307c2c176e15b5cef03c89caf00224408d204ee0e31bf734eaa9edc0724ce4abae068b6fb7a01dddc8b811bd385727ba5350bc9ab877ae83365195b0986581166e3b50698185b4ca3ecf6745682d9ba49136d1494c901abc52d913f8e4b9fad4cd715503ae08e3"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x184}, 0x1, 0x0, 0x0, 0xc844}, 0x0) setrlimit(0xc, &(0x7f0000000a00)={0x0, 0x8}) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000e80)={0x80000000, 0x1, 0x5}, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}]) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000001140)={0x8, 0x100, 0x4, {0x4, 0x8, 0x2f5, 0x100}}) syz_emit_vhci(&(0x7f0000001180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x9, 0xa}, {0x4, 0x0, 0xb, 0x9}}}}, 0x17) openat$vnet(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) kernel console output (not intermixed with test programs): known main item tag 0x0 [ 292.376797][ T29] audit: type=1326 audit(1722735314.757:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7995 comm="syz.4.684" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f9c9779f9 code=0x0 [ 292.407962][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.420042][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.453316][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.489641][ T5268] usb usb2-port1: unable to enumerate USB device [ 292.511488][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.538433][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.576084][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.609260][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.638754][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.673627][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.694495][ T8003] FAULT_INJECTION: forcing a failure. [ 292.694495][ T8003] name failslab, interval 1, probability 0, space 0, times 0 [ 292.703985][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.724588][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.729676][ T8003] CPU: 1 UID: 0 PID: 8003 Comm: syz.3.686 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 292.733756][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.742559][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 292.742580][ T8003] Call Trace: [ 292.742590][ T8003] [ 292.742599][ T8003] dump_stack_lvl+0x241/0x360 [ 292.742635][ T8003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.742660][ T8003] ? __pfx__printk+0x10/0x10 [ 292.742684][ T8003] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 292.765880][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.766287][ T8003] ? __pfx___might_resched+0x10/0x10 [ 292.773261][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.776122][ T8003] should_fail_ex+0x3b0/0x4e0 [ 292.791960][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.793481][ T8003] should_failslab+0xac/0x100 [ 292.793511][ T8003] ? rtnl_newlink+0xf2/0x20a0 [ 292.799570][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.806112][ T8003] __kmalloc_cache_noprof+0x6c/0x2c0 [ 292.806154][ T8003] rtnl_newlink+0xf2/0x20a0 [ 292.811555][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.818176][ T8003] ? __pfx_lock_acquire+0x10/0x10 [ 292.818211][ T8003] ? __mutex_lock+0x99b/0xd70 [ 292.818234][ T8003] ? __pfx_lock_release+0x10/0x10 [ 292.823600][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.827545][ T8003] ? do_raw_spin_lock+0x14f/0x370 [ 292.827574][ T8003] ? __pfx_rtnl_newlink+0x10/0x10 [ 292.827596][ T8003] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.827623][ T8003] ? __mutex_lock+0x9a5/0xd70 [ 292.827649][ T8003] ? __mutex_lock+0x527/0xd70 [ 292.827672][ T8003] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 292.827696][ T8003] ? __pfx___mutex_lock+0x10/0x10 [ 292.827730][ T8003] ? __pfx_rtnl_newlink+0x10/0x10 [ 292.827753][ T8003] rtnetlink_rcv_msg+0x73f/0xcf0 [ 292.827776][ T8003] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 292.827804][ T8003] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.827837][ T8003] ? ref_tracker_free+0x643/0x7e0 [ 292.827865][ T8003] netlink_rcv_skb+0x1e3/0x430 [ 292.827893][ T8003] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.827924][ T8003] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.827973][ T8003] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.828001][ T8003] netlink_unicast+0x7f0/0x990 [ 292.828035][ T8003] ? __pfx_netlink_unicast+0x10/0x10 [ 292.828057][ T8003] ? __virt_addr_valid+0x183/0x530 [ 292.828079][ T8003] ? __check_object_size+0x49c/0x900 [ 292.828101][ T8003] ? bpf_lsm_netlink_send+0x9/0x10 [ 292.828127][ T8003] netlink_sendmsg+0x8e4/0xcb0 [ 292.828163][ T8003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.828189][ T8003] ? __import_iovec+0x536/0x820 [ 292.828212][ T8003] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 292.828231][ T8003] ? security_socket_sendmsg+0x87/0xb0 [ 292.828253][ T8003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.869178][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.874750][ T8003] __sock_sendmsg+0x221/0x270 [ 292.874787][ T8003] ____sys_sendmsg+0x525/0x7d0 [ 292.890985][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.894643][ T8003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.904966][ T5267] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.909423][ T8003] __sys_sendmsg+0x2b0/0x3a0 [ 292.909455][ T8003] ? __pfx___sys_sendmsg+0x10/0x10 [ 292.979440][ T5267] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 292.981413][ T8003] ? vfs_write+0x7c4/0xc90 [ 293.072919][ T8003] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.079283][ T8003] ? do_syscall_64+0x100/0x230 [ 293.084074][ T8003] ? do_syscall_64+0xb6/0x230 [ 293.088774][ T8003] do_syscall_64+0xf3/0x230 [ 293.093309][ T8003] ? clear_bhb_loop+0x35/0x90 [ 293.098008][ T8003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.103932][ T8003] RIP: 0033:0x7f292cf779f9 [ 293.108365][ T8003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.127996][ T8003] RSP: 002b:00007f292dd68048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.136437][ T8003] RAX: ffffffffffffffda RBX: 00007f292d105f80 RCX: 00007f292cf779f9 [ 293.144430][ T8003] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000015 [ 293.152422][ T8003] RBP: 00007f292dd680a0 R08: 0000000000000000 R09: 0000000000000000 [ 293.160409][ T8003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.168398][ T8003] R13: 000000000000000b R14: 00007f292d105f80 R15: 00007ffe8ac76108 [ 293.176407][ T8003] [ 293.200241][ T5230] Bluetooth: hci6: command tx timeout [ 295.547443][ T5230] Bluetooth: hci6: command tx timeout [ 295.934199][ T7955] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.296508][ T7955] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.517785][ T7955] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.684176][ T7955] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.319117][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.329066][ T7955] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 297.358343][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.361569][ T7955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 297.366792][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.416829][ T7955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 297.442436][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.468464][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.497317][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.525987][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.562099][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.580772][ T7955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 297.585030][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.587692][ T5233] Bluetooth: hci6: command tx timeout [ 297.605151][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.635933][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.645971][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.731316][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.770553][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.814951][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.846486][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.884637][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.928690][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.959916][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.968333][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.976320][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.986452][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.995336][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.003299][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.010922][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.019456][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.026971][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.035383][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.043325][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.050994][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.076613][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.135124][ T7955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.137306][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.185716][ T7955] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.201564][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.219213][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.226669][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.241789][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.247694][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.248978][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.281268][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.297420][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.313780][ T5270] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.321011][ T5270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.325463][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.336489][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.366937][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.378593][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.386030][ T58] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 298.428374][ T58] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 298.577458][ T51] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 298.771378][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 is Bulk; changing to Interrupt [ 298.811547][ T51] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=e0.51 [ 298.841767][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.932651][ T8064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.980688][ T51] usb 1-1: config 0 descriptor?? [ 299.023585][ T8050] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 299.614302][ T7955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.710146][ T7955] veth0_vlan: entered promiscuous mode [ 299.764436][ T7955] veth1_vlan: entered promiscuous mode [ 299.851137][ T7955] veth0_macvtap: entered promiscuous mode [ 299.900570][ T7955] veth1_macvtap: entered promiscuous mode [ 299.976588][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.001334][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.018437][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.042586][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.059494][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.077604][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.108477][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.123598][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.145618][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.160519][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.197506][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.230899][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.268362][ T7955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.306253][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.330320][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.342508][ T8081] tipc: Can't bind to reserved service type 0 [ 300.357910][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.397064][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.417349][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.440858][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.450035][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.463437][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.507705][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.527699][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.543204][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.554848][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.565438][ T7955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.576357][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.588902][ T7955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.610729][ T7955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.678634][ T7955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.695040][ T7955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.735873][ T7955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.066560][ T2525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.097127][ T2525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.222130][ T2565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.247445][ T2565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.411031][ T8098] netlink: 'syz.4.710': attribute type 1 has an invalid length. [ 301.598411][ T58] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 301.688309][ T8098] dummy0: entered promiscuous mode [ 301.714804][ T8098] dummy0: left promiscuous mode [ 301.813377][ T58] usb 2-1: config 0 has an invalid interface number: 160 but max is 3 [ 301.833689][ T58] usb 2-1: config 0 has an invalid interface number: 217 but max is 3 [ 301.860061][ T58] usb 2-1: config 0 has an invalid interface number: 78 but max is 3 [ 301.886330][ T58] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 301.920606][ T58] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 301.939983][ T58] usb 2-1: config 0 has an invalid interface number: 161 but max is 3 [ 301.964114][ T58] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 302.000252][ T58] usb 2-1: config 0 has an invalid interface number: 124 but max is 3 [ 302.023708][ T58] usb 2-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 302.049343][ T58] usb 2-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 302.066779][ T58] usb 2-1: config 0 has no interface number 0 [ 302.076233][ T58] usb 2-1: config 0 has no interface number 1 [ 302.099932][ T58] usb 2-1: config 0 has no interface number 2 [ 302.116824][ T58] usb 2-1: config 0 has no interface number 3 [ 302.168279][ T58] usb 2-1: config 0 has no interface number 4 [ 302.195509][ T58] usb 2-1: config 0 interface 160 altsetting 4 bulk endpoint 0xC has invalid maxpacket 959 [ 302.248870][ T58] usb 2-1: config 0 interface 160 altsetting 4 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 302.293129][ T58] usb 2-1: config 0 interface 160 altsetting 4 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 302.352709][ T58] usb 2-1: config 0 interface 160 altsetting 4 has 4 endpoint descriptors, different from the interface descriptor's value: 11 [ 302.453273][ T58] usb 2-1: too many endpoints for config 0 interface 217 altsetting 27: 51, using maximum allowed: 30 [ 302.507598][ T58] usb 2-1: config 0 interface 217 altsetting 27 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 302.569705][ T58] usb 2-1: config 0 interface 217 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 302.642607][ T58] usb 2-1: config 0 interface 217 altsetting 27 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 302.672208][ T58] usb 2-1: config 0 interface 217 altsetting 27 has a duplicate endpoint with address 0xE, skipping [ 302.756451][ T58] usb 2-1: config 0 interface 217 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 302.802688][ T58] usb 2-1: config 0 interface 217 altsetting 27 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 302.815165][ T58] usb 2-1: config 0 interface 217 altsetting 27 has 7 endpoint descriptors, different from the interface descriptor's value: 51 [ 302.832947][ T58] usb 2-1: config 0 interface 78 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 302.857993][ T58] usb 2-1: config 0 interface 78 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 302.884159][ T58] usb 2-1: config 0 interface 78 altsetting 64 has a duplicate endpoint with address 0x4, skipping [ 302.937433][ T58] usb 2-1: config 0 interface 78 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 302.977761][ T58] usb 2-1: config 0 interface 78 altsetting 64 has a duplicate endpoint with address 0x4, skipping [ 303.030157][ T58] usb 2-1: config 0 interface 78 altsetting 64 bulk endpoint 0x2 has invalid maxpacket 16 [ 303.051821][ T58] usb 2-1: config 0 interface 78 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 303.077537][ T58] usb 2-1: config 0 interface 78 altsetting 64 has a duplicate endpoint with address 0xC, skipping [ 303.092717][ T58] usb 2-1: config 0 interface 78 altsetting 64 has a duplicate endpoint with address 0x7, skipping [ 303.119744][ T58] usb 2-1: config 0 interface 161 altsetting 15 has a duplicate endpoint with address 0x2, skipping [ 303.316092][ T58] usb 2-1: config 0 interface 161 altsetting 15 has a duplicate endpoint with address 0xD, skipping [ 303.328858][ T58] usb 2-1: config 0 interface 161 altsetting 15 has a duplicate endpoint with address 0xE, skipping [ 303.341222][ T58] usb 2-1: config 0 interface 161 altsetting 15 has a duplicate endpoint with address 0x8, skipping [ 303.353235][ T58] usb 2-1: config 0 interface 161 altsetting 15 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 303.364789][ T58] usb 2-1: config 0 interface 124 altsetting 229 has a duplicate endpoint with address 0xE, skipping [ 303.385221][ T58] usb 2-1: config 0 interface 124 altsetting 229 has a duplicate endpoint with address 0xD, skipping [ 303.410755][ T58] usb 2-1: config 0 interface 124 altsetting 229 has an invalid descriptor for endpoint zero, skipping [ 303.452356][ T58] usb 2-1: config 0 interface 160 has no altsetting 0 [ 303.501223][ T58] usb 2-1: config 0 interface 217 has no altsetting 0 [ 303.552650][ T58] usb 2-1: config 0 interface 78 has no altsetting 0 [ 303.579160][ T58] usb 2-1: config 0 interface 161 has no altsetting 0 [ 303.595692][ T58] usb 2-1: config 0 interface 124 has no altsetting 0 [ 303.626969][ T58] usb 2-1: New USB device found, idVendor=083a, idProduct=5501, bcdDevice=a4.16 [ 303.654905][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.669916][ T8121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.706101][ T58] usb 2-1: Product: ဌ [ 303.730153][ T58] usb 2-1: Manufacturer: ÐŒ [ 303.766682][ T58] usb 2-1: SerialNumber: ì©î¢¤î±¡á€’倡ç—뺪ï©á¿“셬ዬ評ꟑ른鴤漎胞㣺Ÿ앳ᗛ쯣ᖶ뀚ગ옛뻉ኈ䙇몕䛬녵雷î©ç™ˆí—´ã‚£è¤æž£ïº¶ì†å«ŽáŠ‘é—›ãŒäž«î˜”쿦縫컺㮂ܽɀ竸é¦è¨ì§Žé¾€è®”íšà°Ÿâ´®ï©–数䰞ᄑ芉 [ 303.953222][ T58] usb 2-1: config 0 descriptor?? [ 304.159692][ T58] usb 2-1: can't set config #0, error -71 [ 304.165628][ T51] usb 1-1: string descriptor 0 read error: -32 [ 304.180851][ T51] usb 1-1: bad CDC descriptors [ 304.209050][ T58] usb 2-1: USB disconnect, device number 17 [ 304.790184][ T5230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 304.799988][ T5230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 304.814614][ T5230] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 304.824380][ T8141] tc_dump_action: action bad kind [ 304.830137][ T5230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 304.838983][ T5230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 304.846939][ T5230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 305.395321][ T8154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.725'. [ 305.432430][ T8139] chnl_net:caif_netlink_parms(): no params data found [ 305.632635][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.662611][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.691702][ T8139] bridge_slave_0: entered allmulticast mode [ 305.775239][ T8139] bridge_slave_0: entered promiscuous mode [ 305.812785][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.841804][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.869795][ T8139] bridge_slave_1: entered allmulticast mode [ 305.904811][ T8139] bridge_slave_1: entered promiscuous mode [ 306.022075][ T8139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.058963][ T8139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.264567][ T8139] team0: Port device team_slave_0 added [ 306.295698][ T8139] team0: Port device team_slave_1 added [ 306.328919][ T58] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 306.469118][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.488430][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.619368][ T8175] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups) [ 306.637381][ T8139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.663564][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.671715][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.699733][ T8139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.878848][ T5230] Bluetooth: hci7: command tx timeout [ 307.169340][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.186455][ T58] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 307.223155][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.241711][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 307.250138][ T58] usb 5-1: SerialNumber: syz [ 307.320964][ T58] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 307.369444][ T58] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 307.380245][ T58] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 307.567778][ T8139] hsr_slave_0: entered promiscuous mode [ 307.597798][ T8139] hsr_slave_1: entered promiscuous mode [ 307.635690][ T8139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.674766][ T5270] usb 5-1: USB disconnect, device number 11 [ 307.689125][ T8139] Cannot create hsr debugfs directory [ 307.799996][ T8188] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups) [ 308.850167][ T11] bridge_slave_1: left allmulticast mode [ 308.860165][ T11] bridge_slave_1: left promiscuous mode [ 308.874197][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.898531][ T11] bridge_slave_0: left allmulticast mode [ 308.910771][ T11] bridge_slave_0: left promiscuous mode [ 308.921385][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.947380][ T5230] Bluetooth: hci7: command tx timeout [ 309.178683][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.741'. [ 309.203028][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.741'. [ 311.041000][ T5230] Bluetooth: hci7: command tx timeout [ 311.681795][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.009067][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.059695][ T11] bond0 (unregistering): Released all slaves [ 313.043712][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'. [ 313.107404][ T5230] Bluetooth: hci7: command tx timeout [ 313.190999][ T8139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.275596][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'. [ 313.329207][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'. [ 313.384433][ T11] hsr_slave_0: left promiscuous mode [ 313.405229][ T11] hsr_slave_1: left promiscuous mode [ 313.411700][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.459909][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.469724][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.501029][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.600173][ T11] veth1_macvtap: left promiscuous mode [ 313.620430][ T11] veth0_macvtap: left promiscuous mode [ 313.632836][ T11] veth1_vlan: left promiscuous mode [ 313.652990][ T11] veth0_vlan: left promiscuous mode [ 313.702581][ T8263] FAULT_INJECTION: forcing a failure. [ 313.702581][ T8263] name failslab, interval 1, probability 0, space 0, times 0 [ 313.729548][ T8263] CPU: 1 UID: 0 PID: 8263 Comm: syz.1.756 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 313.740194][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 313.750281][ T8263] Call Trace: [ 313.753574][ T8263] [ 313.756510][ T8263] dump_stack_lvl+0x241/0x360 [ 313.761222][ T8263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.766456][ T8263] ? __pfx__printk+0x10/0x10 [ 313.771074][ T8263] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 313.776645][ T8263] ? __pfx___might_resched+0x10/0x10 [ 313.781961][ T8263] should_fail_ex+0x3b0/0x4e0 [ 313.786683][ T8263] ? skb_clone+0x20c/0x390 [ 313.791110][ T8263] should_failslab+0xac/0x100 [ 313.795810][ T8263] ? skb_clone+0x20c/0x390 [ 313.800241][ T8263] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 313.805627][ T8263] skb_clone+0x20c/0x390 [ 313.809870][ T8263] nfnetlink_rcv+0x575/0x2a90 [ 313.814549][ T8263] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 313.820267][ T8263] ? __dev_queue_xmit+0x1763/0x3e90 [ 313.825452][ T8263] ? kasan_save_track+0x51/0x80 [ 313.830299][ T8263] ? do_syscall_64+0xf3/0x230 [ 313.834978][ T8263] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 313.840108][ T8263] ? ref_tracker_free+0x643/0x7e0 [ 313.845122][ T8263] ? __asan_memcpy+0x40/0x70 [ 313.849700][ T8263] ? __pfx_ref_tracker_free+0x10/0x10 [ 313.855074][ T8263] ? netlink_deliver_tap+0x2e/0x1b0 [ 313.860269][ T8263] ? skb_clone+0x240/0x390 [ 313.864676][ T8263] ? __pfx_lock_release+0x10/0x10 [ 313.869693][ T8263] ? __netlink_deliver_tap+0x77e/0x7c0 [ 313.875151][ T8263] ? netlink_deliver_tap+0x2e/0x1b0 [ 313.880345][ T8263] netlink_unicast+0x7f0/0x990 [ 313.885111][ T8263] ? __pfx_netlink_unicast+0x10/0x10 [ 313.890387][ T8263] ? __virt_addr_valid+0x183/0x530 [ 313.895485][ T8263] ? __check_object_size+0x49c/0x900 [ 313.900759][ T8263] ? bpf_lsm_netlink_send+0x9/0x10 [ 313.905861][ T8263] netlink_sendmsg+0x8e4/0xcb0 [ 313.910626][ T8263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.915907][ T8263] ? __import_iovec+0x536/0x820 [ 313.920749][ T8263] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 313.926023][ T8263] ? security_socket_sendmsg+0x87/0xb0 [ 313.931472][ T8263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.936749][ T8263] __sock_sendmsg+0x221/0x270 [ 313.941425][ T8263] ____sys_sendmsg+0x525/0x7d0 [ 313.946183][ T8263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.951471][ T8263] __sys_sendmsg+0x2b0/0x3a0 [ 313.956056][ T8263] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.961161][ T8263] ? vfs_write+0x7c4/0xc90 [ 313.965595][ T8263] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.971914][ T8263] ? do_syscall_64+0x100/0x230 [ 313.976673][ T8263] ? do_syscall_64+0xb6/0x230 [ 313.981347][ T8263] do_syscall_64+0xf3/0x230 [ 313.985843][ T8263] ? clear_bhb_loop+0x35/0x90 [ 313.990513][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.996400][ T8263] RIP: 0033:0x7fc7cef779f9 [ 314.000808][ T8263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.020402][ T8263] RSP: 002b:00007fc7cfde7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.028809][ T8263] RAX: ffffffffffffffda RBX: 00007fc7cf105f80 RCX: 00007fc7cef779f9 [ 314.036766][ T8263] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 314.044727][ T8263] RBP: 00007fc7cfde70a0 R08: 0000000000000000 R09: 0000000000000000 [ 314.052687][ T8263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.060647][ T8263] R13: 000000000000000b R14: 00007fc7cf105f80 R15: 00007fff5fa50688 [ 314.068619][ T8263] [ 314.795935][ T8275] loop0: detected capacity change from 0 to 7 [ 314.840392][ T8275] Dev loop0: unable to read RDB block 7 [ 314.888159][ T8275] loop0: unable to read partition table [ 314.900885][ T8275] loop0: partition table beyond EOD, truncated [ 314.962886][ T8275] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 314.962886][ T8275] ) failed (rc=-5) [ 315.757799][ T11] team0 (unregistering): Port device team_slave_1 removed [ 315.877757][ T11] team0 (unregistering): Port device team_slave_0 removed [ 317.487399][ T51] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 317.515528][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.522026][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.688688][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 317.696122][ T51] usb 3-1: no configurations [ 317.702652][ T51] usb 3-1: can't read configurations, error -22 [ 317.867621][ T51] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 318.057472][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 318.077556][ T51] usb 3-1: no configurations [ 318.082288][ T51] usb 3-1: can't read configurations, error -22 [ 318.114585][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'. [ 318.124010][ T51] usb usb3-port1: attempt power cycle [ 318.265511][ T8139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.519346][ T8139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.537430][ T51] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 318.598740][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 318.617505][ T51] usb 3-1: no configurations [ 318.628103][ T51] usb 3-1: can't read configurations, error -22 [ 318.732285][ T8139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.955296][ T51] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 319.026306][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 319.049467][ T51] usb 3-1: no configurations [ 319.172027][ T51] usb 3-1: can't read configurations, error -22 [ 319.321429][ T51] usb usb3-port1: unable to enumerate USB device [ 319.949852][ T8139] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 319.981730][ T8139] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.040185][ T8139] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 320.063176][ T8139] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 320.349601][ T8139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.411487][ T8139] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.442740][ T5268] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.450009][ T5268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.489602][ T5325] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.496804][ T5325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.201471][ T8139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.217435][ T5299] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 321.345493][ T8139] veth0_vlan: entered promiscuous mode [ 321.409572][ T8139] veth1_vlan: entered promiscuous mode [ 321.432845][ T5299] usb 2-1: config 0 has an invalid interface number: 125 but max is 0 [ 321.543876][ T5299] usb 2-1: config 0 has no interface number 0 [ 321.700998][ T5299] usb 2-1: New USB device found, idVendor=0403, idProduct=bcd9, bcdDevice=94.33 [ 321.839738][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.859904][ T8139] veth0_macvtap: entered promiscuous mode [ 321.866872][ T5299] usb 2-1: config 0 descriptor?? [ 321.883306][ T8139] veth1_macvtap: entered promiscuous mode [ 321.909669][ T5299] ftdi_sio 2-1:0.125: FTDI USB Serial Device converter detected [ 321.938905][ T5299] ftdi_sio ttyUSB0: unknown device type: 0x9433 [ 321.966313][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.019976][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.047258][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.077287][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.099316][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.120200][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.144246][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.171643][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.196174][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.247417][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.277833][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.307482][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.339669][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.360807][ T8345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.374432][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.405742][ T8345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.417282][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.443827][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.477755][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.507246][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.527806][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.557295][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.588608][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.617272][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.644710][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.414104][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.435027][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.457822][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.553250][ T8139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.588546][ T8139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.612515][ T8139] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.638338][ T8139] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.091767][ T2525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.124688][ T2525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.214062][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.247665][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.580638][ T5268] usb 2-1: USB disconnect, device number 18 [ 326.599105][ T5268] ftdi_sio 2-1:0.125: device disconnected [ 326.625861][ T8368] Bluetooth: MGMT ver 1.23 [ 326.717141][ T8368] Bluetooth: hci3: invalid length 0, exp 2 for type 18 [ 326.957688][ T8376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.782'. [ 329.423260][ T8368] FAULT_INJECTION: forcing a failure. [ 329.423260][ T8368] name failslab, interval 1, probability 0, space 0, times 0 [ 329.447283][ T8368] CPU: 1 UID: 0 PID: 8368 Comm: syz.0.781 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 329.457933][ T8368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 329.468014][ T8368] Call Trace: [ 329.471303][ T8368] [ 329.474241][ T8368] dump_stack_lvl+0x241/0x360 [ 329.478960][ T8368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.484182][ T8368] ? __pfx__printk+0x10/0x10 [ 329.488794][ T8368] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 329.494802][ T8368] ? __pfx___might_resched+0x10/0x10 [ 329.500126][ T8368] should_fail_ex+0x3b0/0x4e0 [ 329.504839][ T8368] should_failslab+0xac/0x100 [ 329.509539][ T8368] ? __alloc_skb+0x1c3/0x440 [ 329.514155][ T8368] kmem_cache_alloc_node_noprof+0x71/0x320 [ 329.519991][ T8368] __alloc_skb+0x1c3/0x440 [ 329.524410][ T8368] ? __pfx___alloc_skb+0x10/0x10 [ 329.529352][ T8368] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 329.535160][ T8368] mgmt_cmd_status+0x42/0x4d0 [ 329.539836][ T8368] hci_mgmt_cmd+0xc47/0x11d0 [ 329.544429][ T8368] hci_sock_sendmsg+0x7b8/0x11c0 [ 329.549370][ T8368] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 329.554743][ T8368] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 329.560020][ T8368] ? security_socket_sendmsg+0x87/0xb0 [ 329.565470][ T8368] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 329.570836][ T8368] __sock_sendmsg+0x221/0x270 [ 329.575508][ T8368] sock_write_iter+0x2dd/0x400 [ 329.580266][ T8368] ? __pfx_sock_write_iter+0x10/0x10 [ 329.585551][ T8368] ? bpf_lsm_file_permission+0x9/0x10 [ 329.590916][ T8368] ? security_file_permission+0x7f/0xa0 [ 329.596459][ T8368] vfs_write+0xa72/0xc90 [ 329.600694][ T8368] ? __pfx_sock_write_iter+0x10/0x10 [ 329.605973][ T8368] ? __pfx_vfs_write+0x10/0x10 [ 329.610740][ T8368] ksys_write+0x1a0/0x2c0 [ 329.615063][ T8368] ? __pfx_ksys_write+0x10/0x10 [ 329.619903][ T8368] ? do_syscall_64+0x100/0x230 [ 329.624665][ T8368] ? do_syscall_64+0xb6/0x230 [ 329.629342][ T8368] do_syscall_64+0xf3/0x230 [ 329.633840][ T8368] ? clear_bhb_loop+0x35/0x90 [ 329.638507][ T8368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.644397][ T8368] RIP: 0033:0x7f7050d779f9 [ 329.648806][ T8368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.668402][ T8368] RSP: 002b:00007f7051bf3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 329.676810][ T8368] RAX: ffffffffffffffda RBX: 00007f7050f05f80 RCX: 00007f7050d779f9 [ 329.684770][ T8368] RDX: 000000000000000d RSI: 0000000020000080 RDI: 0000000000000015 [ 329.692732][ T8368] RBP: 00007f7051bf30a0 R08: 0000000000000000 R09: 0000000000000000 [ 329.700694][ T8368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.708655][ T8368] R13: 000000000000000b R14: 00007f7050f05f80 R15: 00007fffcddc74b8 [ 329.716627][ T8368] [ 330.234654][ T8386] evm: overlay not supported [ 331.706909][ T8394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.712660][ T8395] FAULT_INJECTION: forcing a failure. [ 331.712660][ T8395] name failslab, interval 1, probability 0, space 0, times 0 [ 331.754365][ T8394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.766589][ T8393] FAULT_INJECTION: forcing a failure. [ 331.766589][ T8393] name failslab, interval 1, probability 0, space 0, times 0 [ 331.786171][ T8395] CPU: 0 UID: 0 PID: 8395 Comm: syz.2.787 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 331.796816][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 331.806899][ T8395] Call Trace: [ 331.810199][ T8395] [ 331.813139][ T8395] dump_stack_lvl+0x241/0x360 [ 331.817843][ T8395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.823061][ T8395] ? __pfx__printk+0x10/0x10 [ 331.827674][ T8395] ? __pfx_lock_acquire+0x10/0x10 [ 331.832720][ T8395] ? nf_ct_pernet+0x45/0x270 [ 331.837419][ T8395] should_fail_ex+0x3b0/0x4e0 [ 331.842115][ T8395] ? __nf_conntrack_alloc+0x8f/0x380 [ 331.847419][ T8395] should_failslab+0xac/0x100 [ 331.852112][ T8395] ? __nf_conntrack_alloc+0x8f/0x380 [ 331.857416][ T8395] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 331.862811][ T8395] __nf_conntrack_alloc+0x8f/0x380 [ 331.867953][ T8395] ctnetlink_new_conntrack+0x662/0x2240 [ 331.873523][ T8395] ? __mutex_trylock_common+0x183/0x2e0 [ 331.879088][ T8395] ? __pfx___might_resched+0x10/0x10 [ 331.884396][ T8395] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 331.890392][ T8395] ? rcu_is_watching+0x15/0xb0 [ 331.895156][ T8395] ? trace_contention_end+0x3c/0x120 [ 331.900433][ T8395] ? __mutex_lock+0x2ef/0xd70 [ 331.905113][ T8395] ? __pfx___mutex_lock+0x10/0x10 [ 331.910143][ T8395] ? nfnetlink_rcv_msg+0x225/0x1180 [ 331.915336][ T8395] nfnetlink_rcv_msg+0xbec/0x1180 [ 331.920355][ T8395] ? kernel_text_address+0xa7/0xe0 [ 331.925459][ T8395] ? nfnetlink_rcv_msg+0x225/0x1180 [ 331.930668][ T8395] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 331.936140][ T8395] ? netlink_deliver_tap+0x19d/0x1b0 [ 331.941418][ T8395] ? netlink_unicast+0x7be/0x990 [ 331.946345][ T8395] ? netlink_sendmsg+0x8e4/0xcb0 [ 331.951274][ T8395] ? __sock_sendmsg+0x221/0x270 [ 331.956116][ T8395] ? ____sys_sendmsg+0x525/0x7d0 [ 331.961041][ T8395] ? __sys_sendmsg+0x2b0/0x3a0 [ 331.965791][ T8395] ? do_syscall_64+0xf3/0x230 [ 331.970461][ T8395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.976535][ T8395] netlink_rcv_skb+0x1e3/0x430 [ 331.981301][ T8395] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 331.986759][ T8395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.992048][ T8395] ? safesetid_security_capable+0xb2/0x1d0 [ 331.997848][ T8395] ? bpf_lsm_capable+0x9/0x10 [ 332.002517][ T8395] ? security_capable+0x90/0xb0 [ 332.007367][ T8395] nfnetlink_rcv+0x297/0x2a90 [ 332.012043][ T8395] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 332.017761][ T8395] ? __dev_queue_xmit+0x2da/0x3e90 [ 332.022873][ T8395] ? __dev_queue_xmit+0x1763/0x3e90 [ 332.028061][ T8395] ? kasan_save_track+0x51/0x80 [ 332.032908][ T8395] ? do_syscall_64+0xf3/0x230 [ 332.037580][ T8395] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 332.042686][ T8395] ? __dev_queue_xmit+0x2da/0x3e90 [ 332.047791][ T8395] ? __pfx___dev_queue_xmit+0x10/0x10 [ 332.053165][ T8395] ? ref_tracker_free+0x643/0x7e0 [ 332.058179][ T8395] ? __asan_memcpy+0x40/0x70 [ 332.062758][ T8395] ? __pfx_ref_tracker_free+0x10/0x10 [ 332.068131][ T8395] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.073321][ T8395] ? skb_clone+0x240/0x390 [ 332.077729][ T8395] ? __pfx_lock_release+0x10/0x10 [ 332.082750][ T8395] ? __netlink_deliver_tap+0x77e/0x7c0 [ 332.088215][ T8395] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.093410][ T8395] netlink_unicast+0x7f0/0x990 [ 332.098176][ T8395] ? __pfx_netlink_unicast+0x10/0x10 [ 332.103453][ T8395] ? __virt_addr_valid+0x183/0x530 [ 332.108555][ T8395] ? __check_object_size+0x49c/0x900 [ 332.113833][ T8395] ? bpf_lsm_netlink_send+0x9/0x10 [ 332.118941][ T8395] netlink_sendmsg+0x8e4/0xcb0 [ 332.123711][ T8395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.128991][ T8395] ? __import_iovec+0x536/0x820 [ 332.133836][ T8395] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 332.139114][ T8395] ? security_socket_sendmsg+0x87/0xb0 [ 332.144570][ T8395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.149855][ T8395] __sock_sendmsg+0x221/0x270 [ 332.154531][ T8395] ____sys_sendmsg+0x525/0x7d0 [ 332.159291][ T8395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.164581][ T8395] __sys_sendmsg+0x2b0/0x3a0 [ 332.169165][ T8395] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.174266][ T8395] ? vfs_write+0x7c4/0xc90 [ 332.178703][ T8395] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.185026][ T8395] ? do_syscall_64+0x100/0x230 [ 332.189790][ T8395] ? do_syscall_64+0xb6/0x230 [ 332.194463][ T8395] do_syscall_64+0xf3/0x230 [ 332.198963][ T8395] ? clear_bhb_loop+0x35/0x90 [ 332.203634][ T8395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.209521][ T8395] RIP: 0033:0x7fa4393779f9 [ 332.213925][ T8395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.233530][ T8395] RSP: 002b:00007fa43a07f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.241945][ T8395] RAX: ffffffffffffffda RBX: 00007fa439505f80 RCX: 00007fa4393779f9 [ 332.249915][ T8395] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 332.257882][ T8395] RBP: 00007fa43a07f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 332.265847][ T8395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.273807][ T8395] R13: 000000000000000b R14: 00007fa439505f80 R15: 00007ffc4a8c1bf8 [ 332.281786][ T8395] [ 332.292281][ T8393] CPU: 1 UID: 0 PID: 8393 Comm: syz.3.788 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 332.302926][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 332.313003][ T8393] Call Trace: [ 332.316303][ T8393] [ 332.319253][ T8393] dump_stack_lvl+0x241/0x360 [ 332.323970][ T8393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.329204][ T8393] ? __pfx__printk+0x10/0x10 [ 332.333828][ T8393] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 332.340362][ T8393] ? __pfx___might_resched+0x10/0x10 [ 332.345679][ T8393] should_fail_ex+0x3b0/0x4e0 [ 332.350386][ T8393] should_failslab+0xac/0x100 [ 332.355088][ T8393] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 332.361442][ T8393] ? kobject_set_name_vargs+0x61/0x120 [ 332.366933][ T8393] kvasprintf+0xdf/0x190 [ 332.371212][ T8393] ? __pfx_kvasprintf+0x10/0x10 [ 332.376090][ T8393] ? __debug_object_init+0x26c/0x400 [ 332.381408][ T8393] ? kvasprintf_const+0x51/0x170 [ 332.386378][ T8393] kobject_set_name_vargs+0x61/0x120 [ 332.391697][ T8393] dev_set_name+0xd5/0x120 [ 332.396147][ T8393] ? __pfx_dev_set_name+0x10/0x10 [ 332.401201][ T8393] ? __init_waitqueue_head+0xae/0x150 [ 332.406610][ T8393] ? device_initialize+0x266/0x460 [ 332.411744][ T8393] wakeup_source_sysfs_add+0x180/0x270 [ 332.417239][ T8393] wakeup_source_register+0x171/0x250 [ 332.422647][ T8393] ep_insert+0xd8c/0x1ac0 [ 332.427016][ T8393] ? __pfx_ep_insert+0x10/0x10 [ 332.431810][ T8393] ? __fget_files+0x29/0x470 [ 332.436433][ T8393] ? bpf_lsm_capable+0x9/0x10 [ 332.441150][ T8393] do_epoll_ctl+0x8d2/0xf70 [ 332.445690][ T8393] ? do_epoll_ctl+0x7e1/0xf70 [ 332.450404][ T8393] __x64_sys_epoll_ctl+0x161/0x1a0 [ 332.455548][ T8393] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 332.461215][ T8393] ? do_syscall_64+0x100/0x230 [ 332.466015][ T8393] ? do_syscall_64+0xb6/0x230 [ 332.470726][ T8393] do_syscall_64+0xf3/0x230 [ 332.475264][ T8393] ? clear_bhb_loop+0x35/0x90 [ 332.479967][ T8393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.485891][ T8393] RIP: 0033:0x7f82f4d779f9 [ 332.490326][ T8393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.509964][ T8393] RSP: 002b:00007f82f5b82048 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 332.518409][ T8393] RAX: ffffffffffffffda RBX: 00007f82f4f05f80 RCX: 00007f82f4d779f9 [ 332.526401][ T8393] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 332.534395][ T8393] RBP: 00007f82f5b820a0 R08: 0000000000000000 R09: 0000000000000000 [ 332.542391][ T8393] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 332.550381][ T8393] R13: 000000000000000b R14: 00007f82f4f05f80 R15: 00007fffeec94ab8 [ 332.558390][ T8393] [ 335.533935][ T2040] pvrusb2: request_firmware fatal error with code=-110 [ 335.568066][ T2040] pvrusb2: Failure uploading firmware1 [ 335.590090][ T2040] pvrusb2: Device initialization was not successful. [ 335.985760][ T2040] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 336.147055][ T2040] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 336.161743][ T942] pvrusb2: Device being rendered inoperable [ 336.958629][ T8423] FAULT_INJECTION: forcing a failure. [ 336.958629][ T8423] name failslab, interval 1, probability 0, space 0, times 0 [ 336.971404][ T8423] CPU: 0 UID: 0 PID: 8423 Comm: syz.4.797 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 336.982006][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 336.992068][ T8423] Call Trace: [ 336.995357][ T8423] [ 336.998294][ T8423] dump_stack_lvl+0x241/0x360 [ 337.002992][ T8423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.008204][ T8423] ? __pfx__printk+0x10/0x10 [ 337.012824][ T8423] should_fail_ex+0x3b0/0x4e0 [ 337.017510][ T8423] ? alloc_file_pseudo_noaccount+0x1da/0x330 [ 337.023500][ T8423] should_failslab+0xac/0x100 [ 337.028190][ T8423] ? alloc_file_pseudo_noaccount+0x1da/0x330 [ 337.034181][ T8423] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 337.039574][ T8423] alloc_file_pseudo_noaccount+0x1da/0x330 [ 337.045398][ T8423] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 337.051739][ T8423] ? iput+0x3ad/0x930 [ 337.055742][ T8423] bdev_file_open_by_dev+0x173/0x230 [ 337.061039][ T8423] disk_scan_partitions+0x1be/0x2b0 [ 337.066254][ T8423] blkdev_common_ioctl+0x14e2/0x2410 [ 337.071556][ T8423] ? tomoyo_path_number_perm+0x71a/0x880 [ 337.077200][ T8423] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 337.082845][ T8423] ? tomoyo_path_number_perm+0x208/0x880 [ 337.088487][ T8423] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 337.094498][ T8423] ? __asan_memset+0x23/0x50 [ 337.099101][ T8423] ? smack_file_ioctl+0x2a1/0x3a0 [ 337.104137][ T8423] ? __pfx_smack_file_ioctl+0x10/0x10 [ 337.109523][ T8423] ? file_to_blk_mode+0xd5/0x140 [ 337.114477][ T8423] blkdev_ioctl+0x4cd/0x6b0 [ 337.118997][ T8423] ? __pfx_blkdev_ioctl+0x10/0x10 [ 337.124039][ T8423] ? bpf_lsm_file_ioctl+0x9/0x10 [ 337.128987][ T8423] ? security_file_ioctl+0x87/0xb0 [ 337.134106][ T8423] ? __pfx_blkdev_ioctl+0x10/0x10 [ 337.139144][ T8423] __se_sys_ioctl+0xfc/0x170 [ 337.143753][ T8423] do_syscall_64+0xf3/0x230 [ 337.148272][ T8423] ? clear_bhb_loop+0x35/0x90 [ 337.152958][ T8423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.158861][ T8423] RIP: 0033:0x7f1f9c9779f9 [ 337.163287][ T8423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.182904][ T8423] RSP: 002b:00007f1f9d774048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.191334][ T8423] RAX: ffffffffffffffda RBX: 00007f1f9cb06130 RCX: 00007f1f9c9779f9 [ 337.199313][ T8423] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000007 [ 337.207290][ T8423] RBP: 00007f1f9d7740a0 R08: 0000000000000000 R09: 0000000000000000 [ 337.215264][ T8423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.223245][ T8423] R13: 000000000000006e R14: 00007f1f9cb06130 R15: 00007ffef4a220f8 [ 337.231248][ T8423] [ 337.242049][ T8423] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 337.242049][ T8423] SÃȘØÈžZ§6ŸÂ' [ 337.770153][ T8432] Failed to initialize the IGMP autojoin socket (err -2) [ 337.831227][ T8443] FAULT_INJECTION: forcing a failure. [ 337.831227][ T8443] name failslab, interval 1, probability 0, space 0, times 0 [ 337.868233][ T8443] CPU: 1 UID: 0 PID: 8443 Comm: syz.3.804 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 337.878880][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 337.888955][ T8443] Call Trace: [ 337.892246][ T8443] [ 337.895192][ T8443] dump_stack_lvl+0x241/0x360 [ 337.899899][ T8443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.905123][ T8443] ? __pfx__printk+0x10/0x10 [ 337.909743][ T8443] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 337.915747][ T8443] ? __pfx___might_resched+0x10/0x10 [ 337.921064][ T8443] should_fail_ex+0x3b0/0x4e0 [ 337.925767][ T8443] should_failslab+0xac/0x100 [ 337.930466][ T8443] ? __alloc_skb+0x1c3/0x440 [ 337.935075][ T8443] kmem_cache_alloc_node_noprof+0x71/0x320 [ 337.940910][ T8443] __alloc_skb+0x1c3/0x440 [ 337.945350][ T8443] ? __pfx___alloc_skb+0x10/0x10 [ 337.950311][ T8443] ? netlink_ack_tlv_len+0x6e/0x200 [ 337.955534][ T8443] netlink_ack+0x13f/0xa30 [ 337.959969][ T8443] ? __pfx_lock_acquire+0x10/0x10 [ 337.965017][ T8443] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 337.970599][ T8443] netlink_rcv_skb+0x262/0x430 [ 337.975385][ T8443] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.980432][ T8443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.985773][ T8443] genl_rcv+0x28/0x40 [ 337.989776][ T8443] netlink_unicast+0x7f0/0x990 [ 337.994571][ T8443] ? __pfx_netlink_unicast+0x10/0x10 [ 337.999873][ T8443] ? __virt_addr_valid+0x183/0x530 [ 338.005001][ T8443] ? __check_object_size+0x49c/0x900 [ 338.010303][ T8443] ? bpf_lsm_netlink_send+0x9/0x10 [ 338.015436][ T8443] netlink_sendmsg+0x8e4/0xcb0 [ 338.020237][ T8443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.025546][ T8443] ? __import_iovec+0x536/0x820 [ 338.030417][ T8443] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 338.035725][ T8443] ? security_socket_sendmsg+0x87/0xb0 [ 338.041216][ T8443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.046523][ T8443] __sock_sendmsg+0x221/0x270 [ 338.051225][ T8443] ____sys_sendmsg+0x525/0x7d0 [ 338.056014][ T8443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.061333][ T8443] __sys_sendmsg+0x2b0/0x3a0 [ 338.065939][ T8443] ? __pfx___sys_sendmsg+0x10/0x10 [ 338.071060][ T8443] ? vfs_write+0x7c4/0xc90 [ 338.075488][ T8443] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.078136][ T1172] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 338.081801][ T8443] ? do_syscall_64+0x100/0x230 [ 338.094106][ T8443] ? do_syscall_64+0xb6/0x230 [ 338.098814][ T8443] do_syscall_64+0xf3/0x230 [ 338.103341][ T8443] ? clear_bhb_loop+0x35/0x90 [ 338.108033][ T8443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.113930][ T8443] RIP: 0033:0x7f82f4d779f9 [ 338.118359][ T8443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.137983][ T8443] RSP: 002b:00007f82f5b82048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.146424][ T8443] RAX: ffffffffffffffda RBX: 00007f82f4f05f80 RCX: 00007f82f4d779f9 [ 338.154415][ T8443] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 338.162409][ T8443] RBP: 00007f82f5b820a0 R08: 0000000000000000 R09: 0000000000000000 [ 338.170399][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.178386][ T8443] R13: 000000000000000b R14: 00007f82f4f05f80 R15: 00007fffeec94ab8 [ 338.186394][ T8443] [ 338.297897][ T1172] usb 5-1: Using ep0 maxpacket: 8 [ 338.312237][ T1172] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 338.321270][ T1172] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.352808][ T1172] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.373481][ T1172] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.394020][ T1172] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.437364][ T1172] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 338.453094][ T1172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.134315][ T1172] usb 5-1: usb_control_msg returned -71 [ 340.157424][ T1172] usbtmc 5-1:16.0: can't read capabilities [ 340.195965][ T1172] usb 5-1: USB disconnect, device number 12 [ 340.247069][ T8461] tc_dump_action: action bad kind [ 341.389217][ T8478] 9pnet: p9_errstr2errno: server reported unknown error Ý@íÎhQI¸¥ŠteœkKzE [ 341.596371][ T8487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.814'. [ 344.272878][ T8505] capability: warning: `syz.0.821' uses 32-bit capabilities (legacy support in use) [ 344.453671][ T5230] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 344.455435][ T8505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.547607][ T8505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.827946][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.849049][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.861241][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.869705][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.895009][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.903927][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.107858][ T29] audit: type=1326 audit(1722735367.471:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4393779f9 code=0x7ffc0000 [ 345.208450][ T29] audit: type=1326 audit(1722735367.511:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4393779f9 code=0x7ffc0000 [ 345.335960][ T29] audit: type=1326 audit(1722735367.511:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa4393779f9 code=0x7ffc0000 [ 345.443817][ T29] audit: type=1326 audit(1722735367.511:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4393779f9 code=0x7ffc0000 [ 345.561647][ T29] audit: type=1326 audit(1722735367.511:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4393779f9 code=0x7ffc0000 [ 345.674305][ T29] audit: type=1326 audit(1722735367.511:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa4393779f9 code=0x7ffc0000 [ 345.735161][ T29] audit: type=1326 audit(1722735367.511:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4393779f9 code=0x7ffc0000 [ 345.809868][ T29] audit: type=1326 audit(1722735367.511:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4393779f9 code=0x7ffc0000 [ 345.943875][ T29] audit: type=1326 audit(1722735367.521:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa4393779f9 code=0x7ffc0000 [ 346.103870][ T29] audit: type=1326 audit(1722735367.521:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4393779f9 code=0x7ffc0000 [ 346.231733][ T8532] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 346.243663][ T8532] Cannot find add_set index 0 as target [ 346.252061][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.260799][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.470311][ T8515] chnl_net:caif_netlink_parms(): no params data found [ 346.549194][ T8538] netlink: 80 bytes leftover after parsing attributes in process `syz.2.830'. [ 346.598878][ T8540] FAULT_INJECTION: forcing a failure. [ 346.598878][ T8540] name failslab, interval 1, probability 0, space 0, times 0 [ 346.674026][ T8540] CPU: 1 UID: 0 PID: 8540 Comm: syz.4.831 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 346.684678][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 346.694764][ T8540] Call Trace: [ 346.698054][ T8540] [ 346.700995][ T8540] dump_stack_lvl+0x241/0x360 [ 346.705697][ T8540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.710918][ T8540] ? __pfx__printk+0x10/0x10 [ 346.715527][ T8540] ? __kmalloc_noprof+0xb0/0x400 [ 346.720478][ T8540] ? __pfx___might_resched+0x10/0x10 [ 346.725793][ T8540] ? __mutex_lock+0x2ef/0xd70 [ 346.730504][ T8540] should_fail_ex+0x3b0/0x4e0 [ 346.735201][ T8540] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 346.741454][ T8540] should_failslab+0xac/0x100 [ 346.746150][ T8540] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 346.752416][ T8540] __kmalloc_noprof+0xd8/0x400 [ 346.757221][ T8540] ? safesetid_security_capable+0xb2/0x1d0 [ 346.763067][ T8540] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 346.769171][ T8540] genl_rcv_msg+0x802/0xec0 [ 346.773690][ T8540] ? mark_lock+0x9a/0x350 [ 346.778046][ T8540] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.783111][ T8540] ? __pfx_lock_acquire+0x10/0x10 [ 346.788156][ T8540] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 346.793723][ T8540] ? __pfx___might_resched+0x10/0x10 [ 346.799034][ T8540] netlink_rcv_skb+0x1e3/0x430 [ 346.803820][ T8540] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.808859][ T8540] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.814177][ T8540] ? __netlink_deliver_tap+0x77e/0x7c0 [ 346.819672][ T8540] genl_rcv+0x28/0x40 [ 346.823676][ T8540] netlink_unicast+0x7f0/0x990 [ 346.828484][ T8540] ? __pfx_netlink_unicast+0x10/0x10 [ 346.833793][ T8540] ? __virt_addr_valid+0x183/0x530 [ 346.838926][ T8540] ? __check_object_size+0x49c/0x900 [ 346.844227][ T8540] ? bpf_lsm_netlink_send+0x9/0x10 [ 346.849359][ T8540] netlink_sendmsg+0x8e4/0xcb0 [ 346.854159][ T8540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.859470][ T8540] ? __import_iovec+0x536/0x820 [ 346.864345][ T8540] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 346.869645][ T8540] ? security_socket_sendmsg+0x87/0xb0 [ 346.875121][ T8540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.880424][ T8540] __sock_sendmsg+0x221/0x270 [ 346.885132][ T8540] ____sys_sendmsg+0x525/0x7d0 [ 346.889922][ T8540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.895242][ T8540] __sys_sendmsg+0x2b0/0x3a0 [ 346.899855][ T8540] ? __pfx___sys_sendmsg+0x10/0x10 [ 346.904978][ T8540] ? vfs_write+0x7c4/0xc90 [ 346.909461][ T8540] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 346.915811][ T8540] ? do_syscall_64+0x100/0x230 [ 346.920606][ T8540] ? do_syscall_64+0xb6/0x230 [ 346.925314][ T8540] do_syscall_64+0xf3/0x230 [ 346.929845][ T8540] ? clear_bhb_loop+0x35/0x90 [ 346.934543][ T8540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.940466][ T8540] RIP: 0033:0x7f1f9c9779f9 [ 346.944901][ T8540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.964537][ T8540] RSP: 002b:00007f1f9d7b6048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.972980][ T8540] RAX: ffffffffffffffda RBX: 00007f1f9cb05f80 RCX: 00007f1f9c9779f9 [ 346.980977][ T8540] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 346.988964][ T8540] RBP: 00007f1f9d7b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 346.996954][ T8540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.004954][ T8540] R13: 000000000000000b R14: 00007f1f9cb05f80 R15: 00007ffef4a220f8 [ 347.012966][ T8540] [ 347.045265][ T5233] Bluetooth: hci5: command tx timeout [ 347.140349][ T1172] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 347.184042][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.222879][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.250335][ T8515] bridge_slave_0: entered allmulticast mode [ 347.274748][ T8515] bridge_slave_0: entered promiscuous mode [ 347.309328][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.330172][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.349321][ T8515] bridge_slave_1: entered allmulticast mode [ 347.362065][ T1172] usb 3-1: Using ep0 maxpacket: 16 [ 347.377104][ T8515] bridge_slave_1: entered promiscuous mode [ 347.386214][ T1172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.418363][ T1172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.446107][ T8550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.833'. [ 347.458354][ T1172] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 347.471536][ T8550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.833'. [ 347.489540][ T1172] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 347.508182][ T1172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.540510][ T1172] usb 3-1: config 0 descriptor?? [ 347.604874][ T8515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.670555][ T8515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.915019][ T8558] overlayfs: missing 'lowerdir' [ 348.145301][ T1172] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 348.188180][ T8515] team0: Port device team_slave_0 added [ 348.205959][ T1172] microsoft 0003:045E:07DA.0009: item 0 4 0 8 parsing failed [ 348.251685][ T1172] microsoft 0003:045E:07DA.0009: parse failed [ 348.279433][ T1172] microsoft 0003:045E:07DA.0009: probe with driver microsoft failed with error -22 [ 348.340477][ T8515] team0: Port device team_slave_1 added [ 348.441314][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.621404][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.673738][ T8515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.761730][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.807076][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.032325][ T8515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.108232][ T5233] Bluetooth: hci5: command tx timeout [ 349.324906][ T8576] 9pnet_fd: Insufficient options for proto=fd [ 349.451227][ T8515] hsr_slave_0: entered promiscuous mode [ 349.465966][ T8515] hsr_slave_1: entered promiscuous mode [ 349.509326][ T8515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.522467][ T8515] Cannot create hsr debugfs directory [ 349.528080][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.528287][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.170622][ T5267] usb 3-1: USB disconnect, device number 19 [ 350.775914][ T8515] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.886851][ T8582] Process accounting resumed [ 351.051672][ T8515] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.188180][ T5233] Bluetooth: hci5: command tx timeout [ 351.276373][ T8515] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.443917][ T8515] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.699224][ T5267] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 351.790875][ T8515] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 351.849236][ T8515] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.938735][ T5267] usb 5-1: Using ep0 maxpacket: 16 [ 351.960272][ T8515] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 351.976826][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.003448][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.020090][ T8515] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 352.035370][ T5267] usb 5-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 352.074109][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.114087][ T5267] usb 5-1: config 0 descriptor?? [ 352.261987][ T8515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.326784][ T8515] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.399785][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.407882][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.454181][ T8596] FAULT_INJECTION: forcing a failure. [ 352.454181][ T8596] name failslab, interval 1, probability 0, space 0, times 0 [ 352.485922][ T5270] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.493177][ T5270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.508275][ T8596] CPU: 1 UID: 0 PID: 8596 Comm: syz.0.846 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 352.518916][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 352.528995][ T8596] Call Trace: [ 352.532287][ T8596] [ 352.535233][ T8596] dump_stack_lvl+0x241/0x360 [ 352.539947][ T8596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.545175][ T8596] ? __pfx__printk+0x10/0x10 [ 352.549792][ T8596] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 352.555279][ T8596] ? __pfx___might_resched+0x10/0x10 [ 352.560594][ T8596] should_fail_ex+0x3b0/0x4e0 [ 352.562437][ T5267] apple 0003:05AC:026C.000A: unknown main item tag 0x0 [ 352.565280][ T8596] should_failslab+0xac/0x100 [ 352.576803][ T8596] ? ima_calc_file_hash+0xab7/0x1b30 [ 352.578253][ T8515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 352.582099][ T8596] __kmalloc_cache_noprof+0x6c/0x2c0 [ 352.597327][ T5267] apple 0003:05AC:026C.000A: unknown main item tag 0x0 [ 352.597677][ T8596] ima_calc_file_hash+0xab7/0x1b30 [ 352.609662][ T8596] ? mark_lock+0x9a/0x350 [ 352.614019][ T8596] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 352.619603][ T8596] ? __pfx_register_lock_class+0x10/0x10 [ 352.625236][ T8596] ? lockdep_hardirqs_on+0x99/0x150 [ 352.630429][ T8596] ? mark_lock+0x9a/0x350 [ 352.634752][ T8596] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 352.641070][ T8596] ? make_vfsgid+0x46/0x90 [ 352.645481][ T8596] ? generic_fillattr+0x51c/0x7a0 [ 352.650507][ T8596] ima_collect_measurement+0x526/0xb20 [ 352.655969][ T8596] ? __pfx_ima_collect_measurement+0x10/0x10 [ 352.661939][ T8596] ? __mutex_trylock_common+0x183/0x2e0 [ 352.667498][ T8596] ? trace_contention_end+0x3c/0x120 [ 352.672782][ T8596] ? __mutex_lock+0x2ef/0xd70 [ 352.677465][ T8596] ? ima_get_hash_algo+0x156/0x4d0 [ 352.682566][ T8596] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 352.688019][ T8596] process_measurement+0x1357/0x1fb0 [ 352.693306][ T8596] ? __pfx_process_measurement+0x10/0x10 [ 352.698968][ T8596] ? __lock_acquire+0x137a/0x2040 [ 352.704022][ T8596] ? smack_current_getsecid_subj+0x22/0xf0 [ 352.709852][ T8596] ima_file_mmap+0x1f4/0x2b0 [ 352.714452][ T8596] ? __pfx_ima_file_mmap+0x10/0x10 [ 352.719562][ T8596] ? smack_mmap_file+0x158/0x680 [ 352.724499][ T8596] ? __pfx_ima_file_mmap+0x10/0x10 [ 352.729602][ T8596] security_mmap_file+0x145/0x1a0 [ 352.734623][ T8596] vm_mmap_pgoff+0x141/0x3d0 [ 352.739208][ T8596] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 352.744310][ T8596] ? __fget_files+0x29/0x470 [ 352.748890][ T8596] ? __fget_files+0x3f6/0x470 [ 352.753564][ T8596] ksys_mmap_pgoff+0x4f1/0x720 [ 352.758319][ T8596] ? __x64_sys_mmap+0x7f/0x140 [ 352.763089][ T8596] do_syscall_64+0xf3/0x230 [ 352.767607][ T8596] ? clear_bhb_loop+0x35/0x90 [ 352.772306][ T8596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.778211][ T8596] RIP: 0033:0x7f7050d779f9 [ 352.782631][ T8596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.802234][ T8596] RSP: 002b:00007f7051bf3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 352.810640][ T8596] RAX: ffffffffffffffda RBX: 00007f7050f05f80 RCX: 00007f7050d779f9 [ 352.818604][ T8596] RDX: b635773f06ebbeee RSI: 0000000000001000 RDI: 000000002074f000 [ 352.826562][ T8596] RBP: 00007f7051bf30a0 R08: 0000000000000003 R09: 0000000000000000 [ 352.834520][ T8596] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 352.842478][ T8596] R13: 000000000000000b R14: 00007f7050f05f80 R15: 00007fffcddc74b8 [ 352.850450][ T8596] [ 352.879192][ T5267] apple 0003:05AC:026C.000A: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.4-1/input0 [ 352.887264][ T8515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.899117][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 352.899133][ T29] audit: type=1800 audit(1722735375.271:81): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.846" name=2001 dev="mqueue" ino=24640 res=0 errno=0 [ 353.267797][ T8604] overlayfs: missing 'lowerdir' [ 353.283448][ T5233] Bluetooth: hci5: command tx timeout [ 353.446897][ T8515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.631540][ T8515] veth0_vlan: entered promiscuous mode [ 354.091646][ T8515] veth1_vlan: entered promiscuous mode [ 354.123104][ T5325] usb 5-1: USB disconnect, device number 13 [ 354.673317][ T8515] veth0_macvtap: entered promiscuous mode [ 354.769088][ T8515] veth1_macvtap: entered promiscuous mode [ 354.903288][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.954655][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.993052][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.026373][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.053228][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.090246][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.124318][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.150780][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.182191][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.226787][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.256142][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.300230][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.333128][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.366762][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.416176][ T8515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.506173][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.544782][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.577292][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.638177][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.658494][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.689647][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.697306][ T8634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.856'. [ 355.717649][ T8634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.856'. [ 355.721061][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.735719][ T8638] FAULT_INJECTION: forcing a failure. [ 355.735719][ T8638] name failslab, interval 1, probability 0, space 0, times 0 [ 355.777235][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.797283][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.809136][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.819014][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.875578][ T8638] CPU: 1 UID: 0 PID: 8638 Comm: syz.2.855 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 355.886229][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 355.896297][ T8638] Call Trace: [ 355.899584][ T8638] [ 355.902522][ T8638] dump_stack_lvl+0x241/0x360 [ 355.907222][ T8638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.912437][ T8638] ? __pfx__printk+0x10/0x10 [ 355.917044][ T8638] ? fs_reclaim_acquire+0x93/0x140 [ 355.922181][ T8638] ? __pfx___might_resched+0x10/0x10 [ 355.927492][ T8638] should_fail_ex+0x3b0/0x4e0 [ 355.932184][ T8638] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 355.937918][ T8638] should_failslab+0xac/0x100 [ 355.942610][ T8638] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 355.948352][ T8638] __kmalloc_noprof+0xd8/0x400 [ 355.953130][ T8638] ? kfree+0x4e/0x360 [ 355.957119][ T8638] ? rcu_is_watching+0x15/0xb0 [ 355.961898][ T8638] tomoyo_realpath_from_path+0xcf/0x5e0 [ 355.967471][ T8638] tomoyo_mount_permission+0x3bc/0xb80 [ 355.972949][ T8638] ? tomoyo_mount_permission+0x295/0xb80 [ 355.978592][ T8638] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 355.984585][ T8638] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 355.990627][ T8638] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.996970][ T8638] ? hook_sb_mount+0x122/0x390 [ 356.001758][ T8638] security_sb_mount+0x8f/0xd0 [ 356.006538][ T8638] path_mount+0xb9/0xfa0 [ 356.010791][ T8638] ? kmem_cache_free+0x145/0x350 [ 356.015752][ T8638] __se_sys_mount+0x2d6/0x3c0 [ 356.020447][ T8638] ? __pfx___se_sys_mount+0x10/0x10 [ 356.025658][ T8638] ? do_syscall_64+0x100/0x230 [ 356.030438][ T8638] ? __x64_sys_mount+0x20/0xc0 [ 356.035212][ T8638] do_syscall_64+0xf3/0x230 [ 356.039729][ T8638] ? clear_bhb_loop+0x35/0x90 [ 356.044423][ T8638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.050336][ T8638] RIP: 0033:0x7fa4393779f9 [ 356.054763][ T8638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.074385][ T8638] RSP: 002b:00007fa43a05e048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 356.082816][ T8638] RAX: ffffffffffffffda RBX: 00007fa439506058 RCX: 00007fa4393779f9 [ 356.090795][ T8638] RDX: 0000000020000280 RSI: 00000000200000c0 RDI: 0000000000000000 [ 356.098775][ T8638] RBP: 00007fa43a05e0a0 R08: 00000000200002c0 R09: 0000000000000000 [ 356.106756][ T8638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.114738][ T8638] R13: 000000000000006e R14: 00007fa439506058 R15: 00007ffc4a8c1bf8 [ 356.122742][ T8638] [ 356.200461][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.200487][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.200557][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.224115][ T8515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.510717][ T8515] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.511503][ T8515] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.511535][ T8515] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.511881][ T8515] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.624728][ T8638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 356.807415][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.807441][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.893234][ T2525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.893260][ T2525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.200143][ T8657] netlink: 132 bytes leftover after parsing attributes in process `syz.3.862'. [ 358.225708][ T8657] netlink: 'syz.3.862': attribute type 3 has an invalid length. [ 358.234403][ T8657] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.862'. [ 358.237796][ T5267] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 358.296215][ T8657] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.537902][ T5267] usb 2-1: Using ep0 maxpacket: 8 [ 358.727891][ T5267] usb 2-1: config 0 interface 0 has no altsetting 0 [ 358.734762][ T5267] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 359.244049][ T5267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.286906][ T5267] usb 2-1: config 0 descriptor?? [ 359.303487][ T5267] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 359.332124][ T5267] usb 2-1: selecting invalid altsetting 0 [ 359.342241][ T5267] cxusb: set interface failed [ 359.346960][ T5267] dvb-usb: bulk message failed: -22 (1/0) [ 359.370951][ T5267] dvb-usb: AVerMedia AVerTVHD Volar (A868R) error while loading driver (-22) [ 359.398320][ T5267] dvb_usb_cxusb 2-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 359.410667][ T8667] program syz.3.865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.006487][ T8675] xt_TCPMSS: Only works on TCP SYN packets [ 360.108551][ T8673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.727828][ T5270] usb 2-1: USB disconnect, device number 19 [ 361.744795][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.873'. [ 362.359983][ T8704] netlink: 132 bytes leftover after parsing attributes in process `syz.4.874'. [ 362.390813][ T8704] netlink: 'syz.4.874': attribute type 3 has an invalid length. [ 362.398655][ T8704] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.874'. [ 362.411216][ T8704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.775001][ T8710] Failed to initialize the IGMP autojoin socket (err -2) [ 363.347349][ T5275] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 363.537286][ T5275] usb 5-1: Using ep0 maxpacket: 16 [ 363.704837][ T5275] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 363.742337][ T5275] usb 5-1: config 0 has no interface number 0 [ 363.775732][ T5275] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.427298][ T5275] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.437094][ T5275] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 366.486710][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.524329][ T5275] usb 5-1: config 0 descriptor?? [ 366.577072][ T5275] usb 5-1: can't set config #0, error -71 [ 366.601120][ T5275] usb 5-1: USB disconnect, device number 14 [ 367.277995][ T8741] netlink: 116 bytes leftover after parsing attributes in process `syz.0.885'. [ 367.480570][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 368.151966][ T8755] netlink: 132 bytes leftover after parsing attributes in process `syz.1.889'. [ 368.196420][ T8755] netlink: 'syz.1.889': attribute type 3 has an invalid length. [ 368.289897][ T8755] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.889'. [ 368.451392][ T8755] xt_CT: You must specify a L4 protocol and not use inversions on it [ 368.645023][ T8760] netlink: 'syz.4.893': attribute type 2 has an invalid length. [ 373.997673][ T5233] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 374.006465][ T5233] Bluetooth: hci5: Injecting HCI hardware error event [ 374.015949][ T5230] Bluetooth: hci5: hardware error 0x00 [ 374.845495][ T8776] netlink: 'syz.0.897': attribute type 9 has an invalid length. [ 375.065254][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 375.318165][ T8782] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 376.388168][ T5230] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 376.845202][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.902'. [ 377.063823][ T29] audit: type=1326 audit(1722735399.441:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.2.904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4393779f9 code=0x0 [ 377.135910][ T8813] netlink: 132 bytes leftover after parsing attributes in process `syz.0.905'. [ 377.182792][ T8813] netlink: 'syz.0.905': attribute type 3 has an invalid length. [ 377.193354][ T8813] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.905'. [ 377.328906][ T8813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 377.554430][ T8815] netlink: 'syz.3.906': attribute type 1 has an invalid length. [ 377.812635][ T8818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.906'. [ 378.038437][ T8818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.074579][ T8825] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.909'. [ 378.127583][ T8825] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.909'. [ 378.429976][ T5275] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 378.663218][ T5275] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 378.691224][ T5275] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 378.737358][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.745404][ T5275] usb 2-1: Product: syz [ 378.782017][ T5275] usb 2-1: Manufacturer: syz [ 378.786763][ T5275] usb 2-1: SerialNumber: syz [ 378.818289][ T5275] usb 2-1: config 0 descriptor?? [ 378.858411][ T8823] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 378.868913][ T5275] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.963439][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.972634][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.343065][ T970] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.439445][ T5275] usb 2-1: USB disconnect, device number 20 [ 379.884822][ T8839] tmpfs: Bad value for 'mpol' [ 380.320319][ T970] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.039143][ T970] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.437473][ T970] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.784589][ T5233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 381.795356][ T5233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 381.804543][ T5233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 381.813860][ T5233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 381.824945][ T5233] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 381.832654][ T5233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 382.721307][ T970] bridge_slave_1: left allmulticast mode [ 382.727005][ T970] bridge_slave_1: left promiscuous mode [ 382.792679][ T970] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.858204][ T970] bridge_slave_0: left allmulticast mode [ 382.863907][ T970] bridge_slave_0: left promiscuous mode [ 382.937470][ T970] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.908571][ T5233] Bluetooth: hci6: command tx timeout [ 385.989748][ T5233] Bluetooth: hci6: command tx timeout [ 386.393165][ T8670] syz.3.865 (8670) used greatest stack depth: 17936 bytes left [ 387.683124][ T970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.919325][ T970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.141865][ T5233] Bluetooth: hci6: command tx timeout [ 389.502145][ T970] bond0 (unregistering): Released all slaves [ 389.593570][ T8861] chnl_net:caif_netlink_parms(): no params data found [ 390.227571][ T5233] Bluetooth: hci6: command tx timeout [ 390.533667][ T8861] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.544892][ T8861] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.554541][ T8861] bridge_slave_0: entered allmulticast mode [ 390.563309][ T8861] bridge_slave_0: entered promiscuous mode [ 390.573364][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.584137][ T8861] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.600959][ T8861] bridge_slave_1: entered allmulticast mode [ 390.616857][ T8861] bridge_slave_1: entered promiscuous mode [ 390.639561][ T29] audit: type=1804 audit(1722735413.024:83): pid=8952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.942" name="/newroot/154/file0/bus" dev="hugetlbfs" ino=26327 res=1 errno=0 [ 390.827342][ T29] audit: type=1804 audit(1722735413.064:84): pid=8955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.942" name="/newroot/154/file0/bus" dev="hugetlbfs" ino=26327 res=1 errno=0 [ 390.998330][ T8861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.054182][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.943'. [ 391.407600][ T970] hsr_slave_0: left promiscuous mode [ 391.467051][ T970] hsr_slave_1: left promiscuous mode [ 391.502550][ T970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.539093][ T970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.578894][ T970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.612632][ T970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.742248][ T970] veth1_macvtap: left promiscuous mode [ 391.769834][ T970] veth0_macvtap: left promiscuous mode [ 391.788733][ T970] veth1_vlan: left promiscuous mode [ 391.803002][ T970] veth0_vlan: left promiscuous mode [ 396.687594][ T970] team0 (unregistering): Port device team_slave_1 removed [ 396.940063][ T970] team0 (unregistering): Port device team_slave_0 removed [ 397.283780][ T9014] binder: 9011:9014 ioctl c018620c 200013c0 returned -22 [ 398.397830][ T9021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.960'. [ 398.900395][ T8861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.156685][ T8861] team0: Port device team_slave_0 added [ 399.196675][ T8861] team0: Port device team_slave_1 added [ 399.469477][ T8861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.476474][ T8861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.593184][ T8861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.739852][ T8861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.750226][ T8861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.713504][ T9039] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 401.757286][ T8861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.817425][ T5275] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 402.075919][ T5275] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.113843][ T5275] usb 2-1: config 0 interface 0 has no altsetting 0 [ 402.153838][ T5275] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 402.184909][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.213751][ T5275] usb 2-1: Product: syz [ 402.227425][ T5275] usb 2-1: Manufacturer: syz [ 402.237673][ T5275] usb 2-1: SerialNumber: syz [ 402.259613][ T5275] usb 2-1: config 0 descriptor?? [ 402.287944][ T5275] usbtest 2-1:0.0: couldn't get endpoints, -22 [ 402.307567][ T5275] usbtest 2-1:0.0: probe with driver usbtest failed with error -22 [ 402.343861][ T8861] hsr_slave_0: entered promiscuous mode [ 402.367915][ T8861] hsr_slave_1: entered promiscuous mode [ 402.385901][ T8861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.406214][ T8861] Cannot create hsr debugfs directory [ 402.576850][ T9049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.606386][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 402.647454][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 402.673063][ T5275] usb 2-1: USB disconnect, device number 21 [ 403.106893][ T9055] FAULT_INJECTION: forcing a failure. [ 403.106893][ T9055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.120121][ T9055] CPU: 1 UID: 0 PID: 9055 Comm: syz.4.969 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 403.130717][ T9055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 403.140781][ T9055] Call Trace: [ 403.144067][ T9055] [ 403.147009][ T9055] dump_stack_lvl+0x241/0x360 [ 403.151713][ T9055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.156926][ T9055] ? __pfx__printk+0x10/0x10 [ 403.161533][ T9055] ? __pfx_lock_release+0x10/0x10 [ 403.166576][ T9055] should_fail_ex+0x3b0/0x4e0 [ 403.171264][ T9055] _copy_from_user+0x2f/0xe0 [ 403.175871][ T9055] __keyctl_dh_compute+0x1f1/0xf50 [ 403.181008][ T9055] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 403.186660][ T9055] ? __pfx___might_resched+0x10/0x10 [ 403.191973][ T9055] ? __might_fault+0xc6/0x120 [ 403.196667][ T9055] keyctl_dh_compute+0x107/0x160 [ 403.201619][ T9055] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 403.207094][ T9055] ? vfs_write+0x7c4/0xc90 [ 403.211521][ T9055] __se_sys_keyctl+0x3f3/0xa50 [ 403.216304][ T9055] ? __pfx___se_sys_keyctl+0x10/0x10 [ 403.221603][ T9055] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 403.227597][ T9055] ? __fget_files+0x3f6/0x470 [ 403.232302][ T9055] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 403.238304][ T9055] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 403.244647][ T9055] ? do_syscall_64+0x100/0x230 [ 403.249433][ T9055] ? __x64_sys_keyctl+0x20/0xc0 [ 403.254307][ T9055] do_syscall_64+0xf3/0x230 [ 403.258824][ T9055] ? clear_bhb_loop+0x35/0x90 [ 403.263512][ T9055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.269417][ T9055] RIP: 0033:0x7f1f9c9779f9 [ 403.273837][ T9055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.293454][ T9055] RSP: 002b:00007f1f9d774048 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 403.301881][ T9055] RAX: ffffffffffffffda RBX: 00007f1f9cb06130 RCX: 00007f1f9c9779f9 [ 403.309862][ T9055] RDX: 00000000200001c0 RSI: 0000000020000000 RDI: 0000000000000017 [ 403.317842][ T9055] RBP: 00007f1f9d7740a0 R08: 0000000020000140 R09: 0000000000000000 [ 403.325816][ T9055] R10: 00000000000000a6 R11: 0000000000000246 R12: 0000000000000001 [ 403.333789][ T9055] R13: 000000000000006e R14: 00007f1f9cb06130 R15: 00007ffef4a220f8 [ 403.341786][ T9055] [ 403.760697][ T5233] Bluetooth: hci0: command tx timeout [ 405.805310][ T9058] mmap: syz.1.971 (9058): VmData 37482496 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 406.349724][ T8861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 406.424378][ T8861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 406.467643][ T8861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 406.520377][ T8861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.563714][ T9061] syz.1.972 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 406.644082][ T9061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.701721][ T9063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.730855][ T9063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.742492][ T9061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.944762][ T8861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.073561][ T8861] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.144450][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.151680][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.197019][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.204176][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.473916][ T8861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.083794][ T9068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.663112][ T5325] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 409.890478][ T5325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.924677][ T5325] usb 4-1: config 0 interface 0 has no altsetting 0 [ 409.949942][ T5325] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 409.970487][ T5325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.988409][ T5325] usb 4-1: Product: syz [ 409.992767][ T5325] usb 4-1: Manufacturer: syz [ 409.997867][ T5325] usb 4-1: SerialNumber: syz [ 410.006000][ T5325] usb 4-1: config 0 descriptor?? [ 410.032344][ T5325] usbtest 4-1:0.0: couldn't get endpoints, -22 [ 410.075215][ T5325] usbtest 4-1:0.0: probe with driver usbtest failed with error -22 [ 410.364606][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 410.373757][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 410.384852][ T5275] usb 4-1: USB disconnect, device number 13 [ 410.434526][ T8861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.020105][ T8861] veth0_vlan: entered promiscuous mode [ 411.109358][ T8861] veth1_vlan: entered promiscuous mode [ 411.234809][ T8861] veth0_macvtap: entered promiscuous mode [ 411.293589][ T8861] veth1_macvtap: entered promiscuous mode [ 411.379597][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.556073][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.598450][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.323778][ T9103] fuse: Bad value for 'rootmode' [ 412.420687][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.540581][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.571412][ T9105] Failed to initialize the IGMP autojoin socket (err -2) [ 412.627438][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.707297][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.787647][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.872396][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.938472][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.009751][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.027399][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.039316][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.077715][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.108433][ T8861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.206718][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.237655][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.257196][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.277203][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.288777][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.317668][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.347966][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.375754][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.407434][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.438088][ T9111] Failed to initialize the IGMP autojoin socket (err -2) [ 413.445314][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.477255][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.520075][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.577234][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.608120][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.669235][ T8861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.722274][ T8861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.777233][ T8861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.785998][ T8861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.847225][ T8861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.198824][ T9123] overlay: ./file1 is not a directory [ 414.236137][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.278701][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.386304][ T2565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.409276][ T2565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.438574][ T5325] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 416.577398][ T5275] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 416.680241][ T5325] usb 3-1: Using ep0 maxpacket: 16 [ 416.697561][ T5325] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 416.756561][ T5325] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 416.777823][ T5325] usb 3-1: can't read configurations, error -61 [ 417.008365][ T5325] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 417.145603][ T9150] bond0: entered promiscuous mode [ 417.150891][ T9150] bond_slave_0: entered promiscuous mode [ 417.158572][ T9150] bond_slave_1: entered promiscuous mode [ 417.247772][ T5325] usb 3-1: Using ep0 maxpacket: 16 [ 417.458619][ T5325] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 417.470763][ T5325] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 417.481854][ T5325] usb 3-1: can't read configurations, error -61 [ 417.518925][ T5325] usb usb3-port1: attempt power cycle [ 417.577938][ T9150] dummy0: entered promiscuous mode [ 417.797994][ T5275] usb 4-1: unable to get BOS descriptor or descriptor too short [ 417.843441][ T5275] usb 4-1: no configurations [ 417.862850][ T5275] usb 4-1: can't read configurations, error -22 [ 417.967280][ T5325] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 418.025685][ T5325] usb 3-1: Using ep0 maxpacket: 16 [ 418.088439][ T5325] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 418.135101][ T5325] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 418.183730][ T5325] usb 3-1: can't read configurations, error -61 [ 418.347343][ T5325] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 418.512227][ T5325] usb 3-1: Using ep0 maxpacket: 16 [ 418.531989][ T5325] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 418.568200][ T5325] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 418.575843][ T5325] usb 3-1: can't read configurations, error -61 [ 418.635428][ T5325] usb usb3-port1: unable to enumerate USB device [ 419.085279][ T9159] netlink: 132 bytes leftover after parsing attributes in process `syz.0.997'. [ 419.144283][ T9159] netlink: 'syz.0.997': attribute type 3 has an invalid length. [ 419.154407][ T9159] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.997'. [ 419.211531][ T9159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 419.712094][ T9166] trusted_key: syz.4.999 sent an empty control message without MSG_MORE. [ 419.797348][ T9166] FAULT_INJECTION: forcing a failure. [ 419.797348][ T9166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.126093][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: syz.4.999 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 420.136758][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 420.148538][ T9166] Call Trace: [ 420.148579][ T9166] [ 420.148589][ T9166] dump_stack_lvl+0x241/0x360 [ 420.148627][ T9166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.148653][ T9166] ? __pfx__printk+0x10/0x10 [ 420.148679][ T9166] ? __pfx_lock_release+0x10/0x10 [ 420.148713][ T9166] should_fail_ex+0x3b0/0x4e0 [ 420.148737][ T9166] _copy_from_iter+0x1f6/0x1960 [ 420.148768][ T9166] ? __virt_addr_valid+0x183/0x530 [ 420.148787][ T9166] ? __pfx_lock_release+0x10/0x10 [ 420.148819][ T9166] ? alloc_pages_mpol_noprof+0x417/0x680 [ 420.148843][ T9166] ? __pfx__copy_from_iter+0x10/0x10 [ 420.148867][ T9166] ? __virt_addr_valid+0x183/0x530 [ 420.148884][ T9166] ? __virt_addr_valid+0x183/0x530 [ 420.148901][ T9166] ? __virt_addr_valid+0x45f/0x530 [ 420.148923][ T9166] ? __check_object_size+0x49c/0x900 [ 420.148951][ T9166] af_alg_sendmsg+0x1519/0x2650 [ 420.149001][ T9166] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 420.149026][ T9166] ? __pfx___might_resched+0x10/0x10 [ 420.149049][ T9166] ? __might_fault+0xaa/0x120 [ 420.149070][ T9166] ? __pfx_lock_release+0x10/0x10 [ 420.149092][ T9166] ? __import_iovec+0x536/0x820 [ 420.149115][ T9166] ? skcipher_sendmsg+0x28/0xf0 [ 420.149135][ T9166] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 420.149150][ T9166] __sock_sendmsg+0x221/0x270 [ 420.149178][ T9166] ____sys_sendmsg+0x525/0x7d0 [ 420.149205][ T9166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.280647][ T9166] ? __might_fault+0xaa/0x120 [ 420.285334][ T9166] __sys_sendmmsg+0x3b2/0x740 [ 420.290013][ T9166] ? __pfx___sys_sendmmsg+0x10/0x10 [ 420.295231][ T9166] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 420.301124][ T9166] ? ksys_write+0x23e/0x2c0 [ 420.305618][ T9166] ? __pfx_lock_release+0x10/0x10 [ 420.310644][ T9166] ? vfs_write+0x7c4/0xc90 [ 420.315057][ T9166] ? __mutex_unlock_slowpath+0x21d/0x750 [ 420.320685][ T9166] ? __pfx_vfs_write+0x10/0x10 [ 420.325457][ T9166] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 420.331437][ T9166] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 420.337762][ T9166] ? do_syscall_64+0x100/0x230 [ 420.342527][ T9166] __x64_sys_sendmmsg+0xa0/0xb0 [ 420.347384][ T9166] do_syscall_64+0xf3/0x230 [ 420.351897][ T9166] ? clear_bhb_loop+0x35/0x90 [ 420.356571][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.362467][ T9166] RIP: 0033:0x7f1f9c9779f9 [ 420.366877][ T9166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.386477][ T9166] RSP: 002b:00007f1f9d795048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 420.394886][ T9166] RAX: ffffffffffffffda RBX: 00007f1f9cb06058 RCX: 00007f1f9c9779f9 [ 420.402860][ T9166] RDX: 0000000000000004 RSI: 00000000200033c0 RDI: 0000000000000004 [ 420.410826][ T9166] RBP: 00007f1f9d7950a0 R08: 0000000000000000 R09: 0000000000000000 [ 420.418791][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.426755][ T9166] R13: 000000000000006e R14: 00007f1f9cb06058 R15: 00007ffef4a220f8 [ 420.434741][ T9166] [ 420.902659][ T9179] tipc: Failed to obtain node identity [ 420.949187][ T9179] tipc: Enabling of bearer rejected, failed to enable media [ 421.337386][ T5270] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 421.642420][ T5270] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.653379][ T5270] usb 5-1: config 0 interface 0 has no altsetting 0 [ 421.674450][ T5270] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 421.692236][ T5270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.707211][ T5270] usb 5-1: Product: syz [ 421.711572][ T5270] usb 5-1: Manufacturer: syz [ 421.716195][ T5270] usb 5-1: SerialNumber: syz [ 421.731274][ T5270] usb 5-1: config 0 descriptor?? [ 421.751560][ T5270] usbtest 5-1:0.0: couldn't get endpoints, -22 [ 421.782796][ T5270] usbtest 5-1:0.0: probe with driver usbtest failed with error -22 [ 421.998093][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 422.027387][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 422.058350][ T942] usb 5-1: USB disconnect, device number 15 [ 422.437695][ T9215] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1012'. [ 422.491966][ T9215] netlink: 'syz.3.1012': attribute type 3 has an invalid length. [ 422.507777][ T9215] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1012'. [ 422.586223][ T9215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.449664][ T1172] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 424.717856][ T1172] usb 5-1: Using ep0 maxpacket: 16 [ 424.741373][ T1172] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.772800][ T1172] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 424.807286][ T1172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.827239][ T1172] usb 5-1: Product: syz [ 424.831464][ T1172] usb 5-1: Manufacturer: syz [ 424.836072][ T1172] usb 5-1: SerialNumber: syz [ 424.876475][ T1172] usb 5-1: config 0 descriptor?? [ 424.889243][ T1172] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 425.209024][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.216470][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.257089][ T1172] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 425.273000][ T1172] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 425.298179][ T1172] usb 5-1: USB disconnect, device number 16 [ 425.319853][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.386554][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.428694][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.450063][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.473382][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.508008][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.527783][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.535216][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.576275][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.604881][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.675883][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.696196][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.711763][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.749333][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.756778][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.785258][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.963444][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.973438][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 427.556490][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 427.604884][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 427.628891][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 427.636396][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 427.644989][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 427.668436][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 427.777302][ T5230] Bluetooth: hci7: command 0x0406 tx timeout [ 427.786709][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 427.798423][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 427.805904][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 427.816063][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 427.825086][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 427.835340][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 428.125141][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 428.171262][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 428.242207][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 428.250043][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 428.264910][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 428.292179][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 428.321769][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 428.362942][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 428.387251][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 428.427261][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 428.453411][ T5268] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 428.495461][ T5268] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 428.757766][ T9266] fuse: Unknown parameter '0x000000000000000a' [ 429.780435][ T9268] overlayfs: missing 'lowerdir' [ 430.167959][ T9272] netlink: 'syz.2.1028': attribute type 11 has an invalid length. [ 431.378543][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 431.384596][ T9282] netlink: 'syz.3.1031': attribute type 4 has an invalid length. [ 431.419773][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 431.448145][ T9284] FAULT_INJECTION: forcing a failure. [ 431.448145][ T9284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.477407][ T9284] CPU: 0 UID: 0 PID: 9284 Comm: syz.1.1032 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 431.488146][ T9284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 431.498221][ T9284] Call Trace: [ 431.501509][ T9284] [ 431.504450][ T9284] dump_stack_lvl+0x241/0x360 [ 431.509152][ T9284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.514373][ T9284] ? __pfx__printk+0x10/0x10 [ 431.518994][ T9284] ? snprintf+0xda/0x120 [ 431.523255][ T9284] should_fail_ex+0x3b0/0x4e0 [ 431.527949][ T9284] _copy_to_user+0x2f/0xb0 [ 431.532389][ T9284] simple_read_from_buffer+0xca/0x150 [ 431.537793][ T9284] proc_fail_nth_read+0x1e9/0x250 [ 431.542851][ T9284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.548445][ T9284] ? rw_verify_area+0x520/0x6b0 [ 431.553327][ T9284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.558911][ T9284] vfs_read+0x204/0xbc0 [ 431.563100][ T9284] ? __pfx_lock_release+0x10/0x10 [ 431.568164][ T9284] ? __pfx_vfs_read+0x10/0x10 [ 431.572881][ T9284] ? __fget_files+0x29/0x470 [ 431.577507][ T9284] ? __fget_files+0x3f6/0x470 [ 431.582229][ T9284] ksys_read+0x1a0/0x2c0 [ 431.586519][ T9284] ? __pfx_ksys_read+0x10/0x10 [ 431.591317][ T9284] ? do_syscall_64+0x100/0x230 [ 431.596121][ T9284] ? do_syscall_64+0xb6/0x230 [ 431.600830][ T9284] do_syscall_64+0xf3/0x230 [ 431.605368][ T9284] ? clear_bhb_loop+0x35/0x90 [ 431.610075][ T9284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.616003][ T9284] RIP: 0033:0x7fbd2f57643c [ 431.620437][ T9284] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 431.640070][ T9284] RSP: 002b:00007fbd303bf040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 431.648519][ T9284] RAX: ffffffffffffffda RBX: 00007fbd2f705f80 RCX: 00007fbd2f57643c [ 431.656514][ T9284] RDX: 000000000000000f RSI: 00007fbd303bf0b0 RDI: 0000000000000004 [ 431.664506][ T9284] RBP: 00007fbd303bf0a0 R08: 0000000000000000 R09: 0000000000000000 [ 431.672480][ T9284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 431.680446][ T9284] R13: 000000000000000b R14: 00007fbd2f705f80 R15: 00007ffefcb96a08 [ 431.688421][ T9284] [ 431.777557][ T9285] netlink: 'syz.3.1031': attribute type 4 has an invalid length. [ 431.922363][ T9297] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups) [ 432.126602][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'. [ 432.491935][ T9313] vxfs: WRONG superblock magic 00000000 at 1 [ 432.499745][ T9313] vxfs: WRONG superblock magic 00000000 at 8 [ 432.505784][ T9313] vxfs: can't find superblock. [ 434.938570][ T9323] overlayfs: missing 'lowerdir' [ 436.317427][ T1172] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 436.352340][ T5233] Bluetooth: hci3: unexpected event 0x3e length: 904 > 260 [ 436.352375][ T5233] Bluetooth: hci3: unexpected subevent 0x0d length: 903 > 260 [ 436.389264][ T5233] Bluetooth: hci3: adv larger than maximum supported [ 436.389297][ T5233] Bluetooth: hci3: adv larger than maximum supported [ 436.396022][ T5233] Bluetooth: hci3: adv larger than maximum supported [ 436.407953][ T5233] Bluetooth: hci3: adv larger than maximum supported [ 436.414686][ T5233] Bluetooth: hci3: adv larger than maximum supported [ 436.421500][ T5233] Bluetooth: hci3: adv larger than maximum supported [ 436.429163][ T5233] Bluetooth: Unexpected continuation frame (len 18) [ 436.577226][ T1172] usb 2-1: Using ep0 maxpacket: 16 [ 437.310413][ T1172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.346687][ T1172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.398056][ T1172] usb 2-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 437.450661][ T1172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.525904][ T1172] usb 2-1: config 0 descriptor?? [ 438.093839][ T9357] FAULT_INJECTION: forcing a failure. [ 438.093839][ T9357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.175689][ T9357] CPU: 0 UID: 0 PID: 9357 Comm: syz.0.1047 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 438.186409][ T9357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 438.196458][ T9357] Call Trace: [ 438.199728][ T9357] [ 438.202644][ T9357] dump_stack_lvl+0x241/0x360 [ 438.207318][ T9357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.212527][ T9357] ? __pfx__printk+0x10/0x10 [ 438.217148][ T9357] ? __pfx_lock_release+0x10/0x10 [ 438.222192][ T9357] ? percpu_ref_get_many+0x19/0x140 [ 438.227418][ T9357] should_fail_ex+0x3b0/0x4e0 [ 438.232120][ T9357] _copy_from_iter+0x1f6/0x1960 [ 438.237001][ T9357] ? __mutex_lock+0x9a5/0xd70 [ 438.241713][ T9357] ? __mutex_lock+0x527/0xd70 [ 438.246406][ T9357] ? __pfx__copy_from_iter+0x10/0x10 [ 438.251683][ T9357] ? alloc_pages_mpol_noprof+0x417/0x680 [ 438.257317][ T9357] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 438.263296][ T9357] ? page_copy_sane+0x46/0x260 [ 438.268050][ T9357] copy_page_from_iter+0x7a/0x100 [ 438.273060][ T9357] pipe_write+0x7fa/0x1a40 [ 438.277497][ T9357] ? __pfx_pipe_write+0x10/0x10 [ 438.282350][ T9357] ? bpf_lsm_file_permission+0x9/0x10 [ 438.287714][ T9357] ? security_file_permission+0x7f/0xa0 [ 438.293245][ T9357] vfs_write+0xa72/0xc90 [ 438.297473][ T9357] ? __pfx_pipe_write+0x10/0x10 [ 438.302304][ T9357] ? __pfx_vfs_write+0x10/0x10 [ 438.307055][ T9357] ksys_write+0x1a0/0x2c0 [ 438.311368][ T9357] ? __pfx_ksys_write+0x10/0x10 [ 438.316198][ T9357] ? do_syscall_64+0x100/0x230 [ 438.320951][ T9357] ? do_syscall_64+0xb6/0x230 [ 438.325611][ T9357] do_syscall_64+0xf3/0x230 [ 438.330099][ T9357] ? clear_bhb_loop+0x35/0x90 [ 438.334756][ T9357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.340636][ T9357] RIP: 0033:0x7f7050d779f9 [ 438.345038][ T9357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.364625][ T9357] RSP: 002b:00007f7051bd2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 438.373028][ T9357] RAX: ffffffffffffffda RBX: 00007f7050f06058 RCX: 00007f7050d779f9 [ 438.380983][ T9357] RDX: 000000000000000b RSI: 0000000020000540 RDI: 0000000000000008 [ 438.388938][ T9357] RBP: 00007f7051bd20a0 R08: 0000000000000000 R09: 0000000000000000 [ 438.396891][ T9357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.404842][ T9357] R13: 000000000000006e R14: 00007f7050f06058 R15: 00007fffcddc74b8 [ 438.412810][ T9357] [ 438.678807][ T1172] apple 0003:05AC:027B.000C: hidraw0: USB HID v0.00 Device [HID 05ac:027b] on usb-dummy_hcd.1-1/input0 [ 443.477696][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.484047][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.509349][ T9375] overlayfs: missing 'lowerdir' [ 443.871880][ T5325] usb 2-1: USB disconnect, device number 22 [ 444.300149][ T30] INFO: task syz.3.689:8018 blocked for more than 143 seconds. [ 444.356634][ T30] Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 444.534630][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.607846][ T30] task:syz.3.689 state:D stack:25584 pid:8018 tgid:8011 ppid:5222 flags:0x00004004 [ 444.669204][ T30] Call Trace: [ 444.691976][ T30] [ 444.694976][ T30] __schedule+0x17ae/0x4a10 [ 444.699860][ T30] ? __pfx___schedule+0x10/0x10 [ 444.705348][ T30] ? __pfx_lock_release+0x10/0x10 [ 444.710969][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 444.716475][ T30] ? schedule+0x90/0x320 [ 444.722212][ T30] schedule+0x14b/0x320 [ 444.726415][ T30] schedule_preempt_disabled+0x13/0x30 [ 444.731976][ T30] __ww_mutex_lock+0xec2/0x2790 [ 444.736872][ T30] ? __ww_mutex_lock+0xb08/0x2790 [ 444.742789][ T30] ? drm_modeset_lock+0x6f/0x90 [ 444.745746][ T5233] Bluetooth: hci3: unexpected event 0x3e length: 901 > 260 [ 444.747710][ T30] ? __pfx___ww_mutex_lock+0x10/0x10 [ 444.747751][ T30] ? __drm_mode_object_find+0x448/0x5d0 [ 444.747777][ T30] ? __pfx___drm_mode_object_find+0x10/0x10 [ 444.747801][ T30] ww_mutex_lock+0x40/0x1f0 [ 444.747824][ T30] ? drm_modeset_lock+0x65/0x90 [ 444.747851][ T30] drm_modeset_lock+0x6f/0x90 [ 444.747874][ T30] drm_mode_getcrtc+0x152/0x770 [ 444.786137][ T5233] Bluetooth: hci3: unexpected subevent 0x0d length: 900 > 260 [ 444.798672][ T5233] Bluetooth: hci3: adv larger than maximum supported [ 444.798696][ T5233] Bluetooth: hci3: adv larger than maximum supported [ 444.805397][ T5233] Bluetooth: hci3: adv larger than maximum supported [ 444.813096][ T5233] Bluetooth: hci3: adv larger than maximum supported [ 444.819965][ T5233] Bluetooth: hci3: adv larger than maximum supported [ 444.848767][ T5233] Bluetooth: Unexpected continuation frame (len 18) [ 444.867898][ T30] drm_ioctl_kernel+0x33a/0x440 [ 444.872829][ T30] ? __pfx_drm_mode_getcrtc+0x10/0x10 [ 444.880215][ T30] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 444.885643][ T30] ? __might_fault+0xc6/0x120 [ 444.890485][ T30] drm_ioctl+0x611/0xad0 [ 444.894762][ T30] ? __pfx_drm_mode_getcrtc+0x10/0x10 [ 444.900318][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 444.905136][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 444.910225][ T30] ? security_file_ioctl+0x87/0xb0 [ 444.915370][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 444.920312][ T30] __se_sys_ioctl+0xfc/0x170 [ 444.925532][ T30] do_syscall_64+0xf3/0x230 [ 444.930192][ T30] ? clear_bhb_loop+0x35/0x90 [ 444.934906][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.940983][ T30] RIP: 0033:0x7f292cf779f9 [ 444.945425][ T30] RSP: 002b:00007f292dd05048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.953960][ T30] RAX: ffffffffffffffda RBX: 00007f292d106208 RCX: 00007f292cf779f9 [ 444.962084][ T30] RDX: 00000000200003c0 RSI: 00000000c06864a1 RDI: 0000000000000006 [ 444.970254][ T30] RBP: 00007f292cfe58ee R08: 0000000000000000 R09: 0000000000000000 [ 444.979229][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.989058][ T30] R13: 000000000000006e R14: 00007f292d106208 R15: 00007ffe8ac76108 [ 444.997099][ T30] [ 445.000463][ T30] [ 445.000463][ T30] Showing all locks held in the system: [ 445.008337][ T30] 1 lock held by khungtaskd/30: [ 445.013203][ T30] #0: ffffffff8e7377e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 445.023254][ T30] 3 locks held by kworker/u8:6/1104: [ 445.029365][ T30] 2 locks held by getty/4969: [ 445.034065][ T30] #0: ffff88802b77b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 445.046119][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 445.089313][ T30] 4 locks held by syz.2.556/7458: [ 445.094403][ T30] 1 lock held by syz.3.689/8018: [ 445.119483][ T30] #0: ffff8880204b10b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 445.143306][ T30] 1 lock held by syz.1.790/8405: [ 445.150767][ T30] #0: ffff8880204b10b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 445.176181][ T30] 5 locks held by syz.1.1054/9385: [ 445.187369][ T30] 1 lock held by syz.1.1054/9389: [ 445.198149][ T30] [ 445.200522][ T30] ============================================= [ 445.200522][ T30] [ 445.218128][ T30] NMI backtrace for cpu 1 [ 445.222514][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 445.233036][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 445.243116][ T30] Call Trace: [ 445.246410][ T30] [ 445.249358][ T30] dump_stack_lvl+0x241/0x360 [ 445.254068][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.259295][ T30] ? __pfx__printk+0x10/0x10 [ 445.263915][ T30] ? vprintk_emit+0x631/0x770 [ 445.268617][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 445.273670][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 445.278637][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 445.284118][ T30] ? _printk+0xd5/0x120 [ 445.288300][ T30] ? __pfx__printk+0x10/0x10 [ 445.292921][ T30] ? __wake_up_klogd+0xcc/0x110 [ 445.297796][ T30] ? __pfx__printk+0x10/0x10 [ 445.302417][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 445.307463][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 445.313466][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 445.319472][ T30] watchdog+0xfee/0x1030 [ 445.323744][ T30] ? watchdog+0x1ea/0x1030 [ 445.328201][ T30] ? __pfx_watchdog+0x10/0x10 [ 445.332898][ T30] kthread+0x2f0/0x390 [ 445.336994][ T30] ? __pfx_watchdog+0x10/0x10 [ 445.341696][ T30] ? __pfx_kthread+0x10/0x10 [ 445.346319][ T30] ret_from_fork+0x4b/0x80 [ 445.350763][ T30] ? __pfx_kthread+0x10/0x10 [ 445.355376][ T30] ret_from_fork_asm+0x1a/0x30 [ 445.360185][ T30] [ 445.364479][ T30] Sending NMI from CPU 1 to CPUs 0: [ 445.370236][ C0] NMI backtrace for cpu 0 [ 445.370251][ C0] CPU: 0 UID: 0 PID: 4660 Comm: klogd Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 445.370269][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 445.370278][ C0] RIP: 0010:stack_depot_save_flags+0x1ac/0x830 [ 445.370300][ C0] Code: 4c 89 cd e8 e6 a5 c6 ff 49 89 e9 8b 6c 24 04 48 89 da 4c 8b 44 24 08 45 85 e4 75 68 4d 8b 3f 49 39 d7 74 5d 45 39 77 10 75 f2 <45> 39 4f 14 75 ec 31 c0 49 8b 0c c0 49 3b 4c c7 20 75 df 48 ff c0 [ 445.370313][ C0] RSP: 0018:ffffc900031c7470 EFLAGS: 00000246 [ 445.370328][ C0] RAX: ffff88823ac00000 RBX: 0000000000d98447 RCX: 0000000000368bc0 [ 445.370339][ C0] RDX: ffff88823af68bc0 RSI: 0000000000000003 RDI: 0000000055ff7eca [ 445.370350][ C0] RBP: 0000000000000001 R08: ffffc900031c74d0 R09: 000000000000000c [ 445.370360][ C0] R10: dffffc0000000000 R11: fffffbfff1fed02e R12: 00000000000000f0 [ 445.370371][ C0] R13: 000000000000000c R14: 00000000c6e368bc R15: ffff88802f3717b0 [ 445.370382][ C0] FS: 00007f9ad503a380(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 445.370396][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.370407][ C0] CR2: 00000000201f8000 CR3: 00000000296c6000 CR4: 00000000003506f0 [ 445.370420][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 445.370429][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 445.370440][ C0] Call Trace: [ 445.370445][ C0] [ 445.370451][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 445.370468][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 445.370490][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 445.370506][ C0] ? nmi_handle+0x2a/0x5a0 [ 445.370529][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 445.370546][ C0] ? nmi_handle+0x14f/0x5a0 [ 445.370560][ C0] ? nmi_handle+0x2a/0x5a0 [ 445.370575][ C0] ? stack_depot_save_flags+0x1ac/0x830 [ 445.370591][ C0] ? default_do_nmi+0x63/0x160 [ 445.370607][ C0] ? exc_nmi+0x123/0x1f0 [ 445.370622][ C0] ? end_repeat_nmi+0xf/0x53 [ 445.370644][ C0] ? stack_depot_save_flags+0x1ac/0x830 [ 445.370660][ C0] ? stack_depot_save_flags+0x1ac/0x830 [ 445.370676][ C0] ? stack_depot_save_flags+0x1ac/0x830 [ 445.370692][ C0] [ 445.370697][ C0] [ 445.370706][ C0] kasan_save_track+0x51/0x80 [ 445.370722][ C0] ? kasan_save_track+0x3f/0x80 [ 445.370736][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 445.370751][ C0] ? kmem_cache_alloc_node_noprof+0x16b/0x320 [ 445.370768][ C0] ? __alloc_skb+0x1c3/0x440 [ 445.370783][ C0] ? alloc_skb_with_frags+0xc3/0x770 [ 445.370798][ C0] ? sock_alloc_send_pskb+0x91a/0xa60 [ 445.370814][ C0] ? unix_dgram_sendmsg+0x6d3/0x1f80 [ 445.370832][ C0] ? __sock_sendmsg+0x221/0x270 [ 445.370850][ C0] ? __sys_sendto+0x3a4/0x4f0 [ 445.370863][ C0] ? __x64_sys_sendto+0xde/0x100 [ 445.370877][ C0] ? do_syscall_64+0xf3/0x230 [ 445.370894][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.370938][ C0] __kasan_slab_alloc+0x66/0x80 [ 445.370953][ C0] ? __alloc_skb+0x1c3/0x440 [ 445.370968][ C0] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 445.370989][ C0] __alloc_skb+0x1c3/0x440 [ 445.371008][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 445.371028][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 445.371047][ C0] alloc_skb_with_frags+0xc3/0x770 [ 445.371071][ C0] sock_alloc_send_pskb+0x91a/0xa60 [ 445.371101][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 445.371121][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 445.371141][ C0] unix_dgram_sendmsg+0x6d3/0x1f80 [ 445.371166][ C0] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 445.371189][ C0] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 445.371211][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 445.371235][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 445.371252][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 445.371270][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 445.371287][ C0] __sock_sendmsg+0x221/0x270 [ 445.371307][ C0] __sys_sendto+0x3a4/0x4f0 [ 445.371325][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 445.371372][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 445.371392][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 445.371414][ C0] __x64_sys_sendto+0xde/0x100 [ 445.371431][ C0] do_syscall_64+0xf3/0x230 [ 445.371449][ C0] ? clear_bhb_loop+0x35/0x90 [ 445.371465][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.371484][ C0] RIP: 0033:0x7f9ad519c9b5 [ 445.371497][ C0] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 445.371509][ C0] RSP: 002b:00007fff89595f18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 445.371525][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9ad519c9b5 [ 445.371536][ C0] RDX: 0000000000000050 RSI: 0000556314c49230 RDI: 0000000000000003 [ 445.371546][ C0] RBP: 0000556314c42910 R08: 0000000000000000 R09: 0000000000000000 [ 445.371556][ C0] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 445.371566][ C0] R13: 00007f9ad532a212 R14: 00007fff89596018 R15: 0000000000000000 [ 445.371585][ C0] [ 445.388056][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 445.388075][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 445.388097][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 445.388107][ T30] Call Trace: [ 445.388114][ T30] [ 445.388122][ T30] dump_stack_lvl+0x241/0x360 [ 445.388153][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.388176][ T30] ? __pfx__printk+0x10/0x10 [ 445.388195][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 445.388223][ T30] ? vscnprintf+0x5d/0x90 [ 445.388243][ T30] panic+0x349/0x860 [ 445.388265][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 445.388284][ T30] ? __pfx_panic+0x10/0x10 [ 445.388302][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 445.388321][ T30] ? __irq_work_queue_local+0x137/0x410 [ 445.388344][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 445.388362][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 445.388379][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 445.388399][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 445.388421][ T30] watchdog+0x102d/0x1030 [ 445.388445][ T30] ? watchdog+0x1ea/0x1030 [ 445.388470][ T30] ? __pfx_watchdog+0x10/0x10 [ 445.388491][ T30] kthread+0x2f0/0x390 [ 445.388513][ T30] ? __pfx_watchdog+0x10/0x10 [ 445.388533][ T30] ? __pfx_kthread+0x10/0x10 [ 445.388555][ T30] ret_from_fork+0x4b/0x80 [ 445.388577][ T30] ? __pfx_kthread+0x10/0x10 [ 445.388600][ T30] ret_from_fork_asm+0x1a/0x30 [ 445.388632][ T30] [ 445.391982][ T30] Kernel Offset: disabled [ 446.027348][ T30] Rebooting in 86400 seconds..