last executing test programs: 21.993378467s ago: executing program 4 (id=4807): mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x82) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(0x0, &(0x7f0000000240)='./file0\x00') socket$inet6_sctp(0xa, 0x0, 0x84) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r3, &(0x7f0000000300)=""/150, 0x96, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 21.067267031s ago: executing program 4 (id=4810): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x926, 0x7ff}) ioctl$BLKTRACETEARDOWN(r0, 0x1274, 0x0) 20.78593787s ago: executing program 4 (id=4811): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xd3, 0x75, 0x8, 0x20, 0xac8, 0x321, 0x6fbe, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xfe, 0x89}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x8, 0x51, {0x51, 0x4, "4439e024c40eafb68d37fc4a129bdac345208a16a2c30d3630bd4d03b3a75baa873edf9ce543ebbe55342fc334dbb3a0827256e833178827d1736cd9df2791d10aec9266f933c770c477fa0dd9391c"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0xa, 0x5d, "cd96889f4aedb498596ffa166300bd042b9cc7877b48dcfb5d8f415caf8528a84f4b38a01d62ad79dc9109a8242f2ac18dcff074847bb7040c9b4bc6630acad75c7fd42c60c9523058ebd4ab3d070ff72b7cb351837bf1bd4479c40151"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x9}}) 17.665169669s ago: executing program 4 (id=4822): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000e400)="2ba448f59a316b2ea441f8e2b61e7c8a84219871e92cf0c092bf0927210a55613835de33e740aec1aac65c4948573319bd8c60db15fccf040a0e772ea766a39634dc19b47d7bda4e791236359522b2f451e375c93e3175ac306bd58345f97eb4ecd946a651f047131cb9bd7d99adf549485a8b68588aef520fb148d2985d1f8f31176e85c561b08bd3c8f9107b08cc61993e9abc898a7485165ea08b85ef396483e1cf2aede0555c4f839bb9265be503662a689354937de6c63341e04652bc00b029b05d9a9e42354c410d35f21f2b679ccb9fdacbcb45bf8af84c2ae01f9cfc434da85caa81d11eca29fd9cefb40f33db5e6ef6d8aa1b50c1f9b0499555aa0b9a391a41ee3aa267bf544935c8455795591b4183782ad3243f6766957d92c6d5fc8babd66efe54296e630b48c3eddc1d5dd4c874f7bd802e0ce94f0fd2903f73a8c9fd9e3797846643c0ef4337c07a9274c74b75a24d32ab2d7bb124e4f39f0af1285772a6011699e9ac4325580da23225296304d6166b8538c29bcf4fb23de371e14c199f4ef671ac7137ef1ea3bf3970fc595fc6866ab9c98bbcb35e96c31f865f78102f09f8fd955d0eb5bea98cba8e06242047e3d960c160f3a2d1a381182aa570d532204ad79c928abfddbc976b1d3b824a78fe4c528ff44807c59f69f97b088390e94d615046d107ad3f771681d15e242c5b54afb6c01c17233b60c0edc05d7e167936b77177c5d55d7069d0adaee4f5c6eae1e269a1e24795b677487afae1fffeccf55ce8267f204d2c3a0407c70ded02eb10213a156f3894dbfeff2278782eac0da18cc318325351ac3d005631eaa10a9b693b5049e31c6b73698fa537bcbce5a60e7cd7ed265e6742607e242c8a99409f97c1a959f3d36430ad6fda68045c4a4485d7154c940ce32783ccfb6fd2bc61166f53007f249fde55c13af31589b1d7daa0d4e4cb00c151d5108b1403fc28b642a5b628686be053ae3c5d7893d4ad75108ff7f51a7fdd8c50c7edc973b50ec96022735989e465231dfc4cc8828cc048ab288a1f1a8905c40f9200033816c40c1b5ed277aee65d8c9c78dc9a62a188110db0b0fe395bd53e7e2063261829f0d2aaf71d7ea4b8a51baf2c6981d75e4190642d162eaaaf173ab5e2dfe44699bbcbc912b4e6e073aa006cc83747556f699884bc2eeb63120c2748eb32da81e76e075728f14dbdc97be9a756489a904c2b90453ed0faa59219e4b1cbfee8c1783f35107a32bb3e53bbdcfa09367aafd760083ff3c0300c643b96520ccaccaf30795307c4b3e4ff9ba4de7466f774c56d70f4f99ad596c16f68d79ed053aebb60ff53250d4c02607c24a545751a7c3c5a6ecfb8593e9fd5ab913961516f83a2f7d8838b7b1530b8b54e2d3f8eaa5fabbfcfae1856931fcbc0d483c6dc35bcc5dcec86ce16e154aad73c635ad3b28762b027f415135b68d5bc9c1b3629326aa087c1d0f5e611715e2cfea7e2ff388dcc88fe23f3f4cfba112f7883d7479887bc5aa8ba8fb080a623f3b6ddda1edb5bedc929a5192b62fab8e820e978834909a6799cc5ec3372ef077a35478709d9f33800fee83e0f9969139226ec527804f67e8512167127a872dded28cf5cf946f9cac0760c2a6c63593b5ea1e716fe11fe889cda4c18612dd6a044f81794522f4345dedd86f59488cc1652ed511c74bd285f67770c5d34ea1f7adddadb402e758a6a7746a661a1e43928bee46706c3994706d69b0e667a029792a80fc1e6d02cd888fe421d08639161c5c49876b10c891a316821e51d6b5713436a9f2a4500d04b4676b3c726a2faad546c291273e6e7b5838b676999cc3cc3d4b6104a5793a2c63f4efcd260eddc2bf03cb94e6fd0c9ac43da515e46664e589f7652957f240f1b147ca254e219d09b2f28b7c66fdb221471b2d64504eca211e11575bd61551eacab2f8ba9769c31ac4addb9b467ea2ff11c29d2a8e05c8d3e22b8aed619bbf9db55c015774388565222f527deb13bde8c92868c401fdf5344cce55f0eaf4d46676df2355e08474d91e9ac6b4102c72db12ab4e534afe7e24696923c95a8640f4d758bf7bc4b2e2f8fb293c18ca73f163602aaad5620945d238ce39bde703c3e481e67dedb0227aa0ffbce3e61ceb19ddb08015249e2bc4791fd69a30ddda9814e87a25c1a7ff3021882ac423efa98ae8bab46cad8d572a45a2979116e878e632310f25b1fc3d86b126f66ef719cc71744bd18d1884e751d94e13f6af9dd1a2f746b128969b5d986191973fa1972b5e1d5f70003706ac46d7a726c8c1299216284c599a6ec59605578cd7e30abe794c0be336c008190870e90d949859cb3a078fc791a4cc69db0169e6e9a3c851db143b535fe7aa528c42e7a46d8d201fd8d97cc56bc2ca56b81da0c2cedcfd892f957ede109b721917b36550b1ff3f34adbba65b1299d24434850f5d9bd7e8e0dac5b8ed287a169e4f3a10d7ddb631d86ed39e1f779b7d7c384ee99812ecab1dd823ac6e5f8b3f63c30fd4a53f4e5d3b4fdf5e3b9e68848de6b885de4ebbabf819ad2e0b5feafba4f6a127df55d87836c70231902f2ec2c7ab9accd190ee0183220d569f9ab01c19ac56ffeba7e27d642c89f9f43ff36daebe0d7e25979b51c05673461dd8df8a6d50cedca84b89e3f1a4200274cabc729126571c2e79b7e00f980d7e6102c0240b89624292edec9883f895aff0c303f606e6cb3ffcc9398f46c7d4cbbd6cb79932dec08b515c030bbaa2dcc5732d7535dbef85f5ea3fe9f41dc1fa1087e2c0130910e92bc22a2ab312db0a6021c6cb32ebec3278132c5d35bde7accd68e84d17e80d18773ae8793974a0787b14ee8ffe5f13a46c302a4b914596579cb6883bad6b717c8bb7fe13d7aff23e9a8b91a57bc3d89c1e6f6bf36e79ae1ae1f979f1b372fc1b11ff02080622391e7476badbbfae97ffac410b7ea2fc383a626c4b0490dc1d7dd39b0b4ed51547069f4d1d88603e944d46bccf9e0f588e0a3a8a1954919973271d44bfc8692c586b5bb0339a77799d8247076c6f798d8c9cdac6e17849c9cb7bf9b3bf90a068f5ca4e7d96b4cc51824a8938f1d50654f57ce1818deb98ed58b01943e378c750e9bf1b8ce60352f6db30622290fdaa2718b03c4573548bd222c73d1ca2f1138633fa466a124185b90e787603a524d92c5ed6fda6f1dee43b6cd5301cab86186fc567646f1db4a6e2e966ff50eea0db1498dbcbdafc98d27a920b58c9cd4a6b7a2f031cf88942926589123f5a84eb9cf745611cab2713ce93774dfcd05eab381c255465f4935c35f8080b68bdc6faf8e0e7f1fbacf0d169fed8a8c779f74d4701cfc659e9f7b870c91af705f677b66cad38f374eed84cec333e68e2860b1cc94f37dc35d8e2ade2884209056c006bb082c97676bbab2f4f7e1ab551acefe496308fbe2d09f5a43fe564984d9aa1c113c2665c69e93da2de68b88226211b7f4922deff711184eb9a46ead6e5b0ef45392dc43fdcf45c6060b3b5a7e8adbc74ff4e572b3506f1f5f5a2394ee5a6c49300ab93b26b593a464d1f1b411b53e03db8d1c20ed7c0bae7d5cb06acc1f9462accd0348124d126b6e785b374c84b53fa6b7df15e4ef9502274c1f097f588b3b1583d744f9affc8ac4bb34eb4d4697547fe77f1a582e37659ffaac5ff51192d84691fb8f2bd5e41ab3443007f364126f06fa9596306da2cef308da334e8e1b59892ed595c8cd215a523f24596bf040a4f665eebc37f16944400c4df4cd85e897996776a19d5bfdaa620de9363f80764069df9914dfd31975adde76dc7066d1b82d0de7af21a780e86705d63382358e976d65ad905997761ade162a60f3ee5bf2ad7c73d09798a7616750d7e082ba579587191992fe0009ed3ea0e360cbf451d26027beb21f2167f3bbfc12e32f2a53774fbf665d22ff20df6a7df59947a1d38f682ae4ea38065ac43d53e8b1fe0a5620d8bb69f501e1ad489adc2b6159769490e21742e2d93c24ddc0497993da4a889c7479c27bab9bd415e555a2bc4b8898e4e645d5eef5c74b25a956c7ff60bfcaf45f42e771d61db12e89e1db9ffc024f1f214f875254e03730f59d298fc0ea62c2102b1e076550614a80aad0474e143efa746abc0087ea62a52d78802cc1d2709b185bbcbd01e690c109e28d9fc11bef26cf775fb8ceaee02f149a6902530fdaa62949094c4dc12308f5f9b54792e9b0f46241f5e5de461b45dd11fcb98954a02887a0f9362e26c3858aec70683642c0139eb4b081feb8b3fde5204b397b99f29b356823a182be7babf2124596bcda4665b376242cfcb6da4dc6f60517fc5958c822961adbfc51551469ab01560c0dfeaab3b5fe66c447a7b453d636a9ec343de385c78af532495b8338e3dd68ed4793b8a62db4e9303e4039e6d60ab3718a8b74710365c36a0076c98259c0931ff42276c2638bfabfe88820a6e4182824b241f5d600656c41e9e35e7d15a6a8e84b267845e77017b662db2605b5961e8ee668bee1f385152ebe4f02a0dad7763e54abb62d13ebe792e500430539ea8104d38af620640e9026717cd337efceb7906f6863d4fedfd1196f1b754719522037d38ea75a51fe2dd6488a5b512a06c93f71eb398ffd4296912bd025937322afe9ad8329f337c89054172d61db5bfcbb9f4c511fa81d18444803a7e3b0c845c7cc4a72b4cb61067dc372d0b864f156f906584c06449567b174a4b2bd64408c831064a386c3cd47fd67cd35e6543737019e3e069e0b4379a9169a3c17804ac60d9241bee2780d8bd7e8511eaab6dc7052544519f49f55ee9ec9c5c4b31d6a0abf9e7615fb322b598ddb6c3123fcd245729eb843230c19e33ea865c6a3a8f6a880f271e89af108631bb38a77c07ca771e1a626ca4f03b6e27add79e3f85867d9373508480bf91585c10443148a25e0d9e68453f3ac46a8b762715ea27271607f8fa2f331798ff30544217bb99c201861a13575cd02111651851739edb8d4d257c89caf0d04954bba437c22ecda082013e4cad9d452a152f0963e344642fb445e4fcb7af37a69b26966066b0b9cdc660fd8b17d3fd4f5c046e5c4dfb7adc961aadf4da780d4a63ecb95d837293ca9d5a9c3c5d178413a744e45b61bcb1a069f71b29b90da3c072fe4fc6892452f29c5e183e8d9a672589c3a878dc39fe4a1bcf46dacad0d3c8ab931eaef1ed92d5f1ec117cc9d20c9b031921ed4832085f9337c32a6dc9cc8eb960e168704e9fe87855e96c785298ec7a6f19459f3c45e97865be36c329b3c5369794d7b5442655118fbf82c587f0b6e850f44aa8d63bb6e3e08fd99c649c9acab15f84b54bc1f88170967dbc86b7760ff0abca7fca1bf51b636ef879d34aef6972c7f44663b8d92ab48951c48663b1780334d297d66f114f3a217b855cff4b7b0e31708bb087e32cafcefbe33dec879488382d522e053b52f8647ab40249926f3ed1d2d4f3b09d8d02be95139e00fd2e8d45dc1a95dbcb0cc85927148fb6b790204a25de47ca776025b10ffecb082591f732dff0f76f6f76f8dadce5a8d71d35e1afefa5e7b03d6f7b5fac5f8b352d1f16ba58fa2db3e6eeca1d17c7023e396f72ff9ec0a6974bd31351a70ad7aa80c644025b0c41b69484e93f1d78668a19c537edae5789e7b3a08d9af2886263a92410843133f075fd05cd79a6e4253b236c812eab1dcb05f8eb4b0a7b6dcea56e290eabe5e12f864163197fbd8c3625d7fc41abd471ebd1d67c398dd1652ed3865d91209f9275f93f56ce37e9e655360509d4238913d078bd2edd9266bab02169d6e125475aa2e7adfb15a9ee2f0ad6dbb7f8da5fd8fbe016b16d1bbbd784336b0787904561a070fdb3098c7995f3d765b8d2c517fad8366ddc3b04f6b459b9cbe6a9943d7a32778ebd452268bf2671934c3857a980bac535c07473e2a0d2f82321a43deddb20b456480d703a145cd59909d8743dcb8df851317af66a3f4b25d57e43de515b72470142ee3d0ab4aea81d7f161a8b8f6f3442f2ad17bca7ef8c03ed6db0c9d845d3f372e75855d36c2b1f3c32cf761ed6d677e9174a4378f0b03e4c9e6e76ed261aa930ae6578352a4d5edf1a772c248117fea74c75f8102522a04705874b10b7c55a4c2a6040fb18f40a1de278d5e3b8db1acf1640fd61d70c2e55fe2edc5f4f876c9dbeb72edb575afc2b2675ea832c9b691e81835664e670d6dc53b34a29f4e0fb8a2055959f1273acddcf7bd6b92a89aba23c5b410009a55f78fda55cee59f985980db68a53b3a524da182a1fee0225942e8c3115a69bbe062b8455b9c795e6183e34ef37e4ea655761f38712d18bbe4158f6a293d82559f4265fa48ec3a758f5198aa20af9e602b605c869ac9915e9a72703ee2bc5ccd44a14b1e61b82fedebb3bcd79fd557f0cc1f58d4d66a18883336ec293a7e108893a25e68bb9a3d2bdc531f63f0155b72a1fb13c3d2f1d7471edbc8255705fefbb1392d175736ddb259ce7d669fe6e9a4ee7e834b3ded4f86b75d7d72cf8b36eb2181a9213bcc659b5d0e838bd3512ad0a78bf74a93c97654872a7982a14fd70b583fac70c571a096e0e829e4f1f9c9ace7d1888383535fbdb6d2507f1cab46298c14dfe6f1e5cb259d069ea2641a6460eaf239c76b92d671728633a74714a751d7c160f6f74b2d5a020a9d86a50107d6765fef5d43ea5a7aca78549f0b6bc28556cef0248f8b35289714ad5704887af8b12c6eb67af570a0535301e815654a3b1f96f99f5e3ef0094a6ec596c9d52376020727c5b66c64824af2fbfa02ad05da22e76336b288765eedb40eefca804b6a183129a245747ac23ff4028606e4c7b9ca8638f8d88a16485c4cbe98d1a1f07fd2a29ad6cf4e2a21e184a0f9301ddfaae2c5598fe8c24a8ebde5d203d0054ee7dfe5ada183283acd19ef8228c3625c2eb47171dfb8662a21e79111d106f4f3acf849e61f320e82208155af8966f34bf4b0582afc348ecfb5627979558fcd3b86cb6b3b6c452d737dd18e6bad78828a26464ad4278d608b4c3a4d71a694fc8956138929bf9e2915e4ebea23d2edf46915443c9b2400e3396a336c7eadf9fd93fc5233c5ae902134cfe2bada62680423d0ef4006c385609508fad32f6a8e509f9d88c0189a9e3e604a4c3332d6f1339004d8ba4d826130cbc5052e41ee7950535a51411fd463cb445b747d1e372c4dd5eaad7d2b718f7fe90a13d89e2335a545f319270dd2c26ae9b0bbcc8ba1542d6e34211dc0fc8efe3c15d59d5b3fce880dabc93a9930fa014b7ec4aa0e0d81e08ee2893e4e693cc05317203952723d1ed5fe29c73444d090ad49fcafb768d604f0a4e525603e5510c0dceffebb4f6f4f973a7233a367ea83158612dfeb48e0c5b95d08748c7639aac9d08b55193fffa35232b23e9468f003b51277b4d013f56b07e196c0faef303fc0f5cc14cf14ccb7a050e7ccbf1e7760a0ef3d83ec9a5940261f10321ab7935b46d1d6815d3e7ccc650ec2290772565bd1088e2d7a767f36a1775fe9b710e5cb986254e9b9d8d7f90a0664c818916dbcab953e5ace4d593cd6aa284266af6099f3db6f21d523c0a74687171b34a567ff203c5d15c0b38980e0648912c66b10b374341f8062557778a3713c48e37768f2818607d0985eecd36330932d714cb8705f3832d39ad98dcd4ba713b3e093ddb683930b23bf595704d7a08461c00dcfe6d80996bb47880ac784c24780fb2f8d8032a1608ff8ec6d4efa7a00ccc38b293411d36ce5e3bc4e2eac9842b616109e7478e2c00d7ddca25cd106a3241d4ccf1b259da48886d608e917ff2b7cdf2dfdb360414a7c9d350817ab50a811c8f4ad47150268b6d87b6794c6f18a4c9f5fe406d81860422ed5c107f3ab58975195d3e2a80b5500d30e73088cb50088a85539faaf844d77bca7cc410e4e4200ed1874a626de01bc08c74aec3828deeef0f7d09469d6964a843d28e47735c71edfb906fd081a0f8d804f03291e6925a2ac65a971fdc16752565488077d7c2b8acb44a734b886b449be12af402eb572b201d417fccbd4b5510ac62663b8f8253e256f13c7c0966ba947f5fe9cf8f0c791348377b89793d6215d9cb579fca5e0077c892ec995073fbccfc6747afac3b49afcbd8d75b2d67e7af2659cdd1036d6901f53d0f28b981c1280bbfb785afaced868eddc7d65224c5bf15cdaf88efd258bbb353dbd8f4f4006cb0d859f521d844b79b278c3ce27e254ffb94020f1cf6617c2d80aadd7646d7a822e79133aa5e9ec00419988f51fc02513c9797bea2375fb77d995faf07c991c8b885e6c91f61a021e647815956461ed576107710c485af9a6835317663f57f38801098df23a5fcf903615d70597488a04ff85a5a07e52dcb2923042d451ab212a2e4d920ee144441c380152c9f6e18396184e85eb57f7d861626e0ad73bf58b74cb6e6ceacf1359e48c6f33031eac2c5dd075df0081028efc4536ececb7133877d41559ea38eec37ee57caf509dd8d71abc9ad8aa8df125e6b42dedade5aa18538033e78423e9b624fd09538696bcdb6cd7c0d218df5c8ee537d4b586fbdd94e3fb235ebbd57e20bb48b56f5ff0de38f2385b7f1952e947d7a3e78a963a0cc6104ee8edb934857d27614c83909771eb56248a4a1adec90639cf5dbe2599a746fb1cb2907a16a05528758cf63c3af8365293a009bc3907e3f7ccab8d18fe1a3a69bef6ce639695fa598a8a2c2fc68286c84908fc394ad2b0646318bde25b971c987708115aa107fb32ec8de0c721c967c8f66f5be051e2315c90de2730cbb2e94ae00587adc946e7cf32f6d7e06d857ac89cafe6a2b1edf313ea8a774e13ab2c7b61fa94482624aff3a6b634ad54096a8d00dc92d515c3b9072619343605e696eac9fcc98d1c40f2fafdb1f9c16336b5df7ae3ebe0a9620f2637c4caeaf14003d06a74b8c3e07090115df06c485d1d3b3199741f039bddfbaaea124a779eacadff67b35543ceece60464189a6114b4ff2bad2bf9248fc5a5d0f854d81bacaaf1a7529ce544e8b632f4154cc2e072f599a3d614408ea0a25b8b65321b457d41c444d733f32641848095708f79b5fa531af4a9dfe89dcaae57d2633761909d4004b4425d43a22337d3f2fdeb0ddca380abe511f2f334d09c7ed4c8e67d5c603e55f026620051fb540096d5a6748b92b90a4a525211d008c2ec6b23495d1738600e7bd22aa22102817e2928c18f0f979daf2c00069a129b02d64124e98b8558753399da93ea741a5adff10978e32a17887daf394ee72185f5a25568078935b7eeab804de7cebbf402479b956bc8e9961d9dd44649753ac66e6dd64849dd245b95940f47f25f58f15e5be0269962e84f76c7699a3f5ee334f3d29b3251c57f0b2d087f5e95af1d0d46e9a2da4cda6ed88817c96725b5c4a0779c6ac9cbd3bebe07d995c734cf150cc15da440d5910c24b533fc9f564d4510885b237dfa26b4c1c06468dc97991c2347d5b91fe6c7f9028997283f8c78216b2a70a250bb11a784e97cc897a26d09d526c4f460be23b8559790e8902f1f3a59de4bcd4263be73a6cc22c94120b5a865021b76f64f792399be295884cf63edf4b2e5e242e6a4eaa7b335273411613c199634c2ce04b0ac4fc03d290936733c564cb670d031a9aedd00d35db4c0fcb1676dc5d44b40e8f6bb31b74830348a80a9e71532260dbadb94c398ffcedb929b5e7561138d7cf7312dc62394ebdac8751cab6682fa5ad068cee660906663cd7b2327eed04c2c1229b6c00c82624a75597f1d6d2166a536ccafdc59813d20e895353189f95a351330dbf938720ae7386bf3076b48b78b4d30b9d2b59ab0f5991b32f68cbf3b175c3b68c1ec1194d5bb28e2c818ce0ef80274a4f430e9c525d161d79d1e86ef129c839c1e8c52ddd8300dab30b12a267c03a0f919db681c835660beda74bc5dbc18b9c6c1c0cca829be7f57bdd57fae58df16649d726bb6c7718724c7a5e2ce4fc3486b5398471a284632d8986afca94c6110eaa4b0638c09886f9057e38c1745bd3b67e74b25b0c690047454d9e81ea8572057caac8973d2558c0128113ef4b51c517944ef980569ed2e9d35b785fd180250a7615ffd27d64fe3cffc9d6ffadd85e7f04b9699df4e855270c57c57d8d561c9176241596a3105695cc7b8028c2f8ecde94db0a0cbb25baf04a207d24338596fc670098065693f2ac94fe792e21a739da6803b4fda0ed8cd0f0592be110197686871404aa644f3c96fcb6af31ae967dbfcbbbd980f7bea72d87307e851c2d15a8a75b35487adee3ccf09d5f2ffb88828562c167abe69c967e81afef1b78370da7a2b299d634146e1c72c77f5667651e1a0fbc6b2f82ee8ddb1946af59edff74831e81b2fea87311b599d8ccbbbcc04b7a77b8d4193ab44e14ddc2525efd5b8630789b08c46656ff50790cbcf3797ccf0de81233158d7bf4a3fe60a532499a0c404af6c24aa67a507c5d2f7858aadc45110e48b68339b12a530866c6da0a38c62e7c3a94a5adbffecbf3699c797c0cc1dfbceab728ef4b1af5172f9df10470a2390824c7f7b5e4eba2465b6954e3b6a8735e904f55a2ede5cd52fd1e2edb28242830611a2b3a789fbf4fdd5deeb232a4e2874f3a3951c9d72e6dcecd19851b516b7563dfbb9f8111fa3626d621e64f3ac54c3e8bd3bbf18e1433b518c7d4ce841fa0bc7c7705885fb5e75d93a0913bfd99b663cbd721f6a28a9dffb85ed69eaf6d5d1e58cd7c98fc07acf1b59083b639366be3af8071a95dc4c0ac7b347bf6dfdd182e3a9c4ea0b02bcc19882e1078e7f24c85559b604e4c6b3dd0f792717ae308e51edd9f8c95ee411e4c9d8a3e8e10b179cf6864cf1997ea030cfa0d1ebbeaff6c0481772bb0aa2fd131283b25ddff34a32e95911eae07341981fb770eee124e7a8571e45e380b2d762b0ed942d988468801b52e8698decefdcebb3ad518b11e895e72ccba911ad58729fccc07399728e1aa0f1f038fafac07054adb44ced42b16ace5ed49a86f93a9fdf7900261e9f6368f609ad15a715c2ab34b19a77d4ba1c5d434d277beae1302bcd33a6f0ea8fc2365ba1d548269400f034ea3ba17b284adbb1e30265e8daf414d2156e5444e7b2936af507c13b683382b86c1cd995ee091a12c2a5f55765e521fcc76cd0e7c32ae7fda2128e51f41cbab24f0652e209aa4e65b99bfde6acf32ad276ef79f94e2c5504e508e1a60f797bd968b79a3013f332cce00e7d0df31b2dfb8a6dd6a3662b8302dcc2b69d587f223901596bc1e67dfbbf2fbf81e0e8040c68564f3ddec0a50ad9b0f5052dbf99e1b6d58635f19d33d4a4c5b98d7152bee661756171a39bf573fe1ac8de4f4233c5e03f704cd681363765fbcdef25ba315a38eb6e8069e8105cdc5c52854ad86c337eefc00b4aaf21b0e77167fccfcc7a794083ec04ff0aa321529e7c05d7bf11010ebbe628336d96d4d80f495f441b92d6cf1f0e66efa49c3d7e46009fd8cfb6e0e66b66246bfb3def8e23ed18e1dfcba1e5d6d10f85eab1f2d84e82bed69ba037ad7a145512e2cff2af6dfb9889af69f6f4bc63c52b7d", 0x2000, &(0x7f00000009c0)={&(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x27}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000010400)="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", 0x2000, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x80000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="17"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000008380)={0x2020}, 0x7) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f00000007c0), 0x0) syz_fuse_handle_req(r0, &(0x7f0000012400)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x522}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x12) ptrace$cont(0x420f, r2, 0x0, 0x0) 14.323124131s ago: executing program 4 (id=4835): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00032300000023035d95b5db2648b4c56db377bb85239e187f30232fb4711d740fabfa519a43621ba8"], 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_io_uring_setup(0x2ddd, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000340), &(0x7f0000000240)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r0, 0x381b, 0x0, 0x0, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = eventfd(0xfffffffa) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x3, r4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x401}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0xfffffffffffffe47, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) 14.060188015s ago: executing program 4 (id=4836): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="8557fba58fc0e2252453d84f8230cc96659d0e4458e818b02b45ec882ed49305fd6a8bbf97ee86aba2872b72a7d93e714516be85372a95879bde9ab3b114cca01d5595df98c7ee87ad4addf15645ba13c7ba07fff86217b25afaea809398a3bca505b5920766e3aad747a6726c6b383d080300331a00588f1c4128e371acb756d9c7627ecd8059d5def7692c", 0x8c}, {&(0x7f0000000140)="383f64d83a04ee94219d9e4b8a44c8e7a53731d262650dafe882ea140e87627ec5dd5f81b76d", 0x26}, {&(0x7f0000000d40)="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", 0x404}], 0x3}}], 0x1, 0x40440c1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 5.902779662s ago: executing program 3 (id=4861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) setsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000fb369cb82000300441cc9993d719caa55ef83c4ee1f20dbdb2441e1546060bee525f33b9914ad53371b965d633f65e51d900f27f53f8123f11dd98003de57b0cdff408d98b73bcba81f7745637280bfec849fd4a3d9f97c5b5d6363fa9d84abae450a4da3048842067cd11b4379192f67a39213cbe6ebcb9b3809b443a96afa8b82e07c35fd780987c690b87d909a0848f1d6a1771cf78c8dcf77acf196828fdc3bb6d137bdbcfcafcd07547df87f405247d45a0b9068d7580523e4379e2136c353d5ee431f7fff396ec98d3f4935b6dda0850512f826432373e31cebd790335fe749eeaecfd41d9769", @ANYRES32=r2, @ANYBLOB="5d000e00800000000802110000010802110000015050505050500000000000000000000064000000000602020202020203010006020000050300000025030000002a0100720603030303030371070000000000000076060000000000000000000c001b80050001003100000008000c006400000008000d0000000000"], 0x98}}, 0x0) 5.433336155s ago: executing program 3 (id=4865): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ffffffff02000000"]}, 0x108) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'geneve0\x00'}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000000)="ff", 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r2, &(0x7f0000000140)='O', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) shutdown(r2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x10, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001500)=""/4096, &(0x7f00000000c0)=0x1000) landlock_restrict_self(r3, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000400), &(0x7f0000000180)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="02000000050000000800000000000000030000000000000002000000e00000010000000000000000"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.154621228s ago: executing program 3 (id=4869): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000800)) getdents(0xffffffffffffff9c, &(0x7f0000001800)=""/4096, 0x1000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x101, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x31) sendto$inet6(r1, 0x0, 0x0, 0x26044011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8923, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000002c0)}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB], 0x24}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000004e40)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x1a0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffff00, 'pimreg1\x00', 'wlan0\x00', {0xff}, {0xff}, 0x8, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="cd4685e1dae1", 0x1, 0x9, [0x33, 0x3b, 0x23, 0x0, 0x17, 0x23, 0x2c, 0x22, 0x1c, 0x1d, 0x0, 0x2c, 0x31, 0x40, 0x18, 0x12], 0x1, 0x0, 0x7f}}}, {{@ip={@broadcast, @multicast2, 0xff000000, 0x0, 'ip6erspan0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 0x6, 0x5, [0x0, 0x0, 0x0, 0xf, 0x0, 0x2e, 0x0, 0x18, 0x24, 0x38, 0x38, 0x1a, 0xe, 0x37, 0x26], 0x1, 0xfff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x80}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000180)=""/21, 0x15, 0x1, &(0x7f0000000200)={0xa, 0x4e20, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) fallocate(0xffffffffffffffff, 0x20, 0x2, 0xffffffff7fffffff) splice(r2, 0x0, r3, &(0x7f0000000240)=0x10000, 0x100000000, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x14) getdents(r5, &(0x7f0000000280)=""/4096, 0x9005) recvmmsg$unix(r4, &(0x7f0000005fc0)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000001440)=""/146, 0x92}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000015c0)=""/104, 0x68}], 0x1, &(0x7f0000003040)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0xf0}}, {{&(0x7f0000001740), 0x6e, &(0x7f0000004b00)}}, {{&(0x7f0000004bc0)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000004cc0)=""/158, 0x9e}, {&(0x7f0000004d80)=""/95, 0x5f}], 0x2}}], 0x4, 0x0, &(0x7f0000006100)={0x0, 0x989680}) splice(r5, 0x0, r4, 0x0, 0x1, 0x0) r6 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) lseek(r6, 0x8000000000000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001e00010d000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n'], 0x4c}}, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfa, 0xcf, 0x1, 0x40, 0x56e, 0x4010, 0x201c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0x55, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) 3.5716801s ago: executing program 1 (id=4877): r0 = eventfd2(0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0xda90) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="eebd73c460f8a4a8", 0x8}, {0x0}], 0x2) (fail_nth: 1) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 3.457374593s ago: executing program 2 (id=4878): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x2000, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0xbf, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x658}, {@broadcast}, {@remote, 0x96}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010121}, {@rand_addr=0x64010101}, {@broadcast}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00'}, 0x45c) 3.033551704s ago: executing program 3 (id=4880): io_setup(0x0, &(0x7f00000000c0)) io_setup(0x4, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc4c, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r1}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x8c, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x0, 0xf0, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "c6"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x2, 0x81}, {0x6, 0x24, 0x1a, 0x4, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x9, 0x40}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x1, 0x0, 0x37, 0x9, 0x1f}, @acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xfc, 0x61}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc1, 0x9, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x2, 0x40}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x0, 0x2, 0xa, 0x8, 0xfc}, 0x4c, &(0x7f00000001c0)={0x5, 0xf, 0x4c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x6c, 0xffff}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc5, "e1c12e4953e95652f92ea7ad11fd5ac3"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xf2, 0x8, 0x7, 0x0, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x0, 0xd}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "c2084e74e011acafa7d2bd01f325e399"}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}, {0xa7, &(0x7f0000000300)=@string={0xa7, 0x3, "da582397830a80cba3c89b977de5fee09051f100d9c51117c655ee802f8fa44e30ee334e5bf7bd98bb276b034d390cb115b6457a2648e18a418a0a2324f428a58fbe177719341c215efdf84e407e3fc092c7e2cd1cb86cbf9cd2b1cbb1f835d52b8752e1b37be11932884c869e9274c2c13e27b32611188987477ca243a596e48300439b609e371f5e010311c30165ad89d84e90c2974c58abd664e3332fddb3aa6816a1cb"}}, {0x4d, &(0x7f00000003c0)=@string={0x4d, 0x3, "c67758f80b2fb2d79732fe21bea01b163b7d491bfef70e1fc5856825c294de4e6c6f6726aa627ba9550dec71de353efaa4899b1344391617b887b3cd0930d0ced79e36971f469fa8943894"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x81a}}, {0x6b, &(0x7f0000000480)=@string={0x6b, 0x3, "bec9a58fdb60d5936738d0a5f6bf3fc759a41ada184f4982ff7ff293bb6418994d3d6a049d358287dfa137fa7b1c154e3a4d5b280ebfc8e838cc3ccecc28f8e0912ba02ada0f43d9475584cd72f2938e59d395a7cf93764fb241de1accbfc00b59d917076499a94cec"}}, {0x101, &(0x7f0000000500)=@string={0x101, 0x3, "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"}}]}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2.557418799s ago: executing program 1 (id=4882): socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) set_mempolicy(0x3, &(0x7f0000000040)=0x10000000005, 0x7) set_mempolicy(0x8000, &(0x7f0000000000)=0x1, 0x26d5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd608000000000000000000000000000bbff020000000000000000000000000001890090780000000000000000000000000000ffffac1414aa00"/94], 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3}}) prlimit64(0x0, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r2, 0x540b, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x0, &(0x7f0000000200), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pread64(r3, &(0x7f0000000180)=""/38, 0x26, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000280)={0x0, 0x1, 0x3}) socket$netlink(0x10, 0x3, 0xb) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) 2.497562973s ago: executing program 2 (id=4883): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@gettaction={0x58, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x58}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000002c0)="15efa1c602615f271f01a0ae6d3aede23a3be20181d02ab6984ac9a14c1aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c61adb1e5ac", 0x3f}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.458506233s ago: executing program 0 (id=4884): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30172, 0xffffffffffffffff, 0x8000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12f9c5}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) 2.153220724s ago: executing program 2 (id=4885): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000a00)) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000380)={"84db8cb4", 0x0, 0x0, 0x0, 0x0, 0x0, "0022aed9ae659d4d95fd3d1fa09814", "aadb641b", "912ec72a", "5439cfe3", ["f56f1a42e3d0ab344d8bc6cc", "22147745eb9df6cf6a880d29", "9ad3eb5918df0f52938453c9", "ac562047f08f7537b6597721"]}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xd) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040600000000000000040000000000000000000253be97df6c4187149b547d6c57a0aa66139f75612594e7553394b9c7"], 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111, 0x6}}, 0x20) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_dump}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r3, 0x4, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xb3}, @l2cap_cid_signaling={{0xaf}, [@l2cap_move_chan_cfm={{0x10, 0xc, 0x4}, {0x5, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x60, 0x8}, {0x5, 0xfffc, 0xa7, 0x5}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x3, 0xc, 0x0, 0x6}}, @l2cap_conn_rsp={{0x3, 0xa9, 0x8}, {0xff, 0x67ec, 0x0, 0x726}}, @l2cap_conf_rsp={{0x5, 0x31, 0x14}, {0x3, 0xc, 0xbc, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x0, 0x2400, 0x2, 0x7800}}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x100}}, @l2cap_info_rsp={{0xb, 0x8, 0x59}, {0x4, 0xaae9, "a6aba2538f93b03e6aef22892d9b98385e1df1b3891207edbf1d954e7423ade5b055495719ea413f488160e3c063ef6461cf331038d364cb0d6f9cec069df069488d19df8ebb3ce2079c2e30af76940121e9ec219f"}}, @l2cap_disconn_rsp={{0x7, 0xa0, 0x4}, {0xffff, 0x101}}]}}, 0xb8) socket$inet6(0xa, 0x6, 0x0) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f00000000c0)=0x1) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r6 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) 1.661785253s ago: executing program 1 (id=4886): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000a00)) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000380)={"84db8cb4", 0x0, 0x0, 0x0, 0x0, 0x0, "0022aed9ae659d4d95fd3d1fa09814", "aadb641b", "912ec72a", "5439cfe3", ["f56f1a42e3d0ab344d8bc6cc", "22147745eb9df6cf6a880d29", "9ad3eb5918df0f52938453c9", "ac562047f08f7537b6597721"]}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040600000000000000040000000000000000000253be97df6c4187149b547d6c57a0aa66139f75612594e7553394b9c7"], 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x111, 0x6}}, 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780), 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_dump}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r3, 0x4, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x108}, @l2cap_cid_signaling={{0x104}, [@l2cap_move_chan_cfm={{0x10, 0xc, 0x4}, {0x5, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x60, 0x8}, {0x5, 0xfffc, 0xa7, 0x5}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x3, 0xc, 0x0, 0x6}}, @l2cap_conn_rsp={{0x3, 0xa9, 0x8}, {0xff, 0x67ec, 0x0, 0x726}}, @l2cap_conf_rsp={{0x5, 0x31, 0x14}, {0x3, 0xc, 0xbc, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x0, 0x2400, 0x2, 0x7800}}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x100}}, @l2cap_conf_req={{0x4, 0x2, 0x51}, {0x9, 0x3ff, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0x5, 0x2, 0xfffa, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x7, 0x42, 0x8001, 0x6, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x2, 0xffff, 0x2, 0x7fff, 0x7ff}}, @l2cap_conf_mtu={0x1, 0x2, 0xe}, @l2cap_conf_ews={0x7, 0x2, 0x1b1b}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_mtu={0x1, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x2, 0xf956, 0x0, 0x1, 0x1}}]}}, @l2cap_info_rsp={{0xb, 0x8, 0x59}, {0x4, 0xaae9, "a6aba2538f93b03e6aef22892d9b98385e1df1b3891207edbf1d954e7423ade5b055495719ea413f488160e3c063ef6461cf331038d364cb0d6f9cec069df069488d19df8ebb3ce2079c2e30af76940121e9ec219f"}}, @l2cap_disconn_rsp={{0x7, 0xa0, 0x4}, {0xffff, 0x101}}]}}, 0x10d) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f00000000c0)=0x1) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r6 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) 1.656961527s ago: executing program 0 (id=4887): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@gettaction={0x58, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x58}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000002c0)="15efa1c602615f271f01a0ae6d3aede23a3be20181d02ab6984ac9a14c1aa56a7f9138a6c073e9", 0x27}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) sendto(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.322400112s ago: executing program 0 (id=4888): landlock_create_ruleset(&(0x7f0000000040)={0x300c, 0x3}, 0x10, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000003c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @dev, 0x1}}}, 0x90) add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000480)="85", 0x1, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r5}) add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000000000006162636465666768696a6b6c6d6e6f707172737475767778797a303132333435369e578ffa1bff75974a9f42719314471fc0dd36d867980ad3f7769f643a5ecc3cf240f562595d023c5a4e7d8b4772fa3b5a824aa09da7088a5716df1817b1deabd1f1991a896d8bb4349b0325ca778da264b1ee1223bd278f720d44b9ae5d8c5d5010b167c4fce41b88120bc23e1e969708990c1a0f844405e18b36264fe4e9f230eee6fc9ef8a3e0e58e2096f1ed253a5da6f5f62cda8d67f2b2"], 0x29, r4) keyctl$KEYCTL_MOVE(0x1e, 0x0, r4, r2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) futex_waitv(&(0x7f0000000540)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000000680)={0x0, 0x989680}, 0xbb942875c50b2622) 1.159826358s ago: executing program 3 (id=4889): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) getsockopt(r1, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x28}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r7}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r9, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r10, r5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000d80)) 1.117672226s ago: executing program 2 (id=4890): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x63f8, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900), 0x30}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001cc0), 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.029692063s ago: executing program 0 (id=4891): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000010c0)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x74}}, 0x0) (fail_nth: 1) 764.074602ms ago: executing program 2 (id=4892): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x2000, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0xbf, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x658}, {@broadcast}, {@remote, 0x96}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010121}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00'}, 0x45c) 613.834405ms ago: executing program 0 (id=4893): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a32"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x2, 0x88, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0xe, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@dev, @loopback, @multicast1, @loopback]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) memfd_create(&(0x7f0000000040)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xa1\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1YV\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\xb8\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\xbe`\'\xcb\xb6\xaf\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11A\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfc\x00\xe3\xde\x00\x00\xa8\xcbo\x90\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x16\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3U\xe6\xa9B\n\xc9%\x82\xed#?\xab\x1c\x11\x00\xc5\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\x00\x00\x00D~\xc9=\x95\xd4\x18\x97J\x1d\xb7\x11\xcbcE\x0eAU\xe6\x19*\x98}!\xde\xf1\xd3\xf7\x84\x9c\xb4\xf1\x17\xf9-\xc6\xba\xe3\xa8oz\b\xfe\xbc\x1b\xff$\xac=\xf2V**\x8f\x84Oq\xe3\xa16\x1d{f\x91\xbbBORJ\xbcm\xfb\xb0Q\x1c\xd9\x1bg\xf5\xc9p\xc5lo\x90\xb0\xd5\x90\x86\x19\xafC\xee7\x91O)\xf1\xf0\x00\x00\x00\x00\x00\x00\x00\x05t\v\x12\x03\xf5hRQ\b\x97\xc3d-\xfb\x12\x1e\xb2\xce\x9br*M\x10\xd5g\fwx\xb8\xa9\t\xc5\xf9W\x9b\x06\xcc\xa0\x1a\x03\v\x14n7\x92{\x8bH\x9d\x95\xe31\xf4hy\xf6%\xcdC\x9cT\xec57\xbd\xd5\x81\xd9\x13\xee\xdf\xef\xf3\x17H\xd2\xe3k\xe0\xe3^y\xe3\xbb(fEt\x15\xeb/\x90\xca\xde\x189\xdfN 7}|\xa8 2\xd9;\xfa\xeayZS\x10.\x8b,\xd0\x02J\xf8>\xe9\xf0\r\xc2A\xc8q\x89\"+\xa6\xa9^E94\x01\xb5\xba]\xa8\xe9\x86\xea\xe5\xbaH\x11\x8fLLJ(\xfb\x96\x15\xbb\a\xcbj\x1b\xfdL\x88\xbf\xd7\x00\x00\x00\x00\x00t\xdd\xe7z\x87N\x9a\xd1\xe8\xe6\xe5\xa5\rz\\ljD\x19|\x84\x90\xaa\x91\x93\xc7\xdf\xd2\xe9h', 0x0) 613.046178ms ago: executing program 1 (id=4894): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f00000003c0)={r3, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x90) 471.584246ms ago: executing program 1 (id=4895): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x8) 234.413893ms ago: executing program 3 (id=4896): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30172, 0xffffffffffffffff, 0x8000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12f9c5}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) 96.605462ms ago: executing program 1 (id=4897): io_setup(0x1, &(0x7f0000000040)=0x0) io_destroy(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000120001000000000000000000fe8000000000000000000000000000bb0000000000006c000cbf3dad1dfc1d49aac3d63d"], 0x34}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x228401, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0x401) listen(r3, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x11100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000180), 0x12) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xce}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, 0xffffffffffffffff, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[0x0]) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000500)=@ethtool_regs={0x4, 0x0, 0xf1, "1f66e261a0df7d03e359fc05793879cbe6f05691fbf48c8fabf7f68049a5259ccc5386ad4c5508220ce39cd9b72fbcfd54e356a2af29fea3bd660ce622252f416eaa812376c111dfe8d76c62fda83fcc6e4b4c1b176593c5c46b319354ef69d7408a17a59e99aa26a0c3371c53e1086e474a1b70a9ea370025fc0a5c95283971d37cbb663e240cc6e23fc3dfa70031c247c54f17578e3b675f0d5e0b9b4ddef3d23f4ff9ba835f308dd123e7fb76edadf28326c6093e3eccc51b6cadba02e3fe398f68711dcdbc06cffd621f7f9b5ec959ecbadc90b0a1ec20e93558d3025cab4d635a20163c5ebe1fa6297382027ea52f"}}) 70.827043ms ago: executing program 0 (id=4898): keyctl$reject(0x14, 0x0, 0xfffffffffffffff9, 0x1, 0x0) (fail_nth: 1) 0s ago: executing program 2 (id=4899): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000a00)) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000380)={"84db8cb4", 0x0, 0x0, 0x0, 0x0, 0x0, "0022aed9ae659d4d95fd3d1fa09814", "aadb641b", "912ec72a", "5439cfe3", ["f56f1a42e3d0ab344d8bc6cc", "22147745eb9df6cf6a880d29", "9ad3eb5918df0f52938453c9", "ac562047f08f7537b6597721"]}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xd) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040600000000000000040000000000000000000253be97df6c4187149b547d6c57a0aa66139f75612594e7553394b9c7"], 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x6}}, 0x20) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_dump}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r3, 0x4, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xb3}, @l2cap_cid_signaling={{0xaf}, [@l2cap_move_chan_cfm={{0x10, 0xc, 0x4}, {0x5, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x60, 0x8}, {0x5, 0xfffc, 0xa7, 0x5}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x3, 0xc, 0x0, 0x6}}, @l2cap_conn_rsp={{0x3, 0xa9, 0x8}, {0xff, 0x67ec, 0x0, 0x726}}, @l2cap_conf_rsp={{0x5, 0x31, 0x14}, {0x3, 0xc, 0xbc, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x0, 0x2400, 0x2, 0x7800}}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x100}}, @l2cap_info_rsp={{0xb, 0x8, 0x59}, {0x4, 0xaae9, "a6aba2538f93b03e6aef22892d9b98385e1df1b3891207edbf1d954e7423ade5b055495719ea413f488160e3c063ef6461cf331038d364cb0d6f9cec069df069488d19df8ebb3ce2079c2e30af76940121e9ec219f"}}, @l2cap_disconn_rsp={{0x7, 0xa0, 0x4}, {0xffff, 0x101}}]}}, 0xb8) socket$inet6(0xa, 0x6, 0x0) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f00000000c0)=0x1) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r6 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) kernel console output (not intermixed with test programs): x35/0x90 [ 1346.069113][T24357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.075157][T24357] RIP: 0033:0x7fa239575bd9 [ 1346.079616][T24357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1346.099244][T24357] RSP: 002b:00007fa23a29a048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1346.107677][T24357] RAX: ffffffffffffffda RBX: 00007fa239703f60 RCX: 00007fa239575bd9 [ 1346.115659][T24357] RDX: 0000000020004540 RSI: 0000000000000001 RDI: 00007fa23a277000 [ 1346.123641][T24357] RBP: 00007fa23a29a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.131620][T24357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.139598][T24357] R13: 000000000000004d R14: 00007fa239703f60 R15: 00007fa23982fa68 [ 1346.147592][T24357] [ 1346.224315][T24358] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 1346.241938][T24358] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 1346.785416][T24371] netlink: 'syz.3.4622': attribute type 5 has an invalid length. [ 1346.794619][T24371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4622'. [ 1347.042172][T24373] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4623'. [ 1347.297692][ T784] usb 5-1: USB disconnect, device number 68 [ 1347.506207][ T5166] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1347.690935][ T5166] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.702215][ T5166] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1347.716201][ T5146] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1347.719166][ T5166] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1347.740579][ T5166] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1347.749801][ T5166] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.764712][ T5166] usb 3-1: Product: syz [ 1347.769019][ T5166] usb 3-1: Manufacturer: syz [ 1347.773645][ T5166] usb 3-1: SerialNumber: syz [ 1347.806236][ T784] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1347.813987][ T5152] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1347.911214][ T5146] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.922621][ T5146] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1347.936333][ T5146] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1347.958663][ T5146] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1347.968120][ T5146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.976338][ T5146] usb 2-1: Product: syz [ 1347.980543][ T5146] usb 2-1: Manufacturer: syz [ 1347.985169][ T5146] usb 2-1: SerialNumber: syz [ 1348.006271][ T784] usb 5-1: Using ep0 maxpacket: 16 [ 1348.016222][ T5152] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1348.025392][ T5152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.048090][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1348.064664][ T784] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1348.078258][ T5152] usb 1-1: config 0 descriptor?? [ 1348.086410][ T784] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1348.104148][ T5152] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1348.115041][ T784] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 1348.126991][ T784] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1348.135277][ T784] usb 5-1: Product: syz [ 1348.140356][ T784] usb 5-1: Manufacturer: syz [ 1348.145047][ T784] usb 5-1: SerialNumber: syz [ 1348.154512][ T784] usb 5-1: config 0 descriptor?? [ 1348.165615][ T784] usb 5-1: NFC: intf ffff88801105c000 id ffffffff8ecac660 [ 1348.316988][T24391] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4631'. [ 1348.398038][T24378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.419537][T24378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.430781][T17868] Bluetooth: hci0: unexpected event 0x06 length: 17 > 3 [ 1348.489864][ T5152] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 1348.520652][T24380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.532282][T24380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.548250][T17868] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1348.556200][T17868] Bluetooth: Wrong link type (-22) [ 1348.562016][T17868] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 1348.569844][T17868] Bluetooth: Wrong link type (-22) [ 1348.576060][T17868] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 1348.584399][T17868] Bluetooth: Wrong link type (-22) [ 1348.645268][T24395] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 1348.662890][T24395] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 1348.781513][ T784] usb 5-1: USB disconnect, device number 69 [ 1348.837933][ T5166] cdc_ncm 3-1:1.0: bind() failure [ 1348.883892][ T5166] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1348.894561][ T5166] cdc_ncm 3-1:1.1: bind() failure [ 1348.960047][ T5152] gspca_cpia1: usb_control_msg 02, error -71 [ 1348.981139][ T5152] cpia1 1-1:0.0: only firmware version 1 is supported (got: 10) [ 1349.009838][ T5152] usb 1-1: USB disconnect, device number 56 [ 1349.034806][ T5146] cdc_ncm 2-1:1.0: bind() failure [ 1349.047469][T12754] usb 3-1: USB disconnect, device number 62 [ 1349.079766][ T5146] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1349.091817][ T5146] cdc_ncm 2-1:1.1: bind() failure [ 1349.247540][ T5149] usb 2-1: USB disconnect, device number 88 [ 1349.544790][T24406] FAULT_INJECTION: forcing a failure. [ 1349.544790][T24406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.568992][T24406] CPU: 1 PID: 24406 Comm: syz.0.4637 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1349.579302][T24406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1349.589381][T24406] Call Trace: [ 1349.592666][T24406] [ 1349.595614][T24406] dump_stack_lvl+0x241/0x360 [ 1349.600324][T24406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1349.605545][T24406] ? __pfx__printk+0x10/0x10 [ 1349.610187][T24406] ? __pfx_lock_release+0x10/0x10 [ 1349.615269][T24406] should_fail_ex+0x3b0/0x4e0 [ 1349.620004][T24406] _copy_from_user+0x2f/0xe0 [ 1349.624641][T24406] copy_msghdr_from_user+0xae/0x680 [ 1349.629902][T24406] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1349.635777][T24406] __sys_sendmsg+0x23d/0x3a0 [ 1349.640423][T24406] ? __pfx___sys_sendmsg+0x10/0x10 [ 1349.645570][T24406] ? vfs_write+0x7c4/0xc90 [ 1349.650033][T24406] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1349.656381][T24406] ? do_syscall_64+0x100/0x230 [ 1349.661200][T24406] ? do_syscall_64+0xb6/0x230 [ 1349.665924][T24406] do_syscall_64+0xf3/0x230 [ 1349.670469][T24406] ? clear_bhb_loop+0x35/0x90 [ 1349.675170][T24406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.681083][T24406] RIP: 0033:0x7fa239575bd9 [ 1349.685504][T24406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1349.705117][T24406] RSP: 002b:00007fa23a29a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1349.713541][T24406] RAX: ffffffffffffffda RBX: 00007fa239703f60 RCX: 00007fa239575bd9 [ 1349.721527][T24406] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1349.729507][T24406] RBP: 00007fa23a29a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.737488][T24406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.745465][T24406] R13: 000000000000004d R14: 00007fa239703f60 R15: 00007fa23982fa68 [ 1349.753458][T24406] [ 1349.867931][T24412] FAULT_INJECTION: forcing a failure. [ 1349.867931][T24412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.906222][T24412] CPU: 0 PID: 24412 Comm: syz.0.4639 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1349.916322][ T5146] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1349.916427][T24412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1349.934066][T24412] Call Trace: [ 1349.937383][T24412] [ 1349.940349][T24412] dump_stack_lvl+0x241/0x360 [ 1349.945072][T24412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1349.950301][T24412] ? __pfx__printk+0x10/0x10 [ 1349.954937][T24412] ? vfs_write+0x7c4/0xc90 [ 1349.959390][T24412] should_fail_ex+0x3b0/0x4e0 [ 1349.964098][T24412] _copy_from_user+0x2f/0xe0 [ 1349.968804][T24412] move_addr_to_kernel+0x82/0x150 [ 1349.973889][T24412] __sys_bind+0x168/0x2f0 [ 1349.978435][T24412] ? __pfx___sys_bind+0x10/0x10 [ 1349.983340][T24412] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1349.989713][T24412] ? do_syscall_64+0x100/0x230 [ 1349.994532][T24412] __x64_sys_bind+0x7a/0x90 [ 1349.999083][T24412] do_syscall_64+0xf3/0x230 [ 1350.003636][T24412] ? clear_bhb_loop+0x35/0x90 [ 1350.008370][T24412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.014316][T24412] RIP: 0033:0x7fa239575bd9 [ 1350.018770][T24412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1350.038427][T24412] RSP: 002b:00007fa23a29a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1350.046887][T24412] RAX: ffffffffffffffda RBX: 00007fa239703f60 RCX: 00007fa239575bd9 [ 1350.054906][T24412] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000004 [ 1350.062920][T24412] RBP: 00007fa23a29a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.070932][T24412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.079031][T24412] R13: 000000000000004d R14: 00007fa239703f60 R15: 00007fa23982fa68 [ 1350.087255][T24412] [ 1350.115203][ T5146] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1350.154324][ T5146] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1350.172865][ T5146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.203714][ T5146] usb 4-1: Product: ␁ [ 1350.212626][ T5146] usb 4-1: Manufacturer: 〉 [ 1350.218340][T24417] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4642'. [ 1350.225486][ T5146] usb 4-1: SerialNumber: 壚霣ઃ쮀좣鞛冐ñ엙ᜑ嗆胮輯交丳颽➻ͫ㥍넌똕穅䠦諡詁⌊ꔨ뺏眗㐙ℜﵞ仸繀쀿잒췢렜뽬튜쮱픵蜫箳᧡蠲虌銞쉴㻁댧ᄦ褘䞇ꉼꕃƒ魃鹠ἷŞᄃǃ굥過韂塌횫⼳돝梪ꄖ [ 1350.340753][T17868] Bluetooth: hci5: unexpected event 0x06 length: 17 > 3 [ 1350.442446][T17868] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1350.458997][T17868] Bluetooth: Wrong link type (-22) [ 1350.464285][T17868] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 1350.471693][T17868] Bluetooth: Wrong link type (-22) [ 1350.477120][T17868] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 1350.483967][T17868] Bluetooth: Wrong link type (-22) [ 1350.511313][ T29] audit: type=1326 audit(1720185776.488:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24418 comm="syz.1.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8f75bd9 code=0x7ffc0000 [ 1350.570078][T24426] FAULT_INJECTION: forcing a failure. [ 1350.570078][T24426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.609430][T24426] CPU: 1 PID: 24426 Comm: syz.0.4646 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1350.619646][T24426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1350.629713][T24426] Call Trace: [ 1350.632997][T24426] [ 1350.635948][T24426] dump_stack_lvl+0x241/0x360 [ 1350.640665][T24426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1350.645881][T24426] ? __pfx__printk+0x10/0x10 [ 1350.650500][T24426] ? __pfx_lock_release+0x10/0x10 [ 1350.655572][T24426] should_fail_ex+0x3b0/0x4e0 [ 1350.660307][T24426] _copy_from_user+0x2f/0xe0 [ 1350.664941][T24426] copy_msghdr_from_user+0xae/0x680 [ 1350.670201][T24426] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1350.676083][T24426] do_recvmmsg+0x40f/0xae0 [ 1350.680551][T24426] ? mark_lock+0x9a/0x350 [ 1350.684907][T24426] ? __pfx_do_recvmmsg+0x10/0x10 [ 1350.689874][T24426] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1350.695779][T24426] ? ksys_write+0x23e/0x2c0 [ 1350.700291][T24426] ? __pfx_lock_release+0x10/0x10 [ 1350.705438][T24426] ? vfs_write+0x7c4/0xc90 [ 1350.709884][T24426] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1350.715564][T24426] ? __fget_files+0x3f6/0x470 [ 1350.720271][T24426] __x64_sys_recvmmsg+0x199/0x250 [ 1350.725314][T24426] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1350.730873][T24426] ? do_syscall_64+0x100/0x230 [ 1350.735683][T24426] ? do_syscall_64+0xb6/0x230 [ 1350.740376][T24426] do_syscall_64+0xf3/0x230 [ 1350.744916][T24426] ? clear_bhb_loop+0x35/0x90 [ 1350.749627][T24426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.755545][T24426] RIP: 0033:0x7fa239575bd9 [ 1350.759971][T24426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1350.779590][T24426] RSP: 002b:00007fa23a29a048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1350.788036][T24426] RAX: ffffffffffffffda RBX: 00007fa239703f60 RCX: 00007fa239575bd9 [ 1350.796011][T24426] RDX: 0000000000000001 RSI: 0000000020001c80 RDI: 0000000000000003 [ 1350.803989][T24426] RBP: 00007fa23a29a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.811970][T24426] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1350.819948][T24426] R13: 000000000000004d R14: 00007fa239703f60 R15: 00007fa23982fa68 [ 1350.827934][T24426] [ 1350.863129][ T29] audit: type=1326 audit(1720185776.488:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24418 comm="syz.1.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8f75bd9 code=0x7ffc0000 [ 1350.899979][ T5146] cdc_ncm 4-1:1.0: bind() failure [ 1350.912308][T24425] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 1350.927002][ T5146] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1350.936972][ T29] audit: type=1326 audit(1720185776.548:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24418 comm="syz.1.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f64e8f75bd9 code=0x7ffc0000 [ 1350.977957][T24425] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 1350.980823][ T29] audit: type=1326 audit(1720185776.548:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24418 comm="syz.1.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8f75bd9 code=0x7ffc0000 [ 1351.008689][ T5149] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1351.022166][ T5146] cdc_ncm 4-1:1.1: bind() failure [ 1351.053221][ T5146] usb 4-1: USB disconnect, device number 40 [ 1351.164169][ T29] audit: type=1326 audit(1720185776.548:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24418 comm="syz.1.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8f75bd9 code=0x7ffc0000 [ 1351.204955][ T29] audit: type=1326 audit(1720185776.638:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24418 comm="syz.1.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f64e8f75bd9 code=0x7ffc0000 [ 1351.208190][ T5149] usb 5-1: Using ep0 maxpacket: 32 [ 1351.274675][ T29] audit: type=1326 audit(1720185776.638:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24418 comm="syz.1.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8f75bd9 code=0x7ffc0000 [ 1351.368207][ T5149] usb 5-1: config 0 has an invalid descriptor of length 245, skipping remainder of the config [ 1351.388413][ T5149] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1351.420063][ T29] audit: type=1326 audit(1720185776.638:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24418 comm="syz.1.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8f75bd9 code=0x7ffc0000 [ 1351.429343][ T5149] usb 5-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 1351.524312][ T5149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.536786][ T29] audit: type=1326 audit(1720185776.818:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24418 comm="syz.1.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f64e8f75bd9 code=0x7ffc0000 [ 1351.556199][ T5149] usb 5-1: Product: syz [ 1351.580479][ T5149] usb 5-1: Manufacturer: syz [ 1351.606262][ T5149] usb 5-1: SerialNumber: syz [ 1351.619387][ T5149] usb 5-1: config 0 descriptor?? [ 1351.621677][ T29] audit: type=1326 audit(1720185776.818:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24418 comm="syz.1.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e8f75bd9 code=0x7ffc0000 [ 1351.662421][T17868] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1352.026295][ T5166] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1352.207967][ T5166] usb 3-1: device descriptor read/64, error -71 [ 1352.234340][ T5149] usb 5-1: USB disconnect, device number 70 [ 1352.346163][T23025] Bluetooth: hci5: command tx timeout [ 1352.486681][T17868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1352.501285][T17868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1352.511965][T17868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1352.516343][ T5166] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1352.527957][T17868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1352.537045][T17868] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1352.544581][T17868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1352.621166][T23025] Bluetooth: hci1: unexpected event 0x06 length: 17 > 3 [ 1352.685984][T23025] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1352.705800][ T5166] usb 3-1: device descriptor read/64, error -71 [ 1352.771792][T24475] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 1352.786125][T24475] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 1352.855864][ T5166] usb usb3-port1: attempt power cycle [ 1353.165510][T24471] chnl_net:caif_netlink_parms(): no params data found [ 1353.313022][ T5166] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1353.407895][ T5166] usb 3-1: device descriptor read/8, error -71 [ 1353.417343][T23025] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1353.509609][T24471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.531351][T24471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.539292][T24471] bridge_slave_0: entered allmulticast mode [ 1353.554900][T24471] bridge_slave_0: entered promiscuous mode [ 1353.570965][T24471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.587213][T24471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.594631][T24471] bridge_slave_1: entered allmulticast mode [ 1353.614106][T24471] bridge_slave_1: entered promiscuous mode [ 1353.681456][T24471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1353.699166][T24471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1353.719617][ T5166] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1353.767441][ T5166] usb 3-1: device descriptor read/8, error -71 [ 1353.778141][T24471] team0: Port device team_slave_0 added [ 1353.796298][ T8331] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1353.807375][T24471] team0: Port device team_slave_1 added [ 1353.870314][T24471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1353.897180][ T5166] usb usb3-port1: unable to enumerate USB device [ 1353.903639][T24471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1353.940025][T24471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1353.988927][T24471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1354.016066][T24471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1354.053569][ T8331] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.089033][ T8331] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1354.116636][T24471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.127801][ T8331] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1354.150952][ T8331] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1354.162082][ T8331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.181227][ T8331] usb 4-1: Product: syz [ 1354.195724][ T8331] usb 4-1: Manufacturer: syz [ 1354.203297][ T8331] usb 4-1: SerialNumber: syz [ 1354.345244][T24471] hsr_slave_0: entered promiscuous mode [ 1354.392688][T24471] hsr_slave_1: entered promiscuous mode [ 1354.400768][T24471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1354.423645][T24471] Cannot create hsr debugfs directory [ 1354.596480][T23025] Bluetooth: hci2: command tx timeout [ 1354.666136][T23025] Bluetooth: hci1: command 0x0409 tx timeout [ 1354.756247][T12754] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1354.861304][T24493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.876585][T24493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.949306][T12754] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.973031][T12754] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1354.983844][T23025] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1355.006476][T12754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.018662][T12754] usb 1-1: Product: syz [ 1355.022937][T12754] usb 1-1: Manufacturer: syz [ 1355.030173][T12754] usb 1-1: SerialNumber: syz [ 1355.042405][T24471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.179538][T23025] Bluetooth: hci4: unexpected event 0x06 length: 17 > 3 [ 1355.267137][T23025] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1355.281942][T23025] Bluetooth: Wrong link type (-22) [ 1355.287310][T23025] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 1355.293959][T23025] Bluetooth: Wrong link type (-22) [ 1355.299587][T23025] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 1355.307081][T23025] Bluetooth: Wrong link type (-22) [ 1355.312455][ T8331] cdc_ncm 4-1:1.0: bind() failure [ 1355.321732][ T8331] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1355.328801][ T8331] cdc_ncm 4-1:1.1: bind() failure [ 1355.397578][T24471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.444828][T24526] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 1355.480851][T24526] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 1355.542040][ T5152] usb 4-1: USB disconnect, device number 41 [ 1355.604825][T24471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.655852][T24512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.666945][T24512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.758801][T24471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.844450][T24528] FAULT_INJECTION: forcing a failure. [ 1355.844450][T24528] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.864161][T24528] CPU: 1 PID: 24528 Comm: syz.2.4677 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1355.874357][T24528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1355.884440][T24528] Call Trace: [ 1355.887744][T24528] [ 1355.890673][T24528] dump_stack_lvl+0x241/0x360 [ 1355.895381][T24528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1355.900632][T24528] ? __pfx__printk+0x10/0x10 [ 1355.905271][T24528] ? __pfx___might_resched+0x10/0x10 [ 1355.910598][T24528] should_fail_ex+0x3b0/0x4e0 [ 1355.915294][T24528] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1355.921026][T24528] should_failslab+0x9/0x20 [ 1355.925560][T24528] __kmalloc_noprof+0xd8/0x400 [ 1355.930338][T24528] ? kfree+0x4e/0x360 [ 1355.934339][T24528] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1355.939906][T24528] tomoyo_path_number_perm+0x23a/0x880 [ 1355.945399][T24528] ? tomoyo_path_number_perm+0x208/0x880 [ 1355.951050][T24528] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1355.957082][T24528] ? __fget_files+0x29/0x470 [ 1355.961706][T24528] ? __fget_files+0x3f6/0x470 [ 1355.966424][T24528] ? __fget_files+0x29/0x470 [ 1355.971050][T24528] security_file_ioctl+0x75/0xb0 [ 1355.976008][T24528] __se_sys_ioctl+0x47/0x170 [ 1355.980624][T24528] do_syscall_64+0xf3/0x230 [ 1355.985163][T24528] ? clear_bhb_loop+0x35/0x90 [ 1355.989865][T24528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.995771][T24528] RIP: 0033:0x7fb273975bd9 [ 1356.000193][T24528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1356.019806][T24528] RSP: 002b:00007fb274701048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1356.028234][T24528] RAX: ffffffffffffffda RBX: 00007fb273b03f60 RCX: 00007fb273975bd9 [ 1356.036240][T24528] RDX: 0000000000000000 RSI: 00000000c020660b RDI: 0000000000000004 [ 1356.044227][T24528] RBP: 00007fb2747010a0 R08: 0000000000000000 R09: 0000000000000000 [ 1356.052223][T24528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.060211][T24528] R13: 000000000000000b R14: 00007fb273b03f60 R15: 00007fb273c2fa68 [ 1356.068210][T24528] [ 1356.073217][T24528] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1356.268355][T24471] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1356.276636][T12754] cdc_ncm 1-1:1.0: failed to get mac address [ 1356.307450][T12754] cdc_ncm 1-1:1.0: bind() failure [ 1356.315000][T24471] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1356.342848][T12754] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1356.351339][T24471] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1356.366609][T12754] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1356.374892][T24471] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1356.386435][T12754] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1356.427134][T12754] usb 1-1: USB disconnect, device number 57 [ 1356.516923][ T5169] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1356.601719][T24540] FAULT_INJECTION: forcing a failure. [ 1356.601719][T24540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1356.666407][T23025] Bluetooth: hci2: command tx timeout [ 1356.676744][T24540] CPU: 1 PID: 24540 Comm: syz.3.4682 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1356.686967][T24540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1356.697062][T24540] Call Trace: [ 1356.701113][T24540] [ 1356.704087][T24540] dump_stack_lvl+0x241/0x360 [ 1356.708829][T24540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1356.714083][T24540] ? __pfx__printk+0x10/0x10 [ 1356.718738][T24540] ? snprintf+0xda/0x120 [ 1356.723031][T24540] should_fail_ex+0x3b0/0x4e0 [ 1356.726820][T24471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.727737][T24540] _copy_to_user+0x2f/0xb0 [ 1356.738773][T24540] simple_read_from_buffer+0xca/0x150 [ 1356.744196][T24540] proc_fail_nth_read+0x1e9/0x250 [ 1356.749260][T24540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1356.754824][T24540] ? rw_verify_area+0x520/0x6b0 [ 1356.759690][T24540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1356.765245][T24540] vfs_read+0x204/0xbc0 [ 1356.769412][T24540] ? __pfx_lock_release+0x10/0x10 [ 1356.774449][T24540] ? do_sock_setsockopt+0x3e2/0x720 [ 1356.779665][T24540] ? __pfx_vfs_read+0x10/0x10 [ 1356.784354][T24540] ? __fget_files+0x29/0x470 [ 1356.788973][T24540] ? __fget_files+0x3f6/0x470 [ 1356.793679][T24540] ksys_read+0x1a0/0x2c0 [ 1356.797942][T24540] ? __pfx_ksys_read+0x10/0x10 [ 1356.802724][T24540] ? do_syscall_64+0x100/0x230 [ 1356.807514][T24540] ? do_syscall_64+0xb6/0x230 [ 1356.812212][T24540] do_syscall_64+0xf3/0x230 [ 1356.816731][T24540] ? clear_bhb_loop+0x35/0x90 [ 1356.821427][T24540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.827335][T24540] RIP: 0033:0x7f01c53746bc [ 1356.831758][T24540] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1356.851377][T24540] RSP: 002b:00007f01c61a1040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1356.859805][T24540] RAX: ffffffffffffffda RBX: 00007f01c5504038 RCX: 00007f01c53746bc [ 1356.867797][T24540] RDX: 000000000000000f RSI: 00007f01c61a10b0 RDI: 0000000000000004 [ 1356.875775][T24540] RBP: 00007f01c61a10a0 R08: 0000000000000000 R09: 0000000000000000 [ 1356.883768][T24540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.891771][T24540] R13: 000000000000006e R14: 00007f01c5504038 R15: 00007f01c562fa68 [ 1356.899782][T24540] [ 1356.918883][ T5169] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1356.939469][ T5169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1356.966907][T24471] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.983928][ T5169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1357.012794][ T5169] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1357.050608][ T5169] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1357.060871][ T5169] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1357.096115][ T5169] usb 3-1: Manufacturer: syz [ 1357.112592][ T5169] usb 3-1: config 0 descriptor?? [ 1357.122323][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.129711][ T8331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1357.198404][ T8331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.205658][ T8331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.226326][T23025] Bluetooth: hci4: command tx timeout [ 1357.568706][ T5169] appleir 0003:05AC:8243.004C: unknown main item tag 0x0 [ 1357.601057][ T5169] appleir 0003:05AC:8243.004C: No inputs registered, leaving [ 1357.633753][T24471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.656037][ T5169] appleir 0003:05AC:8243.004C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1357.784495][T23025] Bluetooth: hci4: unexpected event 0x06 length: 17 > 3 [ 1357.818252][T24471] veth0_vlan: entered promiscuous mode [ 1357.869935][T23025] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1357.876701][T23025] Bluetooth: Wrong link type (-22) [ 1357.881991][T23025] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 1357.888692][T23025] Bluetooth: Wrong link type (-22) [ 1357.893984][T23025] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 1357.900726][T23025] Bluetooth: Wrong link type (-22) [ 1357.988011][T24562] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 1357.990912][T24471] veth1_vlan: entered promiscuous mode [ 1358.024233][T24562] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 1358.068898][T24471] veth0_macvtap: entered promiscuous mode [ 1358.157982][T24471] veth1_macvtap: entered promiscuous mode [ 1358.256578][T24471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1358.280260][T24471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.309101][T24471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1358.365659][T24471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.428356][T24471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1358.462414][T24471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.485225][T24471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1358.504332][T24471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.530254][T24471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1358.553653][T24471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.571643][T24471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1358.582561][T24471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.593901][T24471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1358.604643][T24471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.633604][T24471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1358.688128][T24471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.715855][T24471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.743613][T24471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.746901][T23025] Bluetooth: hci2: command tx timeout [ 1358.773932][T24471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.790084][T24471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.801253][T24471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.813679][T24471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.828819][T24471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.839286][T24471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.859403][T24471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.897690][T24471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.918908][T24471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.939107][T24471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.963601][T24471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.992283][T24471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1359.048570][T24471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.060862][T24471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.071102][T24471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.080602][T24471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.176398][ T5169] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1359.308671][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.342005][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.421979][T21606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.435154][T21606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.452526][ T5169] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1359.499785][ T5169] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1359.526118][ T5169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.540742][ T5169] usb 4-1: Product: ␁ [ 1359.547962][ T5169] usb 4-1: Manufacturer: 〉 [ 1359.553062][ T5169] usb 4-1: SerialNumber: 壚霣ઃ쮀좣鞛冐ñ엙ᜑ嗆胮輯交丳颽➻ͫ㥍넌똕穅䠦諡詁⌊ꔨ뺏眗㐙ℜﵞ仸繀쀿잒췢렜뽬튜쮱픵蜫箳᧡蠲虌銞쉴㻁댧ᄦ褘䞇ꉼꕃƒ魃鹠ἷŞᄃǃ굥過韂塌횫⼳돝梪ꄖ [ 1359.638004][T24589] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4656'. [ 1359.674113][T24591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4695'. [ 1359.729995][ T5166] usb 3-1: USB disconnect, device number 67 [ 1359.786306][T23025] Bluetooth: hci4: command tx timeout [ 1359.894219][ T5169] cdc_ncm 4-1:1.0: bind() failure [ 1359.936431][ T5169] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1359.936482][ T5169] cdc_ncm 4-1:1.1: bind() failure [ 1359.953518][ T5169] usb 4-1: USB disconnect, device number 42 [ 1360.415840][T24609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4701'. [ 1360.640811][T24613] FAULT_INJECTION: forcing a failure. [ 1360.640811][T24613] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.686685][T24613] CPU: 1 PID: 24613 Comm: syz.4.4704 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1360.696914][T24613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1360.707030][T24613] Call Trace: [ 1360.710350][T24613] [ 1360.713326][T24613] dump_stack_lvl+0x241/0x360 [ 1360.718070][T24613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1360.723331][T24613] ? __pfx__printk+0x10/0x10 [ 1360.727990][T24613] ? __pfx___might_resched+0x10/0x10 [ 1360.733332][T24613] should_fail_ex+0x3b0/0x4e0 [ 1360.738063][T24613] should_failslab+0x9/0x20 [ 1360.742620][T24613] __kmalloc_node_noprof+0xdf/0x440 [ 1360.747879][T24613] ? kvmalloc_node_noprof+0x72/0x190 [ 1360.753224][T24613] kvmalloc_node_noprof+0x72/0x190 [ 1360.758368][T24613] file_tty_write+0x2c7/0x9b0 [ 1360.763070][T24613] vfs_write+0xa72/0xc90 [ 1360.767355][T24613] ? __pfx_tty_write+0x10/0x10 [ 1360.772158][T24613] ? __pfx_vfs_write+0x10/0x10 [ 1360.776953][T24613] ksys_write+0x1a0/0x2c0 [ 1360.781323][T24613] ? __pfx_ksys_write+0x10/0x10 [ 1360.786190][T24613] ? do_syscall_64+0x100/0x230 [ 1360.790974][T24613] ? do_syscall_64+0xb6/0x230 [ 1360.795673][T24613] do_syscall_64+0xf3/0x230 [ 1360.800207][T24613] ? clear_bhb_loop+0x35/0x90 [ 1360.804912][T24613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.810823][T24613] RIP: 0033:0x7f6d05775bd9 [ 1360.815248][T24613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1360.834859][T24613] RSP: 002b:00007f6d06593048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1360.843284][T24613] RAX: ffffffffffffffda RBX: 00007f6d05903f60 RCX: 00007f6d05775bd9 [ 1360.851270][T24613] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000004 [ 1360.859273][T24613] RBP: 00007f6d065930a0 R08: 0000000000000000 R09: 0000000000000000 [ 1360.867255][T24613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1360.875234][T24613] R13: 000000000000000b R14: 00007f6d05903f60 R15: 00007f6d05a2fa68 [ 1360.883230][T24613] [ 1360.901307][T23025] Bluetooth: hci2: command tx timeout [ 1361.034621][T24623] FAULT_INJECTION: forcing a failure. [ 1361.034621][T24623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1361.049170][T24623] CPU: 0 PID: 24623 Comm: syz.3.4708 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1361.059484][T24623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1361.069554][T24623] Call Trace: [ 1361.072841][T24623] [ 1361.075778][T24623] dump_stack_lvl+0x241/0x360 [ 1361.080479][T24623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1361.085696][T24623] ? __pfx__printk+0x10/0x10 [ 1361.090322][T24623] ? __pfx_lock_release+0x10/0x10 [ 1361.095373][T24623] should_fail_ex+0x3b0/0x4e0 [ 1361.100087][T24623] _copy_from_user+0x2f/0xe0 [ 1361.104748][T24623] copy_msghdr_from_user+0xae/0x680 [ 1361.109986][T24623] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1361.115834][T24623] do_recvmmsg+0x40f/0xae0 [ 1361.120314][T24623] ? __pfx_lock_release+0x10/0x10 [ 1361.125395][T24623] ? __pfx_do_recvmmsg+0x10/0x10 [ 1361.130363][T24623] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1361.136270][T24623] ? ksys_write+0x23e/0x2c0 [ 1361.140811][T24623] ? __pfx_lock_release+0x10/0x10 [ 1361.145854][T24623] ? vfs_write+0x7c4/0xc90 [ 1361.150289][T24623] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1361.155951][T24623] ? __fget_files+0x3f6/0x470 [ 1361.160683][T24623] __x64_sys_recvmmsg+0x199/0x250 [ 1361.165731][T24623] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1361.171291][T24623] ? do_syscall_64+0x100/0x230 [ 1361.176076][T24623] ? do_syscall_64+0xb6/0x230 [ 1361.180861][T24623] do_syscall_64+0xf3/0x230 [ 1361.185378][T24623] ? clear_bhb_loop+0x35/0x90 [ 1361.190075][T24623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.195986][T24623] RIP: 0033:0x7f01c5375bd9 [ 1361.200412][T24623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1361.220060][T24623] RSP: 002b:00007f01c61c2048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1361.228494][T24623] RAX: ffffffffffffffda RBX: 00007f01c5503f60 RCX: 00007f01c5375bd9 [ 1361.236476][T24623] RDX: 040000000000026c RSI: 00000000200005c0 RDI: 0000000000000003 [ 1361.244458][T24623] RBP: 00007f01c61c20a0 R08: 0000000000000000 R09: 0000000000000000 [ 1361.252440][T24623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.260438][T24623] R13: 000000000000000b R14: 00007f01c5503f60 R15: 00007f01c562fa68 [ 1361.268431][T24623] [ 1361.335657][T24625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4709'. [ 1361.446328][ T5166] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1361.674325][ T5166] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1361.705326][ T5166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.723123][ T5166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1361.762048][ T5166] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1361.798132][ T5166] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1361.828477][ T5166] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1361.856827][ T5166] usb 3-1: Manufacturer: syz [ 1361.877294][ T5166] usb 3-1: config 0 descriptor?? [ 1361.950178][T24645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4715'. [ 1362.040064][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.046989][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.127882][ T5146] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1362.298067][ T5166] appleir 0003:05AC:8243.004D: unknown main item tag 0x0 [ 1362.313576][ T5166] appleir 0003:05AC:8243.004D: No inputs registered, leaving [ 1362.326205][ T5146] usb 4-1: Using ep0 maxpacket: 8 [ 1362.336347][ T5166] appleir 0003:05AC:8243.004D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1362.348259][ T5146] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1362.348292][ T5146] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1362.348315][ T5146] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1362.351002][ T5146] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1362.406175][ T5146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.414300][ T5146] usb 4-1: Product: syz [ 1362.418724][ T5146] usb 4-1: Manufacturer: 윳醇ậ얦᪝󲑕 [ 1362.424761][ T5146] usb 4-1: SerialNumber: syz [ 1362.446178][T16896] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1362.650212][T16896] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1362.676644][T16896] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1362.692105][T16896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.709784][T16896] usb 1-1: Product: ␁ [ 1362.720018][T16896] usb 1-1: Manufacturer: 〉 [ 1362.729743][T16896] usb 1-1: SerialNumber: 壚霣ઃ쮀좣鞛冐ñ엙ᜑ嗆胮輯交丳颽➻ͫ㥍넌똕穅䠦諡詁⌊ꔨ뺏眗㐙ℜﵞ仸繀쀿잒췢렜뽬튜쮱픵蜫箳᧡蠲虌銞쉴㻁댧ᄦ褘䞇ꉼꕃƒ魃鹠ἷŞᄃǃ굥過韂塌횫⼳돝梪ꄖ [ 1363.060849][T16896] cdc_ncm 1-1:1.0: bind() failure [ 1363.117491][T24642] could not allocate digest TFM handle blake2s-128 [ 1363.126897][T16896] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1363.138716][T16896] cdc_ncm 1-1:1.1: bind() failure [ 1363.144215][ T5146] usb 4-1: 0:2 : does not exist [ 1363.185950][T16896] usb 1-1: USB disconnect, device number 58 [ 1363.245401][ T5146] usb 4-1: USB disconnect, device number 43 [ 1363.462420][T24663] FAULT_INJECTION: forcing a failure. [ 1363.462420][T24663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.478763][T24663] CPU: 1 PID: 24663 Comm: syz.1.4720 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1363.488972][T24663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1363.499041][T24663] Call Trace: [ 1363.502414][T24663] [ 1363.505363][T24663] dump_stack_lvl+0x241/0x360 [ 1363.510153][T24663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1363.515368][T24663] ? __pfx__printk+0x10/0x10 [ 1363.519970][T24663] ? __pfx_lock_release+0x10/0x10 [ 1363.525003][T24663] should_fail_ex+0x3b0/0x4e0 [ 1363.529719][T24663] _copy_from_user+0x2f/0xe0 [ 1363.534336][T24663] sk_setsockopt+0x2e1/0x3380 [ 1363.539019][T24663] ? __pfx___might_resched+0x10/0x10 [ 1363.544308][T24663] ? __lock_acquire+0x1346/0x1fd0 [ 1363.549336][T24663] ? __pfx_sk_setsockopt+0x10/0x10 [ 1363.554454][T24663] ? aa_sk_perm+0x967/0xab0 [ 1363.558989][T24663] ? __pfx_aa_sk_perm+0x10/0x10 [ 1363.563873][T24663] ? __pfx_lock_acquire+0x10/0x10 [ 1363.568932][T24663] ? aa_sock_opt_perm+0x79/0x120 [ 1363.573900][T24663] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1363.579444][T24663] ? security_socket_setsockopt+0x87/0xb0 [ 1363.585169][T24663] do_sock_setsockopt+0x2fb/0x720 [ 1363.590201][T24663] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1363.595764][T24663] ? __fget_files+0x29/0x470 [ 1363.600375][T24663] ? __fget_files+0x3f6/0x470 [ 1363.605085][T24663] __sys_setsockopt+0x1ae/0x250 [ 1363.609938][T24663] __x64_sys_setsockopt+0xb5/0xd0 [ 1363.614965][T24663] do_syscall_64+0xf3/0x230 [ 1363.619474][T24663] ? clear_bhb_loop+0x35/0x90 [ 1363.624156][T24663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.630051][T24663] RIP: 0033:0x7fe491775bd9 [ 1363.634462][T24663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.654082][T24663] RSP: 002b:00007fe4924f5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1363.662510][T24663] RAX: ffffffffffffffda RBX: 00007fe491904038 RCX: 00007fe491775bd9 [ 1363.670503][T24663] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 1363.678472][T24663] RBP: 00007fe4924f50a0 R08: 0000000000000010 R09: 0000000000000000 [ 1363.686442][T24663] R10: 000000002002eff0 R11: 0000000000000246 R12: 0000000000000001 [ 1363.694413][T24663] R13: 000000000000006e R14: 00007fe491904038 R15: 00007fe491a2fa68 [ 1363.702398][T24663] [ 1363.730467][ T9410] udevd[9410]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1364.124241][T24672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4722'. [ 1364.482265][T24682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4726'. [ 1364.557701][ T5169] usb 3-1: USB disconnect, device number 68 [ 1364.605262][T24684] Timeout policy `syz0' can only be used by L3 protocol number 8884 [ 1364.716204][ T784] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1364.936238][ T784] usb 2-1: Using ep0 maxpacket: 8 [ 1364.959334][ T784] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1364.980494][ T784] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1365.026104][ T784] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1365.056173][ T784] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1365.083018][ T784] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1365.101674][ T784] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1365.138857][ T784] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1365.165809][ T784] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1365.189879][T24696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4732'. [ 1365.193634][ T784] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1365.230084][ T784] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1365.254198][ T784] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1365.275989][ T784] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1365.311945][ T784] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1365.326959][ T784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.345974][ T784] usb 2-1: Product: syz [ 1365.353684][ T784] usb 2-1: Manufacturer: syz [ 1365.362202][ T784] usb 2-1: SerialNumber: syz [ 1365.556858][T24702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4734'. [ 1365.576201][ T5146] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1365.613347][ T784] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1365.649925][ T784] usb 2-1: USB disconnect, device number 89 [ 1365.778441][ T5146] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.803109][ T5146] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1365.825606][ T5146] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1365.854158][ T5146] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1365.864013][ T5146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.872917][ T5146] usb 4-1: Product: syz [ 1365.877925][ T5146] usb 4-1: Manufacturer: syz [ 1365.892300][ T5146] usb 4-1: SerialNumber: syz [ 1365.957612][T12754] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1366.126184][T12754] usb 5-1: device descriptor read/64, error -71 [ 1366.213340][T24721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4739'. [ 1366.343180][T24725] netlink: 'syz.1.4740': attribute type 21 has an invalid length. [ 1366.352529][T24725] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4740'. [ 1366.396332][T12754] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1366.520732][ T5091] usb 4-1: USB disconnect, device number 44 [ 1366.556108][T12754] usb 5-1: device descriptor read/64, error -71 [ 1366.638287][T24732] FAULT_INJECTION: forcing a failure. [ 1366.638287][T24732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1366.655048][T24732] CPU: 1 PID: 24732 Comm: syz.3.4744 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1366.665288][T24732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1366.675372][T24732] Call Trace: [ 1366.678655][T24732] [ 1366.681583][T24732] dump_stack_lvl+0x241/0x360 [ 1366.686301][T24732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1366.691504][T24732] ? __pfx__printk+0x10/0x10 [ 1366.696108][T24732] ? snprintf+0xda/0x120 [ 1366.700352][T24732] should_fail_ex+0x3b0/0x4e0 [ 1366.705041][T24732] _copy_to_user+0x2f/0xb0 [ 1366.709466][T24732] simple_read_from_buffer+0xca/0x150 [ 1366.714855][T24732] proc_fail_nth_read+0x1e9/0x250 [ 1366.719906][T24732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1366.725461][T24732] ? rw_verify_area+0x520/0x6b0 [ 1366.730314][T24732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1366.735905][T24732] vfs_read+0x204/0xbc0 [ 1366.740093][T24732] ? __pfx_lock_release+0x10/0x10 [ 1366.745123][T24732] ? __pfx_vfs_read+0x10/0x10 [ 1366.749828][T24732] ? __fget_files+0x29/0x470 [ 1366.754515][T24732] ? __fget_files+0x3f6/0x470 [ 1366.759210][T24732] ksys_read+0x1a0/0x2c0 [ 1366.763462][T24732] ? __pfx_ksys_read+0x10/0x10 [ 1366.768230][T24732] ? do_syscall_64+0x100/0x230 [ 1366.773003][T24732] ? do_syscall_64+0xb6/0x230 [ 1366.777690][T24732] do_syscall_64+0xf3/0x230 [ 1366.782198][T24732] ? clear_bhb_loop+0x35/0x90 [ 1366.786887][T24732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.792795][T24732] RIP: 0033:0x7f01c53746bc [ 1366.797211][T24732] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1366.816823][T24732] RSP: 002b:00007f01c61c2040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1366.825241][T24732] RAX: ffffffffffffffda RBX: 00007f01c5503f60 RCX: 00007f01c53746bc [ 1366.833229][T24732] RDX: 000000000000000f RSI: 00007f01c61c20b0 RDI: 0000000000000005 [ 1366.841212][T24732] RBP: 00007f01c61c20a0 R08: 0000000000000000 R09: 0000000000000000 [ 1366.849189][T24732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1366.857193][T24732] R13: 000000000000000b R14: 00007f01c5503f60 R15: 00007f01c562fa68 [ 1366.865177][T24732] [ 1366.903083][T12754] usb usb5-port1: attempt power cycle [ 1367.064719][T24735] No such timeout policy "syz0" [ 1367.144612][T24737] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4746'. [ 1367.336561][T12754] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1367.403327][T12754] usb 5-1: device descriptor read/8, error -71 [ 1367.686152][T12754] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1367.726833][T12754] usb 5-1: device descriptor read/8, error -71 [ 1367.771514][T24753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4751'. [ 1367.806195][ T784] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1367.867133][T12754] usb usb5-port1: unable to enumerate USB device [ 1368.032233][ T784] usb 1-1: Using ep0 maxpacket: 8 [ 1368.071860][ T784] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1368.089890][ T784] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1368.119789][ T784] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1368.146048][ T784] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1368.172292][ T784] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1368.184603][ T784] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1368.206367][ T784] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1368.227913][ T784] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1368.253915][ T784] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1368.270705][ T784] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1368.301184][ T784] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1368.326004][T24766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4755'. [ 1368.341307][ T784] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1368.353400][T23025] Bluetooth: Wrong link type (-71) [ 1368.362274][T23025] Bluetooth: hci2: unexpected event 0x32 length: 4 < 9 [ 1368.385807][ T784] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1368.395593][ T784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.403799][ T784] usb 1-1: Product: syz [ 1368.411978][ T784] usb 1-1: Manufacturer: syz [ 1368.419531][ T784] usb 1-1: SerialNumber: syz [ 1368.484377][T24772] mmap: syz.1.4757 (24772) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1368.676810][ T784] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1368.717937][ T784] usb 1-1: USB disconnect, device number 59 [ 1368.784783][T24777] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4758'. [ 1369.333922][T24781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4759'. [ 1369.974178][T24811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4768'. [ 1370.352404][ T784] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1370.405229][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.526034][ T784] usb 5-1: device descriptor read/64, error -71 [ 1370.591297][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.773306][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.834887][ T784] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1370.940040][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.983707][T24823] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4775'. [ 1370.996246][T12754] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1371.016467][ T784] usb 5-1: device descriptor read/64, error -71 [ 1371.167553][ T784] usb usb5-port1: attempt power cycle [ 1371.176583][T17868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1371.200140][T12754] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1371.215360][T12754] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1371.225752][T17868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1371.241026][T17868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1371.251385][T12754] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1371.262101][T17868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1371.269811][T12754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.278763][T17868] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1371.279242][T17868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1371.346521][T24816] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1371.375770][ T51] bridge_slave_1: left allmulticast mode [ 1371.375806][ T51] bridge_slave_1: left promiscuous mode [ 1371.376128][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.396454][ T51] bridge_slave_0: left allmulticast mode [ 1371.396487][ T51] bridge_slave_0: left promiscuous mode [ 1371.396723][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.610230][T24816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.626758][ T784] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1371.669675][T24816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.687491][ T784] usb 5-1: device descriptor read/8, error -71 [ 1371.776505][T12754] usb 1-1: USB disconnect, device number 60 [ 1372.009694][ T784] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1372.047017][ T784] usb 5-1: device descriptor read/8, error -71 [ 1372.182346][ T784] usb usb5-port1: unable to enumerate USB device [ 1372.791117][T23025] Bluetooth: Wrong link type (-71) [ 1372.796761][T23025] Bluetooth: hci0: unexpected event 0x32 length: 4 < 9 [ 1372.803764][T23025] Bluetooth: hci0: link tx timeout [ 1372.809830][T23025] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1372.897314][T24850] kvm: vcpu 2046: requested lapic timer restore with starting count register 0x390=2927474123 (5854948246 ns) > initial count (1287066782 ns). Using initial count to start timer. [ 1372.947609][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1373.016859][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1373.095116][ T51] bond0 (unregistering): Released all slaves [ 1373.205119][T24848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4780'. [ 1373.308078][T17868] Bluetooth: hci2: command tx timeout [ 1373.402296][T24861] x_tables: duplicate underflow at hook 2 [ 1373.502787][T24858] : renamed from syztnl2 [ 1373.664787][T24861] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4784'. [ 1373.674316][T24860] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4785'. [ 1373.796395][ T5091] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1373.963288][ T51] hsr_slave_0: left promiscuous mode [ 1373.980849][ T51] hsr_slave_1: left promiscuous mode [ 1373.989994][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1373.998158][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1374.010537][ T5091] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1374.020393][ T5091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.021351][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1374.057562][ T5091] usb 4-1: config 0 descriptor?? [ 1374.067700][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1374.135798][ T51] veth1_macvtap: left promiscuous mode [ 1374.141799][ T51] veth0_macvtap: left promiscuous mode [ 1374.153225][ T51] veth1_vlan: left promiscuous mode [ 1374.170097][ T51] veth0_vlan: left promiscuous mode [ 1374.255523][T24884] FAULT_INJECTION: forcing a failure. [ 1374.255523][T24884] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.283865][T24884] CPU: 1 PID: 24884 Comm: syz.4.4788 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1374.294091][T24884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1374.304201][T24884] Call Trace: [ 1374.307524][T24884] [ 1374.310492][T24884] dump_stack_lvl+0x241/0x360 [ 1374.315230][T24884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1374.320488][T24884] ? __pfx__printk+0x10/0x10 [ 1374.325134][T24884] ? __pfx___might_resched+0x10/0x10 [ 1374.330468][T24884] should_fail_ex+0x3b0/0x4e0 [ 1374.335175][T24884] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1374.340905][T24884] should_failslab+0x9/0x20 [ 1374.345427][T24884] __kmalloc_noprof+0xd8/0x400 [ 1374.350205][T24884] ? kfree+0x4e/0x360 [ 1374.354207][T24884] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1374.359773][T24884] tomoyo_path_number_perm+0x23a/0x880 [ 1374.365509][T24884] ? tomoyo_path_number_perm+0x208/0x880 [ 1374.371155][T24884] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1374.377185][T24884] ? __fget_files+0x29/0x470 [ 1374.381877][T24884] ? __fget_files+0x3f6/0x470 [ 1374.386567][T24884] ? __fget_files+0x29/0x470 [ 1374.391172][T24884] security_file_ioctl+0x75/0xb0 [ 1374.396144][T24884] __se_sys_ioctl+0x47/0x170 [ 1374.400746][T24884] do_syscall_64+0xf3/0x230 [ 1374.405266][T24884] ? clear_bhb_loop+0x35/0x90 [ 1374.409962][T24884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.415876][T24884] RIP: 0033:0x7f6d05775bd9 [ 1374.420315][T24884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1374.439932][T24884] RSP: 002b:00007f6d06593048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1374.448380][T24884] RAX: ffffffffffffffda RBX: 00007f6d05903f60 RCX: 00007f6d05775bd9 [ 1374.456362][T24884] RDX: 0000000020000540 RSI: 00000000c1205531 RDI: 0000000000000003 [ 1374.464348][T24884] RBP: 00007f6d065930a0 R08: 0000000000000000 R09: 0000000000000000 [ 1374.472330][T24884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1374.480309][T24884] R13: 000000000000000b R14: 00007f6d05903f60 R15: 00007f6d05a2fa68 [ 1374.488400][T24884] [ 1374.537150][T24884] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1374.582349][ T5091] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 1374.604642][ T5091] usb 4-1: USB disconnect, device number 45 [ 1374.836901][T17868] Bluetooth: hci0: command 0x0406 tx timeout [ 1375.170429][T16896] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1375.384388][T16896] usb 5-1: Using ep0 maxpacket: 32 [ 1375.390064][T23025] Bluetooth: hci2: command tx timeout [ 1375.400400][T16896] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1375.413058][ T5091] IPVS: starting estimator thread 0... [ 1375.419796][T16896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.448584][T16896] usb 5-1: config 0 descriptor?? [ 1375.458071][T16896] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1375.516691][T24907] IPVS: using max 24 ests per chain, 57600 per kthread [ 1375.673846][T16896] gspca_vc032x: reg_r err -32 [ 1375.681629][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.693311][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.702371][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.709020][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.715192][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.721231][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.727210][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.732557][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.739815][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.747697][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.754553][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.780703][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.787662][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.793960][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.803022][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.810518][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.818952][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.827658][T16896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1375.834199][T16896] gspca_vc032x: Unknown sensor... [ 1375.849098][T16896] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1376.029716][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1376.100475][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1376.785620][T24911] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4796'. [ 1376.913948][T24915] FAULT_INJECTION: forcing a failure. [ 1376.913948][T24915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1376.930683][T24915] CPU: 0 PID: 24915 Comm: syz.3.4797 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1376.940978][T24915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1376.951057][T24915] Call Trace: [ 1376.954368][T24915] [ 1376.957327][T24915] dump_stack_lvl+0x241/0x360 [ 1376.962055][T24915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1376.967318][T24915] ? __pfx__printk+0x10/0x10 [ 1376.971967][T24915] ? __pfx_lock_release+0x10/0x10 [ 1376.977067][T24915] should_fail_ex+0x3b0/0x4e0 [ 1376.981794][T24915] _copy_from_user+0x2f/0xe0 [ 1376.986424][T24915] copy_msghdr_from_user+0xae/0x680 [ 1376.991676][T24915] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1376.997550][T24915] __sys_sendmsg+0x23d/0x3a0 [ 1377.002188][T24915] ? __pfx___sys_sendmsg+0x10/0x10 [ 1377.007343][T24915] ? vfs_write+0x7c4/0xc90 [ 1377.011841][T24915] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1377.018218][T24915] ? do_syscall_64+0x100/0x230 [ 1377.023038][T24915] ? do_syscall_64+0xb6/0x230 [ 1377.027767][T24915] do_syscall_64+0xf3/0x230 [ 1377.032321][T24915] ? clear_bhb_loop+0x35/0x90 [ 1377.037141][T24915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.043082][T24915] RIP: 0033:0x7f01c5375bd9 [ 1377.047528][T24915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1377.067212][T24915] RSP: 002b:00007f01c61c2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1377.068669][T24918] FAULT_INJECTION: forcing a failure. [ 1377.068669][T24918] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.075644][T24915] RAX: ffffffffffffffda RBX: 00007f01c5503f60 RCX: 00007f01c5375bd9 [ 1377.075668][T24915] RDX: 0000000000000000 RSI: 0000000020002a80 RDI: 0000000000000004 [ 1377.075684][T24915] RBP: 00007f01c61c20a0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.075699][T24915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1377.075714][T24915] R13: 000000000000000b R14: 00007f01c5503f60 R15: 00007f01c562fa68 [ 1377.075748][T24915] [ 1377.152607][T24918] CPU: 1 PID: 24918 Comm: syz.2.4798 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1377.162943][T24918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1377.173130][T24918] Call Trace: [ 1377.176456][T24918] [ 1377.179431][T24918] dump_stack_lvl+0x241/0x360 [ 1377.184172][T24918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1377.189435][T24918] ? __pfx__printk+0x10/0x10 [ 1377.194088][T24918] ? __pfx___might_resched+0x10/0x10 [ 1377.199443][T24918] should_fail_ex+0x3b0/0x4e0 [ 1377.204187][T24918] should_failslab+0x9/0x20 [ 1377.208755][T24918] __kmalloc_node_noprof+0xdf/0x440 [ 1377.214023][T24918] ? kvmalloc_node_noprof+0x72/0x190 [ 1377.219376][T24918] kvmalloc_node_noprof+0x72/0x190 [ 1377.224546][T24918] file_tty_write+0x2c7/0x9b0 [ 1377.229325][T24918] vfs_write+0xa72/0xc90 [ 1377.233626][T24918] ? __pfx_tty_write+0x10/0x10 [ 1377.238443][T24918] ? __pfx_vfs_write+0x10/0x10 [ 1377.243285][T24918] ksys_write+0x1a0/0x2c0 [ 1377.247674][T24918] ? __pfx_ksys_write+0x10/0x10 [ 1377.252576][T24918] ? do_syscall_64+0x100/0x230 [ 1377.257402][T24918] ? do_syscall_64+0xb6/0x230 [ 1377.262146][T24918] do_syscall_64+0xf3/0x230 [ 1377.266709][T24918] ? clear_bhb_loop+0x35/0x90 [ 1377.271449][T24918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.277394][T24918] RIP: 0033:0x7fb273975bd9 [ 1377.281856][T24918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1377.301513][T24918] RSP: 002b:00007fb274701048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1377.309985][T24918] RAX: ffffffffffffffda RBX: 00007fb273b03f60 RCX: 00007fb273975bd9 [ 1377.318005][T24918] RDX: 0000000000001006 RSI: 0000000020000000 RDI: 0000000000000004 [ 1377.326026][T24918] RBP: 00007fb2747010a0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.334046][T24918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1377.342064][T24918] R13: 000000000000000b R14: 00007fb273b03f60 R15: 00007fb273c2fa68 [ 1377.350100][T24918] [ 1377.365096][T24830] chnl_net:caif_netlink_parms(): no params data found [ 1377.468981][T23025] Bluetooth: hci2: command tx timeout [ 1377.760571][T24830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.760725][T24830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.789194][T24830] bridge_slave_0: entered allmulticast mode [ 1377.811622][T24830] bridge_slave_0: entered promiscuous mode [ 1377.846771][T24830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.878627][T24830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.903527][ T5169] usb 5-1: USB disconnect, device number 79 [ 1377.911080][T24830] bridge_slave_1: entered allmulticast mode [ 1377.953711][T24830] bridge_slave_1: entered promiscuous mode [ 1378.076556][T24830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.115461][T24830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.297062][T24830] team0: Port device team_slave_0 added [ 1378.328475][T24830] team0: Port device team_slave_1 added [ 1378.527806][T24954] x_tables: duplicate underflow at hook 2 [ 1378.534509][T24830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1378.566620][T24830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1378.650047][T24830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1378.677107][T24954] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4803'. [ 1378.718756][T24830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1378.742498][T24830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1378.800485][T24830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1378.823667][T24964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4808'. [ 1378.886280][ T5169] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1379.080697][ T5169] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1379.097014][ T5169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.129846][ T5169] usb 4-1: config 0 descriptor?? [ 1379.324494][T24830] hsr_slave_0: entered promiscuous mode [ 1379.354696][T24830] hsr_slave_1: entered promiscuous mode [ 1379.371418][T24830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1379.379462][T12754] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1379.390370][T24830] Cannot create hsr debugfs directory [ 1379.546422][T23025] Bluetooth: hci2: command tx timeout [ 1379.557733][ T5169] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 1379.577248][T12754] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1379.603507][ T5169] usb 4-1: USB disconnect, device number 46 [ 1379.603506][T12754] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1379.603566][T12754] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1379.717282][T12754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.761197][T24971] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1380.156157][ T5091] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1380.237021][T24971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.265496][T24971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.356618][ T5091] usb 5-1: Using ep0 maxpacket: 32 [ 1380.380480][ T5091] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1380.421637][ T5091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.450445][ T5091] usb 5-1: config 0 descriptor?? [ 1380.502361][ T5091] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1380.719255][ T5091] gspca_vc032x: reg_r err -32 [ 1380.734829][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1380.737926][ T5166] usb 3-1: USB disconnect, device number 69 [ 1380.772326][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1380.787431][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1380.830461][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1380.849643][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1380.878731][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1380.900651][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1380.926742][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1380.956624][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1380.962010][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1381.004124][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1381.028329][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1381.050197][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1381.074901][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1381.115775][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1381.142418][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1381.147912][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1381.153245][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 1381.176004][ T5091] gspca_vc032x: Unknown sensor... [ 1381.181271][ T5091] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1381.279569][T24830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1381.312988][T24830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1381.327179][T24830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1381.381415][T24830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1381.720419][T24830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.850727][T24830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1381.909234][T12754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.916541][T12754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1381.952490][T12754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.959813][T12754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.279991][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 1382.280013][ T29] audit: type=1326 audit(1720185808.258:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.0.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1382.319684][T24830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1382.384525][ T29] audit: type=1326 audit(1720185808.258:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.0.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1382.422053][ T29] audit: type=1326 audit(1720185808.288:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.0.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1382.463732][T25018] ucma_write: process 670 (syz.0.4819) changed security contexts after opening file descriptor, this is not allowed. [ 1382.491907][ T29] audit: type=1326 audit(1720185808.288:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.0.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1382.541962][T24830] veth0_vlan: entered promiscuous mode [ 1382.560927][ T29] audit: type=1326 audit(1720185808.288:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.0.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1382.597045][T16896] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1382.612375][ T29] audit: type=1326 audit(1720185808.288:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.0.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1382.636396][ T29] audit: type=1326 audit(1720185808.298:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.0.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1382.660851][ T29] audit: type=1326 audit(1720185808.298:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.0.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1382.673913][T24830] veth1_vlan: entered promiscuous mode [ 1382.685996][ T29] audit: type=1326 audit(1720185808.298:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.0.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1382.746184][ T29] audit: type=1326 audit(1720185808.308:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.0.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1382.796430][T16896] usb 3-1: device descriptor read/64, error -71 [ 1382.851128][ T5166] usb 5-1: USB disconnect, device number 80 [ 1382.868625][T24830] veth0_macvtap: entered promiscuous mode [ 1382.930477][T24830] veth1_macvtap: entered promiscuous mode [ 1382.998382][T24830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1383.043515][T24830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.088400][T16896] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1383.102517][T24830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1383.124247][T24830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.144262][T24830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1383.144937][T25041] FAULT_INJECTION: forcing a failure. [ 1383.144937][T25041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1383.174224][T24830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.185819][T24830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1383.205725][T24830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.228711][T24830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1383.246214][T24830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.247594][T25041] CPU: 0 PID: 25041 Comm: syz.0.4823 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1383.247623][T25041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1383.277746][T25041] Call Trace: [ 1383.279631][T24830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1383.281036][T25041] [ 1383.281051][T25041] dump_stack_lvl+0x241/0x360 [ 1383.299211][T25041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1383.304447][T25041] ? __pfx__printk+0x10/0x10 [ 1383.309119][T25041] ? snprintf+0xda/0x120 [ 1383.313387][T25041] should_fail_ex+0x3b0/0x4e0 [ 1383.318099][T25041] _copy_to_user+0x2f/0xb0 [ 1383.322537][T25041] simple_read_from_buffer+0xca/0x150 [ 1383.327933][T25041] proc_fail_nth_read+0x1e9/0x250 [ 1383.332974][T25041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1383.338536][T25041] ? rw_verify_area+0x520/0x6b0 [ 1383.343406][T25041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1383.348967][T25041] vfs_read+0x204/0xbc0 [ 1383.353161][T25041] ? __pfx_lock_release+0x10/0x10 [ 1383.358206][T25041] ? __pfx_vfs_read+0x10/0x10 [ 1383.362897][T25041] ? __fget_files+0x29/0x470 [ 1383.367503][T25041] ? __fget_files+0x3f6/0x470 [ 1383.372207][T25041] ksys_read+0x1a0/0x2c0 [ 1383.376469][T25041] ? __pfx_ksys_read+0x10/0x10 [ 1383.381247][T25041] ? do_syscall_64+0x100/0x230 [ 1383.386046][T25041] ? do_syscall_64+0xb6/0x230 [ 1383.390776][T25041] do_syscall_64+0xf3/0x230 [ 1383.395311][T25041] ? clear_bhb_loop+0x35/0x90 [ 1383.400017][T25041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.405933][T25041] RIP: 0033:0x7fa2395746bc [ 1383.410357][T25041] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1383.429994][T25041] RSP: 002b:00007fa23a279040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1383.438429][T25041] RAX: ffffffffffffffda RBX: 00007fa239704038 RCX: 00007fa2395746bc [ 1383.446417][T25041] RDX: 000000000000000f RSI: 00007fa23a2790b0 RDI: 0000000000000005 [ 1383.454401][T25041] RBP: 00007fa23a2790a0 R08: 0000000000000000 R09: 0000000000000000 [ 1383.462382][T25041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1383.470369][T25041] R13: 000000000000006e R14: 00007fa239704038 R15: 00007fa23982fa68 [ 1383.478407][T25041] [ 1383.486032][T24830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.512329][T24830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1383.536995][T24830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.567505][T24830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1383.579665][T24830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.606206][T16896] usb 3-1: device descriptor read/64, error -71 [ 1383.649223][T24830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.676284][T24830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.705777][T24830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.726691][T16896] usb usb3-port1: attempt power cycle [ 1383.755722][T24830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.787628][T24830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.801203][T24830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.812848][T24830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.823949][T24830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.844127][T24830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.865328][T24830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.882136][T24830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.895130][T24830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.909316][T24830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.950083][T24830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1384.029522][T24830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.071864][T24830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.086857][T24830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.095785][T24830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.146084][T16896] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1384.193195][T16896] usb 3-1: device descriptor read/8, error -71 [ 1384.494847][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1384.526548][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1384.576275][T16896] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1384.616830][ T946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1384.627384][ T946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1384.635232][T16896] usb 3-1: device descriptor read/8, error -71 [ 1384.776297][T16896] usb usb3-port1: unable to enumerate USB device [ 1384.805415][T25065] netlink: 'syz.0.4826': attribute type 3 has an invalid length. [ 1384.838098][T25065] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4826'. [ 1385.108526][T25081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1385.159890][T16896] wlan1: No basic rates, using min rate instead [ 1385.184027][T16896] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1385.193221][T25084] netlink: 'syz.0.4827': attribute type 18 has an invalid length. [ 1385.231725][T16896] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1385.371589][ T2459] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1385.508307][ T62] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1385.551562][T25093] FAULT_INJECTION: forcing a failure. [ 1385.551562][T25093] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.586881][T25093] CPU: 0 PID: 25093 Comm: syz.1.4830 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1385.586918][T25093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1385.586934][T25093] Call Trace: [ 1385.586945][T25093] [ 1385.586957][T25093] dump_stack_lvl+0x241/0x360 [ 1385.587016][T25093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1385.587052][T25093] ? __pfx__printk+0x10/0x10 [ 1385.587088][T25093] ? __pfx___might_resched+0x10/0x10 [ 1385.587127][T25093] should_fail_ex+0x3b0/0x4e0 [ 1385.587166][T25093] ? create_io_worker+0xbf/0x540 [ 1385.587201][T25093] should_failslab+0x9/0x20 [ 1385.587235][T25093] kmalloc_trace_noprof+0x6c/0x2c0 [ 1385.587278][T25093] create_io_worker+0xbf/0x540 [ 1385.587317][T25093] io_wq_enqueue+0x8a0/0xb00 [ 1385.587355][T25093] ? __pfx_io_wq_enqueue+0x10/0x10 [ 1385.587385][T25093] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 1385.587419][T25093] ? io_prep_async_work+0x496/0x7c0 [ 1385.587457][T25093] io_queue_iowq+0x352/0x560 [ 1385.587500][T25093] io_queue_async+0x3f9/0x4e0 [ 1385.587528][T25093] ? __pfx_io_req_task_submit+0x10/0x10 [ 1385.587566][T25093] io_handle_tw_list+0x380/0x500 [ 1385.587610][T25093] tctx_task_work_run+0x9a/0x370 [ 1385.587648][T25093] tctx_task_work+0x9a/0x100 [ 1385.587683][T25093] ? __pfx_tctx_task_work+0x10/0x10 [ 1385.587721][T25093] ? _raw_spin_unlock_irq+0x23/0x50 [ 1385.587744][T25093] ? lockdep_hardirqs_on+0x99/0x150 [ 1385.587779][T25093] task_work_run+0x24f/0x310 [ 1385.587819][T25093] ? __pfx_task_work_run+0x10/0x10 [ 1385.587862][T25093] get_signal+0x15e6/0x1740 [ 1385.587913][T25093] ? __pfx_get_signal+0x10/0x10 [ 1385.587959][T25093] arch_do_signal_or_restart+0x96/0x860 [ 1385.587993][T25093] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1385.588027][T25093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1385.588069][T25093] ? syscall_exit_to_user_mode+0xa3/0x360 [ 1385.588106][T25093] syscall_exit_to_user_mode+0xc9/0x360 [ 1385.588143][T25093] do_syscall_64+0x100/0x230 [ 1385.588177][T25093] ? clear_bhb_loop+0x35/0x90 [ 1385.588214][T25093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.588248][T25093] RIP: 0033:0x7fb3c1f75bd9 [ 1385.588270][T25093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1385.588290][T25093] RSP: 002b:00007fb3c2cfa048 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 1385.588317][T25093] RAX: 0000000000000000 RBX: 00007fb3c2103f60 RCX: 00007fb3c1f75bd9 [ 1385.588334][T25093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1385.588348][T25093] RBP: 00007fb3c2cfa0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1385.588365][T25093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1385.588380][T25093] R13: 000000000000000b R14: 00007fb3c2103f60 R15: 00007fb3c222fa68 [ 1385.588413][T25093] [ 1385.616678][ T946] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1385.996081][ T8331] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1386.178786][ T8331] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1386.178831][ T8331] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1386.178876][ T8331] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1386.178905][ T8331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.201603][T25102] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1386.231276][ T5146] IPVS: starting estimator thread 0... [ 1386.318875][T25115] IPVS: using max 17 ests per chain, 40800 per kthread [ 1386.748461][ T2459] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.019926][ T2459] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.416254][ T2459] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.679158][ T2459] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.164480][ T2459] bridge_slave_1: left allmulticast mode [ 1388.165406][ T2459] bridge_slave_1: left promiscuous mode [ 1388.165647][ T2459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.167842][T25107] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1388.177870][T17868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1388.182390][T17868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1388.183744][T17868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1388.191509][T17868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1388.192284][ T2459] bridge_slave_0: left allmulticast mode [ 1388.192313][ T2459] bridge_slave_0: left promiscuous mode [ 1388.192533][ T2459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.194196][T17868] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1388.196761][T17868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1388.290858][T25139] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4839'. [ 1388.430312][T25139] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16 [ 1388.740376][T16896] usb 1-1: USB disconnect, device number 61 [ 1388.746328][ T5091] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1388.950774][ T5091] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1388.984321][ T5091] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1389.031607][ T5091] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1389.067215][T25159] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4842'. [ 1389.086075][ T5091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.149005][T25145] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1389.583574][T16896] usb 2-1: USB disconnect, device number 90 [ 1390.009181][T25165] IPVS: length: 4096 != 8 [ 1390.089465][ T2459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1390.113086][ T2459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1390.139215][ T2459] bond0 (unregistering): Released all slaves [ 1390.139616][T25169] FAULT_INJECTION: forcing a failure. [ 1390.139616][T25169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1390.164380][T25141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4839'. [ 1390.177872][T25169] CPU: 1 PID: 25169 Comm: syz.3.4846 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1390.188089][T25169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1390.198184][T25169] Call Trace: [ 1390.201485][T25169] [ 1390.204439][T25169] dump_stack_lvl+0x241/0x360 [ 1390.209256][T25169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1390.214498][T25169] ? __pfx__printk+0x10/0x10 [ 1390.219130][T25169] ? __pfx_lock_release+0x10/0x10 [ 1390.224192][T25169] should_fail_ex+0x3b0/0x4e0 [ 1390.228897][T25169] _copy_from_user+0x2f/0xe0 [ 1390.233502][T25169] copy_msghdr_from_user+0xae/0x680 [ 1390.238731][T25169] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1390.244573][T25169] __sys_sendmsg+0x23d/0x3a0 [ 1390.249179][T25169] ? __pfx___sys_sendmsg+0x10/0x10 [ 1390.254300][T25169] ? vfs_write+0x7c4/0xc90 [ 1390.258763][T25169] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1390.265126][T25169] ? do_syscall_64+0x100/0x230 [ 1390.269930][T25169] ? do_syscall_64+0xb6/0x230 [ 1390.274651][T25169] do_syscall_64+0xf3/0x230 [ 1390.279188][T25169] ? clear_bhb_loop+0x35/0x90 [ 1390.283908][T25169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.289836][T25169] RIP: 0033:0x7f01c5375bd9 [ 1390.294439][T25169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1390.314057][T25169] RSP: 002b:00007f01c61c2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1390.322492][T25169] RAX: ffffffffffffffda RBX: 00007f01c5503f60 RCX: 00007f01c5375bd9 [ 1390.330477][T25169] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1390.338479][T25169] RBP: 00007f01c61c20a0 R08: 0000000000000000 R09: 0000000000000000 [ 1390.346454][T25169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1390.354429][T25169] R13: 000000000000000b R14: 00007f01c5503f60 R15: 00007f01c562fa68 [ 1390.362421][T25169] [ 1390.365617][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.383438][T17868] Bluetooth: hci4: command tx timeout [ 1390.727479][ T784] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1390.926230][ T784] usb 4-1: Using ep0 maxpacket: 32 [ 1390.972578][ T784] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.992819][ T784] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1391.042338][ T784] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1391.072144][ T784] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1391.073177][T25193] x_tables: duplicate underflow at hook 2 [ 1391.113626][ T784] usb 4-1: Product: syz [ 1391.126513][ T784] usb 4-1: Manufacturer: syz [ 1391.146250][ T784] usb 4-1: SerialNumber: syz [ 1391.173452][ T784] appletouch 4-1:1.0: Could not find int-in endpoint [ 1391.203987][ T784] appletouch 4-1:1.0: probe with driver appletouch failed with error -5 [ 1391.225798][T25198] FAULT_INJECTION: forcing a failure. [ 1391.225798][T25198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1391.239766][ T784] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1391.256800][ T2459] hsr_slave_0: left promiscuous mode [ 1391.260152][T25198] CPU: 1 PID: 25198 Comm: syz.0.4851 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1391.272305][T25198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1391.282371][T25198] Call Trace: [ 1391.285657][T25198] [ 1391.288602][T25198] dump_stack_lvl+0x241/0x360 [ 1391.293323][T25198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1391.298555][T25198] ? __pfx__printk+0x10/0x10 [ 1391.303177][T25198] ? snprintf+0xda/0x120 [ 1391.307442][T25198] should_fail_ex+0x3b0/0x4e0 [ 1391.312156][T25198] _copy_to_user+0x2f/0xb0 [ 1391.316597][T25198] simple_read_from_buffer+0xca/0x150 [ 1391.321997][T25198] proc_fail_nth_read+0x1e9/0x250 [ 1391.327036][T25198] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1391.332593][T25198] ? rw_verify_area+0x520/0x6b0 [ 1391.337457][T25198] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1391.343010][T25198] vfs_read+0x204/0xbc0 [ 1391.347181][T25198] ? __pfx_vfs_read+0x10/0x10 [ 1391.351886][T25198] ksys_read+0x1a0/0x2c0 [ 1391.356141][T25198] ? __pfx_ksys_read+0x10/0x10 [ 1391.361041][T25198] ? do_syscall_64+0x100/0x230 [ 1391.365842][T25198] ? do_syscall_64+0xb6/0x230 [ 1391.370542][T25198] do_syscall_64+0xf3/0x230 [ 1391.375061][T25198] ? clear_bhb_loop+0x35/0x90 [ 1391.379764][T25198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.385675][T25198] RIP: 0033:0x7fa2395746bc [ 1391.390100][T25198] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1391.409712][T25198] RSP: 002b:00007fa23a29a040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1391.418144][T25198] RAX: ffffffffffffffda RBX: 00007fa239703f60 RCX: 00007fa2395746bc [ 1391.426127][T25198] RDX: 000000000000000f RSI: 00007fa23a29a0b0 RDI: 0000000000000004 [ 1391.434105][T25198] RBP: 00007fa23a29a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1391.442101][T25198] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1391.450080][T25198] R13: 000000000000004d R14: 00007fa239703f60 R15: 00007fa23982fa68 [ 1391.458075][T25198] [ 1391.501417][ T784] usb 4-1: USB disconnect, device number 47 [ 1391.508164][ T2459] hsr_slave_1: left promiscuous mode [ 1391.522170][ T2459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1391.543237][ T2459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.580269][ T2459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1391.606339][ T2459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1391.626258][ T8331] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1391.688837][ T2459] veth1_macvtap: left promiscuous mode [ 1391.694481][ T2459] veth0_macvtap: left promiscuous mode [ 1391.703589][ T2459] veth1_vlan: left promiscuous mode [ 1391.726137][ T2459] veth0_vlan: left promiscuous mode [ 1391.833699][ T8331] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1391.853838][ T8331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.855116][T25209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4853'. [ 1391.885701][ T8331] usb 2-1: config 0 descriptor?? [ 1392.426295][T23025] Bluetooth: hci4: command tx timeout [ 1392.526605][ T784] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1392.556088][T25214] IPVS: length: 4096 != 8 [ 1392.739739][ T784] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1392.776347][ T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.800122][ T784] usb 4-1: config 0 descriptor?? [ 1392.848853][ T784] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1393.030121][ T784] gspca_spca508: reg_read err -32 [ 1393.040594][ T784] gspca_spca508: reg_read err -32 [ 1393.133446][ T784] gspca_spca508: reg_read err -71 [ 1393.144093][ T784] gspca_spca508: reg_read err -71 [ 1393.165341][ T784] gspca_spca508: reg_read err -71 [ 1393.184277][ T784] gspca_spca508: reg write: error -71 [ 1393.190668][ T784] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 1393.220853][ T784] usb 4-1: USB disconnect, device number 48 [ 1393.228993][ T8331] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 1393.344669][T25227] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4858'. [ 1393.521397][ T2459] team0 (unregistering): Port device team_slave_1 removed [ 1393.614192][ T2459] team0 (unregistering): Port device team_slave_0 removed [ 1393.696588][T25232] FAULT_INJECTION: forcing a failure. [ 1393.696588][T25232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1393.710534][T25232] CPU: 1 PID: 25232 Comm: syz.2.4859 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1393.720740][T25232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1393.730836][T25232] Call Trace: [ 1393.734154][T25232] [ 1393.737122][T25232] dump_stack_lvl+0x241/0x360 [ 1393.741828][T25232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1393.747057][T25232] ? __pfx__printk+0x10/0x10 [ 1393.751686][T25232] ? snprintf+0xda/0x120 [ 1393.755950][T25232] should_fail_ex+0x3b0/0x4e0 [ 1393.760666][T25232] _copy_to_user+0x2f/0xb0 [ 1393.765125][T25232] simple_read_from_buffer+0xca/0x150 [ 1393.770548][T25232] proc_fail_nth_read+0x1e9/0x250 [ 1393.775620][T25232] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1393.781180][T25232] ? rw_verify_area+0x520/0x6b0 [ 1393.786043][T25232] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1393.791598][T25232] vfs_read+0x204/0xbc0 [ 1393.795782][T25232] ? __pfx_lock_release+0x10/0x10 [ 1393.800838][T25232] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1393.806401][T25232] ? __pfx_vfs_read+0x10/0x10 [ 1393.811088][T25232] ? __fget_files+0x29/0x470 [ 1393.815781][T25232] ? __fget_files+0x3f6/0x470 [ 1393.820481][T25232] ksys_read+0x1a0/0x2c0 [ 1393.824829][T25232] ? __pfx_ksys_read+0x10/0x10 [ 1393.829617][T25232] ? do_syscall_64+0x100/0x230 [ 1393.834400][T25232] ? do_syscall_64+0xb6/0x230 [ 1393.839093][T25232] do_syscall_64+0xf3/0x230 [ 1393.843614][T25232] ? clear_bhb_loop+0x35/0x90 [ 1393.848311][T25232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.854220][T25232] RIP: 0033:0x7fb2739746bc [ 1393.858642][T25232] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1393.878282][T25232] RSP: 002b:00007fb2746bf040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1393.886712][T25232] RAX: ffffffffffffffda RBX: 00007fb273b04110 RCX: 00007fb2739746bc [ 1393.894691][T25232] RDX: 000000000000000f RSI: 00007fb2746bf0b0 RDI: 0000000000000005 [ 1393.902667][T25232] RBP: 00007fb2746bf0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1393.910645][T25232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.918622][T25232] R13: 000000000000006e R14: 00007fb273b04110 R15: 00007fb273c2fa68 [ 1393.926615][T25232] [ 1394.461802][T25193] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4850'. [ 1394.506152][T23025] Bluetooth: hci4: command tx timeout [ 1394.512834][T25220] syzkaller1: entered promiscuous mode [ 1394.535243][ T784] usb 2-1: USB disconnect, device number 91 [ 1394.542033][T25220] syzkaller1: entered allmulticast mode [ 1394.589358][T25231] syzkaller1: entered promiscuous mode [ 1394.594899][T25231] syzkaller1: entered allmulticast mode [ 1394.744694][T25241] netlink: 'syz.3.4861': attribute type 3 has an invalid length. [ 1394.774391][T25243] FAULT_INJECTION: forcing a failure. [ 1394.774391][T25243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1394.800460][T25243] CPU: 1 PID: 25243 Comm: syz.1.4862 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1394.810696][T25243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1394.820798][T25243] Call Trace: [ 1394.824119][T25243] [ 1394.827098][T25243] dump_stack_lvl+0x241/0x360 [ 1394.831838][T25243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1394.837091][T25243] ? __pfx__printk+0x10/0x10 [ 1394.841733][T25243] ? __pfx_lock_release+0x10/0x10 [ 1394.846811][T25243] should_fail_ex+0x3b0/0x4e0 [ 1394.851549][T25243] _copy_from_user+0x2f/0xe0 [ 1394.856190][T25243] copy_msghdr_from_user+0xae/0x680 [ 1394.861438][T25243] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1394.867291][T25243] __sys_sendmsg+0x23d/0x3a0 [ 1394.871911][T25243] ? __pfx___sys_sendmsg+0x10/0x10 [ 1394.877042][T25243] ? vfs_write+0x7c4/0xc90 [ 1394.881509][T25243] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1394.887849][T25243] ? do_syscall_64+0x100/0x230 [ 1394.892636][T25243] ? do_syscall_64+0xb6/0x230 [ 1394.897338][T25243] do_syscall_64+0xf3/0x230 [ 1394.901861][T25243] ? clear_bhb_loop+0x35/0x90 [ 1394.906560][T25243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.912471][T25243] RIP: 0033:0x7fb3c1f75bd9 [ 1394.916901][T25243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1394.936513][T25243] RSP: 002b:00007fb3c2cfa048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1394.945021][T25243] RAX: ffffffffffffffda RBX: 00007fb3c2103f60 RCX: 00007fb3c1f75bd9 [ 1394.953002][T25243] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1394.960980][T25243] RBP: 00007fb3c2cfa0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1394.968956][T25243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1394.976934][T25243] R13: 000000000000000b R14: 00007fb3c2103f60 R15: 00007fb3c222fa68 [ 1394.984926][T25243] [ 1395.052250][T25142] chnl_net:caif_netlink_parms(): no params data found [ 1395.162160][T25249] netlink: 'syz.1.4864': attribute type 13 has an invalid length. [ 1395.217562][T25249] syz_tun: refused to change device tx_queue_len [ 1395.298380][T25252] IPVS: length: 4096 != 8 [ 1395.487165][T25261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1395.656975][T25264] x_tables: duplicate underflow at hook 2 [ 1395.738696][T25264] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4869'. [ 1395.769444][T25272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4870'. [ 1395.849255][T25272] team0: entered promiscuous mode [ 1395.854371][T25272] team_slave_0: entered promiscuous mode [ 1395.886460][T25272] team_slave_1: entered promiscuous mode [ 1395.908079][T25142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.935795][T25142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.955416][T25142] bridge_slave_0: entered allmulticast mode [ 1395.986833][T25142] bridge_slave_0: entered promiscuous mode [ 1396.007949][T25269] team0: left promiscuous mode [ 1396.012785][T25269] team_slave_0: left promiscuous mode [ 1396.040066][T25269] team_slave_1: left promiscuous mode [ 1396.060863][T25142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.067423][T12754] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1396.081034][T25142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.107124][T25142] bridge_slave_1: entered allmulticast mode [ 1396.133586][T23025] Bluetooth: hci2: unexpected event 0x06 length: 17 > 3 [ 1396.134638][T25142] bridge_slave_1: entered promiscuous mode [ 1396.228098][T23025] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1396.235151][T23025] Bluetooth: Wrong link type (-22) [ 1396.240910][T23025] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 1396.247738][T23025] Bluetooth: Wrong link type (-22) [ 1396.252955][T23025] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 1396.259706][T23025] Bluetooth: Wrong link type (-22) [ 1396.278166][T12754] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1396.291881][T12754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.311066][T12754] usb 4-1: config 0 descriptor?? [ 1396.375561][T25285] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 1396.383565][T25142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.420468][T25285] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 1396.432008][T25142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1396.514623][T25291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4874'. [ 1396.550891][T25142] team0: Port device team_slave_0 added [ 1396.580678][T25142] team0: Port device team_slave_1 added [ 1396.587316][T23025] Bluetooth: hci4: command tx timeout [ 1396.741254][T12754] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 1396.793072][T12754] usb 4-1: USB disconnect, device number 49 [ 1396.829845][T25142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.852536][T25142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.900475][T25142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.961830][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 1396.961852][ T29] audit: type=1326 audit(1720185822.938:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25296 comm="syz.0.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1397.007357][T25142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.035171][T25142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.068322][ T29] audit: type=1326 audit(1720185822.938:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25296 comm="syz.0.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1397.114694][T25142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.132712][ T29] audit: type=1326 audit(1720185822.958:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25296 comm="syz.0.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1397.171163][ T29] audit: type=1326 audit(1720185822.958:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25296 comm="syz.0.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1397.209615][T25303] FAULT_INJECTION: forcing a failure. [ 1397.209615][T25303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1397.275509][T25303] CPU: 1 PID: 25303 Comm: syz.1.4877 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1397.285745][T25303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1397.295846][T25303] Call Trace: [ 1397.299166][T25303] [ 1397.302128][T25303] dump_stack_lvl+0x241/0x360 [ 1397.306865][T25303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1397.312125][T25303] ? __pfx__printk+0x10/0x10 [ 1397.316780][T25303] ? __pfx_lock_release+0x10/0x10 [ 1397.321869][T25303] should_fail_ex+0x3b0/0x4e0 [ 1397.326508][ T29] audit: type=1326 audit(1720185822.958:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25296 comm="syz.0.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1397.326580][T25303] _copy_from_user+0x2f/0xe0 [ 1397.353427][T25303] eventfd_write+0x10f/0x6c0 [ 1397.358071][T25303] ? __pfx_lock_acquire+0x10/0x10 [ 1397.363146][T25303] ? get_pid_task+0x23/0x1f0 [ 1397.367789][T25303] ? iovec_from_user+0x1b0/0x240 [ 1397.369331][ T29] audit: type=1326 audit(1720185822.958:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25296 comm="syz.0.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1397.372849][T25303] ? __pfx_eventfd_write+0x10/0x10 [ 1397.372884][T25303] ? common_file_perm+0x1a6/0x210 [ 1397.405362][T25303] ? bpf_lsm_file_permission+0x9/0x10 [ 1397.410782][T25303] ? security_file_permission+0x7f/0xa0 [ 1397.416385][T25303] ? rw_verify_area+0x1d2/0x6b0 [ 1397.421284][T25303] vfs_writev+0x5af/0xbb0 [ 1397.425684][T25303] ? __pfx_eventfd_write+0x10/0x10 [ 1397.430851][T25303] ? __pfx_vfs_writev+0x10/0x10 [ 1397.435752][T25303] ? vfs_write+0x7c4/0xc90 [ 1397.440232][T25303] ? __fget_files+0x29/0x470 [ 1397.444896][T25303] do_writev+0x1b1/0x350 [ 1397.445293][ T29] audit: type=1326 audit(1720185822.958:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25296 comm="syz.0.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1397.449171][T25303] ? __pfx_do_writev+0x10/0x10 [ 1397.449209][T25303] ? do_syscall_64+0x100/0x230 [ 1397.449247][T25303] ? do_syscall_64+0xb6/0x230 [ 1397.449282][T25303] do_syscall_64+0xf3/0x230 [ 1397.449315][T25303] ? clear_bhb_loop+0x35/0x90 [ 1397.449352][T25303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.449385][T25303] RIP: 0033:0x7fb3c1f75bd9 [ 1397.449408][T25303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1397.449429][T25303] RSP: 002b:00007fb3c2cd9048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1397.449455][T25303] RAX: ffffffffffffffda RBX: 00007fb3c2104038 RCX: 00007fb3c1f75bd9 [ 1397.449473][T25303] RDX: 0000000000000002 RSI: 0000000020000400 RDI: 0000000000000003 [ 1397.449489][T25303] RBP: 00007fb3c2cd90a0 R08: 0000000000000000 R09: 0000000000000000 [ 1397.449505][T25303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1397.449519][T25303] R13: 000000000000006e R14: 00007fb3c2104038 R15: 00007fb3c222fa68 [ 1397.449552][T25303] [ 1397.597652][ T29] audit: type=1326 audit(1720185822.958:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25296 comm="syz.0.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1397.658631][ T29] audit: type=1326 audit(1720185822.958:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25296 comm="syz.0.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1397.679213][T25142] hsr_slave_0: entered promiscuous mode [ 1397.733265][T25142] hsr_slave_1: entered promiscuous mode [ 1397.744621][ T29] audit: type=1326 audit(1720185822.958:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25296 comm="syz.0.4876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa239575bd9 code=0x7ffc0000 [ 1397.779676][T25142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1397.820336][T25142] Cannot create hsr debugfs directory [ 1397.956319][T12754] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1398.187183][T23025] Bluetooth: hci2: command tx timeout [ 1398.193566][T12754] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1398.209270][T12754] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1398.218572][T12754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.230448][T12754] usb 4-1: Product: ␁ [ 1398.234726][T12754] usb 4-1: Manufacturer: 〉 [ 1398.239847][T12754] usb 4-1: SerialNumber: 壚霣ઃ쮀좣鞛冐ñ엙ᜑ嗆胮輯交丳颽➻ͫ㥍넌똕穅䠦諡詁⌊ꔨ뺏眗㐙ℜﵞ仸繀쀿잒췢렜뽬튜쮱픵蜫箳᧡蠲虌銞쉴㻁댧ᄦ褘䞇ꉼꕃƒ魃鹠ἷŞᄃǃ굥過韂塌횫⼳돝梪ꄖ [ 1398.553190][T23025] Bluetooth: hci5: unexpected event 0x06 length: 17 > 3 [ 1398.594293][T12754] cdc_ncm 4-1:1.0: bind() failure [ 1398.650119][T23025] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1398.656911][T23025] Bluetooth: Wrong link type (-22) [ 1398.662279][T23025] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 1398.668984][T23025] Bluetooth: Wrong link type (-22) [ 1398.674325][T23025] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 1398.683392][T23025] Bluetooth: Wrong link type (-22) [ 1398.688857][T23025] Bluetooth: hci5: link tx timeout [ 1398.695423][T23025] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1398.707820][T23025] Bluetooth: hci5: link tx timeout [ 1398.713231][T23025] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1398.723774][T12754] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1398.731758][T12754] cdc_ncm 4-1:1.1: bind() failure [ 1398.777181][T12754] usb 4-1: USB disconnect, device number 50 [ 1398.874691][T25338] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 1398.937551][T25338] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 1399.081010][T23025] Bluetooth: hci2: unexpected event 0x06 length: 17 > 3 [ 1399.235197][T23025] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1399.249860][T23025] Bluetooth: Wrong link type (-22) [ 1399.255381][T23025] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 1399.262704][T23025] Bluetooth: Wrong link type (-22) [ 1399.271414][T23025] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 1399.278280][T23025] Bluetooth: Wrong link type (-22) [ 1399.635478][T25361] FAULT_INJECTION: forcing a failure. [ 1399.635478][T25361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1399.671672][T25361] CPU: 1 PID: 25361 Comm: syz.0.4891 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1399.681906][T25361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1399.692001][T25361] Call Trace: [ 1399.695315][T25361] [ 1399.698286][T25361] dump_stack_lvl+0x241/0x360 [ 1399.703018][T25361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1399.708272][T25361] ? __pfx__printk+0x10/0x10 [ 1399.712915][T25361] ? __pfx_lock_release+0x10/0x10 [ 1399.717993][T25361] should_fail_ex+0x3b0/0x4e0 [ 1399.722726][T25361] _copy_from_user+0x2f/0xe0 [ 1399.727368][T25361] copy_msghdr_from_user+0xae/0x680 [ 1399.732620][T25361] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1399.738490][T25361] __sys_sendmsg+0x23d/0x3a0 [ 1399.743134][T25361] ? __pfx___sys_sendmsg+0x10/0x10 [ 1399.748291][T25361] ? vfs_write+0x7c4/0xc90 [ 1399.752805][T25361] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1399.759193][T25361] ? do_syscall_64+0x100/0x230 [ 1399.764018][T25361] ? do_syscall_64+0xb6/0x230 [ 1399.768753][T25361] do_syscall_64+0xf3/0x230 [ 1399.773309][T25361] ? clear_bhb_loop+0x35/0x90 [ 1399.778038][T25361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.783981][T25361] RIP: 0033:0x7fa239575bd9 [ 1399.788428][T25361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1399.808080][T25361] RSP: 002b:00007fa23a29a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1399.816545][T25361] RAX: ffffffffffffffda RBX: 00007fa239703f60 RCX: 00007fa239575bd9 [ 1399.824567][T25361] RDX: 0000000000000000 RSI: 0000000020000800 RDI: 0000000000000003 [ 1399.832578][T25361] RBP: 00007fa23a29a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1399.840590][T25361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1399.848615][T25361] R13: 000000000000004d R14: 00007fa239703f60 R15: 00007fa23982fa68 [ 1399.856740][T25361] [ 1400.160179][T25142] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1400.195212][T25142] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1400.275307][T25142] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1400.339991][T25142] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1400.650322][T25395] FAULT_INJECTION: forcing a failure. [ 1400.650322][T25395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1400.670858][T25396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4897'. [ 1400.712545][T25395] CPU: 1 PID: 25395 Comm: syz.0.4898 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1400.722785][T25395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1400.732887][T25395] Call Trace: [ 1400.736203][T25395] [ 1400.739165][T25395] dump_stack_lvl+0x241/0x360 [ 1400.743900][T25395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1400.749155][T25395] ? __pfx__printk+0x10/0x10 [ 1400.753807][T25395] ? snprintf+0xda/0x120 [ 1400.758099][T25395] should_fail_ex+0x3b0/0x4e0 [ 1400.762837][T25395] _copy_to_user+0x2f/0xb0 [ 1400.766722][T23025] Bluetooth: hci5: unexpected event 0x06 length: 17 > 3 [ 1400.767278][T25395] simple_read_from_buffer+0xca/0x150 [ 1400.767319][T25395] proc_fail_nth_read+0x1e9/0x250 [ 1400.784673][T25395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1400.790271][T25395] ? rw_verify_area+0x520/0x6b0 [ 1400.795261][T25395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1400.800857][T25395] vfs_read+0x204/0xbc0 [ 1400.805059][T25395] ? __pfx_lock_release+0x10/0x10 [ 1400.810135][T25395] ? __pfx_vfs_read+0x10/0x10 [ 1400.814844][T25395] ? __fget_files+0x29/0x470 [ 1400.819460][T25395] ? __fget_files+0x3f6/0x470 [ 1400.824184][T25395] ksys_read+0x1a0/0x2c0 [ 1400.828454][T25395] ? __pfx_ksys_read+0x10/0x10 [ 1400.833236][T25395] ? do_syscall_64+0x100/0x230 [ 1400.838024][T25395] ? do_syscall_64+0xb6/0x230 [ 1400.842721][T25395] do_syscall_64+0xf3/0x230 [ 1400.847241][T25395] ? clear_bhb_loop+0x35/0x90 [ 1400.851938][T25395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.857849][T25395] RIP: 0033:0x7fa2395746bc [ 1400.862272][T25395] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1400.881892][T25395] RSP: 002b:00007fa23a29a040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1400.890321][T25395] RAX: ffffffffffffffda RBX: 00007fa239703f60 RCX: 00007fa2395746bc [ 1400.898391][T25395] RDX: 000000000000000f RSI: 00007fa23a29a0b0 RDI: 0000000000000003 [ 1400.906375][T25395] RBP: 00007fa23a29a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1400.914353][T25395] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1400.922340][T25395] R13: 000000000000004d R14: 00007fa239703f60 R15: 00007fa23982fa68 [ 1400.930344][T25395] [ 1400.943991][T25142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.967572][T25142] 8021q: adding VLAN 0 to HW filter on device team0 [ 1400.974624][T23025] Bluetooth: hci5: command 0x0406 tx timeout [ 1401.011380][T23025] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1401.018405][T23025] Bluetooth: Wrong link type (-22) [ 1401.023657][T23025] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 1401.032438][T23025] Bluetooth: Wrong link type (-22) [ 1401.044298][T23025] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 1401.052661][T23025] Bluetooth: Wrong link type (-22) [ 1401.073606][T23025] ================================================================== [ 1401.081730][T23025] BUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x679/0x8d0 [ 1401.089408][T23025] Read of size 4 at addr ffff8880785fa010 by task kworker/u9:1/23025 [ 1401.097513][T23025] [ 1401.099916][T23025] CPU: 0 PID: 23025 Comm: kworker/u9:1 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1401.110283][T23025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1401.120381][T23025] Workqueue: hci5 hci_rx_work [ 1401.125122][T23025] Call Trace: [ 1401.128443][T23025] [ 1401.131415][T23025] dump_stack_lvl+0x241/0x360 [ 1401.136151][T23025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1401.141408][T23025] ? __pfx__printk+0x10/0x10 [ 1401.146051][T23025] ? _printk+0xd5/0x120 [ 1401.150270][T23025] ? __virt_addr_valid+0x183/0x520 [ 1401.152495][T12367] Bluetooth: hci2: command tx timeout [ 1401.155421][T23025] ? __virt_addr_valid+0x183/0x520 [ 1401.155464][T23025] print_report+0x169/0x550 [ 1401.170499][T23025] ? __virt_addr_valid+0x183/0x520 [ 1401.175661][T23025] ? __virt_addr_valid+0x183/0x520 [ 1401.180820][T23025] ? __virt_addr_valid+0x44e/0x520 [ 1401.185987][T23025] ? __phys_addr+0xba/0x170 [ 1401.190542][T23025] ? l2cap_send_cmd+0x679/0x8d0 [ 1401.190579][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.195414][T23025] kasan_report+0x143/0x180 [ 1401.195452][T23025] ? l2cap_send_cmd+0x679/0x8d0 [ 1401.202700][ T8331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1401.206966][T23025] l2cap_send_cmd+0x679/0x8d0 [ 1401.207004][T23025] ? skb_pull+0xc1/0x1e0 [ 1401.228011][T23025] l2cap_recv_frame+0x22ed/0x10830 [ 1401.233176][T23025] ? validate_chain+0x11e/0x5900 [ 1401.238187][T23025] ? deref_stack_reg+0x1c7/0x260 [ 1401.243150][T23025] ? validate_chain+0x11e/0x5900 [ 1401.248230][T23025] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 1401.253619][T23025] ? validate_chain+0x11e/0x5900 [ 1401.258595][T23025] ? __pfx_validate_chain+0x10/0x10 [ 1401.263805][T23025] ? stack_trace_save+0x118/0x1d0 [ 1401.268889][T23025] ? __pfx_validate_chain+0x10/0x10 [ 1401.274107][T23025] ? __pfx_validate_chain+0x10/0x10 [ 1401.279335][T23025] ? __pfx_validate_chain+0x10/0x10 [ 1401.284562][T23025] ? mark_lock+0x9a/0x350 [ 1401.288912][T23025] ? __lock_acquire+0x1346/0x1fd0 [ 1401.293952][T23025] ? mark_lock+0x9a/0x350 [ 1401.298385][T23025] ? hci_rx_work+0x4e7/0xca0 [ 1401.302986][T23025] ? __pfx_lock_release+0x10/0x10 [ 1401.308054][T23025] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1401.313715][T23025] ? __pfx_lock_release+0x10/0x10 [ 1401.318749][T23025] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1401.324745][T23025] ? hci_conn_enter_active_mode+0x260/0x370 [ 1401.330691][T23025] ? l2cap_recv_acldata+0x48e/0x1550 [ 1401.336002][T23025] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 1401.341930][T23025] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 1401.347963][T23025] hci_rx_work+0x50f/0xca0 [ 1401.352405][T23025] ? process_scheduled_works+0x945/0x1830 [ 1401.358132][T23025] process_scheduled_works+0xa2c/0x1830 [ 1401.363711][T23025] ? __pfx_process_scheduled_works+0x10/0x10 [ 1401.369706][T23025] ? assign_work+0x364/0x3d0 [ 1401.374339][T23025] worker_thread+0x86d/0xd50 [ 1401.378940][T23025] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1401.384845][T23025] ? __kthread_parkme+0x169/0x1d0 [ 1401.389914][T23025] ? __pfx_worker_thread+0x10/0x10 [ 1401.395034][T23025] kthread+0x2f0/0x390 [ 1401.399115][T23025] ? __pfx_worker_thread+0x10/0x10 [ 1401.404230][T23025] ? __pfx_kthread+0x10/0x10 [ 1401.408827][T23025] ret_from_fork+0x4b/0x80 [ 1401.413255][T23025] ? __pfx_kthread+0x10/0x10 [ 1401.417855][T23025] ret_from_fork_asm+0x1a/0x30 [ 1401.422652][T23025] [ 1401.425715][T23025] [ 1401.428067][T23025] Allocated by task 17868: [ 1401.432505][T23025] kasan_save_track+0x3f/0x80 [ 1401.437213][T23025] __kasan_kmalloc+0x98/0xb0 [ 1401.441814][T23025] kmalloc_trace_noprof+0x19c/0x2c0 [ 1401.447051][T23025] l2cap_conn_add+0xa9/0x8e0 [ 1401.451681][T23025] l2cap_connect_cfm+0x136/0x1220 [ 1401.456766][T23025] hci_remote_features_evt+0x536/0xaf0 [ 1401.462242][T23025] hci_event_packet+0xac0/0x1540 [ 1401.467217][T23025] hci_rx_work+0x3e8/0xca0 [ 1401.471672][T23025] process_scheduled_works+0xa2c/0x1830 [ 1401.477254][T23025] worker_thread+0x86d/0xd50 [ 1401.481872][T23025] kthread+0x2f0/0x390 [ 1401.485950][T23025] ret_from_fork+0x4b/0x80 [ 1401.490419][T23025] ret_from_fork_asm+0x1a/0x30 [ 1401.495186][T23025] [ 1401.497508][T23025] Freed by task 17868: [ 1401.501578][T23025] kasan_save_track+0x3f/0x80 [ 1401.506258][T23025] kasan_save_free_info+0x40/0x50 [ 1401.511298][T23025] poison_slab_object+0xe0/0x150 [ 1401.516240][T23025] __kasan_slab_free+0x37/0x60 [ 1401.521009][T23025] kfree+0x149/0x360 [ 1401.524908][T23025] l2cap_connect_cfm+0x11f/0x1220 [ 1401.529937][T23025] hci_conn_failed+0x1f6/0x340 [ 1401.534694][T23025] hci_abort_conn_sync+0x583/0xde0 [ 1401.539841][T23025] hci_cmd_sync_work+0x22b/0x400 [ 1401.544799][T23025] process_scheduled_works+0xa2c/0x1830 [ 1401.550350][T23025] worker_thread+0x86d/0xd50 [ 1401.554939][T23025] kthread+0x2f0/0x390 [ 1401.559007][T23025] ret_from_fork+0x4b/0x80 [ 1401.563454][T23025] ret_from_fork_asm+0x1a/0x30 [ 1401.568226][T23025] [ 1401.570546][T23025] Last potentially related work creation: [ 1401.576254][T23025] kasan_save_stack+0x3f/0x60 [ 1401.580942][T23025] __kasan_record_aux_stack+0xac/0xc0 [ 1401.586322][T23025] insert_work+0x3e/0x330 [ 1401.590648][T23025] __queue_work+0xc16/0xee0 [ 1401.595177][T23025] call_timer_fn+0x18e/0x650 [ 1401.599768][T23025] __run_timer_base+0x695/0x8e0 [ 1401.604635][T23025] run_timer_softirq+0xb7/0x170 [ 1401.609484][T23025] handle_softirqs+0x2c4/0x970 [ 1401.614243][T23025] __irq_exit_rcu+0xf4/0x1c0 [ 1401.618861][T23025] irq_exit_rcu+0x9/0x30 [ 1401.623102][T23025] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1401.628734][T23025] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1401.634719][T23025] [ 1401.637037][T23025] Second to last potentially related work creation: [ 1401.643641][T23025] kasan_save_stack+0x3f/0x60 [ 1401.648319][T23025] __kasan_record_aux_stack+0xac/0xc0 [ 1401.653702][T23025] insert_work+0x3e/0x330 [ 1401.658063][T23025] __queue_work+0xaf2/0xee0 [ 1401.662592][T23025] queue_work_on+0x1c2/0x380 [ 1401.667190][T23025] l2cap_connect_cfm+0xec2/0x1220 [ 1401.672220][T23025] hci_remote_features_evt+0x536/0xaf0 [ 1401.677682][T23025] hci_event_packet+0xac0/0x1540 [ 1401.682709][T23025] hci_rx_work+0x3e8/0xca0 [ 1401.687130][T23025] process_scheduled_works+0xa2c/0x1830 [ 1401.692674][T23025] worker_thread+0x86d/0xd50 [ 1401.697295][T23025] kthread+0x2f0/0x390 [ 1401.701363][T23025] ret_from_fork+0x4b/0x80 [ 1401.705781][T23025] ret_from_fork_asm+0x1a/0x30 [ 1401.710555][T23025] [ 1401.712876][T23025] The buggy address belongs to the object at ffff8880785fa000 [ 1401.712876][T23025] which belongs to the cache kmalloc-1k of size 1024 [ 1401.726928][T23025] The buggy address is located 16 bytes inside of [ 1401.726928][T23025] freed 1024-byte region [ffff8880785fa000, ffff8880785fa400) [ 1401.740749][T23025] [ 1401.743077][T23025] The buggy address belongs to the physical page: [ 1401.749509][T23025] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x785f8 [ 1401.758274][T23025] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1401.766772][T23025] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1401.774363][T23025] page_type: 0xffffefff(slab) [ 1401.779050][T23025] raw: 00fff00000000040 ffff888015041dc0 ffffea0001812000 dead000000000002 [ 1401.787630][T23025] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 1401.796212][T23025] head: 00fff00000000040 ffff888015041dc0 ffffea0001812000 dead000000000002 [ 1401.804886][T23025] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 1401.813556][T23025] head: 00fff00000000003 ffffea0001e17e01 ffffffffffffffff 0000000000000000 [ 1401.822226][T23025] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1401.830894][T23025] page dumped because: kasan: bad access detected [ 1401.837342][T23025] page_owner tracks the page as allocated [ 1401.843045][T23025] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 62, tgid 62 (kworker/u8:4), ts 804983731214, free_ts 804956661900 [ 1401.863568][T23025] post_alloc_hook+0x1f3/0x230 [ 1401.868345][T23025] get_page_from_freelist+0x2e4c/0x2f10 [ 1401.873917][T23025] __alloc_pages_noprof+0x256/0x6c0 [ 1401.879210][T23025] alloc_slab_page+0x5f/0x120 [ 1401.883890][T23025] allocate_slab+0x5a/0x2f0 [ 1401.888395][T23025] ___slab_alloc+0xcd1/0x14b0 [ 1401.893098][T23025] __slab_alloc+0x58/0xa0 [ 1401.897428][T23025] __kmalloc_noprof+0x257/0x400 [ 1401.902282][T23025] ieee802_11_parse_elems_full+0xd5/0x2870 [ 1401.908097][T23025] ieee80211_ibss_rx_queued_mgmt+0x4c8/0x2d70 [ 1401.914254][T23025] ieee80211_iface_work+0x8a3/0xf10 [ 1401.919457][T23025] cfg80211_wiphy_work+0x221/0x260 [ 1401.924573][T23025] process_scheduled_works+0xa2c/0x1830 [ 1401.930135][T23025] worker_thread+0x86d/0xd50 [ 1401.934724][T23025] kthread+0x2f0/0x390 [ 1401.938799][T23025] ret_from_fork+0x4b/0x80 [ 1401.943216][T23025] page last free pid 5082 tgid 5082 stack trace: [ 1401.949563][T23025] free_unref_page+0xd22/0xea0 [ 1401.954355][T23025] skb_release_data+0x6b2/0x880 [ 1401.959212][T23025] skb_attempt_defer_free+0x42f/0x5c0 [ 1401.964697][T23025] tcp_recvmsg_locked+0x1500/0x2640 [ 1401.969918][T23025] tcp_recvmsg+0x25d/0x920 [ 1401.974332][T23025] inet_recvmsg+0x150/0x2d0 [ 1401.978831][T23025] sock_recvmsg+0x1ae/0x280 [ 1401.983339][T23025] sock_read_iter+0x2ca/0x3e0 [ 1401.988021][T23025] vfs_read+0x9bd/0xbc0 [ 1401.992200][T23025] ksys_read+0x1a0/0x2c0 [ 1401.996495][T23025] do_syscall_64+0xf3/0x230 [ 1402.001038][T23025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.006949][T23025] [ 1402.009273][T23025] Memory state around the buggy address: [ 1402.014906][T23025] ffff8880785f9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1402.022973][T23025] ffff8880785f9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1402.031122][T23025] >ffff8880785fa000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1402.039194][T23025] ^ [ 1402.043794][T23025] ffff8880785fa080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1402.051886][T23025] ffff8880785fa100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1402.060133][T23025] ================================================================== [ 1402.078755][T23025] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1402.086010][T23025] CPU: 0 PID: 23025 Comm: kworker/u9:1 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1402.096376][T23025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1402.106472][T23025] Workqueue: hci5 hci_rx_work [ 1402.111208][T23025] Call Trace: [ 1402.114501][T23025] [ 1402.117448][T23025] dump_stack_lvl+0x241/0x360 [ 1402.122150][T23025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1402.127361][T23025] ? __pfx__printk+0x10/0x10 [ 1402.131960][T23025] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1402.137981][T23025] ? vscnprintf+0x5d/0x90 [ 1402.142321][T23025] panic+0x349/0x860 [ 1402.146235][T23025] ? check_panic_on_warn+0x21/0xb0 [ 1402.151388][T23025] ? __pfx_panic+0x10/0x10 [ 1402.155818][T23025] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 1402.161809][T23025] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1402.168152][T23025] check_panic_on_warn+0x86/0xb0 [ 1402.173221][T23025] ? l2cap_send_cmd+0x679/0x8d0 [ 1402.178095][T23025] end_report+0x77/0x160 [ 1402.182348][T23025] kasan_report+0x154/0x180 [ 1402.186968][T23025] ? l2cap_send_cmd+0x679/0x8d0 [ 1402.191911][T23025] l2cap_send_cmd+0x679/0x8d0 [ 1402.196748][T23025] ? skb_pull+0xc1/0x1e0 [ 1402.201015][T23025] l2cap_recv_frame+0x22ed/0x10830 [ 1402.206155][T23025] ? validate_chain+0x11e/0x5900 [ 1402.211113][T23025] ? deref_stack_reg+0x1c7/0x260 [ 1402.216088][T23025] ? validate_chain+0x11e/0x5900 [ 1402.221162][T23025] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 1402.226552][T23025] ? validate_chain+0x11e/0x5900 [ 1402.231503][T23025] ? __pfx_validate_chain+0x10/0x10 [ 1402.236719][T23025] ? stack_trace_save+0x118/0x1d0 [ 1402.241765][T23025] ? __pfx_validate_chain+0x10/0x10 [ 1402.246977][T23025] ? __pfx_validate_chain+0x10/0x10 [ 1402.252189][T23025] ? __pfx_validate_chain+0x10/0x10 [ 1402.257403][T23025] ? mark_lock+0x9a/0x350 [ 1402.261754][T23025] ? __lock_acquire+0x1346/0x1fd0 [ 1402.266797][T23025] ? mark_lock+0x9a/0x350 [ 1402.271178][T23025] ? hci_rx_work+0x4e7/0xca0 [ 1402.275781][T23025] ? __pfx_lock_release+0x10/0x10 [ 1402.280830][T23025] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1402.286494][T23025] ? __pfx_lock_release+0x10/0x10 [ 1402.291525][T23025] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1402.297526][T23025] ? hci_conn_enter_active_mode+0x260/0x370 [ 1402.303457][T23025] ? l2cap_recv_acldata+0x48e/0x1550 [ 1402.308771][T23025] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 1402.314676][T23025] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 1402.320693][T23025] hci_rx_work+0x50f/0xca0 [ 1402.325146][T23025] ? process_scheduled_works+0x945/0x1830 [ 1402.330868][T23025] process_scheduled_works+0xa2c/0x1830 [ 1402.336431][T23025] ? __pfx_process_scheduled_works+0x10/0x10 [ 1402.342425][T23025] ? assign_work+0x364/0x3d0 [ 1402.347062][T23025] worker_thread+0x86d/0xd50 [ 1402.351677][T23025] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1402.357572][T23025] ? __kthread_parkme+0x169/0x1d0 [ 1402.362600][T23025] ? __pfx_worker_thread+0x10/0x10 [ 1402.367722][T23025] kthread+0x2f0/0x390 [ 1402.371849][T23025] ? __pfx_worker_thread+0x10/0x10 [ 1402.376963][T23025] ? __pfx_kthread+0x10/0x10 [ 1402.381556][T23025] ret_from_fork+0x4b/0x80 [ 1402.385986][T23025] ? __pfx_kthread+0x10/0x10 [ 1402.390592][T23025] ret_from_fork_asm+0x1a/0x30 [ 1402.395371][T23025] [ 1402.398689][T23025] Kernel Offset: disabled [ 1402.403024][T23025] Rebooting in 86400 seconds..