last executing test programs: 21.851752812s ago: executing program 3 (id=2641): r0 = syz_usb_connect(0x0, 0x4d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000735aca105e042107c4900102030109023b00010000000009040000000e010000052406000105240300000d240f0100000000000000000006"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffff7f39, 0x400) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000040)=0xc) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 19.769583297s ago: executing program 3 (id=2652): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r0, 0x0, 0x0, 0x0) unshare(0x6020400) ppoll(&(0x7f0000000000)=[{}], 0x46, 0x0, 0x0, 0x0) 19.590989526s ago: executing program 3 (id=2653): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400980, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x8000, 0xd, 0x3294, r0, 0x9, '\x00', r3, r4, 0x1, 0x1, 0x5}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={r5, &(0x7f0000000080), 0x0}, 0x20) 18.626293529s ago: executing program 3 (id=2657): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084000000000000000002000000000000000000000000000004"], 0x0, 0x3e, 0x0, 0x1}, 0x20) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)={[{@nr_inodes={'nr_inodes', 0x2c}}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) wait4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, &(0x7f0000000340)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000240)="b9ad020000b805000000ba000000000f30c4c1f56b03b8003000000f23d80f21f835c00000100f23f89a0b00000005013e0f01cbb9b00100000f320f63650966baf80cb8e86e868fef66bafc0cb8c67512e7ef670f01c3663e660fc7b4390d000000", 0x62}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8000, &(0x7f0000000280)={0x7}, 0x20) ioctl$KVM_RUN(r5, 0xae80, 0x0) 17.443977961s ago: executing program 3 (id=2659): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x4c}}, 0x0) 14.870490109s ago: executing program 3 (id=2668): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x27, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x0, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private, @rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.430252254s ago: executing program 1 (id=2683): socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019440)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) pipe2$9p(&(0x7f0000000240), 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x5421, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6c5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x48) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/66, 0x0, 0x4000}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x4000000) r2 = dup(r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) connect$vsock_stream(r4, &(0x7f0000000140), 0x10) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='ext2\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000280)) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='caif0\x00', 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'caif0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000200)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x37}, r6}, 0xc) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1c, 0x20000048, 0x0) dup(0xffffffffffffffff) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) 10.060919274s ago: executing program 1 (id=2685): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc1004110, &(0x7f0000000040)={0x0, "8dd2356a9ebb85c49090d8e7251a8f47261a8f4797bf8ba7ff669b27d2af3ae0d402a46e4e967621c2c9fd4f42a31536849f6717859f6717c7862a799260eda3"}) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {'\x00', "00000000100000000000000000000001"}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r0, 0x2f, 0x0, 0x0, @prog_fd}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r0, r2, 0x2f, 0x18, 0x4, @link_id}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000040000000000000000071120c0000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) listen(r5, 0x9) 8.948083401s ago: executing program 0 (id=2687): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$packet(0x11, 0x3, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r0, 0x0, 0x0, 0x0) unshare(0x6020400) ppoll(&(0x7f0000000000)=[{}], 0x46, 0x0, 0x0, 0x0) 8.594117939s ago: executing program 0 (id=2689): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc1004110, &(0x7f0000000040)={0x0, "8dd2356a9ebb85c49090d8e7251a8f47261a8f4797bf8ba7ff669b27d2af3ae0d402a46e4e967621c2c9fd4f42a31536849f6717859f6717c7862a799260eda3"}) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {'\x00', "00000000100000000000000000000001"}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r0, 0x2f, 0x0, 0x0, @prog_fd}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r0, r2, 0x2f, 0x18, 0x4, @link_id}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) listen(r5, 0x9) 8.429765722s ago: executing program 1 (id=2690): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv_slave_1\x00', 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x404800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001600010a000000000000000000000000f0"], 0x78}}, 0x0) syz_emit_ethernet(0x124, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000071120b000000000095d34525159870b973c326553369e697df9d00e383cea246f6a4cf"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x81040, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020805060e00000027bd7000fedbdf25050019000000000002004e207f000001000000000000000002084e21000000000000000000000000070019000000000002004e246401010400000000000000000a004e2180000000ff0100000000000000000000000000015400000000000000"], 0x70}}, 0x14) lseek(0xffffffffffffffff, 0x0, 0x4) 5.794656983s ago: executing program 1 (id=2694): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x0, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr, @multicast1]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) 5.686397986s ago: executing program 4 (id=2695): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x1, 0x2000000000903, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_tables_names\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000140)=""/220, 0xdc}], 0x1, 0xa1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @dev}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000400)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000290000000400"], 0x98}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000140)=[{r2, 0x3208}, {r3, 0x8000}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000040)="a6", 0x100b20, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{}, "3f968a231afa0e18", "4a952e4ea416ad75f769d6386c3c044b", '\by\x00', "e4eb37b07ad86ed7"}, 0x28) 5.430672065s ago: executing program 0 (id=2697): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0xff) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @fastopen={0x22, 0x6, "c213e99d"}]}}}}}}}}, 0x0) (fail_nth: 4) 5.340821914s ago: executing program 4 (id=2698): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$packet(0x11, 0x3, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r0, 0x0, 0x0, 0x0) unshare(0x6020400) ppoll(&(0x7f0000000000)=[{}], 0x46, 0x0, 0x0, 0x0) 4.742484766s ago: executing program 4 (id=2700): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="1a", 0x1) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000000)) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, &(0x7f0000000200)={0x40, 0x0, 0xe6, {0xe6, 0xe, "691253db01120e2fe4404604e2199a9bf906a1c4f12689e4e01d05192e7739350a67d4898f1d679a54a5ad632c2bdc4c9e4b90d6018f6349d27a873f347d6d4b7dc7e1e2f4765e18fae97ccbce6cfe6b506df87d15c27ec6b1cbd9109c332beaa614b00dd9ecf2ae0fd5f6291d2b5c4918c08c16b8cd806bc0f0fcf9419a8561c04b87f2565e719e30b878172ce8648d83d16e07a918412981271f364641ac37657753d35f0a0d12bdade7be137895238cb2340715a64688b00ff4dc7cdf554d934b4fff65e008e723fa2f13cbf3b9a7e3f3efdfe6c8cb22935e8545d5be2b8b19594709"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000140)={0x0, 0x3b, 0x4c, "55d7f6666c051b7be3983d12bff89e8868bb62c931b42786055f37907d55f22bc37e1a91299237dc9fc798555273738719f6db798171c757db83cd5e070f5677677584d4751cc99eb2512e3a"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x99, 0x7a, 0xa9, 0x0, 0x25c6, 0x9002, 0x62ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x40, 0x9f, 0xe1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000"], 0x0}, 0x0) syz_open_procfs(0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000001300)="92", 0x2) syz_open_procfs$pagemap(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESC(r4, 0x4008c002, 0x0) 4.62928061s ago: executing program 1 (id=2701): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x6a, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x3, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0xdf, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1000, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0xc95, 0x6, 0x4c, 0x0, 0x200, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x8001, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x2, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x2, 0x81}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x4, 0x0, 0xeb, 0x40, 0x9}, 0x113, &(0x7f0000000100)={0x5, 0xf, 0x113, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x7, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x81, 0x8, 0x7ff, 0x4}, @generic={0xfc, 0x10, 0xa, "a2513327a7de0a81fa6015339a1a3269acd3864813439bff521a08c3b1edf35b92dfbce3f10c18dde7aa9518340ecd1ccfdb9a931fd1b98ae932f74134c05c5b128b020a8bfd13accabb75f1f48d2de6b9ea11a4ae168bd15c6df744fb96cb678c816caa640a08703d3c2414edeb2daf6601e8f37e07745c72d1adb4cba4b710a96cc55f6f302b6858663958df016a9dded8341dfa9159b2551315468e45e9bc357c3199a500eac296c6e92ab794ec3fb58ed670e3c2ea35588b3be8b4e9585c1fb91fd59dfe5ee5e97bf45209e62d32738d6f32c6aa7f35e05fc60add0151ff3a2d7a304dc4f60c4afce92fd9169dc73442f89f4282ccb24c"}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x340a}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x98, 0x0, &(0x7f00000005c0)=[@acquire_done, @release, @exit_looper, @increfs={0x40046304, 0x2}, @acquire_done, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/38, 0x26, 0x1, 0x3c}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/9, 0x9}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f0000000380)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2081, 0x191) open_by_handle_at(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x10000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) syz_usb_connect(0x2, 0x10b, &(0x7f0000001c00)=ANY=[@ANYBLOB="12010000df21f5083c41d18193fb010203010902f900010000000009040000042088f4000905000240000000000905831008003f06000725010002e58909050a104000000000b700ea6b2651e69a0f528840bec2959d"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x20000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x5, 0x0) r4 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000000f80)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9bMQ9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x4c}}, 0x0) 4.154104058s ago: executing program 0 (id=2704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3.910201643s ago: executing program 0 (id=2705): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x20, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) 2.682088417s ago: executing program 2 (id=2707): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x1, 0x2000000000903, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_tables_names\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000140)=""/220, 0xdc}], 0x1, 0xa1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @dev}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000400)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000290000000400"], 0x98}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000140)=[{r2, 0x3208}, {r3, 0x8000}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000040)="a6", 0x100b20, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{}, "3f968a231afa0e18", "4a952e4ea416ad75f769d6386c3c044b", '\by\x00', "e4eb37b07ad86ed7"}, 0x28) 2.300455755s ago: executing program 2 (id=2708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e5042dfcb31a3677"}}, 0x48}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x880, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "e34625d41f6c1f236a0586254d6b61cb7aea3d6e409c99992121dd08e1a1382000e47e0ef5f0965fe4a92c358e5306583cf579e0acc10591d1c893f84f3f3431"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000080)={&(0x7f0000000240)={0x7, 0x8a0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "7a0e53121b36ffffdcc38108abe326b9723cf3a8da92e39900c4ef5ae7280e3e4442f1ca26cabd8082431c77bfcdbaee9b16a39b1d5bbf2924fc817277ed0bb6"}}, 0x80}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003d40)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x21ae, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x38, r9, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) 2.010115093s ago: executing program 4 (id=2709): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r1, 0x0, 0x0, 0x0) unshare(0x6020400) ppoll(&(0x7f0000000000)=[{}], 0x46, 0x0, 0x0, 0x0) 1.07755652s ago: executing program 4 (id=2710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x0, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr, @multicast1]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) 981.829813ms ago: executing program 1 (id=2711): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000ac0)="ee", 0x1}, {&(0x7f0000000a40)="f493af454b1a0d4e19e07a5e213854ec6b5a6d667596ca524991c04ba88e4a4df199fc0b6909a50d8a8150a985fe8a0f5d149e0a4d76c7c302ce65643d1b75d5be7b990c5a818f25d2d7e621c6b6aca5ff40a4175361be22de3ccfe514cad3a23dd1aa84a921d62a6ddf5b90a3c9ffdc21684cbc752be2", 0x77}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x404bf90) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="03c90081af6462f54ef987d698e163bf8514e0873c9e98d71c54eca9a6bb21732f86d6e39234349fb1806f12baa75a139b16633e8ae3143e542aeba10ee7ec62644226ed65bc4a014e1b423223fc7dcd12d6394e7902a9cec2af5b335e7dd851da31c75586bafa9236dc6aa53b5f33d94fd034272e1e55973bed45987e450f1e152f36a87625863102863ab1e709ccfd764ca5a368042207901eead54727c67fe3a67871ffad18"], 0x85) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x972, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2748, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) semget$private(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='projid_map\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32=r2, @ANYBLOB="000000000220e285b8ce6f1569a3000085000000a50000009500000000000000c9f981f05c3aab2e67787d954ffa5b48a8d11be3fe3f43cfa2914ab99d38d440b9ebb54291ea3b09d9feb498bb4fa881eb270551ef397c51178f4857ceedeb1cc6a6189e076d9656"], &(0x7f0000000300)='GPL\x00', 0x5, 0x1011, &(0x7f00000016c0)=""/4113}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100001700000000000000a54b0000850000007500000095"], 0x0, 0x0, 0xfffffffffffffdcf, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0) close(r5) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x67) 565.282162ms ago: executing program 2 (id=2712): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xdaf6b7f0827df328) r1 = fanotify_init(0x4, 0x0) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) socket(0x1e, 0x5, 0x415) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xdaf6b7f0827df328) (async) fanotify_init(0x4, 0x0) (async) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) (async) socket(0x1e, 0x5, 0x415) (async) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) read$FUSE(r2, 0x0, 0x0) (async) 437.312027ms ago: executing program 2 (id=2713): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x4c}}, 0x0) 310.345982ms ago: executing program 2 (id=2714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 305.60815ms ago: executing program 4 (id=2715): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/141, 0x8d}], 0x1, 0x10002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x8847, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x17, 0x15, 0x1}, 0x18}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010b40401000000000000010902ec1b3de34da327ac988653c7aa8224000100000000090400000103000000092100000001220500090581030000000000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "a5247d20"}]}}, 0x0}, 0x0) 0s ago: executing program 2 (id=2716): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc1004110, &(0x7f0000000040)={0x0, "8dd2356a9ebb85c49090d8e7251a8f47261a8f4797bf8ba7ff669b27d2af3ae0d402a46e4e967621c2c9fd4f42a31536849f6717859f6717c7862a799260eda3"}) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {'\x00', "00000000100000000000000000000001"}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r0, 0x2f, 0x0, 0x0, @prog_fd}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000040000000000000000071120c0000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) listen(r5, 0x9) kernel console output (not intermixed with test programs): : type=1326 audit(1721861310.082:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12848 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9cd75f19 code=0x7fc00000 [ 683.050138][T12845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.085859][ T29] audit: type=1326 audit(1721861310.082:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12848 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9cd75f19 code=0x7fc00000 [ 683.107206][T12852] chnl_net:caif_netlink_parms(): no params data found [ 683.122305][ T29] audit: type=1326 audit(1721861310.082:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12848 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9cd75f19 code=0x7fc00000 [ 683.159208][ T4872] gspca_stv06xx: I2C: Read error writing address: -71 [ 683.180216][ T4872] usb 3-1: USB disconnect, device number 91 [ 683.347577][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2243'. [ 683.465472][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2243'. [ 683.589406][T12877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2241'. [ 683.610656][T12852] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.637443][T12852] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.669325][T12852] bridge_slave_0: entered allmulticast mode [ 683.696800][T12852] bridge_slave_0: entered promiscuous mode [ 683.717304][T12852] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.744579][T12852] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.770169][T12852] bridge_slave_1: entered allmulticast mode [ 683.788213][T12852] bridge_slave_1: entered promiscuous mode [ 683.806814][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'. [ 684.086120][T12852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.177069][T12852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.284509][ T54] Bluetooth: hci6: command tx timeout [ 684.380667][T12852] team0: Port device team_slave_0 added [ 684.407587][T12901] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2250'. [ 684.437592][T12852] team0: Port device team_slave_1 added [ 684.570189][T12852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.587407][T12852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.587596][ T54] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 684.684182][T12852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.802234][T12852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.823324][T12852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.901017][T12852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.033136][T12852] hsr_slave_0: entered promiscuous mode [ 685.054117][T12852] hsr_slave_1: entered promiscuous mode [ 685.064609][T12852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.082247][T12852] Cannot create hsr debugfs directory [ 685.092151][T12924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2257'. [ 685.104500][ T5142] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 685.296299][ T5142] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 685.323376][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.349651][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2259'. [ 685.381711][ T5142] usb 5-1: config 0 descriptor?? [ 685.399269][ T5142] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 685.488884][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2259'. [ 685.922302][T12852] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.113600][T12852] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.129631][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.136206][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.199680][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2261'. [ 686.296097][T12852] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.364437][ T54] Bluetooth: hci6: command tx timeout [ 686.420471][T12852] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.627155][T12917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.685181][T12917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.726540][T12917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.785732][T12917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.815819][ T5142] gspca_stv06xx: I2C: Read error writing address: -71 [ 686.831396][T12852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 686.848173][ T5142] usb 5-1: USB disconnect, device number 98 [ 686.854555][T12852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 686.882695][T12852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 686.924075][T12852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 687.064521][T12128] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 687.213751][T12852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.264790][T12128] usb 2-1: Using ep0 maxpacket: 8 [ 687.283638][T12128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 687.288854][T12852] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.304429][T12128] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 687.308591][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 687.325721][T12128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.346763][T12128] usb 2-1: config 0 descriptor?? [ 687.377571][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.384964][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.426682][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.434705][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.542161][T12852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 687.574939][T12852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 687.624884][T12128] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 687.889031][T12964] loop0: detected capacity change from 0 to 7 [ 687.910569][T12964] Dev loop0: unable to read RDB block 7 [ 687.940465][T12964] loop0: unable to read partition table [ 687.958705][T12964] loop0: partition table beyond EOD, truncated [ 687.972434][T12852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.990116][T12964] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 687.990116][T12964] ) failed (rc=-5) [ 688.196273][T12852] veth0_vlan: entered promiscuous mode [ 688.226411][T12966] binder: 12965:12966 ioctl c0306201 0 returned -14 [ 688.252522][T12852] veth1_vlan: entered promiscuous mode [ 688.270758][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2271'. [ 688.436483][T12852] veth0_macvtap: entered promiscuous mode [ 688.454673][ T54] Bluetooth: hci6: command tx timeout [ 688.497566][T12852] veth1_macvtap: entered promiscuous mode [ 688.601655][ T5144] usb 2-1: USB disconnect, device number 90 [ 688.632283][ T5144] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 688.672013][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.724651][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.741948][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.753326][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.794048][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.833903][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.854334][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.884383][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.894520][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.913697][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.934394][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.955290][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.976026][T12852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.991616][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.026636][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.054759][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.074384][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.090519][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.106640][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.136026][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.158635][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.186870][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.217892][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.252643][T12852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.275641][T12852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.306511][T12852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.371582][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2273'. [ 689.469369][T12852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.496919][T12852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.533232][T12852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.599758][T12852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.638809][T12985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2275'. [ 689.874442][ T5142] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 689.946102][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.968374][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.041297][T12187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.066059][T12187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.109559][ T5142] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 690.135166][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.185741][ T5142] usb 3-1: config 0 descriptor?? [ 690.209093][ T5142] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 690.291509][T13000] binder: 12999:13000 ioctl c0306201 0 returned -14 [ 690.524669][ T54] Bluetooth: hci6: command tx timeout [ 691.456426][T12988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.472064][T12988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.546205][T12988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.627954][T12988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.675370][ T5142] gspca_stv06xx: I2C: Read error writing address: -71 [ 691.712245][ T5142] usb 3-1: USB disconnect, device number 92 [ 692.473258][T13038] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2290'. [ 692.493319][T13038] FAULT_INJECTION: forcing a failure. [ 692.493319][T13038] name failslab, interval 1, probability 0, space 0, times 0 [ 692.570571][T13038] CPU: 0 UID: 0 PID: 13038 Comm: syz.3.2290 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 692.581042][T13038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 692.591210][T13038] Call Trace: [ 692.594541][T13038] [ 692.597482][T13038] dump_stack_lvl+0x241/0x360 [ 692.602202][T13038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.607432][T13038] ? __pfx__printk+0x10/0x10 [ 692.612065][T13038] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 692.618075][T13038] ? __pfx___might_resched+0x10/0x10 [ 692.623998][T13038] should_fail_ex+0x3b0/0x4e0 [ 692.628868][T13038] should_failslab+0xac/0x100 [ 692.633577][T13038] ? __alloc_skb+0x1c3/0x440 [ 692.638385][T13038] kmem_cache_alloc_node_noprof+0x71/0x320 [ 692.644236][T13038] __alloc_skb+0x1c3/0x440 [ 692.648946][T13038] ? __pfx___alloc_skb+0x10/0x10 [ 692.653964][T13038] ? netlink_ack_tlv_len+0x6e/0x200 [ 692.659212][T13038] netlink_ack+0x13f/0xa30 [ 692.663688][T13038] netlink_rcv_skb+0x262/0x430 [ 692.668479][T13038] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 692.673971][T13038] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 692.679319][T13038] xfrm_netlink_rcv+0x79/0x90 [ 692.684012][T13038] netlink_unicast+0x7f0/0x990 [ 692.688787][T13038] ? __pfx_netlink_unicast+0x10/0x10 [ 692.694071][T13038] ? __virt_addr_valid+0x183/0x530 [ 692.699319][T13038] ? __check_object_size+0x49c/0x900 [ 692.705235][T13038] ? bpf_lsm_netlink_send+0x9/0x10 [ 692.710377][T13038] netlink_sendmsg+0x8e4/0xcb0 [ 692.715365][T13038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.720769][T13038] ? __import_iovec+0x536/0x820 [ 692.725659][T13038] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 692.731324][T13038] ? security_socket_sendmsg+0x87/0xb0 [ 692.736805][T13038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.742105][T13038] __sock_sendmsg+0x221/0x270 [ 692.746792][T13038] ____sys_sendmsg+0x525/0x7d0 [ 692.751676][T13038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 692.756985][T13038] __sys_sendmsg+0x2b0/0x3a0 [ 692.761674][T13038] ? __pfx___sys_sendmsg+0x10/0x10 [ 692.766779][T13038] ? vfs_write+0x7c4/0xc90 [ 692.771225][T13038] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 692.777643][T13038] ? do_syscall_64+0x100/0x230 [ 692.782406][T13038] ? do_syscall_64+0xb6/0x230 [ 692.787084][T13038] do_syscall_64+0xf3/0x230 [ 692.791673][T13038] ? clear_bhb_loop+0x35/0x90 [ 692.796349][T13038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.802248][T13038] RIP: 0033:0x7f0b32775f19 [ 692.806660][T13038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.826802][T13038] RSP: 002b:00007f0b33522048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.835234][T13038] RAX: ffffffffffffffda RBX: 00007f0b32906038 RCX: 00007f0b32775f19 [ 692.843295][T13038] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 000000000000000c [ 692.851385][T13038] RBP: 00007f0b335220a0 R08: 0000000000000000 R09: 0000000000000000 [ 692.859449][T13038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.867489][T13038] R13: 000000000000006e R14: 00007f0b32906038 R15: 00007ffd8e0c4b38 [ 692.875563][T13038] [ 692.894563][T13044] vivid-002: ================= START STATUS ================= [ 692.903879][T13042] binder: 13041:13042 ioctl c0306201 0 returned -14 [ 692.944484][T13044] vivid-002: Radio HW Seek Mode: Bounded [ 692.983592][T13044] vivid-002: Radio Programmable HW Seek: false [ 693.047503][T13044] vivid-002: RDS Rx I/O Mode: Block I/O [ 693.079296][T13044] vivid-002: Generate RBDS Instead of RDS: false [ 693.114398][T13044] vivid-002: RDS Reception: true [ 693.121174][T13044] vivid-002: RDS Program Type: 0 inactive [ 693.198138][T13044] vivid-002: RDS PS Name: inactive [ 693.240543][T13044] vivid-002: RDS Radio Text: inactive [ 693.260777][T13044] vivid-002: RDS Traffic Announcement: false inactive [ 693.297577][T13044] vivid-002: RDS Traffic Program: false inactive [ 693.324093][T13044] vivid-002: RDS Music: false inactive [ 693.361899][T13044] vivid-002: ================== END STATUS ================== [ 693.544381][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2296'. [ 693.824495][ T1147] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 694.034402][ T1147] usb 1-1: Using ep0 maxpacket: 8 [ 694.053678][ T1147] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 694.076597][ T1147] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 694.170093][ T1147] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 694.213015][ T1147] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 694.268558][ T1147] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 694.303948][ T1147] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 694.304969][T13066] Can't find a SQUASHFS superblock on nullb0 [ 694.362675][ T1147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.780342][ T1147] usb 1-1: usb_control_msg returned -32 [ 694.888337][ T1147] usbtmc 1-1:16.0: can't read capabilities [ 696.005999][T13084] 9pnet_fd: Insufficient options for proto=fd [ 696.325871][T13088] binder: 13087:13088 ioctl c0306201 0 returned -14 [ 696.515704][T13095] FAULT_INJECTION: forcing a failure. [ 696.515704][T13095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.550263][T13095] CPU: 1 UID: 0 PID: 13095 Comm: syz.1.2310 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 696.560813][T13095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 696.570897][T13095] Call Trace: [ 696.574197][T13095] [ 696.577145][T13095] dump_stack_lvl+0x241/0x360 [ 696.582049][T13095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.587292][T13095] ? __pfx__printk+0x10/0x10 [ 696.591915][T13095] ? __pfx_lock_release+0x10/0x10 [ 696.597067][T13095] should_fail_ex+0x3b0/0x4e0 [ 696.601806][T13095] _copy_to_user+0x2f/0xb0 [ 696.606446][T13095] bpf_test_finish+0x22c/0x8b0 [ 696.611242][T13095] ? __pfx_bpf_test_finish+0x10/0x10 [ 696.616733][T13095] ? convert___skb_to_skb+0x41/0x620 [ 696.622146][T13095] ? convert_skb_to___skb+0x2d3/0x510 [ 696.628120][T13095] bpf_prog_test_run_skb+0xfe5/0x1820 [ 696.633549][T13095] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 696.635064][ T1147] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 696.639466][T13095] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 696.639503][T13095] bpf_prog_test_run+0x33a/0x3b0 [ 696.658081][T13095] __sys_bpf+0x48d/0x810 [ 696.662370][T13095] ? __pfx___sys_bpf+0x10/0x10 [ 696.667184][T13095] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 696.673199][T13095] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 696.679662][T13095] ? do_syscall_64+0x100/0x230 [ 696.684482][T13095] __x64_sys_bpf+0x7c/0x90 [ 696.688937][T13095] do_syscall_64+0xf3/0x230 [ 696.693497][T13095] ? clear_bhb_loop+0x35/0x90 [ 696.698207][T13095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.704137][T13095] RIP: 0033:0x7fdf9cd75f19 [ 696.705125][ T5144] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 696.708761][T13095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.708783][T13095] RSP: 002b:00007fdf9dc2e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 696.708806][T13095] RAX: ffffffffffffffda RBX: 00007fdf9cf05f60 RCX: 00007fdf9cd75f19 [ 696.708820][T13095] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 696.761173][T13095] RBP: 00007fdf9dc2e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 696.769185][T13095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.777447][T13095] R13: 000000000000000b R14: 00007fdf9cf05f60 R15: 00007ffcf73cb778 [ 696.785469][T13095] [ 696.836395][ T1147] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 696.856163][ T1147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.898216][ T1147] usb 4-1: config 0 descriptor?? [ 696.904548][ T5144] usb 3-1: Using ep0 maxpacket: 32 [ 696.923001][ T1147] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 696.946080][ T5144] usb 3-1: config 38 has an invalid interface number: 63 but max is 1 [ 696.965949][ T5144] usb 3-1: config 38 contains an unexpected descriptor of type 0x2, skipping [ 696.984554][ T5144] usb 3-1: config 38 contains an unexpected descriptor of type 0x2, skipping [ 696.996886][ T5144] usb 3-1: config 38 has an invalid interface number: 35 but max is 1 [ 697.008528][ T5144] usb 3-1: config 38 has no interface number 0 [ 697.015977][ T5144] usb 3-1: config 38 has no interface number 1 [ 697.023660][ T5144] usb 3-1: config 38 interface 63 altsetting 1 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 697.037686][ T5144] usb 3-1: config 38 interface 63 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024 [ 697.048698][ T5144] usb 3-1: config 38 interface 63 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 697.059951][ T5144] usb 3-1: config 38 interface 63 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 697.071776][ T5144] usb 3-1: config 38 interface 63 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 697.083700][ T5144] usb 3-1: config 38 interface 63 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 64 [ 697.333478][ T5144] usb 3-1: config 38 interface 63 altsetting 1 endpoint 0x5 has invalid maxpacket 2047, setting to 64 [ 697.348057][ T5144] usb 3-1: config 38 interface 63 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 697.359026][ T5144] usb 3-1: config 38 interface 63 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 697.371049][ T5144] usb 3-1: config 38 interface 35 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 697.381939][ T5144] usb 3-1: config 38 interface 35 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 697.393835][ T5144] usb 3-1: config 38 interface 35 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 697.407652][ T5144] usb 3-1: config 38 interface 35 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 697.421275][ T5144] usb 3-1: config 38 interface 35 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 697.537417][T13103] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2313'. [ 697.595009][ T5144] usb 3-1: config 38 interface 35 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 698.074371][ T5144] usb 3-1: config 38 interface 35 altsetting 0 endpoint 0x8 has invalid maxpacket 1032, setting to 64 [ 698.088676][ T5144] usb 3-1: config 38 interface 35 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 698.100071][ T5144] usb 3-1: config 38 interface 63 has no altsetting 0 [ 698.110493][ T5144] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 698.123699][T13106] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2314'. [ 698.153666][ T5144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.189837][ T5144] usb 3-1: Product: syz [ 698.216396][ T5144] usb 3-1: Manufacturer: syz [ 698.249487][ T5144] usb 3-1: SerialNumber: syz [ 698.297670][T13092] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 698.562545][ T5144] usb 3-1: no audio or video endpoints found [ 698.628775][ T5144] usb 3-1: no audio or video endpoints found [ 698.678508][T13090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.702084][T13090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.741222][ T5144] usb 3-1: USB disconnect, device number 93 [ 698.783745][T13090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.821616][T13090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.706855][ T1147] usb 4-1: USB disconnect, device number 112 [ 701.232546][ T1147] usb 1-1: USB disconnect, device number 101 [ 701.371314][T13129] xt_hashlimit: overflow, rate too high: 0 [ 701.449914][T13129] vim2m vim2m.0: vidioc_s_fmt queue busy [ 702.283709][T13135] binder: 13134:13135 ioctl c0306201 0 returned -14 [ 702.313563][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 702.313584][ T29] audit: type=1804 audit(1721861329.762:3373): pid=13137 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2325" name="/newroot/234/bus/file0" dev="overlay" ino=1293 res=1 errno=0 [ 702.396245][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2325'. [ 702.914661][ T5144] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 702.974622][ T1147] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 703.114542][ T5144] usb 3-1: Using ep0 maxpacket: 32 [ 703.129299][ T5144] usb 3-1: config 38 has an invalid interface number: 63 but max is 1 [ 703.164907][ T5144] usb 3-1: config 38 contains an unexpected descriptor of type 0x2, skipping [ 703.194433][ T1147] usb 5-1: Using ep0 maxpacket: 32 [ 703.206299][ T5144] usb 3-1: config 38 contains an unexpected descriptor of type 0x2, skipping [ 703.224826][ T1147] usb 5-1: config 38 has an invalid interface number: 63 but max is 1 [ 703.239539][ T5144] usb 3-1: config 38 has an invalid interface number: 35 but max is 1 [ 703.250011][ T1147] usb 5-1: config 38 contains an unexpected descriptor of type 0x2, skipping [ 703.284412][ T5144] usb 3-1: config 38 has no interface number 0 [ 703.293478][ T1147] usb 5-1: config 38 contains an unexpected descriptor of type 0x2, skipping [ 703.316649][ T5144] usb 3-1: config 38 has no interface number 1 [ 703.332143][ T1147] usb 5-1: config 38 has an invalid interface number: 35 but max is 1 [ 703.343535][ T5144] usb 3-1: config 38 interface 63 altsetting 1 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 703.364192][ T1147] usb 5-1: config 38 has no interface number 0 [ 703.382545][ T5144] usb 3-1: config 38 interface 63 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024 [ 703.392836][ T1147] usb 5-1: config 38 has no interface number 1 [ 703.405568][ T1147] usb 5-1: config 38 interface 63 altsetting 1 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 703.417593][ T5144] usb 3-1: config 38 interface 63 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 703.429496][ T1147] usb 5-1: config 38 interface 63 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024 [ 703.440285][ T5144] usb 3-1: config 38 interface 63 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 703.452405][ T1147] usb 5-1: config 38 interface 63 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 703.494000][ T5144] usb 3-1: config 38 interface 63 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 703.525599][ T1147] usb 5-1: config 38 interface 63 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 703.537686][ T5144] usb 3-1: config 38 interface 63 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 64 [ 703.554427][ T1147] usb 5-1: config 38 interface 63 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 703.569418][ T5144] usb 3-1: config 38 interface 63 altsetting 1 endpoint 0x5 has invalid maxpacket 2047, setting to 64 [ 703.583457][ T1147] usb 5-1: config 38 interface 63 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 64 [ 703.597844][ T5144] usb 3-1: config 38 interface 63 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 703.673026][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2333'. [ 703.682657][ T1147] usb 5-1: config 38 interface 63 altsetting 1 endpoint 0x5 has invalid maxpacket 2047, setting to 64 [ 703.699654][ T5144] usb 3-1: config 38 interface 63 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 703.720925][ T1147] usb 5-1: config 38 interface 63 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 703.732250][ T5144] usb 3-1: config 38 interface 35 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 703.743654][ T1147] usb 5-1: config 38 interface 63 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 703.767451][ T5144] usb 3-1: config 38 interface 35 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 703.786892][ T1147] usb 5-1: config 38 interface 35 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 703.799733][ T5144] usb 3-1: config 38 interface 35 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 703.813011][ T1147] usb 5-1: config 38 interface 35 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 703.826917][ T5144] usb 3-1: config 38 interface 35 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 703.852098][ T1147] usb 5-1: config 38 interface 35 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 703.880479][ T5144] usb 3-1: config 38 interface 35 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 703.910269][ T1147] usb 5-1: config 38 interface 35 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 703.930713][ T5144] usb 3-1: config 38 interface 35 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 703.946967][ T1147] usb 5-1: config 38 interface 35 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 703.960172][ T5144] usb 3-1: config 38 interface 35 altsetting 0 endpoint 0x8 has invalid maxpacket 1032, setting to 64 [ 704.000535][ T1147] usb 5-1: config 38 interface 35 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 704.013938][ T5144] usb 3-1: config 38 interface 35 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 704.026945][ T1147] usb 5-1: config 38 interface 35 altsetting 0 endpoint 0x8 has invalid maxpacket 1032, setting to 64 [ 704.040515][ T5144] usb 3-1: config 38 interface 63 has no altsetting 0 [ 704.048145][ T1147] usb 5-1: config 38 interface 35 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 704.062816][ T1147] usb 5-1: config 38 interface 63 has no altsetting 0 [ 704.076371][ T5144] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 704.086477][ T5144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.094714][ T5144] usb 3-1: Product: syz [ 704.113696][ T5144] usb 3-1: Manufacturer: syz [ 704.119089][ T5144] usb 3-1: SerialNumber: syz [ 704.125031][ T1147] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 704.136343][ T1147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.144530][ T1147] usb 5-1: Product: syz [ 704.148926][ T1147] usb 5-1: Manufacturer: syz [ 704.159128][ T1147] usb 5-1: SerialNumber: syz [ 704.166833][T13154] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 704.189151][T13157] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 704.402737][ T5144] usb 3-1: no audio or video endpoints found [ 704.451921][ T1147] usb 5-1: no audio or video endpoints found [ 704.499305][ T5144] usb 3-1: no audio or video endpoints found [ 704.509260][ T1147] usb 5-1: no audio or video endpoints found [ 704.565041][ T5144] usb 3-1: USB disconnect, device number 94 [ 704.572980][ T1147] usb 5-1: USB disconnect, device number 99 [ 704.741955][T13185] xt_CT: You must specify a L4 protocol and not use inversions on it [ 705.566257][ T29] audit: type=1804 audit(1721861333.012:3374): pid=13183 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.2340" name="/newroot/16/bus/file0" dev="overlay" ino=118 res=1 errno=0 [ 705.593411][T13192] binder: 13190:13192 ioctl c0306201 0 returned -14 [ 705.685451][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2340'. [ 705.984488][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2348'. [ 706.870805][ T29] audit: type=1804 audit(1721861334.322:3375): pid=13228 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.2356" name="/newroot/15/bus/file0" dev="overlay" ino=113 res=1 errno=0 [ 706.970493][T13232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2356'. [ 706.979669][ T5142] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 707.177692][ T5142] usb 5-1: Using ep0 maxpacket: 8 [ 707.196725][ T5142] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 707.219180][ T5142] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 707.240105][ T5142] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 707.262612][ T5142] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 707.282869][ T5142] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 707.310456][ T5142] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 707.334395][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.595659][ T5142] usb 5-1: usb_control_msg returned -32 [ 707.624673][ T5142] usbtmc 5-1:16.0: can't read capabilities [ 707.689114][T13248] binder: 13247:13248 ioctl c0306201 0 returned -14 [ 707.775416][T13251] bridge_slave_0: left allmulticast mode [ 707.799017][T13251] bridge_slave_0: left promiscuous mode [ 707.821355][T13251] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.845027][T13251] bridge_slave_1: left allmulticast mode [ 707.850992][T13251] bridge_slave_1: left promiscuous mode [ 707.862663][T13251] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.896702][T13251] bond0: (slave bond_slave_0): Releasing backup interface [ 707.977590][T13251] bond0: (slave bond_slave_1): Releasing backup interface [ 708.019781][T13257] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 708.907141][T13251] team0: Port device team_slave_0 removed [ 709.036261][T13251] team0: Port device team_slave_1 removed [ 709.102742][T13251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.185801][T13251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.202970][ T29] audit: type=1804 audit(1721861336.582:3376): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.2368" name="/newroot/442/bus/file0" dev="overlay" ino=2438 res=1 errno=0 [ 709.272557][T13251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.294242][T13251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.434615][T13272] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2366'. [ 710.577988][T12204] usb 5-1: USB disconnect, device number 100 [ 710.777064][T13268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2368'. [ 712.366614][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 712.483458][T13301] binder: 13300:13301 ioctl c0306201 0 returned -14 [ 712.762942][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2380'. [ 712.977084][ T29] audit: type=1326 audit(1721861340.432:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa385775f19 code=0x7fc00000 [ 713.064668][ T29] audit: type=1326 audit(1721861340.482:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa385775f19 code=0x7fc00000 [ 713.464444][ T1147] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 713.530016][ T29] audit: type=1326 audit(1721861340.982:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa385775f19 code=0x7fc00000 [ 713.601935][ T29] audit: type=1326 audit(1721861340.982:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa385775f19 code=0x7fc00000 [ 713.676403][ T29] audit: type=1326 audit(1721861340.982:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa385775f19 code=0x7fc00000 [ 713.731062][ T1147] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 713.755440][ T29] audit: type=1326 audit(1721861340.982:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa385775f19 code=0x7fc00000 [ 713.761143][ T1147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.869463][ T1147] usb 5-1: config 0 descriptor?? [ 713.910352][ T29] audit: type=1326 audit(1721861340.982:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa385775f19 code=0x7fc00000 [ 714.024433][ T29] audit: type=1326 audit(1721861341.012:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa385775f19 code=0x7fc00000 [ 714.147720][ T29] audit: type=1326 audit(1721861341.012:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa385775f19 code=0x7fc00000 [ 714.422705][ T29] audit: type=1326 audit(1721861341.012:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa385775f19 code=0x7fc00000 [ 715.144777][T13338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 715.154091][ T29] audit: type=1326 audit(1721861341.012:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa385775f19 code=0x7fc00000 [ 715.201172][ T5142] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 715.246478][ T29] audit: type=1326 audit(1721861341.012:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa385775f19 code=0x7fc00000 [ 715.349731][ T29] audit: type=1326 audit(1721861341.012:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa385775f19 code=0x7fc00000 [ 715.427764][ T29] audit: type=1326 audit(1721861341.012:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa385775f19 code=0x7fc00000 [ 715.462916][T13351] openvswitch: netlink: Missing key (keys=40, expected=100) [ 715.501423][ T5142] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 715.502134][ T29] audit: type=1326 audit(1721861341.012:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa385775f19 code=0x7fc00000 [ 715.540693][ T5142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.625549][ T5142] usb 1-1: config 0 descriptor?? [ 715.629271][ T29] audit: type=1326 audit(1721861341.012:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13305 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa385775f19 code=0x7fc00000 [ 715.667768][ T54] Bluetooth: hci6: unexpected event 0x17 length: 14 > 6 [ 716.012447][T13361] binder: 13359:13361 ioctl c0306201 0 returned -14 [ 716.333955][ T1147] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 717.114534][ T1147] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 717.164814][ T5142] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 717.166918][ T1147] [drm:udl_init] *ERROR* Selecting channel failed [ 717.224546][ T5142] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 717.252165][T13369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2399'. [ 717.256601][ T5142] [drm:udl_init] *ERROR* Selecting channel failed [ 717.263835][ T1147] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 717.298853][ T1147] [drm] Initialized udl on minor 2 [ 717.318160][ T1147] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 717.350497][ T1147] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 717.360235][ T5142] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3 [ 717.360622][ T5171] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 717.394343][ T29] audit: type=1326 audit(1721861344.832:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13368 comm="syz.3.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 717.428201][ T1147] usb 5-1: USB disconnect, device number 101 [ 717.434675][ T5142] [drm] Initialized udl on minor 3 [ 717.437210][ T5171] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 717.585660][ T5142] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 717.596507][ T5142] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 717.603998][T12204] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 717.617186][ T5142] usb 1-1: USB disconnect, device number 102 [ 717.624897][T12204] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 717.646165][T13371] sctp: [Deprecated]: syz.2.2398 (pid 13371) Use of int in maxseg socket option. [ 717.646165][T13371] Use struct sctp_assoc_value instead [ 717.839381][ T5171] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 718.308924][ T29] audit: type=1326 audit(1721861344.832:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13368 comm="syz.3.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 718.387519][ T29] audit: type=1326 audit(1721861345.692:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13368 comm="syz.3.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 725.933888][ T54] Bluetooth: hci0: unexpected event 0x17 length: 14 > 6 [ 725.966629][T13414] vivid-001: ================= START STATUS ================= [ 726.015083][T13414] vivid-001: Radio HW Seek Mode: Bounded [ 726.020874][T13414] vivid-001: Radio Programmable HW Seek: false [ 726.119024][T13414] vivid-001: RDS Rx I/O Mode: Block I/O [ 726.147006][T13414] vivid-001: Generate RBDS Instead of RDS: false [ 726.163998][T13414] vivid-001: RDS Reception: true [ 726.176441][T13414] vivid-001: RDS Program Type: 0 inactive [ 726.208934][T13414] vivid-001: RDS PS Name: inactive [ 726.248358][T13414] vivid-001: RDS Radio Text: inactive [ 726.259435][T13414] vivid-001: RDS Traffic Announcement: false inactive [ 726.294623][T13414] vivid-001: RDS Traffic Program: false inactive [ 726.301943][T13414] vivid-001: RDS Music: false inactive [ 726.341134][T13414] vivid-001: ================== END STATUS ================== [ 726.394453][T12128] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 726.497469][ T5142] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 726.520083][T13424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2415'. [ 726.605294][T12128] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 726.644441][T12128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.670131][T12128] usb 3-1: config 0 descriptor?? [ 726.689259][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 726.689279][ T29] audit: type=1326 audit(1721861354.132:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13422 comm="syz.3.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 726.737284][ T5142] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 726.768577][ T5142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.779204][ T29] audit: type=1326 audit(1721861354.142:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13422 comm="syz.3.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 726.811263][ T5142] usb 2-1: config 0 descriptor?? [ 726.828080][ T5142] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 727.370837][ T29] audit: type=1326 audit(1721861354.812:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13422 comm="syz.3.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 727.708360][T13438] trusted_key: encrypted_key: insufficient parameters specified [ 727.964917][ T54] Bluetooth: hci0: command tx timeout [ 728.048217][T13420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.060738][T13420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.117923][T13420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.156828][T13420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.238237][ T5142] gspca_stv06xx: I2C: Read error writing address: -71 [ 728.292853][ T5142] usb 2-1: USB disconnect, device number 91 [ 729.773186][T12128] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 729.788578][T12128] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 729.824851][T12128] [drm:udl_init] *ERROR* Selecting channel failed [ 729.868246][T12128] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 729.895435][T13458] vivid-001: ================= START STATUS ================= [ 729.904911][T12128] [drm] Initialized udl on minor 2 [ 729.944899][T13458] vivid-001: Radio HW Seek Mode: Bounded [ 729.961073][T12128] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 729.963228][T13458] vivid-001: Radio Programmable HW Seek: [ 729.990259][T12128] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 730.016952][ T5171] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 730.017801][T13458] false [ 730.035853][T12128] usb 3-1: USB disconnect, device number 95 [ 730.047953][T13458] [ 730.059254][T13458] vivid-001: RDS Rx I/O Mode: Block I/O [ 730.085062][T13458] vivid-001: Generate RBDS Instead of RDS: false [ 730.096283][ T5171] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 730.128829][T13458] vivid-001: RDS Reception: true [ 730.160743][T13458] vivid-001: RDS Program Type: 0 inactive [ 730.187764][T13458] vivid-001: RDS PS Name: inactive [ 730.201273][T13466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2428'. [ 730.223238][T13458] vivid-001: RDS Radio Text: inactive [ 730.230047][T13458] vivid-001: RDS Traffic Announcement: false inactive [ 730.239363][T13458] vivid-001: RDS Traffic Program: false inactive [ 730.246549][T13458] vivid-001: RDS Music: false inactive [ 730.252512][T13458] vivid-001: ================== END STATUS ================== [ 730.272078][ T29] audit: type=1326 audit(1721861357.722:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2de575f19 code=0x7fc00000 [ 730.313376][ T29] audit: type=1326 audit(1721861357.752:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb2de575f19 code=0x7fc00000 [ 730.527446][T13471] FAULT_INJECTION: forcing a failure. [ 730.527446][T13471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.587314][T13471] CPU: 0 UID: 0 PID: 13471 Comm: syz.3.2430 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 730.598034][T13471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 730.608567][T13471] Call Trace: [ 730.611871][T13471] [ 730.614911][T13471] dump_stack_lvl+0x241/0x360 [ 730.619690][T13471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 730.624931][T13471] ? __pfx__printk+0x10/0x10 [ 730.629628][T13471] ? __pfx_lock_release+0x10/0x10 [ 730.634683][T13471] should_fail_ex+0x3b0/0x4e0 [ 730.639578][T13471] _copy_from_iter+0x1f6/0x1960 [ 730.644628][T13471] ? __virt_addr_valid+0x183/0x530 [ 730.650050][T13471] ? __pfx_lock_release+0x10/0x10 [ 730.655792][T13471] ? __alloc_skb+0x28f/0x440 [ 730.660719][T13471] ? __pfx__copy_from_iter+0x10/0x10 [ 730.666272][T13471] ? __virt_addr_valid+0x183/0x530 [ 730.671392][T13471] ? __virt_addr_valid+0x183/0x530 [ 730.676501][T13471] ? __virt_addr_valid+0x45f/0x530 [ 730.681608][T13471] ? __check_object_size+0x49c/0x900 [ 730.686900][T13471] netlink_sendmsg+0x73d/0xcb0 [ 730.691675][T13471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 730.696963][T13471] ? __import_iovec+0x536/0x820 [ 730.701832][T13471] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 730.707754][T13471] ? security_socket_sendmsg+0x87/0xb0 [ 730.713343][T13471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 730.719049][T13471] __sock_sendmsg+0x221/0x270 [ 730.724028][T13471] ____sys_sendmsg+0x525/0x7d0 [ 730.728811][T13471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 730.734106][T13471] __sys_sendmsg+0x2b0/0x3a0 [ 730.738710][T13471] ? __pfx___sys_sendmsg+0x10/0x10 [ 730.743909][T13471] ? vfs_write+0x7c4/0xc90 [ 730.748354][T13471] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 730.755027][T13471] ? do_syscall_64+0x100/0x230 [ 730.759907][T13471] ? do_syscall_64+0xb6/0x230 [ 730.764729][T13471] do_syscall_64+0xf3/0x230 [ 730.769232][T13471] ? clear_bhb_loop+0x35/0x90 [ 730.773945][T13471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.780011][T13471] RIP: 0033:0x7f0b32775f19 [ 730.784429][T13471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.804954][T13471] RSP: 002b:00007f0b33543048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 730.813714][T13471] RAX: ffffffffffffffda RBX: 00007f0b32905f60 RCX: 00007f0b32775f19 [ 730.821720][T13471] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 730.829697][T13471] RBP: 00007f0b335430a0 R08: 0000000000000000 R09: 0000000000000000 [ 730.837671][T13471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.845641][T13471] R13: 000000000000000b R14: 00007f0b32905f60 R15: 00007ffd8e0c4b38 [ 730.853631][T13471] [ 731.013484][ T29] audit: type=1326 audit(1721861358.462:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2de575f19 code=0x7fc00000 [ 731.038059][ T29] audit: type=1326 audit(1721861358.462:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb2de575f19 code=0x7fc00000 [ 731.062256][ T29] audit: type=1326 audit(1721861358.462:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2de575f19 code=0x7fc00000 [ 731.098790][ T29] audit: type=1326 audit(1721861358.462:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2de575f19 code=0x7fc00000 [ 731.199440][ T29] audit: type=1326 audit(1721861358.462:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2de575f19 code=0x7fc00000 [ 731.220679][T13474] netlink: 'syz.1.2431': attribute type 5 has an invalid length. [ 731.495821][T13487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2435'. [ 731.706830][ T54] Bluetooth: hci0: unexpected event 0x2f length: 1017 > 260 [ 732.249842][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2438'. [ 732.254569][T12128] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 732.313959][T13504] FAULT_INJECTION: forcing a failure. [ 732.313959][T13504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.328671][T13504] CPU: 0 UID: 0 PID: 13504 Comm: syz.2.2439 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 732.339476][T13504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 732.350171][T13504] Call Trace: [ 732.354591][T13504] [ 732.357784][T13504] dump_stack_lvl+0x241/0x360 [ 732.363313][T13504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 732.369391][T13504] ? __pfx__printk+0x10/0x10 [ 732.374112][T13504] ? __pfx_lock_release+0x10/0x10 [ 732.379210][T13504] should_fail_ex+0x3b0/0x4e0 [ 732.384268][T13504] _copy_from_iter+0x1f6/0x1960 [ 732.389334][T13504] ? __virt_addr_valid+0x183/0x530 [ 732.394444][T13504] ? __pfx_lock_release+0x10/0x10 [ 732.399477][T13504] ? __alloc_skb+0x28f/0x440 [ 732.404167][T13504] ? __pfx__copy_from_iter+0x10/0x10 [ 732.409535][T13504] ? __virt_addr_valid+0x183/0x530 [ 732.414656][T13504] ? __virt_addr_valid+0x183/0x530 [ 732.419762][T13504] ? __virt_addr_valid+0x45f/0x530 [ 732.424997][T13504] ? __check_object_size+0x49c/0x900 [ 732.430334][T13504] netlink_sendmsg+0x73d/0xcb0 [ 732.435719][T13504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.441210][T13504] ? __import_iovec+0x536/0x820 [ 732.446177][T13504] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 732.451562][T13504] ? security_socket_sendmsg+0x87/0xb0 [ 732.457305][T13504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.462602][T13504] __sock_sendmsg+0x221/0x270 [ 732.467337][T13504] ____sys_sendmsg+0x525/0x7d0 [ 732.472268][T13504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 732.477655][T13504] __sys_sendmsg+0x2b0/0x3a0 [ 732.482244][T13504] ? __pfx___sys_sendmsg+0x10/0x10 [ 732.487371][T13504] ? vfs_write+0x7c4/0xc90 [ 732.487437][T13504] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 732.498136][T13504] ? do_syscall_64+0x100/0x230 [ 732.502908][T13504] ? do_syscall_64+0xb6/0x230 [ 732.507597][T13504] do_syscall_64+0xf3/0x230 [ 732.512097][T13504] ? clear_bhb_loop+0x35/0x90 [ 732.516769][T13504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.522750][T13504] RIP: 0033:0x7fac8c175f19 [ 732.527248][T13504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.547688][T13504] RSP: 002b:00007fac8cec4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.556293][T13504] RAX: ffffffffffffffda RBX: 00007fac8c305f60 RCX: 00007fac8c175f19 [ 732.564380][T13504] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000003 [ 732.572393][T13504] RBP: 00007fac8cec40a0 R08: 0000000000000000 R09: 0000000000000000 [ 732.580371][T13504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.588445][T13504] R13: 000000000000000b R14: 00007fac8c305f60 R15: 00007ffe7a8229b8 [ 732.596517][T13504] [ 732.688927][T13506] vivid-003: ================= START STATUS ================= [ 732.733314][T13506] vivid-003: Radio HW Seek Mode: Bounded [ 732.762017][T13506] vivid-003: Radio Programmable HW Seek: false [ 732.774827][T13506] vivid-003: RDS Rx I/O Mode: Block I/O [ 732.783421][T12128] usb 2-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 732.804653][T13506] vivid-003: Generate RBDS Instead of RDS: false [ 732.811070][T13506] vivid-003: RDS Reception: true [ 732.822873][T12128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.839453][T13506] vivid-003: RDS Program Type: 0 inactive [ 732.855339][T13506] vivid-003: RDS PS Name: inactive [ 732.855582][T12128] usb 2-1: config 0 descriptor?? [ 732.884621][T13506] vivid-003: RDS Radio Text: inactive [ 732.904534][T13506] vivid-003: RDS Traffic Announcement: false inactive [ 732.910903][T12128] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 732.953272][T13506] vivid-003: RDS Traffic Program: false inactive [ 732.984629][T13506] vivid-003: RDS Music: false inactive [ 732.990229][T13506] vivid-003: ================== END STATUS ================== [ 733.141255][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 733.153298][T12128] gspca_zc3xx: reg_w_i err -71 [ 733.190822][T12128] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 733.235256][T12128] usb 2-1: USB disconnect, device number 92 [ 734.444397][ T5140] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 734.644332][ T5140] usb 1-1: Using ep0 maxpacket: 8 [ 734.656762][ T5140] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 734.688837][ T5140] usb 1-1: config 0 has no interface number 0 [ 734.715097][ T5140] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 734.746313][ T5140] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 734.770814][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.805074][ T5140] usb 1-1: config 0 descriptor?? [ 734.838118][ T5140] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 735.533793][ T5142] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 735.706009][T12128] usb 1-1: USB disconnect, device number 103 [ 735.712413][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2452'. [ 735.742073][T12128] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 735.867240][ T5142] usb 4-1: Using ep0 maxpacket: 8 [ 735.900843][ T5142] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 735.914911][ T5142] usb 4-1: config 0 has no interface number 0 [ 735.942821][ T5142] usb 4-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2 [ 735.980388][ T5142] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 736.011751][ T5142] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 736.034378][ T5142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.073308][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 736.087298][ T5142] usb 4-1: config 0 descriptor?? [ 736.130773][ T5142] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 736.787223][ T5142] usb 4-1: USB disconnect, device number 113 [ 736.804420][T12128] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 737.131084][T12128] usb 5-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 737.937868][T12128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.965370][T12128] usb 5-1: config 0 descriptor?? [ 737.996220][T12128] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 738.918436][T12128] gspca_zc3xx: reg_w_i err -71 [ 738.923538][T12128] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 738.941605][T12128] usb 5-1: USB disconnect, device number 102 [ 739.486098][T12204] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 739.694405][ T5142] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 739.727056][T12204] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 740.475637][T12204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.496921][T12204] usb 2-1: config 0 descriptor?? [ 740.567702][ T5142] usb 1-1: Using ep0 maxpacket: 8 [ 740.583518][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2474'. [ 740.610559][T12128] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 740.617076][ T5142] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 740.646811][ T5142] usb 1-1: config 0 has no interface number 0 [ 740.659454][ T5142] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 740.712271][ T5142] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 740.724329][ T5142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.740378][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 740.740501][ T29] audit: type=1326 audit(1721861368.192:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13608 comm="syz.3.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 740.754522][ T5142] usb 1-1: config 0 descriptor?? [ 740.814922][ T29] audit: type=1326 audit(1721861368.192:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13608 comm="syz.3.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 740.842315][T12128] usb 3-1: Using ep0 maxpacket: 8 [ 740.885353][T12128] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 740.894101][T12128] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 740.898287][ T5142] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 740.924533][T12128] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 740.945502][T12128] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 740.991966][T12128] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.044956][T12128] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 741.076007][T12128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.178006][ T1147] usb 1-1: USB disconnect, device number 104 [ 741.193454][ T1147] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 741.323571][T12128] usb 3-1: usb_control_msg returned -32 [ 741.342274][ T29] audit: type=1326 audit(1721861368.792:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13608 comm="syz.3.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 741.347697][T12128] usbtmc 3-1:16.0: can't read capabilities [ 741.386450][ T5171] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 741.436743][ T29] audit: type=1326 audit(1721861368.792:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13608 comm="syz.3.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 741.524027][ T29] audit: type=1326 audit(1721861368.792:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13608 comm="syz.3.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 741.584577][ T5171] usb 5-1: Using ep0 maxpacket: 8 [ 741.597562][ T5171] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 741.620479][ T5171] usb 5-1: config 0 has no interface number 0 [ 741.629868][ T5171] usb 5-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2 [ 741.634499][ T29] audit: type=1326 audit(1721861368.792:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13608 comm="syz.3.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 741.704785][ T5171] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 741.760176][ T29] audit: type=1326 audit(1721861368.792:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13608 comm="syz.3.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 741.795791][ T5171] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 741.819627][ T29] audit: type=1326 audit(1721861368.792:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13608 comm="syz.3.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 741.854596][ T5171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.920147][ T5171] usb 5-1: config 0 descriptor?? [ 741.930528][T13623] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 741.944188][ T29] audit: type=1326 audit(1721861368.792:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13608 comm="syz.3.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 741.966759][ T5171] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 742.053227][ T29] audit: type=1326 audit(1721861368.792:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13608 comm="syz.3.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 742.109777][T12204] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 742.124453][T12204] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 742.142137][T12204] [drm:udl_init] *ERROR* Selecting channel failed [ 742.202924][T12204] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 742.222123][T12204] [drm] Initialized udl on minor 2 [ 742.238133][T12204] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 742.262096][T12204] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 742.277370][ T5142] usb 5-1: USB disconnect, device number 103 [ 742.332144][ T5140] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 742.372916][T12204] usb 2-1: USB disconnect, device number 93 [ 742.399377][ T5140] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 744.096240][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 744.540654][T13647] syzkaller0: entered promiscuous mode [ 744.602516][T13647] syzkaller0: entered allmulticast mode [ 744.934659][ T5171] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 745.176165][ T5171] usb 4-1: Using ep0 maxpacket: 8 [ 745.196469][ T5171] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 745.205586][ T5171] usb 4-1: config 0 has no interface number 0 [ 745.239349][ T5171] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 745.282088][ T5140] usb 3-1: USB disconnect, device number 96 [ 745.284467][ T5171] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 745.347151][ T5171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.409408][ T5171] usb 4-1: config 0 descriptor?? [ 745.445969][ T5171] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 745.738496][T12204] usb 4-1: USB disconnect, device number 114 [ 745.830776][T12204] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 747.568249][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.574783][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.611663][T13678] FAULT_INJECTION: forcing a failure. [ 747.611663][T13678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.636808][T13678] CPU: 1 UID: 0 PID: 13678 Comm: syz.2.2493 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 747.647292][T13678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 747.657369][T13678] Call Trace: [ 747.660661][T13678] [ 747.663600][T13678] dump_stack_lvl+0x241/0x360 [ 747.668307][T13678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 747.673542][T13678] ? __pfx__printk+0x10/0x10 [ 747.678333][T13678] ? __pfx_lock_release+0x10/0x10 [ 747.683561][T13678] should_fail_ex+0x3b0/0x4e0 [ 747.688331][T13678] _copy_from_iter+0x1f6/0x1960 [ 747.693211][T13678] ? __virt_addr_valid+0x183/0x530 [ 747.698358][T13678] ? __pfx_lock_release+0x10/0x10 [ 747.703415][T13678] ? __alloc_skb+0x28f/0x440 [ 747.708028][T13678] ? __pfx__copy_from_iter+0x10/0x10 [ 747.713413][T13678] ? __virt_addr_valid+0x183/0x530 [ 747.718525][T13678] ? __virt_addr_valid+0x183/0x530 [ 747.723733][T13678] ? __virt_addr_valid+0x45f/0x530 [ 747.728885][T13678] ? __check_object_size+0x49c/0x900 [ 747.734188][T13678] netlink_sendmsg+0x73d/0xcb0 [ 747.738970][T13678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.744267][T13678] ? __import_iovec+0x536/0x820 [ 747.749215][T13678] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 747.754499][T13678] ? security_socket_sendmsg+0x87/0xb0 [ 747.759962][T13678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.765251][T13678] __sock_sendmsg+0x221/0x270 [ 747.769954][T13678] ____sys_sendmsg+0x525/0x7d0 [ 747.774757][T13678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.780054][T13678] __sys_sendmsg+0x2b0/0x3a0 [ 747.784657][T13678] ? __pfx___sys_sendmsg+0x10/0x10 [ 747.789764][T13678] ? vfs_write+0x7c4/0xc90 [ 747.794257][T13678] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 747.800646][T13678] ? do_syscall_64+0x100/0x230 [ 747.805433][T13678] ? do_syscall_64+0xb6/0x230 [ 747.810118][T13678] do_syscall_64+0xf3/0x230 [ 747.814729][T13678] ? clear_bhb_loop+0x35/0x90 [ 747.819519][T13678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.825465][T13678] RIP: 0033:0x7fac8c175f19 [ 747.829917][T13678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.849820][T13678] RSP: 002b:00007fac8cec4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.858501][T13678] RAX: ffffffffffffffda RBX: 00007fac8c305f60 RCX: 00007fac8c175f19 [ 747.866748][T13678] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 747.874727][T13678] RBP: 00007fac8cec40a0 R08: 0000000000000000 R09: 0000000000000000 [ 747.882720][T13678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.890815][T13678] R13: 000000000000000b R14: 00007fac8c305f60 R15: 00007ffe7a8229b8 [ 747.898984][T13678] [ 752.474672][ T5171] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 752.805361][ T5171] usb 3-1: Using ep0 maxpacket: 8 [ 753.167707][ T5171] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 753.178266][ T5171] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 753.189644][ T5171] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 753.215957][ T5171] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 753.242436][ T5171] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 753.304416][ T5171] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 753.313625][ T5171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.528205][T13710] FAULT_INJECTION: forcing a failure. [ 753.528205][T13710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.564487][ T5171] usb 3-1: usb_control_msg returned -32 [ 753.564644][T13710] CPU: 1 UID: 0 PID: 13710 Comm: syz.3.2502 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 753.580608][T13710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 753.590734][ T5171] usbtmc 3-1:16.0: can't read capabilities [ 753.596580][T13710] Call Trace: [ 753.599879][T13710] [ 753.602828][T13710] dump_stack_lvl+0x241/0x360 [ 753.607544][T13710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 753.612793][T13710] ? __pfx__printk+0x10/0x10 [ 753.617427][T13710] ? snprintf+0xda/0x120 [ 753.621800][T13710] should_fail_ex+0x3b0/0x4e0 [ 753.626544][T13710] _copy_to_user+0x2f/0xb0 [ 753.631199][T13710] simple_read_from_buffer+0xca/0x150 [ 753.636617][T13710] proc_fail_nth_read+0x1e9/0x250 [ 753.642224][T13710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 753.647819][T13710] ? rw_verify_area+0x520/0x6b0 [ 753.652723][T13710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 753.658321][T13710] vfs_read+0x204/0xbc0 [ 753.662513][T13710] ? __pfx_lock_release+0x10/0x10 [ 753.667581][T13710] ? __pfx_vfs_read+0x10/0x10 [ 753.672304][T13710] ? __fget_files+0x29/0x470 [ 753.676927][T13710] ? __fget_files+0x3f6/0x470 [ 753.681653][T13710] ksys_read+0x1a0/0x2c0 [ 753.685935][T13710] ? __pfx_ksys_read+0x10/0x10 [ 753.691256][T13710] ? do_syscall_64+0x100/0x230 [ 753.696063][T13710] ? do_syscall_64+0xb6/0x230 [ 753.700771][T13710] do_syscall_64+0xf3/0x230 [ 753.705305][T13710] ? clear_bhb_loop+0x35/0x90 [ 753.710280][T13710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.716216][T13710] RIP: 0033:0x7f0b327749fc [ 753.720669][T13710] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 753.740482][T13710] RSP: 002b:00007f0b33543040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 753.748933][T13710] RAX: ffffffffffffffda RBX: 00007f0b32905f60 RCX: 00007f0b327749fc [ 753.757029][T13710] RDX: 000000000000000f RSI: 00007f0b335430b0 RDI: 0000000000000004 [ 753.765117][T13710] RBP: 00007f0b335430a0 R08: 0000000000000000 R09: 0000000000000000 [ 753.773125][T13710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.781124][T13710] R13: 000000000000000b R14: 00007f0b32905f60 R15: 00007ffd8e0c4b38 [ 753.789137][T13710] [ 753.958870][ C0] eth0: bad gso: type: 1, size: 1408 [ 753.965425][ C0] eth0: bad gso: type: 1, size: 1408 [ 753.971572][ C0] eth0: bad gso: type: 1, size: 1408 [ 753.984619][T13716] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 754.811086][T13724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 756.110828][T12205] usb 3-1: USB disconnect, device number 97 [ 756.550939][T13756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2514'. [ 756.569990][T13742] syzkaller0: entered promiscuous mode [ 756.592203][T13742] syzkaller0: entered allmulticast mode [ 757.104387][T12205] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 757.371756][T12205] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 757.978241][T12205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.999868][T12205] usb 5-1: config 0 descriptor?? [ 759.794080][T12205] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 759.812072][T12205] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 759.844430][T12205] [drm:udl_init] *ERROR* Selecting channel failed [ 759.879596][T12205] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 759.898456][T12205] [drm] Initialized udl on minor 2 [ 759.914452][T12205] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 759.923870][T12205] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 759.935866][ T5142] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 759.943847][ T5142] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 759.960445][T12205] usb 5-1: USB disconnect, device number 104 [ 760.375088][T12205] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 760.584327][T12205] usb 5-1: Using ep0 maxpacket: 8 [ 760.608524][T12205] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 760.624864][T12205] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 760.645512][T12205] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 760.664676][T12205] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 760.681705][T12205] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 760.696142][T12205] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 760.715265][T12205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.971191][T12205] usb 5-1: usb_control_msg returned -32 [ 760.976968][T12205] usbtmc 5-1:16.0: can't read capabilities [ 761.318856][T13779] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 763.137789][ T5142] usb 5-1: USB disconnect, device number 105 [ 764.374720][T13795] bond_slave_0: entered promiscuous mode [ 764.380563][T13795] bond_slave_1: entered promiscuous mode [ 764.492152][T13795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2527'. [ 764.633019][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 764.633039][ T29] audit: type=1326 audit(1721861392.082:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13792 comm="syz.3.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 764.698216][T13810] FAULT_INJECTION: forcing a failure. [ 764.698216][T13810] name failslab, interval 1, probability 0, space 0, times 0 [ 764.726729][T13810] CPU: 0 UID: 0 PID: 13810 Comm: syz.4.2532 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 764.737401][T13810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 764.747487][T13810] Call Trace: [ 764.750868][T13810] [ 764.753814][T13810] dump_stack_lvl+0x241/0x360 [ 764.758525][T13810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.763751][T13810] ? __pfx__printk+0x10/0x10 [ 764.768374][T13810] ? __kmalloc_node_noprof+0xb7/0x440 [ 764.773800][T13810] ? __pfx___might_resched+0x10/0x10 [ 764.779220][T13810] should_fail_ex+0x3b0/0x4e0 [ 764.783960][T13810] should_failslab+0xac/0x100 [ 764.788687][T13810] __kmalloc_node_noprof+0xdf/0x440 [ 764.793919][T13810] ? __kvmalloc_node_noprof+0x72/0x190 [ 764.799424][T13810] ? __pfx_vlan_setup+0x10/0x10 [ 764.804662][T13810] __kvmalloc_node_noprof+0x72/0x190 [ 764.809989][T13810] alloc_netdev_mqs+0x9b/0x1000 [ 764.814879][T13810] ? __pfx_vlan_setup+0x10/0x10 [ 764.820206][T13810] ? vlan_check_real_dev+0x20b/0x320 [ 764.825540][T13810] register_vlan_device+0x218/0x4a0 [ 764.830783][T13810] ? cap_capable+0x1b4/0x250 [ 764.835409][T13810] ? __pfx_register_vlan_device+0x10/0x10 [ 764.841184][T13810] vlan_ioctl_handler+0x2b9/0x9d0 [ 764.846251][T13810] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 764.851848][T13810] ? __asan_memset+0x23/0x50 [ 764.856499][T13810] ? smack_file_ioctl+0x2a1/0x3a0 [ 764.861686][T13810] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 764.867265][T13810] sock_ioctl+0x683/0x8e0 [ 764.871625][T13810] ? __pfx_sock_ioctl+0x10/0x10 [ 764.876596][T13810] ? __fget_files+0x3f6/0x470 [ 764.881300][T13810] ? __fget_files+0x29/0x470 [ 764.885922][T13810] ? bpf_lsm_file_ioctl+0x9/0x10 [ 764.890982][T13810] ? security_file_ioctl+0x87/0xb0 [ 764.896128][T13810] ? __pfx_sock_ioctl+0x10/0x10 [ 764.901457][T13810] __se_sys_ioctl+0xfc/0x170 [ 764.906138][T13810] do_syscall_64+0xf3/0x230 [ 764.910685][T13810] ? clear_bhb_loop+0x35/0x90 [ 764.915572][T13810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.921590][T13810] RIP: 0033:0x7fb2de575f19 [ 764.926306][T13810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.931732][ T29] audit: type=1326 audit(1721861392.342:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13792 comm="syz.3.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 764.946003][T13810] RSP: 002b:00007fb2df372048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.946089][T13810] RAX: ffffffffffffffda RBX: 00007fb2de705f60 RCX: 00007fb2de575f19 [ 764.946104][T13810] RDX: 00000000200008c0 RSI: 0000000000008982 RDI: 0000000000000007 [ 764.946117][T13810] RBP: 00007fb2df3720a0 R08: 0000000000000000 R09: 0000000000000000 [ 764.946129][T13810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.946141][T13810] R13: 000000000000000b R14: 00007fb2de705f60 R15: 00007ffc5d45dfb8 [ 764.946172][T13810] [ 765.033176][T13792] bond_slave_0: left promiscuous mode [ 765.033241][T13792] bond_slave_1: left promiscuous mode [ 765.041901][ T29] audit: type=1326 audit(1721861392.342:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13792 comm="syz.3.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 765.041956][ T29] audit: type=1326 audit(1721861392.342:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13792 comm="syz.3.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 765.041998][ T29] audit: type=1326 audit(1721861392.342:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13792 comm="syz.3.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 765.042037][ T29] audit: type=1326 audit(1721861392.342:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13792 comm="syz.3.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 765.042076][ T29] audit: type=1326 audit(1721861392.342:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13792 comm="syz.3.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 765.042114][ T29] audit: type=1326 audit(1721861392.342:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13792 comm="syz.3.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 765.042153][ T29] audit: type=1326 audit(1721861392.342:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13792 comm="syz.3.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 765.042191][ T29] audit: type=1326 audit(1721861392.342:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13792 comm="syz.3.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b32775f19 code=0x7fc00000 [ 765.328169][T13820] FAULT_INJECTION: forcing a failure. [ 765.328169][T13820] name failslab, interval 1, probability 0, space 0, times 0 [ 765.328205][T13820] CPU: 1 UID: 0 PID: 13820 Comm: syz.3.2535 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 765.328228][T13820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 765.328239][T13820] Call Trace: [ 765.328248][T13820] [ 765.328258][T13820] dump_stack_lvl+0x241/0x360 [ 765.328290][T13820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 765.328315][T13820] ? __pfx__printk+0x10/0x10 [ 765.328340][T13820] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 765.328366][T13820] ? __pfx___might_resched+0x10/0x10 [ 765.328394][T13820] should_fail_ex+0x3b0/0x4e0 [ 765.328425][T13820] ? getname_flags+0xb7/0x540 [ 765.328453][T13820] should_failslab+0xac/0x100 [ 765.328477][T13820] ? getname_flags+0xb7/0x540 [ 765.328499][T13820] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 765.328527][T13820] getname_flags+0xb7/0x540 [ 765.328555][T13820] user_path_at+0x24/0x60 [ 765.328581][T13820] path_setxattr+0xaf/0x2a0 [ 765.328611][T13820] ? __pfx_path_setxattr+0x10/0x10 [ 765.328634][T13820] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 765.328660][T13820] ? do_syscall_64+0x100/0x230 [ 765.328686][T13820] __x64_sys_lsetxattr+0xb8/0xd0 [ 765.328709][T13820] do_syscall_64+0xf3/0x230 [ 765.328733][T13820] ? clear_bhb_loop+0x35/0x90 [ 765.328755][T13820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.328781][T13820] RIP: 0033:0x7f0b32775f19 [ 765.328799][T13820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.328816][T13820] RSP: 002b:00007f0b33543048 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 765.328839][T13820] RAX: ffffffffffffffda RBX: 00007f0b32905f60 RCX: 00007f0b32775f19 [ 765.328855][T13820] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000000 [ 765.328868][T13820] RBP: 00007f0b335430a0 R08: 0000000000000000 R09: 0000000000000000 [ 765.328881][T13820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.328893][T13820] R13: 000000000000000b R14: 00007f0b32905f60 R15: 00007ffd8e0c4b38 [ 765.328920][T13820] [ 765.545941][T13826] nfs: Unknown parameter '/:():$' [ 765.560109][T13825] fuse: Bad value for 'fd' [ 767.752222][T13857] FAULT_INJECTION: forcing a failure. [ 767.752222][T13857] name failslab, interval 1, probability 0, space 0, times 0 [ 767.782502][T13857] CPU: 0 UID: 0 PID: 13857 Comm: syz.2.2546 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 767.792984][T13857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 767.803067][T13857] Call Trace: [ 767.806373][T13857] [ 767.809326][T13857] dump_stack_lvl+0x241/0x360 [ 767.814038][T13857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 767.819266][T13857] ? __pfx__printk+0x10/0x10 [ 767.823900][T13857] ? __kmalloc_node_noprof+0xb7/0x440 [ 767.829325][T13857] ? __pfx___might_resched+0x10/0x10 [ 767.834778][T13857] should_fail_ex+0x3b0/0x4e0 [ 767.839496][T13857] should_failslab+0xac/0x100 [ 767.844217][T13857] __kmalloc_node_noprof+0xdf/0x440 [ 767.849529][T13857] ? __kvmalloc_node_noprof+0x72/0x190 [ 767.855096][T13857] __kvmalloc_node_noprof+0x72/0x190 [ 767.860387][T13857] simple_xattr_set+0x74/0x360 [ 767.865154][T13857] shmem_xattr_handler_set+0x14d/0x2f0 [ 767.870613][T13857] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 767.876596][T13857] __vfs_setxattr+0x468/0x4a0 [ 767.881370][T13857] __vfs_setxattr_noperm+0x12e/0x660 [ 767.886664][T13857] vfs_setxattr+0x221/0x430 [ 767.891173][T13857] ? __pfx_lock_release+0x10/0x10 [ 767.896204][T13857] ? __pfx_vfs_setxattr+0x10/0x10 [ 767.901227][T13857] ? __might_fault+0xc6/0x120 [ 767.905906][T13857] ? _copy_from_user+0xa6/0xe0 [ 767.910676][T13857] setxattr+0x25d/0x2f0 [ 767.914839][T13857] ? __pfx_setxattr+0x10/0x10 [ 767.919537][T13857] ? mnt_get_write_access+0x226/0x2b0 [ 767.924922][T13857] __se_sys_fsetxattr+0x19e/0x220 [ 767.929950][T13857] do_syscall_64+0xf3/0x230 [ 767.934457][T13857] ? clear_bhb_loop+0x35/0x90 [ 767.939137][T13857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.945032][T13857] RIP: 0033:0x7fac8c175f19 [ 767.949443][T13857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.969049][T13857] RSP: 002b:00007fac8cec4048 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 767.977483][T13857] RAX: ffffffffffffffda RBX: 00007fac8c305f60 RCX: 00007fac8c175f19 [ 767.985464][T13857] RDX: 0000000020000580 RSI: 0000000020000540 RDI: 0000000000000003 [ 767.993446][T13857] RBP: 00007fac8cec40a0 R08: 0000000000000000 R09: 0000000000000000 [ 768.001424][T13857] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001 [ 768.009397][T13857] R13: 000000000000000b R14: 00007fac8c305f60 R15: 00007ffe7a8229b8 [ 768.017384][T13857] [ 768.376346][T13864] loop0: detected capacity change from 0 to 7 [ 768.433078][T13864] Dev loop0: unable to read RDB block 7 [ 768.461262][T13864] loop0: unable to read partition table [ 768.503512][T13864] loop0: partition table beyond EOD, truncated [ 768.577151][T13864] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 768.577151][T13864] ) failed (rc=-5) [ 769.179686][T12204] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 769.415617][T12205] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 769.470500][T12204] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 769.501775][T12204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.537694][T12204] usb 2-1: config 0 descriptor?? [ 769.587896][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 769.714656][T12205] usb 1-1: Using ep0 maxpacket: 8 [ 769.816195][T12205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.860532][T12205] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 770.043798][T12205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.063303][T12205] usb 1-1: config 0 descriptor?? [ 771.080788][T12204] [drm:udl_init] *ERROR* Selecting channel failed [ 771.100035][T12204] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 771.107029][T12204] [drm] Initialized udl on minor 2 [ 771.117135][T12204] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 771.126559][T12204] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 771.138003][ T5142] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 771.160651][T12204] usb 2-1: USB disconnect, device number 95 [ 771.171674][ T5142] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 771.338236][T13899] Process accounting resumed [ 771.496779][T12205] usbhid 1-1:0.0: can't add hid device: -71 [ 771.520338][T12205] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 771.544726][T12205] usb 1-1: USB disconnect, device number 105 [ 771.545858][T13907] binder: 13906:13907 ioctl c0306201 0 returned -14 [ 771.654482][T13910] tipc: Enabling of bearer rejected, failed to enable media [ 771.959405][T13915] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2565'. [ 771.987540][ T5140] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 772.044629][T13915] : entered promiscuous mode [ 772.176427][ T5140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.219998][ T5140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.243087][T13919] x_tables: duplicate underflow at hook 1 [ 772.259772][ T5140] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 772.292523][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.316968][ T5140] usb 5-1: config 0 descriptor?? [ 773.366051][ T5140] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 773.373742][ T5140] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 773.385792][ T5140] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0009/input/input33 [ 773.410042][ T5140] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 773.501423][ C0] eth0: bad gso: type: 1, size: 1408 [ 773.581983][T13941] tipc: Enabled bearer , priority 10 [ 774.405626][ T5171] usb 5-1: USB disconnect, device number 106 [ 774.690323][T13954] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2577'. [ 774.704712][ T5140] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 774.734775][T13954] openvswitch: : Dropping previously announced user features [ 774.944387][ T5140] usb 2-1: Using ep0 maxpacket: 8 [ 774.963426][ T5140] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 774.990573][ T5140] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 775.022322][ T5140] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 775.035018][T13963] binder: 13960:13963 ioctl c0306201 0 returned -14 [ 775.060198][ T5140] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 775.080714][ T5140] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 775.110521][ T5140] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 775.123065][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.165288][T12204] usb 1-1: new low-speed USB device number 106 using dummy_hcd [ 775.344504][T12204] usb 1-1: device descriptor read/64, error -71 [ 775.359863][ T5140] usb 2-1: usb_control_msg returned -32 [ 775.373093][ T5140] usbtmc 2-1:16.0: can't read capabilities [ 775.634402][T12204] usb 1-1: new low-speed USB device number 107 using dummy_hcd [ 775.720755][T13968] usbtmc 2-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 775.834355][T12204] usb 1-1: device descriptor read/64, error -71 [ 776.350527][T12204] usb usb1-port1: attempt power cycle [ 776.605431][ T5142] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 776.814353][ T5142] usb 4-1: Using ep0 maxpacket: 16 [ 776.839789][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.054577][T12204] usb 1-1: new low-speed USB device number 108 using dummy_hcd [ 777.062623][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.079002][ T5142] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 777.093187][ T5142] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 777.102470][ T5142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.158342][ T5144] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 777.159461][ T5142] usb 4-1: config 0 descriptor?? [ 777.234143][T12204] usb 1-1: device descriptor read/8, error -71 [ 777.414408][ T5144] usb 3-1: Using ep0 maxpacket: 8 [ 777.469518][ T5144] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 777.499719][ T5144] usb 3-1: config 135 has an invalid descriptor of length 255, skipping remainder of the config [ 777.529717][ T5144] usb 3-1: config 135 has no interface number 0 [ 777.541728][ T5144] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 777.556377][T12204] usb 1-1: new low-speed USB device number 109 using dummy_hcd [ 777.566429][ T5144] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 777.575878][ T5144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.584637][ T5144] usb 3-1: Product: syz [ 777.594155][ T5144] usb 3-1: Manufacturer: syz [ 777.606655][T12204] usb 1-1: device descriptor read/8, error -71 [ 777.610981][ T5144] usb 3-1: SerialNumber: syz [ 777.642237][ T5142] microsoft 0003:045E:07DA.000A: report is too long [ 777.679548][ T5142] microsoft 0003:045E:07DA.000A: item 0 4 0 8 parsing failed [ 777.699974][ T5142] microsoft 0003:045E:07DA.000A: parse failed [ 777.715724][ T5144] usb 2-1: USB disconnect, device number 96 [ 777.734369][ T5142] microsoft 0003:045E:07DA.000A: probe with driver microsoft failed with error -22 [ 777.774488][T12204] usb usb1-port1: unable to enumerate USB device [ 777.887290][ T5142] usb 4-1: USB disconnect, device number 115 [ 779.329169][T13993] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2590'. [ 779.392244][ T5144] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 779.485374][T13993] : entered promiscuous mode [ 779.755954][ T5144] usb 2-1: Using ep0 maxpacket: 32 [ 779.810212][ T5144] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 779.820123][ T5144] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.837797][ T5144] usb 2-1: Product: syz [ 779.842022][ T5144] usb 2-1: Manufacturer: syz [ 779.852958][ T5144] usb 2-1: SerialNumber: syz [ 779.879563][ T5144] usb 2-1: config 0 descriptor?? [ 779.884766][T12204] usb 3-1: USB disconnect, device number 98 [ 779.906063][ T5144] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 780.029680][T14002] binder: 14001:14002 ioctl c0306201 0 returned -14 [ 780.215941][T14008] FAULT_INJECTION: forcing a failure. [ 780.215941][T14008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.244445][T14008] CPU: 1 UID: 0 PID: 14008 Comm: syz.2.2595 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 780.254875][T14008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 780.264926][T14008] Call Trace: [ 780.268195][T14008] [ 780.271112][T14008] dump_stack_lvl+0x241/0x360 [ 780.275784][T14008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 780.280971][T14008] ? __pfx__printk+0x10/0x10 [ 780.285584][T14008] ? __pfx_lock_release+0x10/0x10 [ 780.290608][T14008] should_fail_ex+0x3b0/0x4e0 [ 780.295298][T14008] _copy_from_iter+0x1f6/0x1960 [ 780.300133][T14008] ? __virt_addr_valid+0x183/0x530 [ 780.305247][T14008] ? __pfx_lock_release+0x10/0x10 [ 780.310298][T14008] ? __pfx__copy_from_iter+0x10/0x10 [ 780.315602][T14008] ? __virt_addr_valid+0x183/0x530 [ 780.320798][T14008] ? __virt_addr_valid+0x183/0x530 [ 780.325913][T14008] ? __virt_addr_valid+0x45f/0x530 [ 780.331023][T14008] ? __check_object_size+0x49c/0x900 [ 780.336310][T14008] netlink_sendmsg+0x73d/0xcb0 [ 780.341080][T14008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 780.346370][T14008] ? __import_iovec+0x536/0x820 [ 780.351228][T14008] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 780.356509][T14008] ? security_socket_sendmsg+0x87/0xb0 [ 780.361974][T14008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 780.367280][T14008] __sock_sendmsg+0x221/0x270 [ 780.372051][T14008] ____sys_sendmsg+0x525/0x7d0 [ 780.376824][T14008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 780.382114][T14008] __sys_sendmsg+0x2b0/0x3a0 [ 780.386706][T14008] ? __pfx___sys_sendmsg+0x10/0x10 [ 780.391811][T14008] ? vfs_write+0x7c4/0xc90 [ 780.396251][T14008] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 780.402576][T14008] ? do_syscall_64+0x100/0x230 [ 780.407337][T14008] ? do_syscall_64+0xb6/0x230 [ 780.412013][T14008] do_syscall_64+0xf3/0x230 [ 780.416511][T14008] ? clear_bhb_loop+0x35/0x90 [ 780.421183][T14008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.427073][T14008] RIP: 0033:0x7fac8c175f19 [ 780.431483][T14008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.451089][T14008] RSP: 002b:00007fac8cec4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 780.459502][T14008] RAX: ffffffffffffffda RBX: 00007fac8c305f60 RCX: 00007fac8c175f19 [ 780.467475][T14008] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 780.475442][T14008] RBP: 00007fac8cec40a0 R08: 0000000000000000 R09: 0000000000000000 [ 780.483424][T14008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.491397][T14008] R13: 000000000000000b R14: 00007fac8c305f60 R15: 00007ffe7a8229b8 [ 780.499469][T14008] [ 780.588354][ T5171] usb 2-1: USB disconnect, device number 97 [ 781.633336][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 781.652359][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2597'. [ 782.110142][T14041] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2604'. [ 782.149384][T14041] openvswitch: : Dropping previously announced user features [ 783.345536][T14063] No such timeout policy "syz1" [ 783.441571][T14063] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2611'. [ 783.614830][ T5144] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 783.829134][ T5144] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 783.860674][ T5144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.895838][ T5144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.931024][ T5144] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 783.985730][ T5144] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 784.006977][T14088] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2621'. [ 784.020140][ T5144] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 784.037621][T14088] : entered promiscuous mode [ 784.042715][ T5144] usb 2-1: Manufacturer: syz [ 784.059999][ T5144] usb 2-1: config 0 descriptor?? [ 784.104627][ T5171] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 784.320213][ T5171] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 784.379812][ T5171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.403836][ T5171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.573873][ T5171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 785.087727][ T5171] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 785.098653][ T5171] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 785.108570][ T5171] usb 5-1: Manufacturer: syz [ 785.133525][ T5171] usb 5-1: config 0 descriptor?? [ 785.348800][T14085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2619'. [ 785.555262][T12204] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 785.606688][ T5171] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 785.626080][ T5171] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 785.670522][ T5171] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 785.766344][T12204] usb 1-1: Using ep0 maxpacket: 8 [ 785.803252][T12204] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 785.814958][ T1147] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 785.831511][T12204] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.860215][T12204] usb 1-1: Product: syz [ 785.880362][T12204] usb 1-1: Manufacturer: syz [ 785.895258][T12204] usb 1-1: SerialNumber: syz [ 785.913112][T12204] usb 1-1: config 0 descriptor?? [ 785.933812][T12204] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 786.024603][ T1147] usb 3-1: Using ep0 maxpacket: 16 [ 786.049673][ T1147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.072024][ T1147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.082452][ T1147] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 786.102072][ T1147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.133402][ T1147] usb 3-1: config 0 descriptor?? [ 786.399038][ T1147] itetech 0003:06CB:73F4.000C: hidraw1: USB HID v0.00 Device [HID 06cb:73f4] on usb-dummy_hcd.2-1/input0 [ 786.444520][ T5144] usbhid 2-1:0.0: can't add hid device: -71 [ 786.454842][ T5144] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 786.488367][ T25] usb 5-1: USB disconnect, device number 107 [ 786.495871][ T5144] usb 2-1: USB disconnect, device number 98 [ 786.984386][ T5144] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 787.208787][ T5144] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 787.236732][ T5144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.296329][ T5144] usb 2-1: config 0 descriptor?? [ 787.566739][T14099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.620381][T14099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.798352][T12204] usb 1-1: USB disconnect, device number 110 [ 789.044106][ T5142] usb 3-1: USB disconnect, device number 99 [ 789.704411][ T5171] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 789.727015][T14150] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 789.743386][ T5144] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 789.774524][ T5144] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 789.784797][T14148] Bluetooth: hci3: unsupported parameter 64512 [ 789.791176][T14148] Bluetooth: hci3: invalid length 0, exp 2 for type 7 [ 789.801742][ T5144] [drm:udl_init] *ERROR* Selecting channel failed [ 789.822187][ T5144] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 789.836343][ T5144] [drm] Initialized udl on minor 2 [ 789.854616][ T5144] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 789.866252][ T5144] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 789.873123][ T1147] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 789.891909][ T1147] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 789.910913][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 789.921472][ T5171] usb 4-1: Using ep0 maxpacket: 16 [ 789.932701][ T5144] usb 2-1: USB disconnect, device number 99 [ 789.940809][ T5171] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.951321][ T1147] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 789.966726][ T5171] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 789.988190][ T5171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.024574][ T5171] usb 4-1: Product: syz [ 790.041294][ T5171] usb 4-1: Manufacturer: syz [ 790.054294][ T5171] usb 4-1: SerialNumber: syz [ 790.079669][ T5171] usb 4-1: config 0 descriptor?? [ 790.095810][T14159] netlink: 'syz.2.2646': attribute type 24 has an invalid length. [ 790.364774][ T5144] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 790.371993][ T5142] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 790.528839][ T5171] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 790.576349][ T5144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.587479][ T5171] usb 4-1: No valid video chain found. [ 790.604012][ T5142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.624379][ T5144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.655225][ T5144] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 790.657913][ T5142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.678569][ T5144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.690604][T14172] syzkaller0: entered promiscuous mode [ 790.708625][ T5142] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 790.728998][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.744630][ T5144] usb 2-1: config 0 descriptor?? [ 790.764995][ T5142] usb 5-1: config 0 descriptor?? [ 790.776577][T14172] syzkaller0: entered allmulticast mode [ 790.794549][ T5171] usb 4-1: USB disconnect, device number 116 [ 791.203461][ T5144] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 791.221627][ T5144] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 791.249027][ T5144] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.000D/input/input34 [ 791.279188][ T5142] usbhid 5-1:0.0: can't add hid device: -71 [ 791.295636][ T5144] cm6533_jd 0003:0D8C:0022.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 791.299233][ T5142] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 791.376497][ T5142] usb 5-1: USB disconnect, device number 108 [ 791.387920][ C0] eth0: bad gso: type: 1, size: 1408 [ 791.439143][ T5171] usb 2-1: USB disconnect, device number 100 [ 791.847463][ T25] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 792.046451][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 792.089965][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 792.112738][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.135909][ T25] usb 1-1: Product: syz [ 792.141195][ T25] usb 1-1: Manufacturer: syz [ 792.155423][ T25] usb 1-1: SerialNumber: syz [ 792.166443][ T25] usb 1-1: config 0 descriptor?? [ 792.181293][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 792.237594][ T25] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 792.618333][T14201] tmpfs: Bad value for 'nr_inodes' [ 793.777924][T14180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.837037][T14180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.893622][ T1147] usb 1-1: USB disconnect, device number 111 [ 795.731303][T14208] Bluetooth: hci0: command 0x0406 tx timeout [ 796.288585][T14230] FAULT_INJECTION: forcing a failure. [ 796.288585][T14230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.046074][T14230] CPU: 0 UID: 0 PID: 14230 Comm: syz.4.2666 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 797.057082][T14230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 797.067518][T14230] Call Trace: [ 797.070800][T14230] [ 797.073727][T14230] dump_stack_lvl+0x241/0x360 [ 797.078498][T14230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 797.083694][T14230] ? __pfx__printk+0x10/0x10 [ 797.088289][T14230] ? snprintf+0xda/0x120 [ 797.092534][T14230] should_fail_ex+0x3b0/0x4e0 [ 797.097215][T14230] _copy_to_user+0x2f/0xb0 [ 797.101631][T14230] simple_read_from_buffer+0xca/0x150 [ 797.107009][T14230] proc_fail_nth_read+0x1e9/0x250 [ 797.112037][T14230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 797.117587][T14230] ? rw_verify_area+0x520/0x6b0 [ 797.122434][T14230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 797.128076][T14230] vfs_read+0x204/0xbc0 [ 797.132226][T14230] ? __pfx_lock_release+0x10/0x10 [ 797.137254][T14230] ? bpf_prog_attach_check_attach_type+0x198/0x4b0 [ 797.143759][T14230] ? __pfx_vfs_read+0x10/0x10 [ 797.148429][T14230] ? bpf_lsm_bpf+0x9/0x10 [ 797.152752][T14230] ? __fget_files+0x29/0x470 [ 797.157342][T14230] ? __fget_files+0x3f6/0x470 [ 797.162028][T14230] ksys_read+0x1a0/0x2c0 [ 797.166364][T14230] ? __pfx_ksys_read+0x10/0x10 [ 797.171136][T14230] ? do_syscall_64+0x100/0x230 [ 797.175902][T14230] ? do_syscall_64+0xb6/0x230 [ 797.180755][T14230] do_syscall_64+0xf3/0x230 [ 797.185334][T14230] ? clear_bhb_loop+0x35/0x90 [ 797.190012][T14230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.195907][T14230] RIP: 0033:0x7fb2de5749fc [ 797.200317][T14230] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 797.219929][T14230] RSP: 002b:00007fb2df372040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 797.228346][T14230] RAX: ffffffffffffffda RBX: 00007fb2de705f60 RCX: 00007fb2de5749fc [ 797.236315][T14230] RDX: 000000000000000f RSI: 00007fb2df3720b0 RDI: 0000000000000004 [ 797.244282][T14230] RBP: 00007fb2df3720a0 R08: 0000000000000000 R09: 0000000000000000 [ 797.252268][T14230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.260239][T14230] R13: 000000000000000b R14: 00007fb2de705f60 R15: 00007ffc5d45dfb8 [ 797.268227][T14230] [ 797.509285][T10836] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.626030][T10836] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.803790][T10836] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.997960][T10836] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.329093][T10836] bridge_slave_1: left allmulticast mode [ 798.343841][T10836] bridge_slave_1: left promiscuous mode [ 798.361017][T10836] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.392348][T10836] bridge_slave_0: left allmulticast mode [ 798.392376][T10836] bridge_slave_0: left promiscuous mode [ 798.392611][T10836] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.464973][ T5171] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 798.647505][ T5171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.647545][ T5171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.647590][ T5171] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 798.647616][ T5171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.678248][ T5171] usb 3-1: config 0 descriptor?? [ 799.053228][T14208] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 799.068506][T14208] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 799.087301][T14208] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 799.090029][T14208] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 799.099742][T14208] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 799.108489][T14208] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 799.621199][ T5171] wacom 0003:056A:00F8.000E: collection stack underflow [ 799.652917][ T5171] wacom 0003:056A:00F8.000E: item 0 0 0 12 parsing failed [ 799.695100][ T5171] wacom 0003:056A:00F8.000E: parse failed [ 799.717207][ T5171] wacom 0003:056A:00F8.000E: probe with driver wacom failed with error -22 [ 800.285250][T10836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.336369][T10836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.375403][T10836] bond0 (unregistering): Released all slaves [ 800.544888][T10836] : left promiscuous mode [ 800.963366][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 801.197087][ T54] Bluetooth: hci1: command tx timeout [ 802.122250][T14317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.288679][T14317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.408139][T14317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.457061][T14317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.578035][T14317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.630497][T14317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.754983][T10836] hsr_slave_0: left promiscuous mode [ 802.780221][T10836] hsr_slave_1: left promiscuous mode [ 802.794962][T10836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.820477][T10836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.851388][T10836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 802.862394][T10836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.939667][T10836] veth1_macvtap: left promiscuous mode [ 802.951133][T10836] veth0_macvtap: left promiscuous mode [ 802.971478][T10836] veth1_vlan: left promiscuous mode [ 802.983958][T10836] veth0_vlan: left promiscuous mode [ 803.244626][ T54] Bluetooth: hci1: command tx timeout [ 804.277438][T10836] team0 (unregistering): Port device team_slave_1 removed [ 804.360256][T10836] team0 (unregistering): Port device team_slave_0 removed [ 805.253775][T14271] chnl_net:caif_netlink_parms(): no params data found [ 805.328843][ T54] Bluetooth: hci1: command tx timeout [ 805.673836][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 805.895640][T14369] FAULT_INJECTION: forcing a failure. [ 805.895640][T14369] name failslab, interval 1, probability 0, space 0, times 0 [ 805.908428][T14369] CPU: 1 UID: 0 PID: 14369 Comm: syz.0.2697 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 805.918866][T14369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 805.929007][T14369] Call Trace: [ 805.932312][T14369] [ 805.935250][T14369] dump_stack_lvl+0x241/0x360 [ 805.939935][T14369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 805.945129][T14369] ? __pfx__printk+0x10/0x10 [ 805.949725][T14369] ? __pfx_lock_acquire+0x10/0x10 [ 805.954749][T14369] ? nf_ct_pernet+0x45/0x270 [ 805.959342][T14369] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 805.965332][T14369] should_fail_ex+0x3b0/0x4e0 [ 805.970020][T14369] ? __nf_conntrack_alloc+0x8f/0x380 [ 805.975307][T14369] should_failslab+0xac/0x100 [ 805.979984][T14369] ? __nf_conntrack_alloc+0x8f/0x380 [ 805.985345][T14369] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 805.990771][T14369] __nf_conntrack_alloc+0x8f/0x380 [ 805.995907][T14369] init_conntrack+0x3c3/0x1310 [ 806.000742][T14369] ? __pfx_init_conntrack+0x10/0x10 [ 806.005953][T14369] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 806.011943][T14369] ? __local_bh_enable_ip+0x168/0x200 [ 806.017329][T14369] nf_conntrack_in+0xd59/0x1880 [ 806.022230][T14369] ? __pfx_nf_conntrack_in+0x10/0x10 [ 806.027539][T14369] ? __pfx_ipv6_conntrack_in+0x10/0x10 [ 806.032992][T14369] nf_hook_slow+0xc3/0x220 [ 806.037412][T14369] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 806.042610][T14369] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 806.047808][T14369] NF_HOOK+0x29e/0x450 [ 806.051889][T14369] ? skb_orphan+0x4b/0xd0 [ 806.056229][T14369] ? NF_HOOK+0x9a/0x450 [ 806.060385][T14369] ? __pfx_NF_HOOK+0x10/0x10 [ 806.064981][T14369] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 806.070195][T14369] ? __pfx_ipv6_rcv+0x10/0x10 [ 806.074873][T14369] __netif_receive_skb+0x1ea/0x650 [ 806.079989][T14369] ? __pfx_lock_acquire+0x10/0x10 [ 806.085020][T14369] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 806.091261][T14369] ? __pfx___netif_receive_skb+0x10/0x10 [ 806.097169][T14369] ? __kasan_slab_alloc+0x66/0x80 [ 806.102205][T14369] ? read_tsc+0x9/0x20 [ 806.106271][T14369] ? timekeeping_get_ns+0x2c0/0x420 [ 806.111908][T14369] ? netif_receive_skb+0x131/0x890 [ 806.117021][T14369] ? netif_receive_skb+0x131/0x890 [ 806.122131][T14369] netif_receive_skb+0x1e8/0x890 [ 806.127067][T14369] ? tun_rx_batched+0x160/0x8f0 [ 806.131912][T14369] ? __pfx_netif_receive_skb+0x10/0x10 [ 806.137376][T14369] ? tun_rx_batched+0x160/0x8f0 [ 806.142313][T14369] tun_rx_batched+0x1b7/0x8f0 [ 806.146993][T14369] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 806.153326][T14369] ? __pfx_lock_acquire+0x10/0x10 [ 806.158349][T14369] ? __pfx_tun_rx_batched+0x10/0x10 [ 806.163561][T14369] tun_get_user+0x2f84/0x4720 [ 806.168244][T14369] ? tun_get_user+0x2a78/0x4720 [ 806.173102][T14369] ? __lock_acquire+0x137a/0x2040 [ 806.178134][T14369] ? __pfx_tun_get_user+0x10/0x10 [ 806.183180][T14369] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 806.188635][T14369] ? tun_get+0x1e/0x2f0 [ 806.192787][T14369] ? __pfx_lock_release+0x10/0x10 [ 806.197823][T14369] ? tun_get+0x1e/0x2f0 [ 806.202157][T14369] ? tun_get+0x27d/0x2f0 [ 806.206441][T14369] tun_chr_write_iter+0x113/0x1f0 [ 806.211462][T14369] vfs_write+0xa72/0xc90 [ 806.215702][T14369] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 806.221244][T14369] ? __pfx_vfs_write+0x10/0x10 [ 806.226023][T14369] ksys_write+0x1a0/0x2c0 [ 806.230353][T14369] ? __pfx_ksys_write+0x10/0x10 [ 806.235199][T14369] ? do_syscall_64+0x100/0x230 [ 806.239966][T14369] ? do_syscall_64+0xb6/0x230 [ 806.244639][T14369] do_syscall_64+0xf3/0x230 [ 806.249240][T14369] ? clear_bhb_loop+0x35/0x90 [ 806.253914][T14369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.260067][T14369] RIP: 0033:0x7fa385774a9f [ 806.264483][T14369] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 806.284109][T14369] RSP: 002b:00007fa386623010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 806.292528][T14369] RAX: ffffffffffffffda RBX: 00007fa385905f60 RCX: 00007fa385774a9f [ 806.300502][T14369] RDX: 0000000000000056 RSI: 00000000200000c0 RDI: 00000000000000c8 [ 806.308557][T14369] RBP: 00007fa3866230a0 R08: 0000000000000000 R09: 0000000000000000 [ 806.316794][T14369] R10: 0000000000000056 R11: 0000000000000293 R12: 0000000000000001 [ 806.324761][T14369] R13: 000000000000000b R14: 00007fa385905f60 R15: 00007ffd69f97cd8 [ 806.332741][T14369] [ 806.335835][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.608334][T14271] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.644536][T14271] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.651889][T14271] bridge_slave_0: entered allmulticast mode [ 806.695978][T14271] bridge_slave_0: entered promiscuous mode [ 806.731235][T14378] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2699'. [ 806.764786][T14271] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.772073][T14271] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.803401][T14271] bridge_slave_1: entered allmulticast mode [ 806.814412][T12128] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 806.828414][T14271] bridge_slave_1: entered promiscuous mode [ 806.894348][ T1147] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 806.986921][T14271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.017798][T14271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.025817][T12128] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 807.069828][ T1147] usb 2-1: device descriptor read/64, error -71 [ 807.076636][T12128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.129699][T12128] usb 5-1: config 0 descriptor?? [ 807.147837][T12128] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 807.182283][T14271] team0: Port device team_slave_0 added [ 807.228857][T14271] team0: Port device team_slave_1 added [ 807.374637][ T1147] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 807.404578][ T54] Bluetooth: hci1: command tx timeout [ 807.435287][T14271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.442577][T14271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.483265][T14271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.522197][T14271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.537062][T14271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.544412][ T1147] usb 2-1: device descriptor read/64, error -71 [ 807.575643][T14271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.769189][T14271] hsr_slave_0: entered promiscuous mode [ 807.779867][ T1147] usb usb2-port1: attempt power cycle [ 807.806638][T14271] hsr_slave_1: entered promiscuous mode [ 807.829076][T14271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 807.850271][T14271] Cannot create hsr debugfs directory [ 808.224382][ T1147] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 808.285295][ T1147] usb 2-1: device descriptor read/8, error -71 [ 808.407809][T14380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.454658][T14380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.470714][T14380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.501790][T14380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.541384][T12128] gspca_stv06xx: I2C: Read error writing address: -71 [ 808.580131][T12128] usb 5-1: USB disconnect, device number 109 [ 808.604822][ T1147] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 808.649396][ T1147] usb 2-1: device descriptor read/8, error -71 [ 808.715963][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 808.775680][ T1147] usb usb2-port1: unable to enumerate USB device [ 809.010814][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.018889][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.347858][T14433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.470212][T14271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 810.508578][T14271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 810.581001][T12128] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 810.676088][T14271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 810.744433][T12128] usb 2-1: device descriptor read/64, error -71 [ 810.777646][T14271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 811.015054][T12128] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 811.194400][T12128] usb 2-1: device descriptor read/64, error -71 [ 811.238150][T14271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.274396][ T1147] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 811.324854][T12128] usb usb2-port1: attempt power cycle [ 811.343212][T14271] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.404048][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.411206][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.448932][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.456120][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.494346][ T1147] usb 5-1: Using ep0 maxpacket: 16 [ 811.505884][ T1147] usb 5-1: config index 0 descriptor too short (expected 7148, got 36) [ 811.526535][ T1147] usb 5-1: config 227 has too many interfaces: 61, using maximum allowed: 32 [ 811.565764][ T30] INFO: task syz.0.2174:12624 blocked for more than 143 seconds. [ 811.575907][ T1147] usb 5-1: config 227 has an invalid descriptor of length 172, skipping remainder of the config [ 811.594859][T14271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 811.607076][ T30] Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 811.618362][ T1147] usb 5-1: config 227 has 0 interfaces, different from the descriptor's value: 61 [ 811.628407][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 811.639562][T14271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 811.656799][ T1147] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 811.666735][ T30] task:syz.0.2174 state:D stack:24672 pid:12624 tgid:12624 ppid:12069 flags:0x00004004 [ 811.701124][ T1147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.713594][ T30] Call Trace: [ 811.721530][ T30] [ 811.731683][ T30] __schedule+0x17ae/0x4a10 [ 811.744413][ T30] ? __pfx___schedule+0x10/0x10 [ 811.752723][ T30] ? __pfx_lock_release+0x10/0x10 [ 811.760269][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 811.768830][T12128] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 811.789902][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 811.800036][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 811.829776][T12128] usb 2-1: device descriptor read/8, error -71 [ 811.842925][ T30] ? schedule+0x90/0x320 [ 811.874768][ T30] schedule+0x14b/0x320 [ 811.887507][ T30] ? down_read+0x6a5/0xa40 [ 811.910533][ T30] schedule_preempt_disabled+0x13/0x30 [ 811.939193][ T30] down_read+0x705/0xa40 [ 811.959250][ T1147] usb 5-1: string descriptor 0 read error: -71 [ 811.977875][ T30] ? __pfx_down_read+0x10/0x10 [ 812.033756][ T1147] usb 5-1: USB disconnect, device number 110 [ 812.042473][ T30] ? mm_release+0x263/0x430 [ 812.053575][ T30] ? __pfx_mm_release+0x10/0x10 [ 812.068684][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.079944][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 812.087957][ T30] exit_mm+0xd4/0x310 [ 812.111862][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.162752][ T30] ? __pfx_exit_mm+0x10/0x10 [ 812.174453][T12128] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 812.182067][ T30] ? taskstats_exit+0x326/0xa60 [ 812.182124][ T30] do_exit+0x9b2/0x27f0 [ 812.182154][ T30] ? __pfx_do_exit+0x10/0x10 [ 812.182174][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 812.182199][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 812.182228][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 812.283196][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 812.309350][T12128] usb 2-1: device descriptor read/8, error -71 [ 812.317908][ T30] do_group_exit+0x207/0x2c0 [ 812.363340][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.401982][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 812.433548][ T30] get_signal+0x1695/0x1730 [ 812.464737][T12128] usb usb2-port1: unable to enumerate USB device [ 812.486554][ T30] ? __pfx_get_signal+0x10/0x10 [ 812.536174][ T30] ? down_write_killable+0x1bc/0x260 [ 812.559568][ T30] ? vm_mmap_pgoff+0x17c/0x3d0 [ 812.592416][ T30] arch_do_signal_or_restart+0x96/0x860 [ 812.623007][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 812.646042][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 812.674976][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 812.691913][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 812.707241][ T30] do_syscall_64+0x100/0x230 [ 812.734413][ T30] ? clear_bhb_loop+0x35/0x90 [ 812.739216][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.753579][ T30] RIP: 0033:0x7f0411375f53 [ 812.767704][ T30] RSP: 002b:00007ffcbae90ab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 812.791973][ T30] RAX: fffffffffffffffc RBX: 00007f040f6006c0 RCX: 00007f0411375f53 [ 812.810436][ T30] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 812.843415][ T30] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 812.854071][ T30] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffcbae90d10 [ 812.863732][ T30] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 812.872220][ T30] [ 812.889528][ T30] [ 812.889528][ T30] Showing all locks held in the system: [ 812.936940][ T30] 1 lock held by khungtaskd/30: [ 812.941844][ T30] #0: ffffffff8e337660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 812.972284][ T30] 2 locks held by kworker/u8:2/35: [ 812.977745][ T30] 2 locks held by syslogd/4525: [ 813.002979][ T30] #0: ffff8880b943e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 813.009642][T14271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.030307][ T30] #1: ffff8880b9428948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 813.042070][ T30] 1 lock held by dhcpcd/4757: [ 813.047284][ T30] #0: ffffffff8f5f6248 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 813.062612][ T30] 2 locks held by getty/4846: [ 813.072506][ T30] #0: ffff88802a5b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 813.096447][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 813.112365][ T30] 3 locks held by kworker/0:5/5144: [ 813.122268][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 813.139451][ T30] #1: ffffc90003fffd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 813.162352][ T30] #2: ffff88803a0b3240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 813.186893][ T30] 2 locks held by kworker/0:4/12128: [ 813.192286][ T30] 1 lock held by syz.0.2174/12624: [ 813.202860][ T30] #0: ffff88802c41cd98 (&mm->mmap_lock){++++}-{3:3}, at: exit_mm+0xd4/0x310 [ 813.207608][T14271] veth0_vlan: entered promiscuous mode [ 813.222769][ T30] 2 locks held by syz.0.2174/12625: [ 813.241883][ T30] 1 lock held by syz-executor/14271: [ 813.252499][T14271] veth1_vlan: entered promiscuous mode [ 813.275653][ T30] 2 locks held by syz.1.2711/14439: [ 813.290252][ T30] 3 locks held by dhcpcd-run-hook/14492: [ 813.312786][ T30] [ 813.316582][ T30] ============================================= [ 813.316582][ T30] [ 813.344349][ T30] NMI backtrace for cpu 1 [ 813.348721][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 813.358884][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 813.369212][ T30] Call Trace: [ 813.372488][ T30] [ 813.375418][ T30] dump_stack_lvl+0x241/0x360 [ 813.380189][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 813.385382][ T30] ? __pfx__printk+0x10/0x10 [ 813.389965][ T30] ? vprintk_emit+0x631/0x770 [ 813.394636][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 813.399658][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 813.404602][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 813.410060][ T30] ? _printk+0xd5/0x120 [ 813.414209][ T30] ? __pfx__printk+0x10/0x10 [ 813.418801][ T30] ? __wake_up_klogd+0xcc/0x110 [ 813.423647][ T30] ? __pfx__printk+0x10/0x10 [ 813.428233][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 813.433252][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 813.439262][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 813.445268][ T30] watchdog+0xfee/0x1030 [ 813.449705][ T30] ? watchdog+0x1ea/0x1030 [ 813.454130][ T30] ? __pfx_watchdog+0x10/0x10 [ 813.458809][ T30] kthread+0x2f0/0x390 [ 813.462879][ T30] ? __pfx_watchdog+0x10/0x10 [ 813.467578][ T30] ? __pfx_kthread+0x10/0x10 [ 813.472338][ T30] ret_from_fork+0x4b/0x80 [ 813.476761][ T30] ? __pfx_kthread+0x10/0x10 [ 813.481343][ T30] ret_from_fork_asm+0x1a/0x30 [ 813.486205][ T30] [ 813.490358][ T30] Sending NMI from CPU 1 to CPUs 0: [ 813.495876][ C0] NMI backtrace for cpu 0 [ 813.495891][ C0] CPU: 0 UID: 0 PID: 12625 Comm: syz.0.2174 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 813.495911][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 813.495921][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 813.495948][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 2c 60 4a 0c 48 89 de 5b e9 e3 60 58 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 00 d7 03 00 65 8b 15 10 54 [ 813.495962][ C0] RSP: 0018:ffffc900032575e0 EFLAGS: 00000286 [ 813.495977][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffffc900032576e0 [ 813.495989][ C0] RDX: ffffc90003257740 RSI: ffff88809b9ea000 RDI: ffffffff8e134888 [ 813.496002][ C0] RBP: ffffc90003257740 R08: ffffc900032576f0 R09: 1ffffffff25f9906 [ 813.496015][ C0] R10: dffffc0000000000 R11: fffffbfff25f9907 R12: 1ffff9200064aed8 [ 813.496027][ C0] R13: ffffc900032576f0 R14: ffffc900032577b0 R15: ffffc900032576e0 [ 813.496040][ C0] FS: 00007f04122196c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 813.496055][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 813.496067][ C0] CR2: 00007f67f2b88ba8 CR3: 000000006eed6000 CR4: 00000000003526f0 [ 813.496081][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 813.496091][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 813.496102][ C0] Call Trace: [ 813.496108][ C0] [ 813.496116][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 813.496141][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 813.496165][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 813.496188][ C0] ? nmi_handle+0x2a/0x5a0 [ 813.496212][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 813.496232][ C0] ? nmi_handle+0x14f/0x5a0 [ 813.496248][ C0] ? nmi_handle+0x2a/0x5a0 [ 813.496264][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 813.496285][ C0] ? default_do_nmi+0x63/0x160 [ 813.496301][ C0] ? exc_nmi+0x123/0x1f0 [ 813.496315][ C0] ? end_repeat_nmi+0xf/0x53 [ 813.496336][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 813.496358][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 813.496380][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 813.496402][ C0] [ 813.496408][ C0] [ 813.496414][ C0] lookup_address_in_pgd_attr+0x34/0x810 [ 813.496438][ C0] change_page_attr_set_clr+0xa3a/0xdb0 [ 813.496457][ C0] ? pagerange_is_ram_callback+0xe2/0x140 [ 813.496485][ C0] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 813.496505][ C0] ? memtype_reserve+0x8f7/0xc20 [ 813.496537][ C0] ? _set_pages_array+0xa1/0x210 [ 813.496560][ C0] _set_pages_array+0x14f/0x210 [ 813.496583][ C0] drm_gem_shmem_get_pages+0x19c/0x290 [ 813.496607][ C0] drm_gem_shmem_mmap+0x1a1/0x4d0 [ 813.496631][ C0] drm_gem_mmap_obj+0x182/0x560 [ 813.496654][ C0] drm_gem_mmap+0x4a0/0x7c0 [ 813.496676][ C0] ? __pfx_drm_gem_mmap+0x10/0x10 [ 813.496697][ C0] ? __mas_set_range+0x133/0x3c0 [ 813.496721][ C0] mmap_region+0xe8f/0x2090 [ 813.496739][ C0] ? mark_lock+0x9a/0x350 [ 813.496771][ C0] ? __pfx_mmap_region+0x10/0x10 [ 813.496797][ C0] ? thp_get_unmapped_area_vmflags+0x269/0x380 [ 813.496816][ C0] ? cap_mmap_addr+0x163/0x2c0 [ 813.496840][ C0] ? __get_unmapped_area+0x2f0/0x360 [ 813.496862][ C0] do_mmap+0x8ad/0xfa0 [ 813.496886][ C0] ? __pfx_do_mmap+0x10/0x10 [ 813.496902][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 813.496921][ C0] ? __pfx_ima_file_mmap+0x10/0x10 [ 813.496938][ C0] ? security_mmap_file+0x178/0x1a0 [ 813.496959][ C0] vm_mmap_pgoff+0x1dd/0x3d0 [ 813.496982][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 813.497001][ C0] ? __fget_files+0x29/0x470 [ 813.497020][ C0] ? __fget_files+0x3f6/0x470 [ 813.497041][ C0] ksys_mmap_pgoff+0x4f1/0x720 [ 813.497060][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 813.497085][ C0] do_syscall_64+0xf3/0x230 [ 813.497105][ C0] ? clear_bhb_loop+0x35/0x90 [ 813.497121][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.497144][ C0] RIP: 0033:0x7f0411375f19 [ 813.497158][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.497171][ C0] RSP: 002b:00007f0412219048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 813.497186][ C0] RAX: ffffffffffffffda RBX: 00007f0411505f60 RCX: 00007f0411375f19 [ 813.497198][ C0] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 813.497209][ C0] RBP: 00007f04113e4e68 R08: 0000000000000008 R09: 00000001000f0000 [ 813.497220][ C0] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 813.497230][ C0] R13: 000000000000000b R14: 00007f0411505f60 R15: 00007ffcbae90b18 [ 813.497249][ C0] [ 813.975300][T14271] veth0_macvtap: entered promiscuous mode [ 813.985752][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 813.992635][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 814.002807][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 814.012881][ T30] Call Trace: [ 814.016182][ T30] [ 814.019132][ T30] dump_stack_lvl+0x241/0x360 [ 814.023838][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 814.029059][ T30] ? __pfx__printk+0x10/0x10 [ 814.033674][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 814.039677][ T30] ? vscnprintf+0x5d/0x90 [ 814.044020][ T30] panic+0x349/0x860 [ 814.047929][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 814.054089][ T30] ? __pfx_panic+0x10/0x10 [ 814.058500][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 814.063870][ T30] ? __irq_work_queue_local+0x137/0x410 [ 814.069419][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 814.074877][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 814.081045][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 814.087243][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 814.093835][ T30] watchdog+0x102d/0x1030 [ 814.098174][ T30] ? watchdog+0x1ea/0x1030 [ 814.102609][ T30] ? __pfx_watchdog+0x10/0x10 [ 814.107289][ T30] kthread+0x2f0/0x390 [ 814.111356][ T30] ? __pfx_watchdog+0x10/0x10 [ 814.116036][ T30] ? __pfx_kthread+0x10/0x10 [ 814.120619][ T30] ret_from_fork+0x4b/0x80 [ 814.125034][ T30] ? __pfx_kthread+0x10/0x10 [ 814.129621][ T30] ret_from_fork_asm+0x1a/0x30 [ 814.134483][ T30] [ 814.137902][ T30] Kernel Offset: disabled [ 814.142222][ T30] Rebooting in 86400 seconds..