last executing test programs: 7.580993404s ago: executing program 0 (id=229): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd=r0, 0x5749d4c5, 0x6, 0x5, 0x4, 0x0, {0x1}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.411034806s ago: executing program 1 (id=246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x5}]}}]}, 0x3c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.173036419s ago: executing program 0 (id=247): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x21c, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x1dc, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x1b0, 0x9, 0x0, 0x1, [@m_mpls={0x108, 0x1e, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x0, 0xffffffffffffffff, 0xfffffffb, 0x8}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}]}, {0xad, 0x6, "38a86b2ea57c2ab9fc6990b590e2cf10b4525acddaa1a21554b3536689e103f92b2b35d2340847a99750261d33b226164f17bc0e5e17b66b648a19530fd437c23b32848120ccc8079c0d909366fa5c7c6e0772fffd9471a08bf86ffeeb3ef13d084c83ed13433f29d53d9b8409105aba551cdd294c04e6c19f9e1db7d4d3ea87db657398cb522b988f05fe8b7fce9e3ec4fd4dfd000eb1a441abc984bc7b225f2fdfbcde1f80644cae"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0xa4, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x7, 0x6, 0x6, 0x4}, @multicast2, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x3, 0x5, 0xff}, @remote, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x3, 0x5, 0x5}, @empty, @multicast1, 0xff000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x441d}]}, 0x21c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 839.464406ms ago: executing program 1 (id=248): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) 839.000716ms ago: executing program 0 (id=249): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x6, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000280)={0x3fe, 0x1000}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 720.980452ms ago: executing program 1 (id=250): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\x86\xd7\xb5r\x03z\xf5\xe42\xad\xed\x122\x9db}\xd1\xff\xff\xff\x812\xd4\xef\xcd.\x8b\xf4\xa71iQA\x8d5\x8d\xaf\xe1\xd8\xae-\n\x95\x98\x96\xe8\x0e^\x80S\x9a\xca\xbf\x0e4C\'~_\xd0X\xb9\x94[\xf5,\xe0\xcd\x89\x1c\t\xd0\xf2\xfb\xf8\xfbe\xb2\r\xeeI\x86\xca\xd0k\xb0\x1b\xe96\xedpm\xcc\xdc\x91\xb9\xbft\xfb\x98\xe2\x02!\xfeq\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009\xf7\x81\xf4\xa9j\xc9\xbb\xf8\xf2K\"\x86\xf5h\xf5;\xd2\xaf\x9b\xea\xef-\xd7\xd6\xfa\x97-*\\\x98bE\r\xdc\x89\xd8&\x91\x1c+\x15\x89\xd7\xa7ceT\xea`5\xf9\x88\n \xdcA\xa6\x10\x93\"\xa4Y\x84\xee\xb2\xf9\xa9\x80uf\xab\xb3\xd1\x10i\x94x\x0f\xee\x94j2\xf9\x9ah\xf3b\x19P4\\\xad\xbaX]\xbc\xbbTA\x17d\a\x8fa\xe0\xc3K\x959'}], 0xa, "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"}, 0x211) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 550.285561ms ago: executing program 1 (id=251): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x4000000, @remote, 0x2}, 0x1c) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 549.893881ms ago: executing program 0 (id=252): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000, 0x4, &(0x7f0000006680)) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 344.630192ms ago: executing program 1 (id=253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="034888a80100000000001400000060e1fd"], 0xfdef) 161.277651ms ago: executing program 0 (id=254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="d2cf4071eedf8b7b757a8a7286590f3b2b73e4d6501d0dcc9ade7118283ba63b6a59c5d5b4171e791290e0ed52580ccb12807717e072cf88cfb3c53a48a6dbff03000000000000c3540370d05aadfd82ee3d47b93dc852cea8715c826bf5c6b35e41f12c3e8347784e01e2e8666080b9d0f0461cc15d5724ba4ac41a7de92272a0c00dd240c18e9a6b2e", 0x8a}, {&(0x7f0000002440)="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", 0x1b7}], 0x2}}], 0x1, 0x4002000) r1 = dup(r0) shutdown(r1, 0x1) 395.59µs ago: executing program 1 (id=255): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) 0s ago: executing program 0 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000020000003400128009000100626f6e640000000024000280080003000400040005000600000000000b000f00ffff"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:48414' (ED25519) to the list of known hosts. syzkaller login: [ 124.217521][ T3305] cgroup: Unknown subsys name 'net' [ 124.503324][ T3305] cgroup: Unknown subsys name 'cpuset' [ 124.529494][ T3305] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 125.058749][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 139.043842][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.140360][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.249036][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.381934][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.993838][ T3310] hsr_slave_0: entered promiscuous mode [ 141.000548][ T3310] hsr_slave_1: entered promiscuous mode [ 141.227966][ T3311] hsr_slave_0: entered promiscuous mode [ 141.238063][ T3311] hsr_slave_1: entered promiscuous mode [ 141.247570][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 141.248537][ T3311] Cannot create hsr debugfs directory [ 142.664112][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.705593][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.791091][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.856160][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.048488][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 143.089880][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.113617][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 143.132865][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 144.514334][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.765931][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.780194][ T3310] veth0_vlan: entered promiscuous mode [ 149.861692][ T3310] veth1_vlan: entered promiscuous mode [ 150.147069][ T3311] veth0_vlan: entered promiscuous mode [ 150.228229][ T3311] veth1_vlan: entered promiscuous mode [ 150.249313][ T3310] veth0_macvtap: entered promiscuous mode [ 150.288815][ T3310] veth1_macvtap: entered promiscuous mode [ 150.542804][ T3311] veth0_macvtap: entered promiscuous mode [ 150.601880][ T3311] veth1_macvtap: entered promiscuous mode [ 150.666934][ T1723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.668207][ T1723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.668583][ T1723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.668915][ T1723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.140500][ T1138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.141204][ T1138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.141588][ T1138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.141938][ T1138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.319674][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 152.480188][ T3464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.490045][ T3464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.393133][ T3474] mmap: syz.1.4 (3474) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 167.250369][ T3499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13'. [ 180.707363][ T3533] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.24'. [ 181.489964][ T3540] Illegal XDP return value 4294967274 on prog (id 1) dev syz_tun, expect packet loss! [ 211.091093][ T3607] binder: 3606:3607 tried to acquire reference to desc 0, got 1 instead [ 211.111847][ T3607] binder: 3606:3607 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 211.118174][ T3607] binder: 3607 RLIMIT_NICE not set [ 211.138751][ T11] binder: undelivered TRANSACTION_COMPLETE [ 211.139389][ T11] binder: undelivered TRANSACTION_COMPLETE [ 211.165685][ T11] binder: undelivered transaction 6, process died. [ 228.183890][ T3632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 229.561763][ T3632] bond_slave_0: entered promiscuous mode [ 229.562994][ T3632] bond_slave_1: entered promiscuous mode [ 229.585619][ T3632] macvtap1: entered promiscuous mode [ 229.588752][ T3632] bond0: entered promiscuous mode [ 229.618737][ T3632] macvtap1: entered allmulticast mode [ 229.627310][ T3632] bond0: entered allmulticast mode [ 229.641712][ T3632] bond_slave_0: entered allmulticast mode [ 229.646427][ T3632] bond_slave_1: entered allmulticast mode [ 229.678993][ T3632] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 229.766181][ T3635] bond0: left allmulticast mode [ 229.769809][ T3635] bond_slave_0: left allmulticast mode [ 229.784549][ T3635] bond_slave_1: left allmulticast mode [ 229.790388][ T3635] bond0: left promiscuous mode [ 229.815177][ T3635] bond_slave_0: left promiscuous mode [ 229.815785][ T3635] bond_slave_1: left promiscuous mode [ 238.206419][ T3621] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 238.213781][ T3621] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 238.223127][ T3621] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 238.726221][ T3621] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 265.409392][ T3731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.410910][ T3731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.008591][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 279.587775][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 279.961277][ T9] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 279.965986][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.972069][ T9] usb 1-1: Product: syz [ 279.977331][ T9] usb 1-1: Manufacturer: syz [ 279.982064][ T9] usb 1-1: SerialNumber: syz [ 280.007928][ T9] usb 1-1: config 0 descriptor?? [ 287.308829][ T3801] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 288.161294][ T3457] usb 1-1: USB disconnect, device number 2 [ 290.986830][ T3817] geneve2: entered promiscuous mode [ 294.923482][ T3821] geneve2: entered promiscuous mode [ 301.009414][ T3834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.045232][ T3834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.815855][ T3838] syz_tun: entered allmulticast mode [ 301.857773][ T3838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 301.961138][ T3838] syz_tun (unregistering): left allmulticast mode [ 308.763154][ T3621] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 308.923097][ T3621] usb 1-1: Using ep0 maxpacket: 32 [ 309.000375][ T3621] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 309.000820][ T3621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.003936][ T3621] usb 1-1: Product: syz [ 309.004147][ T3621] usb 1-1: Manufacturer: syz [ 309.004337][ T3621] usb 1-1: SerialNumber: syz [ 309.282704][ T3621] usb 1-1: palm_os_4_probe - error -71 getting connection info [ 309.283800][ T3621] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 309.326507][ T3621] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 309.408335][ T3621] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 309.494041][ T3621] usb 1-1: USB disconnect, device number 3 [ 309.563808][ T3621] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 309.640205][ T3621] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 309.666194][ T3621] visor 1-1:1.0: device disconnected [ 315.356315][ T3872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.357934][ T3872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.992999][ T3422] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 356.233349][ T3422] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 356.236521][ T3422] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 356.242948][ T3422] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 356.245561][ T3422] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 356.251094][ T3422] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 356.302898][ T3422] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 356.305533][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 356.311791][ T3422] usb 1-1: Product: syz [ 356.314919][ T3422] usb 1-1: Manufacturer: syz [ 356.442954][ T3422] cdc_wdm 1-1:1.0: skipping garbage [ 356.445942][ T3422] cdc_wdm 1-1:1.0: skipping garbage [ 356.476100][ T3422] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 364.651423][ T3980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.684946][ T3980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.451795][ T3989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.460958][ T3989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.019246][ T3993] smc: net device bond0 applied user defined pnetid SYZ2 [ 370.731755][ T39] usb 1-1: USB disconnect, device number 4 [ 371.397506][ T4003] syz.0.159 uses obsolete (PF_INET,SOCK_PACKET) [ 372.396341][ T4010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 372.516051][ T4010] bond0: (slave bond_slave_1): Releasing backup interface [ 372.993342][ T11] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 373.164223][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 373.225194][ T11] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 373.225880][ T11] usb 1-1: config 0 has no interface number 0 [ 373.226499][ T11] usb 1-1: config 0 interface 184 has no altsetting 0 [ 373.300853][ T11] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 373.301421][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.303541][ T11] usb 1-1: Product: syz [ 373.303775][ T11] usb 1-1: Manufacturer: syz [ 373.303958][ T11] usb 1-1: SerialNumber: syz [ 373.337420][ T11] usb 1-1: config 0 descriptor?? [ 373.369402][ T11] smsc75xx v1.0.0 [ 375.060916][ T11] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 375.061702][ T11] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 375.073757][ T11] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 375.074389][ T11] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 375.074771][ T11] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 375.075049][ T11] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 375.076430][ T11] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 375.155560][ T11] usb 1-1: USB disconnect, device number 5 [ 378.326392][ T4032] netlink: 'syz.0.170': attribute type 10 has an invalid length. [ 395.173527][ T896] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 395.354171][ T896] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 395.354457][ T896] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 395.359111][ T896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 395.359538][ T896] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 395.359685][ T896] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 395.425883][ T896] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 395.426398][ T896] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 395.426885][ T896] usb 1-1: Product: syz [ 395.427125][ T896] usb 1-1: Manufacturer: syz [ 395.503592][ T896] cdc_wdm 1-1:1.0: skipping garbage [ 395.504031][ T896] cdc_wdm 1-1:1.0: skipping garbage [ 395.514097][ T896] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 400.639969][ T4058] netlink: 'syz.1.178': attribute type 2 has an invalid length. [ 406.557883][ T4068] netlink: 180 bytes leftover after parsing attributes in process `syz.1.181'. [ 409.903907][ T4076] block device autoloading is deprecated and will be removed. [ 411.113347][ T3422] usb 1-1: USB disconnect, device number 6 [ 413.824787][ T4084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 428.068006][ T4112] syzkaller1: entered promiscuous mode [ 428.070798][ T4112] syzkaller1: entered allmulticast mode [ 434.750948][ T4133] netlink: 80 bytes leftover after parsing attributes in process `syz.0.200'. [ 438.289236][ T30] audit: type=1326 audit(438.020:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4143 comm="syz.1.204" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95af28 code=0x7ffc0000 [ 438.297451][ T30] audit: type=1326 audit(438.030:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4143 comm="syz.1.204" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95af28 code=0x7ffc0000 [ 438.336853][ T4144] capability: warning: `syz.1.204' uses 32-bit capabilities (legacy support in use) [ 438.341008][ T30] audit: type=1326 audit(438.080:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4143 comm="syz.1.204" exe="/syz-executor" sig=0 arch=c00000b7 syscall=90 compat=0 ip=0xffff9c95af28 code=0x7ffc0000 [ 438.379931][ T30] audit: type=1326 audit(438.110:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4143 comm="syz.1.204" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c95af28 code=0x7ffc0000 [ 449.984518][ T4162] capability: warning: `syz.1.208' uses deprecated v2 capabilities in a way that may be insecure [ 464.554013][ T4193] netlink: 96 bytes leftover after parsing attributes in process `syz.0.217'. [ 465.243575][ T3422] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 465.445888][ T3422] usb 1-1: Using ep0 maxpacket: 8 [ 465.533791][ T3422] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 465.538898][ T3422] usb 1-1: config 0 has no interface number 0 [ 465.558357][ T3422] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 465.565184][ T3422] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 465.571934][ T3422] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 62, changing to 9 [ 465.581534][ T3422] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 42665, setting to 1024 [ 465.591817][ T3422] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 465.603216][ T3422] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 465.608765][ T3422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.647340][ T3422] usb 1-1: config 0 descriptor?? [ 465.709683][ T4198] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 465.790220][ T3422] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 468.209383][ T3399] usb 1-1: USB disconnect, device number 7 [ 468.249505][ T3399] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 487.274970][ T4245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.277754][ T4245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.536080][ T4251] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 488.536080][ T4251] The task syz.1.231 (4251) triggered the difference, watch for misbehavior. [ 491.984536][ T4273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.986886][ T4273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.144428][ T4276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.146318][ T4276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.162692][ T4276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.166439][ T4276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.567272][ T4279] loop9: detected capacity change from 0 to 7 [ 493.148029][ T4283] syzkaller0: entered promiscuous mode [ 493.148714][ T4283] syzkaller0: entered allmulticast mode [ 493.583902][ T4292] loop8: detected capacity change from 0 to 8 [ 493.821309][ T4296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.835098][ T4296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.362988][ T4304] netlink: 'syz.0.256': attribute type 15 has an invalid length. [ 494.368073][ T4304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 494.375517][ T4304] bond0: option resend_igmp: invalid value (65535) [ 494.376221][ T4304] bond0: option resend_igmp: allowed values 0 - 255 [ 494.381041][ T3938] ------------[ cut here ]------------ [ 494.381623][ T3938] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 494.383558][ T3938] WARNING: CPU: 1 PID: 3938 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0xa0/0xa8 [ 494.394606][ T3938] Modules linked in: [ 494.398341][ T3938] CPU: 1 UID: 0 PID: 3938 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT [ 494.400240][ T3938] Hardware name: linux,dummy-virt (DT) [ 494.401252][ T3938] Workqueue: bond0 bond_mii_monitor [ 494.402426][ T3938] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 494.403467][ T3938] pc : __linkwatch_sync_dev+0xa0/0xa8 [ 494.404092][ T3938] lr : __linkwatch_sync_dev+0xa0/0xa8 [ 494.404689][ T3938] sp : ffff80008a7c3c60 [ 494.405230][ T3938] x29: ffff80008a7c3c60 x28: 0000000000000003 x27: 0000000000000001 [ 494.406574][ T3938] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000006667 [ 494.407665][ T3938] x23: f3f000000aed8d70 x22: 00000000ffffffff x21: 0000000000000000 [ 494.408686][ T3938] x20: 0000000000000000 x19: f9f000000ae73000 x18: 00000000ffffffff [ 494.409701][ T3938] x17: 0000000000000000 x16: 0000000000000000 x15: ffff80008a7c3860 [ 494.410773][ T3938] x14: 00000000ffffffea x13: ffff80008a7c3928 x12: ffff8000829ef250 [ 494.411782][ T3938] x11: 0000000000000001 x10: 0000000000000001 x9 : 000000000002ffe8 [ 494.413076][ T3938] x8 : ffffffffffffffff x7 : ffff800082913bb8 x6 : 0000000000000002 [ 494.414034][ T3938] x5 : ffff800082913000 x4 : 0000000000000002 x3 : 0000000000000001 [ 494.415186][ T3938] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f0f000000af53780 [ 494.416299][ T3938] Call trace: [ 494.417095][ T3938] __linkwatch_sync_dev+0xa0/0xa8 (P) [ 494.418178][ T3938] ethtool_op_get_link+0x18/0x34 [ 494.418978][ T3938] bond_check_dev_link+0x128/0x1cc [ 494.419728][ T3938] bond_mii_monitor+0x110/0x91c [ 494.420358][ T3938] process_one_work+0x178/0x2cc [ 494.420990][ T3938] worker_thread+0x250/0x358 [ 494.421674][ T3938] kthread+0x130/0x1fc [ 494.422397][ T3938] ret_from_fork+0x10/0x20 [ 494.423367][ T3938] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 495.080815][ T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.174436][ T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.290618][ T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.400302][ T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.528860][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.561958][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.614250][ T55] bond0 (unregistering): Released all slaves [ 496.906044][ T55] hsr_slave_0: left promiscuous mode [ 496.917833][ T55] hsr_slave_1: left promiscuous mode [ 496.960701][ T55] veth1_macvtap: left promiscuous mode [ 496.961380][ T55] veth0_macvtap: left promiscuous mode [ 496.962865][ T55] veth1_vlan: left promiscuous mode [ 496.966709][ T55] veth0_vlan: left promiscuous mode [ 498.641537][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.760049][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.850930][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.970443][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.131744][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.176360][ T55] bond0 (unregistering): Released all slaves [ 500.340078][ T55] hsr_slave_0: left promiscuous mode [ 500.364663][ T55] hsr_slave_1: left promiscuous mode [ 500.424503][ T55] veth1_macvtap: left promiscuous mode [ 500.436330][ T55] veth0_macvtap: left promiscuous mode [ 500.439803][ T55] veth1_vlan: left promiscuous mode [ 500.446924][ T55] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 09:44:48 Registers: info registers vcpu 0 CPU#0 PC=ffff800081b12d14 X00=ffff800081b12d10 X01=ffff80008140cc28 X02=000000000015c2dd X03=000000000015c2dd X04=00000000000000f3 X05=00000000200072ac X06=0000000000100000 X07=0000004100000000 X08=0000000000000000 X09=fff000007f8d4a00 X10=f7f000000655ac00 X11=0000002cdcaa4b3a X12=0000000000000001 X13=0000000000000000 X14=f7f000000655ac00 X15=ffff800081b63bd0 X16=ffff800080000000 X17=fff07ffffcfe1000 X18=0000000000000000 X19=ffff800082c13c40 X20=0000007304b1cc00 X21=0000000000017d1e X22=fff000007f8d5348 X23=0000000000000001 X24=ffff800082914680 X25=f5f00000064f86b0 X26=0000000000000000 X27=fff000007f8d4980 X28=f5f00000064f8000 X29=ffff800088dbbab0 X30=ffff80008140cc40 SP=ffff800088dbbab0 PSTATE=604020c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2525252525252525:2525252525252525 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:65642f000a732520:7325207334362e25 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:65776f6c6c61203a:706d67695f646e65 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000ff0000ff00:00ff0000000000ff Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000f00f00f00000f Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:65776f6c6c61203a:706d67695f646e65 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:207265766f746665:6c20736574796220 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:746120676e697372:6170207265746661 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffde19db70:0000ffffde19db70 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffde19db40 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081b0a674 X00=ffff8000826711a5 X01=0000000000000405 X02=ffff80008a7c35c0 X03=0000000000000000 X04=0000000000000000 X05=ffff800082090eb8 X06=ffff80008a7c36e8 X07=00000000ffffffff X08=ffff80008a7c3880 X09=0000000000000f62 X10=0000000000000001 X11=0000000000000001 X12=ffff8000829ef250 X13=ffff80008a7c36f3 X14=ffff80008a7c36e8 X15=ffff80008a7c3520 X16=0000000000000000 X17=0000000000000000 X18=00000000ffffffff X19=0000000000000005 X20=0000000000000405 X21=ffff8000826711a5 X22=ffff80008a7c36e8 X23=0000000000000004 X24=ffff80008a7c3880 X25=0000000000000000 X26=0000000000000008 X27=ffff80008a7c3717 X28=ffff8000826711a3 X29=ffff80008a7c3540 X30=ffff800081b0a598 SP=ffff80008a7c3540 PSTATE=624023c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2323232323232323:2323232323232323 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000030 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:c00cc00cc00cc00c:c00cc00cc00cc000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3003300330033003:3003300330033003 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:f00ff00ff00ff00f:f00ff00ff00ff00f Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ccccccccccccccc0:ccccccccccccccc0 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffff9cb56478:0000ffff9cb56470 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffc6fcb810:0000ffffc6fcb810 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffc6fcb7e0 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000