last executing test programs: 29.402683537s ago: executing program 1 (id=706): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0003000000000200000010080000180001801400020069705f7674693000fcff000000000000000006"], 0x34}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="effdffff3b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000400", 0x33fe0}], 0x1}, 0x0) 28.716819262s ago: executing program 1 (id=708): tkill(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000060000000000009db378fd34c35200"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000380)=0x0) io_submit(r7, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r6, &(0x7f00000002c0)="5358db3521fd3038d7", 0x9}]) 27.472540626s ago: executing program 1 (id=713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$inet6(0xa, 0x2, 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r2, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000000c0)=@buf={0x21, &(0x7f0000000080)="edd2d2764f78847e16df9942eda3da6f5a610416e88388ceee77b867cbc456dd8c"}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000280)={0x31, [0xffff, 0x200, 0x1, 0x1, 0x148, 0xff, 0x5, 0x3bd6, 0xffff, 0x8, 0x4, 0xffff, 0x5, 0x0, 0x9, 0x5, 0x0, 0x6bc, 0x6, 0x9, 0x8001, 0x8000, 0xfff3, 0x8, 0xff80, 0x893, 0x0, 0x7f, 0x972, 0x7, 0x9, 0xfff, 0x7b01, 0x9, 0x8, 0x0, 0x3, 0xa, 0x2, 0xcc, 0x4, 0x0, 0x6, 0x5, 0x9, 0xf, 0x7, 0x6], 0x5}) fsetxattr$security_ima(r4, &(0x7f0000000300), &(0x7f0000000340)=@ng={0x4, 0x2, "757af4b3c621fa"}, 0x9, 0x3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000380)={0x3ff}, 0x4) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0xe1, 0x8000000000000001}) futex(&(0x7f0000000400)=0x2, 0x9, 0x1, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f0000000480)=0x2, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x80000, 0x8, 0x332d77a8610e8c1a}, 0x18) mkdirat(r6, &(0x7f0000000540)='./file0\x00', 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) fstatfs(r4, &(0x7f0000000640)=""/30) r7 = openat(r6, &(0x7f0000000680)='./file0\x00', 0x4100, 0x0) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000700)=@fd={0xd190, 0xa, 0x4, 0x70000, 0x2, {r8, r9/1000+10000}, {0x4, 0xc, 0x7b, 0x9, 0x2, 0x1a, "06718923"}, 0x2, 0x4, {}, 0x6, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000780)={0x10000, 0x2, 0x6000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000007c0)=0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r10, {0x1, 0x2}}, './file0\x00'}) socket$inet6(0xa, 0x6, 0xffffff01) ioctl$VIDIOC_SUBDEV_G_SELECTION(r11, 0xc040563d, &(0x7f0000000840)={0x1, 0x0, 0x102, 0x2, {0x3, 0x80, 0x1, 0x9}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000001e80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000000900)={0x1510, r1, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x0, 0x12}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4a2}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x290, 0x3, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x102, 0x1, "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"}}, {0x94, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x90, 0x1, "147f3a41533ed30b959a67e1fd21f63801f58bc4e9c7c9f3885ce2d207f4ea147411dc4c842ad2d296e7325ca2fc82bdf87a75b5ca5f428cb759c975076549f66a21ae67e7c231525d66bfa38a440ac001eabe5b48eeb8387ac0adbe003db73cf415f482d87abb022bf6d9ea0469b3bb9b44243b985329d585ee596b8b7d743f91041d1f33887a422ec97a8f"}}, {0xf0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xeb, 0x1, "e59724064ce26fdccb09fe0dad277ebd6a83881ef7081ea7e3bd6027e3230756564b9c0a454de0676186f2d01bdf57e854ffeae8dd742a717fe06df287a221f9bf6f24a2d2b42594153742e45910257f4c471a1806f4ccbe4d818503012af0be4b0f862ae17bd7145869cc27cb201cbe48c22a9727e972c059a503b9ebb4d7b9ab1eea31eef273c309c3594df39e3ff168022a3422c6b98a3c730edba95efdb0407838569a4177a705af895328769621fa8a7e6a09e5093eb8856380e057371b01b82f3a12386dbf47e1c3a17316ce3875d15f0ab68e1a1a5d1a67dee90d5ceba2e879869732b1"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1114, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}}, {0x108, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x101, 0x1, "f011795ca765134acf10c8076263240809397582240f62c02c0dbbb5bbcbdf3a73d9bdc33f5ed93887121547093730968d3bddfd4c8b3089ab07d21253b015c0e2a4a331289ab354b9f2fdd35ea464a1796091980a1b4ca4e271522e3a37fc5a733982832ce360ec4749321f3437d6889efbfd273a61a839a4b0fa70ad21ea48fd2457890b4ba189ea5827a226f7cba5c255a9b596edd455f852341a15217b3b961aafdec65c442518d578d111bbcb7bfd2504efbd4445d061550197e426a5ccf92d0d9e1b4883df8f281334fef95e99e1fa1df0f422b65f05d70f58820fe50ffc100db8dc7975725e543d963cf2768719cfda67356d9c6a307a1ceffb"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x20000}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffff8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x110, 0x3, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xe7, 0x2, "26f2bacf542007ec5a510c966f37420d19ab38ad4fc45f1c042871e60bf1ace8455e540adab63d79d983fb71877c4f88f1a95cc57675a343eebbb9c8874c428f152b7b5a53eb2005f10122f845a97d27a4766a7616ada704c31fa4d26ff12dde8a3122a80fc124032844f7a75ebaee8f4d5d550d570c00b2b6ae8666e0b31563c3777e59e7431428afe08a7faff588e484f914bee3e521e53137eb7c59e774d5cd8c6860ff903adfba7c63bba61d28a1c14ec81859bc97b2a123b430d7e3b905b735658c907ef122032fb2eb73ddf4438b62c423c1e26ce819362d82acec7b1153e701"}}, {0x20, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1b, 0x2, "8ac1022176c514cfeae32710191170b832c88c6c5d651a"}}]}]}, 0x1510}, 0x1, 0x0, 0x0, 0x4}, 0x44004) 27.083696256s ago: executing program 1 (id=715): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001880)={'wg1\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x6000) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000008dceba394fc9d73b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000f87c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close_range(r2, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 26.716175881s ago: executing program 1 (id=716): chdir(0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2816c00}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="2a4cf468feccedb01748d374335aee3863fae991300434bc633015883ef38a843aa0a35ceaa36de79883ec95e78ad3b5d102e4010e06142dc23063c6fd2ac675cd4da2270fe4fecf55f5ddccdaeb15d4191653c9e3bc78279a50444f8c15236e2f57a0c064557dbed081c1af4af3a8043758fbd7d2f3894331b4801c3478166c330457b6ff547f1c3a1fc1a4da05bf56fc2c207d23200df1263d47ddabd0183d76bb6a8b05d41c45bf39a982516713c65f29710fcc96f35d3f4ff04798a27e7f82cf5d7ff77b04aba9e9850c2df9ff84ede46acf37db96c5b02685872f02142d167bae0942765a9d59f57e4aace4c791c1896947d4684317afa8124666ca910a1e4daaceb106392ee2d9d2b48b0c5fabb83784e621ecec301cb041d4927ef84e9ee82c8e87802732e957b95f66f2cc22c51c3c02712f1452a4d3d779cb51b20265a79eca6321703f89a5a6e6646c69e1db1c90ad20850051700ff1753812ac9fe0c0661c851f634f38b066183f750ef5585601573f2d95c765a0b4e0c3306cc499fe8bde31366213ee743396db163ec0d666ddb0149763047c969059d6dfad83aa80580e7fe4fdd729a045b325cdc49e8a413a25531289cfa059a949729ea39d2d65be310732dbb58d7d8eafcd34553d4a48c41fbe635a18051bac2cd9fade2061516c29d7886f850ccd96ef76d51ad5c1fb920e938ffaf357ba025ab56bb0efff35d1b7ae064b7e6e66d06cbafdd4a224d3daf46c4b673a4fb001a485a9bcc4c26d418c8925a0f7d4c6c47e629270caaceae409c09de07d57432fe264250a7e9fc2222f2761304afed7c564ff266299bc4d536bd51f1f824d3b3c5ac96454942ecf858f7a0e36179a448425cf264a109ac9519620badbc77f4d38a50ccaf94896fbb2ecfbac152e4b52359b6b96e53ec77eff99e546632443513a30c0a18c0b0e798ded951366b9f959626a44ecb4c69afe4a3bcaf80b98276ef0d2c8493cf4f52a029f7bd1d05a516109f43d1aa2daf6283c902490750c6a0e9ac328e4a08941a1ffc4733e7f9437c7c086329951db4c82cf8f4ae47a96c253aa41c08e1291912b8697e3b0d4ba2c013c54c1c9310f1970459d4da1638acd5ead690e397d57718252d26f71f71024d4bc2f9e852da9a82c3c78671feb511e594ef48077c086465af326801a3a3a72d68edcc72cb7cc07080af7976b79e0f2111d2c2e913180e6671b05720e4d015b20efc76629100ccbb2b6a77b663e53c7dc1817a4c874e8f8c758d91748edc41e39ac9e97d8ecbf65d3fe241b10feb90222cb00ec1d984ae6654962bb5586edcaea389f9c2a8267289e27ae739565d7c8ebcf9a7df18b9586001acf5b2d4743488e872f47d73f944af78241cd119836fa0542cc24a9de3cd981076ec686a463819da576d966a476f01e52135bd642fc2bc7209766df1dfb5ca5904e7447bba4370807cf0f852c9dd2cb51d9a96c7f7514d64aaef264665e75d8a14dcf2956f1085b0d7b9d6476c7a036a11135c989fd2cd00196297da58ffa15551401d6a4f81eb449c4c99b4d8181d86886b67b0d92f475304347771cb601d8c0b8fde2e9e746c37dd72a02335653c15b8850d9499db15dc4757122edd2790c3f3fcd1b5e12198c5a7baa149320d2dcd11876f8c545084e1c11c4a2578b82880226854c5afd90c786cb274eb6559839d11e82dad7d32806440204f0beb036ad2ea1bca9adff1b4c109fc1c702265ed8973a8a36f4c791813393f94120d590fde37eeee23fe3892fa1ad630ae8a5bad81aedb52aabe8b5bbcd66176572b3f07d0be726c2903c568d3265831ba6b7f9a6e15b4780e0e31327dad0184b7921c7d56acdab7ac6d1d61dca87c9953f5c87b268c6dd4535c0ffa31f365f3eedb7699ffa154fb55ec1c4ed57332f7a58f212caa5a0f87b6c674cc8f60a52dc2cdead07704b368b353a9430c9f20d7987352747760d5a606db645f42c8b11a759a5d8a694cbfa48ea6d716e8c62fa9fcc96feb685a65fb96c7c6c6880dbf26a9ad97bc6035133b132381b962be33d7b6e5e948c7f9991fe2d4d0eadf4b45c59cf9dbdb43f432dcfdc33f318ceab2b14fd8a63ed55a908fafd74db3463b56836b0faedb7b1ae8377fb13013e1fcb6ce60085a88f21ff8eed9c410554308ecafb55ce0b033bd6423b1775d2ee5b6a909acd9a52172c7e7c8b9a58282528af560fb02db814763c898ec328729a5721a758e0c4184a1738de43b1c0d718eaef31a7d118dd8f202f4c82a9b65da419f89c04b5ddd6bbb256eb92b18989e484be134d76b597a31919e7b420a36f5498058f7e79ffaaffe119b7b6004a10dfdfbc5673d7fc0dc9944636b0517512536fcaf0886ff9dc7ab8c9948345173e7204b6dfa02fc6ab54ca867d04b18a31b52c4a763fec1cb2e34cb9cd414326ad4bda735a5a326f3754457d7c7ae674108b851eb790af235f183c901d766d8e91b88e3fce19e77697a22c22c4660d170136af0ec9fb5783d7bed028a648bd03621d4fe36dc372820eabb5a74ce9ea2d098c1f58dc8151ed08dc22bdb01a0e407c16f05f5b4f4a034880b9e828298bb6a539c5e97758350f064f4e00737e5654a9a52e5163c72d70c1fcc8051a1d273af078c54df91a4d8cf1f87cd65af76a5e722b0a315e0fb7a55be2a2d9197cce0717bb4908d9ba05705b78fe6099c79833cb4924b15109a040d415cc8c947e87d667db66a85196d05fae768f718b6c7151193189ce08de40d899d78f077ff344090596a634313892419150f5c202ea6bfe5327c07f26a31e9a23222f8245037cd757773ee7ece18f5ab6ad629fdee9302b693c1797c5103688caf3e436d807e4defc1e1b89de9aafe52d1c498cdb31e3797f8211a27863d5d249db1004d9d880d89a8d018d5fdb21070f8e4446a67936f9dbfd407cb1ac1e0ea2471f4f8d8c4d02594ac21c7458d9aef19d29c1e3259e67ea09ee2d20275322c6b7fed2786f915893c9719a37634dd6ffe2fb56f3b75f2d8f210690494ee9588f2ccebf11726d3c4cce959bcb2ba909bc88601f65b3d4f62d3f6ba01789e7bd84d2b588ef5df00acd226bcb0931cdb98bec4daad0463f5fee52ca985022afaeefcfa6dcf43423cff6332a26d2bdbb16934b2d7b99307cceee8a54ba81a8ee2ae5aa69dd77228dda52eb2d50fe9fa2c899053ce739454d8db63733945bc4de9d234af399502f5f437fd906081f340a120382bd79ba1d1f235100d4fb290d615b3af7a2c6908dbc142fabcc88e2658087b69595dd451dff2e2474015be7924b595c540bc0c08cee4785601bf80c61d07e27ded83cc6fa1adfbae78990355bcf71511ec0ee28f03da09d9a17b72977ab2ae197dfa41a3572f476e2adde5eaae65b81b58a4740dde468b9ae79e3119b3cf134b2e97fd920b2e9533d2df0ea162ff28975708949f0697a30f229e3f94c99ed0dd3d2280646b29aaffc73ce9237a28eb553f267c8f7802fd7b4a0c4b39eaea0a76ba600d35e9396fa00648935896217f8362546f76838938a38922d7487184aa2e40b03a40f555924769c7e599ee077dd6692d065c11bb5681de0842b2c248d14b3bc7f06c181787408a70fe65f0ca4e9938a3c6cff2725b9f7350533bc4ff2ab2fbaa4b0fb8b0f3cef2af22b01ffa3a9e518dae1c1f456a5625ced3d77ec0206bff3e9a9f1b857849df8e00843e99a710b15b044aad817fdd570672ae541fc8d9baa9c1f0c6abc22af3d901bfe49f405f19bb97d9b0e0d8177700dba80b2f5eac6fb30c177d6bf65fa2a2b9030a9de395401760b27220c331559a249c4c42090b23754afe85754831e20490b4c6f5fa50ba54b97989e45642096ab32df0ea271b0aae51e27240f51de45e9129cf73ecc752ab772419ae064909b2fb5df931fa059568afacc5f66d3f6d8a9b75c449d1c576cfa609519237b8f41a6b026576b642a116216a4200a0733b631a6dada135dba8fb0b4299177ab9f2f7acca275a0ef160e236de8cd15af0eb1b7ad22e6349c150c31c73ed6defa693f2892cec999a9e5cd511f2f4eab8ed8f7b8b21b15104dfa584419093437308ba517151355ec1c2f85d0ce64ce2917d1d09a758b407cf330613a29dc219968ee3720f69b85ff8a9acfe0d67dca338283d2589f05d90e4af687bbbcafbe5c2081f2378c60afd1bd1191c7702606ddf3bca68ffd1835163e50a16044ec88f5ee9bd649c0b67750f785b0c0810a8c142812fff456193b9057fbf8ebc30390debecac157854f8d2cf0b5f404d7252aee1d92808645e4d11c9510e2a07b63468f59fcd9d2f6504a5271ef8073401230c91fee5ed4dd53b50dbf5692d95997d4f8bfa8f869cf557a817f03ba630f47bf8b77102865042fb96ed7155d068ba67c574d423c253ec66c8919a818b1401c97fa5597e899c77245a7ff3bb632133ae4b7c96e5d22e4d6a929c309795f069b81a940d89a8b7622b73f7fa66cf1d0f58987214dd70456c47eebacadd51236b5eb5d8893e16321f53f2fe5a275b0a2cbd46f96de7010d08c07dfcd3ee031ad750642f91861fb7a75fa20ddd3c2d572493d04b36424d0743f15c3b1e9edc16caea9aba42b2bf1470aaa7d42923e2e5c8f170e8c981fb974080f2556522bb96299c2f5d8e9f652872e2dc780f12c002bf9315e037734ca4b0a0561cfcc659289d2b7caad7946e41f66b0ef5d173a170bdf5794eab69a91b4ebf527bd6a3bb1017ea725d604910b06c69346f7aaba2da4a928241b133fdd44974e59c82d9f57d3eb0c4f4d26ebf382836388e186a278475a3f138a973d98c01fdeaad1109ecdd73345eceb809f04fcbeea06e352ba2d8897122d487053672decc2a7568ecad9d99d0a3896d30485263cf91b00b9df9c500c94e6c7c8bc7431ea8fe815b2f494dff17762488d96232ce59c54da2682f93ae1ac36ce9e2f770fd062175062a3903a407355d583fe995cb5bb09f31323169d8e48119adb4b218dcd0a3418117315ab26c299915ff1bfbf4e17591bde0ee86820f5e376cb2082b23600ead912b99c2732d7251baa0632e2812144b2702da97e12c7a66583c3079a96b6a7750ed7bb2298f37fa6e9abf0aaef7c4d22b655feb4915c65f0985b175a94f384fcebae9252ce9746b69c9a85c215b4e36aabce1bbb197a654b27f8e244ccd5d57761f9e28b78235f02e86b1beb752c9e0064eaf765ac2b0494e3ea6e59763f69099eb5c97548228a3e71d55796e75b99bdb395567f56f5577bd2f9424b92c612c3196a20b8e807e97daf6183e677928e24cce507cec4a940d0a6b07afad50e5f5e53858894bc8bed0f6829a699c70fe1bebc537385c3c895a3ad88555ddba167b7c8265acc88ebd0a47c3f6d17ccfcefd78dc216e080965878026fc14bc72de597fb0fbb5e6f63eefbd8c69bf7ac57ddbd9be72ce665368a893f7a7b71f844d32d9f329a5828bd6cd290750b114514f83ab43c344b3aa67f18c6a320f8b914d3a04e6fb7987787354ee6eae246875b747628ecd98c832c9bbdeb66e58fc87783b0cf3d57ed72e427de910b1748f5bc32ecb27904c2e30c0e159c791f07e19cea083c15eb760cd1010826eef035edbd3713c4cb59739e6d3e9d7d4e19efe54123c75d0b68418ca5437d66c67bc6af1ba7986591b27af8fc9180bb4821a3c521649ec29abc3b14b195c170aaac39e4dbf2b119810e1fa7ead45d62d056935c6e657088962d1190fc5e68a732af9257f6a22096657767606eb39961f07058a6b512a2cc21a20757e2dfe60f259ba7e81b070c19f5499d0aa6328d2b4fd66b5ac3a840612c226c5abb0c0e88d9d7312c0138e651b6cf28a13957481eb202d81c7a2c0aadc9e85a0dd338df0a85626e101230b1af37d8d88e5afd006f689c19467234862fc5140c63a84845c41d4967b00c2af4de79bc69b51849aba198a6aeff9d3140c36d9b9db563b3f7c08c240e832fbfa05e3bca7cd372c29a633d48842971b922c2561d280be423db3802112fa4c9abce9578c682bbf1f06a76490a479b84920891481d2a9e58fe7aebd73397d06322c889baff6866184578abdf0323794ee59067e3f7574231284532ba663deef52b1805df168307e8773061ea7d425869b9bb8bb61e5f6e4aec62fae4d7e8ea34dade87d4f066b198b385968a2070b6477a5b91a28a0629f8b59bb6d2e99d7a3b816493d4b2e535ef5eb996dd37b2d293b9010cac83581471ded4878bc9cfd50c52baccc4aa68f1664c3a4ecbd1299cf5aa2cc06b95483c7d56d6c70b6049712430d06e5cab7942ed3287c0408e42ab833aca2678d2e42622eada21acaaebc2f7d7e67df8b8d543357c7a9be085dd2356cf0d1015d4420308c1a9844683d0e09de8e10f9be3a155a7a20f421e92d9a727797b0bed663866e3cf82768d910004ce704482960a0037ac6e9bf30bde1533ba6c5ede74310c3a68206c679b15f1e1b061aa5bc05795c481cfa6944baa4b7e12bd88246d20a2284b66def7dcb02d5dff011f4d3e31175cffcaa8aa1b889c094ed39c78440f04184659232f43c4044ca8f994dda0c131f0fe55176b0d65450be0ac0afbc1e642e1945705ec46708ea975b44f668313e4c6c70b3fc4f8e37085e8ae1edc6ecb024ad14d5c60e972b945a401c4220a09a0ee6e0a81259d76bb0d196491fc90c905354ffbba619871ba44e36a8c81f5a0731e7e6a088c2485c666ef0285b06553c6a97b148600fd4f96f054077f45e9ee639c010930122160ca43152317a623a846499dec672c8b8543e6d11c58f5c8561b51af8f711b1d3c909d350f34b21e33c063eba42e28171a6244f35bca9aa9f1047ffd0384aab0203e639ad3230079e9627ae85c07a9a67b4e142ae05301eaefdc9319b6dc2702244cb1f00893686a68cf6f5a79b67fdeb358002b165c5778ad761d5ebf040233663d5231396077d4f80463194388d2d14b543a37f9b1e91145ed2a59c5b8f06a89c8f762303f0684e3812eb32905249be0cda45fc636f3cdd57d9afd56e3e6805a2901c0ff9366ad103298a409c1540f3af1f78e7ef866af75fef593089298984b444efde57739044eb4e5fc52f29356f45bd2b8aace495acd442df6b66351d127eb8b9a81c8eadb312ae0f2d7d03b726ad2ee73e59274529dea347c25ada7bacd31c7219c42d0c8ac7d3e3b89b01ec608fe88751c8c2c6bf477f6df653f0fadf53eb914006ce06eebf50c40a688cb2e8100db4b7ce3bfe31a3e091df79e263b7f22768ea6ec40672255bf639c2c6ab902281a21358a2a726ba07bddf56dc25ef3e6136d8af5d18884e8df3eca27a0172547edb4db9421cf6abd8532c0d8d37c1dc967f8c01d1f09b36e389137bc95a197e7c7f9817e7d379c3f81f95bd421ad38e91b78fc3f7a03d1edc3f3218627aa85a7d1fa54dd3428df0130eebc74ceb95446d1a39979b94cf157924c99f4d90827f4b9024d4bfb4ce8147bf03c17ea77c6794381d7863c155c17157a52164dc48b6d8f8d5ea3d2f37b2099eb74fd6eb22e77eb5304e2223d58d23a2f3786451975121432ad1d38703bcafba84416d5a48c6fee8afbccf17f329ef30b65653d5e44e592c1934655ced287f71571b8a92bf8c415ff632306682a63dbf684242aab7f65f492e69bb4968274054fd5b749a64aa05e2956e8a85e33cf8b1f0c1d85dcc138da6f37259ec38c03e5e2c374d7c15588e2c1d8dc0d0a32e4a5e13a697e4eca32f4474bc1070ee64787ee6d5fbeb9ed48d7d08de9e9e6060b9afbafdbb3d405391532d554b7287aef4b83f823ba8ee8d7d90a5bccb12c2c421b74768e46190e8f7eca54828bff3a1cb15705895e62d11f57ea4253d0dfce17c8a5f661b3ca446bd909b7cb531292f7156c5e3997a7ed8c2e8f20c550e32614c4a2acc80ca9a425066a4b6b91983b4d6642c2cf1f905ec30ff9a9e721862521c74e9ad86dc9ff5f2798594526bfc45f94aa6eb7376449cf8013897d2187f9b27acfe6ad2b14fee737fb92d775a4525edf01a32cdef8dc468690d4b7636113c0b08f00f37d52a5d3167ab682539cd529aff15e1ccb7a1a7a4cdbdb189489b899448b6a8ea359c131d45ea498c027483b019d8061a5fe7140c09a338c282a64a6aa241bd719c0e1076a0d5ab75c548782e98f687139a7bb18a6a028a7dc3c105a2d16aa993bdfd6d68cb59f7c9c1ce9b175db4d4a0a63e375873fe8738c3f6d73ade8149a2af6499919d968c08a6c1f4f10237a170eecb360e4d64832ce25ff56ea37f285e41c4fbf86826c54ed2fe5560380177b8260ef76c89fe405b883f0ce99ff379bd8478518c55c45a5330a9ba0120365844f334242e1ff1f965a83d7dadae7c1bb7cc2d2d95cdfb75c709da7929eefcd545f598ce93a3cddb414cd778d8d1687e846530af17834ad0c289f2b0f69f4a5d5970ac2935d1146a802853bc93515579b7b0f60ad3ce02131e66611b0aeb54414ba9b1dd7313781ab00ea8b243286c2aa0c246365d2a736e822ab9e69f57fdc657e63613f31c0f50315902412a2f6aded4efbdf9588dec5c66a6940f53cf08b815a9168b8976491ad87ce018f93b045cc99d595d8bdd300ef827286f5621b48d253183e2169a6c352a79178b94ac0ff2dec1325c993b92a005b49144bd9e35aad13ccf428cae14f1d80197201cb7a0e5d9591f06e411d226f04f2a0a1269f8996fdaa66dc0308af1584012163460865194e949f1c4c99ca72a8ed7aed4639215863694e00687da4074097b26b354bb7d9fd047e935486a86f4c501bddcf50e6a779a41719eb221bcf934dc1f35d04cd139e976ae92cb7576d67c6e5cf73a3cc8e00c5dfe0c1c65d42b9e0198c7f95626f29b88255d3c30ef74f53496b25d5b2a0a2e96beaf5a75e9a49366c4ff9f5735ab8233677bae74248a0ebbad3040112796868762c7063f6595023028481a77f2eda1cc23c173cfd52d5d009032d1311eaca0a165673f15f2919e71831197df36193351fa82ec35e1fa62e146249b33139d4a72ccc69bb60063c6ba34261847c958ce9a380dd695eeb3a6acbe7dc18c419c1780677ad2991afaf71664d8a3a39b38c47437fb56cc83a82a3513287c020730502f483f295cc9998a744652439be0574b229d583d4d1923726edb5eb4cc73a3aed7a4632388b60f23c1fb5dc07ebbfeefebddd7630c74fda2eeed3f7c3881d46e1d94be94b4db1f13ea0bfb7345f4951d39e3cbf7822cee06072b77b4ce9c2c9b5a2bd91b17823c5c7e0d782adbef8f4addbe41ea3b486397545d6449fcb0b657ab79489018f44cedbb4efe85b9d8e88c815b20c9295ddbf62d3b139c5bc39c9f8f4f47398e7fd3d60f43b89efbe1e0f2d6fe8fda9d982d5b8510eb1f5e371c4f475516824c773b0ca41b659f7a18034b43db4aa2f81cb6f7c61e033ec06d727f4a23be56e16e5ba3bf95e9721e45dee5650c44bae1813213666c869d20d8dcccb68ac2678be6fccfb5c9cf286ee0c872acc873d1c9527e2adf21e487ee6d2d269daf3b7d3f252aba927b82ffaaa5ccb2a5bbb6355a8905392de4554659ee96955dac0e525464b51fb9134db5cdcd7b1e6fd26e4b3bef59f6b2be7f8d88dc3b39fd306b96480636592cca8033326e7c64748f6433a20c473e0a4b0276954389d0bc6c6063a7247d4fa68a3da11b26aa2cf64e34be06ff70bb3aa2893b5ea9e5368a8d67869d54ebdd9ee52469c35e5f24c4dc7b78290375086cc1a113c9061077a1865905c4422b842074a0425509b95fb6c2f39ab6d675f6a9e45b86b7009e8aae0ae18a188d2ee7201e388b21ae1f3e930b977e2c1ebb6c33e2672a90caf6804acc4b5aad832fa3a6780465c34a0c2ec7397708498649ee05ea64f24bfc3b4b3f635429e23d29385ef54a2c51473bc75e9b75c15bf2cbc769104d1f4136bd4d2a209e4f5045801b9e068808d192b30add5902cae60c9efa22d19f5fccfe1daa569f0bbb04c569de3d14f20b7dd0276dc7456db8bf6b78a5347b8f4ca6d61d4408e7b2fce9a1301929681b7132843365ae83cf7cd894c75c2ce5f66632ef94b7c1b4d2f98926035ab73625df3fe3b71f1a4684f9b38b5af30906a9e305efe9b9409df7830a555fe305d4ec7cf34840ee35e370844e37d97fe184be9cf30b5164c8ff630c9f03b42145986a055f9f9d2fe5dec40ae7e4834c1233ba844ece4d9e7dea4525edffe4caaffc81631c71bdcd7edaa6e8e2cadeb4c4919762acef995373ddcbb37f8482fdf97b79df1a4f477f268a165c469924ff4652340a89c3b675eb0cf2673fb7967b6d52826b65101c12596edb7fd08268e68824a3b8d1ae6f69959fb08ea1e2cc54c3f209fe409570ca62da60c51d82f0390021ace078ab06b51cf2c29cddda261b10c77b29e26388c30fbf2d1d85eeda6e0d8eae756fc9298111acd623e19da4807f7a9bc433bdfdf49a2ff01ee8e32cc61936c3aeab6b2da44f85dcdcfff9e477bd8939dc4172445e48b4d1999f51936a3e085b81c07d290d5a965717b8bb778ffa1f25d9b39d3847a30dbd69fc0fbefed3ced3c8bf34d617ad5d55615fd3b21231469d7de2ade3027af9626e296308519c51104a692cf96f53d7d07b2b1e5eff3964d3ec6c563f402667788289e58b2cd244f230dfb8d9f57a08142ee96570550d8edd55b899025981728b1e85fb13da6dd47d13265b9056eea4b988f300361f6e9c9a66f2dddd26a30ca80a04ebc0d23f28f445fa7bd0b03dc70442f246bb4f3e4a4dfe37a462655092c41e8f99a19f2b6de6bc50afb0b2e39e0e7d53060a78748587801812d3f6ea2467cc307097d7620eda68c251585483a5eb04e442b169db1b32418ec2d8e4f9bd3e8c38789f18f34cd5e0b26ec65d45fbb1bb4acf6accc249898e1603e2c7812a133fac8017a465f08568c95854f9fc860746900f6a6634f9ae03bc6643e05e325718fcaac6cb28db29936dcc6733a0627c6cc379560e2688de1392aa1b2f52c45c2eb3048e3073f801c6f7bdbb084f897407864e16c0b53c5a51d07cd8cfc43e030c136cb19288b8132c23f6377043d6a8691e6ac5c3d6ef378994e4291f31958dac53c1b4faa0f5ff37468c3140f47ec0279e87e9ba4da9080e8541eaf74a44235aec274601916244c7c1fe2a4d72430a03d616151ee1bdc94bdc7cc21a11cf0ddf0fcbfc92ad183e593e778c69969aa309aefcd55bc96c0d1afe331bcb3ef46b0897d48bb18b77fbaaec8577e5e7bc4a0c666e93bfe07e66c8444b21d61c630947aa253d784b60bee9473f950464675df4dd5110871f01b4c916c74cff29fc94e029bcc5739cf8a8497eda0a93763b0f4702d122844462b77b15a22aaff8720c1bbe66d38416820aae90bbb765c5a9dc14ea3a94885fa9c1c56420056e060ce36017354cea9f89050996a684861d29af52dfd58ee2d91635f5ca1708a269a644c1dc26cc5224e72990b68e437ce70210a8baa2c0ee6f74e25b9d85dc57a87cf15a0d19b4bc0f4fd9e7b76f3764ff5e730cb05c7c53807ec80d60c457abcffd61800ef9f072e36ed0efa77cd3a0bedb4800df35db5b2f378f31370b9e2f664ea4b7f56", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_IOCTL(r2, &(0x7f0000000780)={0x20}, 0x20) fsync(r2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20.727166445s ago: executing program 1 (id=733): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000003900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="b301", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12001) recvmsg$kcm(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002c80)=[{0x0}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000003600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003640)={0x98, r4, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x98}}, 0x0) 10.918813987s ago: executing program 4 (id=744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x12000000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000a000000fdff8504"]) 9.288250206s ago: executing program 0 (id=748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x3, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000001c0)={0x8, 0xffffffff, 0x0, {0x1, @sliced={0x1, [0x3f, 0x28, 0x0, 0xff2, 0x3, 0x9, 0x8, 0x1, 0x8, 0x0, 0x3, 0x1fd, 0x200, 0xf42, 0x9, 0x6, 0x7, 0x7ff, 0x2001, 0x9, 0x4, 0x6, 0x215e, 0x800, 0x3, 0x2, 0xff, 0x99, 0x7, 0x0, 0x8001, 0x9, 0x7, 0x0, 0x2, 0x0, 0xfffb, 0x3, 0x9, 0x2, 0x80, 0xfbff, 0x1, 0x9, 0x7, 0x5, 0x7fff]}}, 0x1000000}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=@getnexthop={0x2c, 0x6a, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8}, @NHA_GROUPS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x50) r4 = syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000015bf000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b404000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100004, 0x220104, 0xb, 0x1}, 0x48) unshare(0x2a020400) r8 = timerfd_create(0x0, 0x0) poll(&(0x7f0000002080)=[{r8}], 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={r7, &(0x7f0000000380), 0x0}, 0x20) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x9, @mcast2}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90172fbdeb70322ea3188f81890e3db"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x6, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) 9.08914665s ago: executing program 4 (id=749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x80}}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x80}}, 0x4000) (async) 8.652620338s ago: executing program 4 (id=752): syz_open_dev$evdev(&(0x7f0000000a00), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$EVIOCGRAB(r0, 0x400445a0, &(0x7f0000000440)) r1 = creat(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x45c, 0x0, &(0x7f0000000140)="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"}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0xc0a85322, &(0x7f0000000100)={{0x0, 0x80}}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000006c0)=0x1, 0x4) tkill(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'pimreg0\x00'}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="76000000f800a565a6e5d01ef91259990300"/28, @ANYRES32=0x0, @ANYBLOB="0c009900000400004e0000000c0058001b000000000000000c00580048000000000000000c00580027000000000000000c00580073000000000000000c0058001a000000000000000c00580076000000000000000c0058005e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@getneightbl={0x14, 0x42, 0x51b, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0xc004) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @broadcast}]}}}]}, 0x38}}, 0x0) open(&(0x7f0000000740)='./file0\x00', 0x12000, 0x12) sendto$inet6(r6, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) sendto$inet6(r6, 0x0, 0x2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0xaa, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902980002010000000904000001020d0000052406000105240000000d240f5ea1000000000000000006241a4c9c001024078000000000feff000000000600052401000027241300d9f62b8b787a06263152755fc26d0ffd3185cc6f4ec2b3ca3f875b6e356f9c5682cf3d0905810300000000000904010000020d00000904010102020d0000090582020000000300090503020800000100"], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.175750972s ago: executing program 2 (id=754): r0 = getpgrp(0x0) getpriority(0x0, r0) r1 = syz_open_procfs$userns(r0, &(0x7f0000000000)) preadv2(r1, &(0x7f0000000480)=[{&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000000c0)=""/139, 0x8b}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/238, 0xee}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000380)=""/161, 0xa1}, {&(0x7f0000000440)=""/43, 0x2b}], 0x8, 0x5, 0x1, 0x1) 7.067294513s ago: executing program 0 (id=755): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x8933, &(0x7f0000002d80)) 6.964248264s ago: executing program 2 (id=756): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 6.919801475s ago: executing program 0 (id=757): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000022c0)=""/106) mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x30ff, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40edce68512449b8b1ba1a827d68f145d28c"], 0x53) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000007c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 5.907948017s ago: executing program 0 (id=758): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b04000000000000000002000000240004802000018007000100637400001400028008000140fffb000008000240000000070900010073797a30000000000900020073797a3200000000140000001100010000000400000000000000000a4db496161cce1d713268177b15849c625dc3a42d3b477b8ea9c51ad0fc9bafb98abf990358616d65c8ef9407a9a02629ad3b30"], 0x78}}, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 5.814540811s ago: executing program 4 (id=759): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0x10, 0xd}, {0x4, 0xfff1}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={&(0x7f00000005c0)="dd5b61ffa1e3fbc1301b4486bfe1eeca4ff4da2275d21e201517207043b22c271132fe3c2ffc309234da0f30980dc92a0804bd30e798df1a1dafbfb6c2ff97c1edb09ec7ccdad44a80747e8cf7224b17947f447e14c8ac73859b341a50a870319fafad", &(0x7f0000000480)=""/241, &(0x7f00000007c0)="3625d1ed0f0d51294b1177efd299f96ccbfa1dbe978dc4e5f599949ca4ba4fcfbc1adf954e59cfc42af381307682116fe5debb14b2c94f81d9062213bfdd65110b628d89957338276d9e307639ddd2db96b41acb20fecad85de65b5598855157d3a9ad3f16c7fb48b003d5cf63689c5a695e38b4ba540fb4af985e6b73244fe7db36048d4532cbf4f8b31453144b7206e397aeb9ab8ac6ef8af00e8d955c68e53aaabc1bb9373e5b16c96c78beb22df47aa0bffbcdbc6b9766f19f6f41232e180ec2d6ecbf97a4a241bb95a21d2126143e1da2d0d30838ee01a8be29e4ebe8b30ccc9d89f36aeeb2f349939b5db20fd91d25d455702972aee4b3ac8989f184c4ab74b49f8a937c6c2ec6ae094806c0935a2d4535c535069341b78f0fcae6ce490b1624947200d6ff4f89ca5e18eaf996c6c195564a475b2b4fceb3a74272719e73c6d6e257defffd68ba815c2eeac009141cdd6d3f0cf666363b0615ee08e87640222f4addc613d0314f9b2d1532908060da5db3187f6b0b5db6377afd18879580016974e236eda548da3cdaf0632d6b97d2507a8bf74b14eefedd75ec07239997c771dc8e56e168771213793775702c2f9e9aed1ac713fc44a5cb3428400458e269bb6755f09ea5a6e50670cb807727ec6c736dc9e5b97dc956706aa72c9632da74b609", &(0x7f0000000600), 0x3, r1}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="140000001000010000000000e2ffffff0000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000008000b40000000000900010073797a300000000024000480200001800700010072740000140002800800014000000003080002400000000314000000110001"], 0xd4}}, 0x0) getegid() ftruncate(r2, 0xfffffffffffffffc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdir(&(0x7f0000000000)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r5, &(0x7f0000000100)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) unlinkat(r4, &(0x7f0000000140)='./file1\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4) 1.548643987s ago: executing program 4 (id=760): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xf5\xbf\xb4\b\xedcJ\x8e\a\x00\x00\x00\x00\x00\x00\x00\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync_file_range(r0, 0x0, 0x0, 0x5) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='xfs\x00', 0x80c0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000071000100000000010000000007000000", @ANYRES32=r6, @ANYBLOB="0c00018008"], 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x14, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_MAX_P={0x8}]}}]}, 0x44}}, 0x0) 1.081172529s ago: executing program 3 (id=761): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) gettid() socket$packet(0x11, 0x0, 0x300) r1 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000002380)={{0x4, 0x1, 0x0, 0x8, 'syz0\x00', 0x8f1}, 0x6, 0x20000042, 0x9, 0x0, 0x3, 0x85e, 'syz1\x00', &(0x7f0000000180)=['/dev/infiniband/rdma_cm\x00', '9p\x00', '\x00'], 0x1c}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) move_pages(0x0, 0x2, &(0x7f0000000300)=[&(0x7f000000d000/0x2000)=nil, &(0x7f000008d000/0x4000)=nil], &(0x7f0000000180), &(0x7f0000000380), 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in6={0xa, 0x0, 0x0, @private1}}}, 0x118) r4 = dup(r2) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0x0, 0x0, 0x0, 0x47e}}) 859.358848ms ago: executing program 2 (id=762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x4c, &(0x7f00000001c0)={&(0x7f0000000300)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x190}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 788.999732ms ago: executing program 3 (id=763): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x400, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x0, 0x9, 0x0, "b49e1b6225be4279fa07fbde4749573e7c17e6e724ae09b9424f5ab23870ecd4"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000001c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='pim6reg0\x00', 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_INPUT(r4, &(0x7f0000000bc0)={0xf, {"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", 0xff4b}}, 0xb13) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xe, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 788.82819ms ago: executing program 2 (id=764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x8000000004a4, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) syz_clone(0x0, &(0x7f0000000400)='*', 0x1, 0x0, 0x0, 0x0) r2 = syz_usbip_server_init(0x142efa27c63a9ee8) socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x12000, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0xe, 0x4, 0x4}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xfffffffffffffcab) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x24c742, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000040)={r4, 0x1, 0x1000000, 0xfffffffffffff000}) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 752.933531ms ago: executing program 3 (id=765): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x96048e}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f00000000c0)={{0xb}, 'port0\x00', 0xd3, 0x140043}) close_range(r2, 0xffffffffffffffff, 0x0) 647.485482ms ago: executing program 3 (id=766): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x28280, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047457, &(0x7f0000000100)) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) fstat(r2, &(0x7f0000000280)) r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x3a, &(0x7f0000000180)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@printk={@lx, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) 508.719837ms ago: executing program 3 (id=767): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 435.556134ms ago: executing program 4 (id=768): syz_open_dev$evdev(&(0x7f0000000a00), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$EVIOCGRAB(r0, 0x400445a0, &(0x7f0000000440)) r1 = creat(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x45c, 0x0, &(0x7f0000000140)="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"}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0xc0a85322, &(0x7f0000000100)={{0x0, 0x80}}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000006c0)=0x1, 0x4) tkill(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'pimreg0\x00'}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="76000000f800a565a6e5d01ef91259990300"/28, @ANYRES32=0x0, @ANYBLOB="0c009900000400004e0000000c0058001b000000000000000c00580048000000000000000c00580027000000000000000c00580073000000000000000c0058001a000000000000000c00580076000000000000000c0058005e00000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@getneightbl={0x14, 0x42, 0x51b, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0xc004) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @broadcast}]}}}]}, 0x38}}, 0x0) open(&(0x7f0000000740)='./file0\x00', 0x12000, 0x12) sendto$inet6(r6, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) sendto$inet6(r6, 0x0, 0x2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0xaa, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902980002010000000904000001020d0000052406000105240000000d240f5ea1000000000000000006241a4c9c001024078000000000feff000000000600052401000027241300d9f62b8b787a06263152755fc26d0ffd3185cc6f4ec2b3ca3f875b6e356f9c5682cf3d0905810300000000000904010000020d00000904010102020d0000090582020000000300090503020800000100"], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 352.551118ms ago: executing program 3 (id=769): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0x10, 0xd}, {0x4, 0xfff1}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={&(0x7f00000005c0)="dd5b61ffa1e3fbc1301b4486bfe1eeca4ff4da2275d21e201517207043b22c271132fe3c2ffc309234da0f30980dc92a0804bd30e798df1a1dafbfb6c2ff97c1edb09ec7ccdad44a80747e8cf7224b17947f447e14c8ac73859b341a50a870319fafad", &(0x7f0000000480)=""/241, &(0x7f00000007c0)="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", &(0x7f0000000600), 0x3, r1}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="140000001000010000000000e2ffffff0000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000008000b40000000000900010073797a300000000024000480200001800700010072740000140002800800014000000003080002400000000314000000110001"], 0xd4}}, 0x0) getegid() ftruncate(r2, 0xfffffffffffffffc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdir(&(0x7f0000000000)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r5, &(0x7f0000000100)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) unlinkat(r4, &(0x7f0000000140)='./file1\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4) 352.25024ms ago: executing program 0 (id=770): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ff31e5e6b2e717def4ac3dc00500000000000000cd590808", @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf2503000000080002000200000008000200030000005c0008801400078008000500af654c5b080006000a0000004400078008000500ce86e008080006004900000008000500e27a943c0800050077fd067c08000500401e5700080005008c244f1708000600d4000000080006003600000068000c8014000b80080009007807763908000900b29ac54944000b800800090065ac377f080009009e2ff20608000a007fd50000080009007b21d81408000a0082b2000008000a003164000008000a001314000008000a0072df00000c000b80080009005ecf2214"], 0xe8}, 0x1, 0x0, 0x0, 0x40081}, 0x4048800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001700000008000300", @ANYRES16=r0, @ANYBLOB="a3936e76eb3a4a794b7deb195d480030"], 0x64}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="68000000b999ec74", @ANYRES16=r3, @ANYBLOB="00012dbd7000fcdbdf250100000008000500e000000208000400ac1414aa1400020020010000000000000000000000000002080004006401010114000300fc02000000000000000000000000000014000200fc0200"/98], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40844) 132.931935ms ago: executing program 0 (id=771): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 113.287284ms ago: executing program 2 (id=772): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x500) 0s ago: executing program 2 (id=773): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x15, 0x80000, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x100271e, &(0x7f00000197c0)=""/102394, &(0x7f0000000000)=0x93fc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000700, 0xee01, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x90) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_int(r5, &(0x7f0000019740)='cpu.max.burst\x00', 0x2, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000197c0)=ANY=[], 0x3c}}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x3, 0x3, {{0x10, 0x4, 0x0, 0x19, 0x40, 0x64, 0x0, 0xd, 0x29, 0x0, @local, @local, {[@ssrr={0x89, 0x3, 0xb}, @rr={0x7, 0x17, 0xca, [@empty, @remote, @loopback, @private=0xa010100, @multicast2]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xc3, [@multicast1, @loopback]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000019580)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x5, 0x0, 0x65, @local, @empty, 0x7800, 0x8000, 0xffff, 0x8}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000019700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000196c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00082abd7000fcdbdf25020000000c000180060005004e22000034000000000005004e24000008004f00", @ANYRESDEC=r4, @ANYBLOB="060005004e220000060005004e2400f80600010002000000080007007be3f5ff0e5a9ea3146689f467a129cf77c64024aa964fb4cc5824265b805212af6866", @ANYRES32=r9, @ANYBLOB="3800068008000300ffffffff08000700", @ANYRES32=r6, @ANYBLOB="08000300ac1414aa14000400fc000000000000000000000000000000050002000700000008000400f8ffffff0800020002000000"], 0x9c}}, 0x8051) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsmount(r5, 0x0, 0x2) ioctl$HCIINQUIRY(r10, 0x800448f0, &(0x7f0000019780)={0x3, 0x2, '\x00\x00 '}) kernel console output (not intermixed with test programs): v_slave_0 (retrying later): interface not active [ 162.891773][ T6128] netlink: 52 bytes leftover after parsing attributes in process `syz.1.230'. [ 162.899356][ T6094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.932915][ T6094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.958915][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.990558][ T6094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.009961][ T5140] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.228509][ T5140] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.502849][ T5103] Bluetooth: hci5: command tx timeout [ 166.258151][ T6094] hsr_slave_0: entered promiscuous mode [ 166.720781][ T5142] usb 1-1: USB disconnect, device number 7 [ 166.732751][ T5140] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.774759][ T6094] hsr_slave_1: entered promiscuous mode [ 166.787616][ T6094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.813013][ T6094] Cannot create hsr debugfs directory [ 166.813909][ T5140] usb 5-1: string descriptor 0 read error: -71 [ 166.846464][ T6134] 9pnet_fd: Insufficient options for proto=fd [ 166.863114][ T5140] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.872347][ T5140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.090855][ T5140] usb 5-1: can't set config #1, error -71 [ 167.134874][ T5140] usb 5-1: USB disconnect, device number 11 [ 167.389741][ T6094] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.532980][ T5102] Bluetooth: hci5: command tx timeout [ 167.701576][ T6094] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.866443][ T6094] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.952715][ T5140] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 167.967168][ T6094] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.162851][ T5140] usb 3-1: Using ep0 maxpacket: 16 [ 168.192714][ T5140] usb 3-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.261740][ T5140] usb 3-1: config 1 interface 0 has no altsetting 0 [ 168.295323][ T5140] usb 3-1: language id specifier not provided by device, defaulting to English [ 168.311489][ T5140] usb 3-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40 [ 168.322157][ T5140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.341599][ T5140] usb 3-1: Product: 䀕 [ 168.372800][ T5140] usb 3-1: Manufacturer: ﬉㤥󀁱㧘곺Ⴕ歝쵷帞ꘝ擻䴌瓍䨀⑱⃡䙯䲛恱€湥ꛙᤏ仫廔錚鷧뀜얟뻜簃쨘겢簲痛䌀ݝ띓ffi῾囉ꕜ찱銙⛼ಸ礏櫢ꉌ䞺讯㈸㐈驩鞸 [ 168.420099][ T5140] usb 3-1: SerialNumber: 抾辰惿⼆翬뢱Ꜥꚼ姱弔앫콌臏ྺ훎쬹茏긲⪩힊銚贓믇킒ᢉ拠かᴀ₂弰띦婃餉ⷎઆᨻ艹웽뢋⼞槽哓䖯煱憁䱽﷋⓰ퟑｄ⃶ [ 168.468702][ T6094] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 168.529821][ T6094] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.573943][ T6094] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.650385][ T6094] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.971230][ T6164] 9pnet_fd: Insufficient options for proto=fd [ 169.069191][ T6094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.139240][ T6094] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.177842][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.185084][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.232534][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 169.252196][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.259473][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.617345][ T5102] Bluetooth: hci5: command tx timeout [ 169.798500][ T6094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.806990][ T5171] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 169.902026][ T6094] veth0_vlan: entered promiscuous mode [ 169.971167][ T6178] netlink: 52 bytes leftover after parsing attributes in process `syz.0.242'. [ 169.986152][ T6094] veth1_vlan: entered promiscuous mode [ 170.005014][ T5171] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.028922][ T5171] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.058619][ T5171] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.082004][ T5171] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.098549][ T5171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.120114][ T5171] usb 5-1: Product: syz [ 170.132251][ T5171] usb 5-1: Manufacturer: syz [ 170.144363][ T5171] usb 5-1: SerialNumber: syz [ 170.166046][ T5171] usb 5-1: selecting invalid altsetting 1 [ 170.173594][ T6094] veth0_macvtap: entered promiscuous mode [ 170.226022][ T6094] veth1_macvtap: entered promiscuous mode [ 170.314859][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.347374][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.381280][ T5171] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 170.393172][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.412752][ T5171] cdc_ncm 5-1:1.0: bind() failure [ 170.428055][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.446036][ T5171] usb 5-1: USB disconnect, device number 12 [ 170.462053][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.468264][ T5140] usbhid 3-1:1.0: can't add hid device: -71 [ 170.498774][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.545924][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.584145][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.597116][ T5140] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 170.613425][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.634795][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.666635][ T5140] usb 3-1: USB disconnect, device number 7 [ 170.667146][ T6094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.745540][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.782707][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.799906][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.813752][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.830708][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.838633][ T6183] 9pnet_fd: Insufficient options for proto=fd [ 170.841435][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.869865][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.882217][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.907135][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.930731][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.951706][ T6094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.988407][ T6094] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.006532][ T6094] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.042645][ T6094] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.074287][ T6094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.084101][ T5140] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 171.294686][ T5140] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.331049][ T5140] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 171.340093][ T2850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.362277][ T2850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.379727][ T5140] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.446397][ T5297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.453624][ T5140] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.484655][ T5297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.486850][ T5140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.548583][ T5140] usb 3-1: Product: syz [ 171.586877][ T5140] usb 3-1: Manufacturer: syz [ 171.617818][ T5140] usb 3-1: SerialNumber: syz [ 171.706164][ T5102] Bluetooth: hci5: command tx timeout [ 175.445877][ T6204] 9pnet_fd: Insufficient options for proto=fd [ 175.462966][ T5140] usb 3-1: USB disconnect, device number 8 [ 175.642041][ T6214] ======================================================= [ 175.642041][ T6214] WARNING: The mand mount option has been deprecated and [ 175.642041][ T6214] and is ignored by this kernel. Remove the mand [ 175.642041][ T6214] option from the mount to silence this warning. [ 175.642041][ T6214] ======================================================= [ 175.847257][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 175.880259][ T6238] FAULT_INJECTION: forcing a failure. [ 175.880259][ T6238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.899655][ T6236] 9pnet_fd: Insufficient options for proto=fd [ 175.942687][ T6238] CPU: 1 PID: 6238 Comm: syz.2.256 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 175.952749][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 175.962936][ T6238] Call Trace: [ 175.966248][ T6238] [ 175.969210][ T6238] dump_stack_lvl+0x241/0x360 [ 175.973936][ T6238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.979186][ T6238] ? __pfx__printk+0x10/0x10 [ 175.983851][ T6238] ? __pfx_lock_release+0x10/0x10 [ 175.988927][ T6238] should_fail_ex+0x3b0/0x4e0 [ 175.993665][ T6238] _copy_from_user+0x2f/0xe0 [ 175.998421][ T6238] copy_msghdr_from_user+0xae/0x680 [ 176.003690][ T6238] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 176.009572][ T6238] __sys_sendmsg+0x23d/0x3a0 [ 176.014217][ T6238] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.019381][ T6238] ? vfs_write+0x7c4/0xc90 [ 176.023907][ T6238] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.030284][ T6238] ? do_syscall_64+0x100/0x230 [ 176.035103][ T6238] ? do_syscall_64+0xb6/0x230 [ 176.039837][ T6238] do_syscall_64+0xf3/0x230 [ 176.044392][ T6238] ? clear_bhb_loop+0x35/0x90 [ 176.049125][ T6238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.055064][ T6238] RIP: 0033:0x7f49bdb75bd9 [ 176.059514][ T6238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.079252][ T6238] RSP: 002b:00007f49be883048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.087731][ T6238] RAX: ffffffffffffffda RBX: 00007f49bdd03f60 RCX: 00007f49bdb75bd9 [ 176.095742][ T6238] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 176.103751][ T6238] RBP: 00007f49be8830a0 R08: 0000000000000000 R09: 0000000000000000 [ 176.111753][ T6238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.119776][ T6238] R13: 000000000000000b R14: 00007f49bdd03f60 R15: 00007ffddfe2c448 [ 176.127840][ T6238] [ 176.396377][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 176.432744][ T5139] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 176.596955][ T5297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.614988][ T5144] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 176.632411][ T5139] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.654269][ T5139] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.684010][ T5139] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.706600][ T5139] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.730936][ T5139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.761786][ T5139] usb 2-1: Product: syz [ 176.771922][ T5139] usb 2-1: Manufacturer: syz [ 176.780756][ T5297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.802710][ T5139] usb 2-1: SerialNumber: syz [ 176.813050][ T5139] usb 2-1: selecting invalid altsetting 1 [ 176.823967][ T5144] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 176.863869][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.923984][ T5144] usb 3-1: config 0 descriptor?? [ 176.932286][ T5297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.024561][ T5139] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 177.032891][ T5139] cdc_ncm 2-1:1.0: bind() failure [ 177.070032][ T5139] usb 2-1: USB disconnect, device number 3 [ 177.096328][ T5297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.358852][ T5144] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 177.953459][ T5297] bridge_slave_1: left allmulticast mode [ 177.986055][ T5297] bridge_slave_1: left promiscuous mode [ 177.991911][ T5297] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.076834][ T5297] bridge_slave_0: left allmulticast mode [ 178.121630][ T5297] bridge_slave_0: left promiscuous mode [ 178.147557][ T5297] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.171865][ T5144] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 178.192658][ T5144] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 178.212028][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.228516][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.237729][ T5103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.250683][ T6265] fuse: Unknown parameter 'ϓyT~CJ:(̓n!?\#X0x0000000000000008' [ 178.252966][ T5103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.268164][ T5103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 178.276375][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.454322][ T6269] 9pnet_fd: Insufficient options for proto=fd [ 179.325486][ T5297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.635187][ T5297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.663872][ T5144] usb 3-1: USB disconnect, device number 9 [ 179.710977][ T5297] bond0 (unregistering): Released all slaves [ 179.742965][ T6279] 9pnet_fd: Insufficient options for proto=fd [ 179.762244][ T6262] netlink: 'syz.1.264': attribute type 10 has an invalid length. [ 179.770246][ T6262] netlink: 40 bytes leftover after parsing attributes in process `syz.1.264'. [ 179.781151][ T6262] hsr0: entered promiscuous mode [ 179.787061][ T6262] bridge0: port 3(hsr0) entered blocking state [ 179.795585][ T6262] bridge0: port 3(hsr0) entered disabled state [ 179.802117][ T6262] hsr0: entered allmulticast mode [ 179.808489][ T6262] hsr_slave_0: entered allmulticast mode [ 179.814904][ T6262] hsr_slave_1: entered allmulticast mode [ 179.825063][ T6262] bridge0: port 3(hsr0) entered blocking state [ 179.832667][ T6262] bridge0: port 3(hsr0) entered forwarding state [ 180.344095][ T5102] Bluetooth: hci1: command tx timeout [ 180.490299][ T6296] 9pnet_fd: Insufficient options for proto=fd [ 180.563859][ T5297] hsr_slave_0: left promiscuous mode [ 180.585622][ T5297] hsr_slave_1: left promiscuous mode [ 180.607762][ T5297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.627388][ T6297] Bluetooth: MGMT ver 1.22 [ 180.645000][ T5297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.680840][ T5297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.688452][ T5297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.715112][ T5297] veth1_macvtap: left promiscuous mode [ 180.720833][ T5297] veth0_macvtap: left promiscuous mode [ 180.726620][ T5297] veth1_vlan: left promiscuous mode [ 180.732846][ T5297] veth0_vlan: left promiscuous mode [ 181.019088][ T5177] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 181.216018][ T5177] usb 3-1: Using ep0 maxpacket: 32 [ 181.238408][ T5177] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 181.254162][ T5177] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 181.269012][ T5177] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.279460][ T5177] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 181.298854][ T5177] usb 3-1: config 1 has no interface number 0 [ 181.307110][ T5177] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 181.352710][ T5177] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 181.380633][ T5177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.419357][ T5177] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 181.554366][ T6310] 9pnet_fd: Insufficient options for proto=fd [ 181.624735][ T5177] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 181.648790][ T5177] snd_usb_pod 3-1:1.1: invalid control EP [ 181.672827][ T5177] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 181.702087][ T5177] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 181.732139][ T5177] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 182.413793][ T5102] Bluetooth: hci1: command tx timeout [ 183.396070][ T5297] team0 (unregistering): Port device team_slave_1 removed [ 183.475818][ T5297] team0 (unregistering): Port device team_slave_0 removed [ 184.062711][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 184.244934][ T45] usb 4-1: device descriptor read/64, error -71 [ 184.299952][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 184.493213][ T5102] Bluetooth: hci1: command tx timeout [ 184.543092][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 184.569321][ T9] usb 3-1: USB disconnect, device number 10 [ 184.580232][ T6261] chnl_net:caif_netlink_parms(): no params data found [ 184.734005][ T45] usb 4-1: device descriptor read/64, error -71 [ 184.820823][ T5140] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 184.871238][ T45] usb usb4-port1: attempt power cycle [ 184.912819][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.920034][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.940867][ T6261] bridge_slave_0: entered allmulticast mode [ 184.960855][ T5102] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 184.973649][ T6261] bridge_slave_0: entered promiscuous mode [ 184.989269][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.017201][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.024697][ T5140] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.044541][ T5140] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 185.053703][ T6261] bridge_slave_1: entered allmulticast mode [ 185.053982][ T5140] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.061379][ T6261] bridge_slave_1: entered promiscuous mode [ 185.079529][ T5140] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.092777][ T5140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.121520][ T5140] usb 2-1: Product: syz [ 185.125814][ T5140] usb 2-1: Manufacturer: syz [ 185.130444][ T5140] usb 2-1: SerialNumber: syz [ 185.299892][ T6261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.327986][ T6261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.337533][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 185.373730][ T45] usb 4-1: device descriptor read/8, error -71 [ 187.870602][ T5103] Bluetooth: hci3: command tx timeout [ 187.951731][ T5102] Bluetooth: hci1: command tx timeout [ 187.995234][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 188.158344][ T6261] team0: Port device team_slave_0 added [ 188.204955][ T6261] team0: Port device team_slave_1 added [ 188.286575][ T45] usb 4-1: device not accepting address 7, error -71 [ 188.325773][ T45] usb usb4-port1: unable to enumerate USB device [ 188.471609][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.506825][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.612291][ T6261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.740655][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.800517][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.346303][ T6261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.698115][ T5140] usb 2-1: USB disconnect, device number 4 [ 189.928434][ T6261] hsr_slave_0: entered promiscuous mode [ 189.933453][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.292'. [ 190.192833][ T6261] hsr_slave_1: entered promiscuous mode [ 191.904976][ T6382] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 192.174418][ T6386] FAULT_INJECTION: forcing a failure. [ 192.174418][ T6386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.212791][ T5144] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 192.220164][ T6386] CPU: 0 PID: 6386 Comm: syz.1.298 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 192.230315][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 192.240414][ T6386] Call Trace: [ 192.243727][ T6386] [ 192.246687][ T6386] dump_stack_lvl+0x241/0x360 [ 192.251505][ T6386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.256753][ T6386] ? __pfx__printk+0x10/0x10 [ 192.261394][ T6386] ? __pfx_lock_release+0x10/0x10 [ 192.266467][ T6386] ? __lock_acquire+0x1346/0x1fd0 [ 192.271579][ T6386] should_fail_ex+0x3b0/0x4e0 [ 192.276309][ T6386] _copy_from_user+0x2f/0xe0 [ 192.280959][ T6386] kstrtouint_from_user+0xc6/0x190 [ 192.286139][ T6386] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 192.291952][ T6386] ? __pfx_lock_acquire+0x10/0x10 [ 192.297021][ T6386] proc_fail_nth_write+0xaa/0x2d0 [ 192.302101][ T6386] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 192.308044][ T6386] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 192.313737][ T6386] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 192.319455][ T6386] vfs_write+0x2a2/0xc90 [ 192.323752][ T6386] ? __pfx_vfs_write+0x10/0x10 [ 192.328577][ T6386] ? __fget_files+0x29/0x470 [ 192.329287][ T6261] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.333186][ T6386] ? __fget_files+0x3f6/0x470 [ 192.333227][ T6386] ksys_write+0x1a0/0x2c0 [ 192.333267][ T6386] ? __pfx_ksys_write+0x10/0x10 [ 192.333301][ T6386] ? do_syscall_64+0x100/0x230 [ 192.333339][ T6386] ? do_syscall_64+0xb6/0x230 [ 192.333374][ T6386] do_syscall_64+0xf3/0x230 [ 192.333408][ T6386] ? clear_bhb_loop+0x35/0x90 [ 192.333445][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.333477][ T6386] RIP: 0033:0x7f9b4af7475f [ 192.333500][ T6386] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 192.333519][ T6386] RSP: 002b:00007f9b4bd7b040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 192.333545][ T6386] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b4af7475f [ 192.333562][ T6386] RDX: 0000000000000001 RSI: 00007f9b4bd7b0b0 RDI: 0000000000000003 [ 192.333577][ T6386] RBP: 00007f9b4bd7b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 192.333592][ T6386] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 192.333607][ T6386] R13: 000000000000006e R14: 00007f9b4b104038 R15: 00007ffd476f6918 [ 192.333642][ T6386] [ 192.495396][ T5144] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 192.504836][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.509050][ T6261] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.537975][ T6261] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.577519][ T6261] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.584776][ T5144] usb 4-1: config 0 descriptor?? [ 192.601689][ T5144] cp210x 4-1:0.0: cp210x converter detected [ 192.751067][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 192.919710][ T6261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.015367][ T5144] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 193.037163][ T6261] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.071742][ T5144] usb 4-1: cp210x converter now attached to ttyUSB0 [ 193.089830][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.097066][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.132288][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.139512][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.288861][ T45] usb 4-1: USB disconnect, device number 8 [ 193.313212][ T5177] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 193.491510][ T45] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 193.506046][ T6261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.543074][ T45] cp210x 4-1:0.0: device disconnected [ 193.695943][ T5177] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.710444][ T5177] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.728261][ T5177] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.756673][ T5177] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.776448][ T5177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.813165][ T5177] usb 3-1: Product: syz [ 193.817413][ T5177] usb 3-1: Manufacturer: syz [ 193.822052][ T5177] usb 3-1: SerialNumber: syz [ 193.853176][ T5177] usb 3-1: selecting invalid altsetting 1 [ 193.888234][ T6261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.152349][ T6261] veth0_vlan: entered promiscuous mode [ 194.323324][ T6261] veth1_vlan: entered promiscuous mode [ 194.501738][ T5177] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 194.566057][ T5177] cdc_ncm 3-1:1.0: bind() failure [ 194.674654][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.681205][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.755387][ T5177] usb 3-1: USB disconnect, device number 11 [ 194.835316][ T6261] veth0_macvtap: entered promiscuous mode [ 194.874216][ T6261] veth1_macvtap: entered promiscuous mode [ 194.969245][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.007901][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.048565][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.100270][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.110543][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.123456][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.133873][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.144525][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.154455][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.170722][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.203787][ T6261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.231865][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.249305][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.261025][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.410266][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.533678][ T5142] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 195.578806][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.717587][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.846626][ T5142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.915919][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.990926][ T5142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 196.095441][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.122632][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.126294][ T5142] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.162079][ T5142] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.171412][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.171733][ T5142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.198398][ T5142] usb 2-1: Product: syz [ 196.202988][ T5142] usb 2-1: Manufacturer: syz [ 196.207638][ T5142] usb 2-1: SerialNumber: syz [ 196.232436][ T6261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.246804][ T6261] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.266869][ T6261] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.279932][ T6261] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.298093][ T6261] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.552717][ T5266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.562634][ T5266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.275026][ T5142] usb 2-1: USB disconnect, device number 5 [ 200.454766][ T2850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.476152][ T2850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.546347][ T6447] capability: warning: `syz.3.316' uses deprecated v2 capabilities in a way that may be insecure [ 200.710724][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 201.284224][ T5140] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 201.561053][ T5140] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.604338][ T5140] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.631747][ T5140] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.851192][ T5140] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.881242][ T5140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.940543][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 201.950095][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.322'. [ 202.203092][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 202.209656][ T5103] Bluetooth: hci0: command tx timeout [ 202.718716][ T5140] usb 4-1: Product: syz [ 202.725523][ T5140] usb 4-1: Manufacturer: syz [ 202.730174][ T5140] usb 4-1: SerialNumber: syz [ 202.751001][ T5140] usb 4-1: selecting invalid altsetting 1 [ 203.163061][ T5140] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 203.169196][ T5140] cdc_ncm 4-1:1.0: bind() failure [ 203.255547][ T5140] usb 4-1: USB disconnect, device number 9 [ 203.591407][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 203.648185][ T6486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.833579][ T6503] netlink: 44 bytes leftover after parsing attributes in process `syz.0.328'. [ 204.143090][ T5140] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 204.201908][ T5142] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 204.362897][ T5142] usb 1-1: device descriptor read/64, error -71 [ 204.374030][ T5140] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.400271][ T5140] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.417670][ T5140] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.446551][ T5140] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.459453][ T5140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.469857][ T5140] usb 2-1: Product: syz [ 204.475186][ T5140] usb 2-1: Manufacturer: syz [ 204.482083][ T5140] usb 2-1: SerialNumber: syz [ 204.509493][ T5140] usb 2-1: selecting invalid altsetting 1 [ 204.561391][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.582291][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.597843][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.612116][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.621296][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.631462][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.642745][ T5142] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 204.647810][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.660663][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.678502][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.691069][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.707228][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.718229][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.720894][ T5140] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 204.730913][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.751996][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.752518][ T5140] cdc_ncm 2-1:1.0: bind() failure [ 204.796472][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.832766][ T5142] usb 1-1: device descriptor read/64, error -71 [ 204.841393][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.845787][ T5140] usb 2-1: USB disconnect, device number 6 [ 204.858785][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.885647][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.914311][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.956821][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.963248][ T5142] usb usb1-port1: attempt power cycle [ 204.989143][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 205.020464][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 205.035478][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 205.060494][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 205.076395][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 205.091945][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 205.131424][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 205.165651][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 205.182758][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 205.200631][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 205.221009][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 205.241747][ T45] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 205.274814][ T45] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 205.423579][ T5142] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 205.473292][ T5142] usb 1-1: device descriptor read/8, error -71 [ 205.796600][ T5142] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 205.856460][ T5142] usb 1-1: device descriptor read/8, error -71 [ 206.003129][ T5142] usb usb1-port1: unable to enumerate USB device [ 206.432837][ T6539] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 206.795854][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 206.855476][ T53] Bluetooth: hci6: sending frame failed (-49) [ 206.863528][ T5102] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 206.872677][ T5177] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 206.898793][ T6536] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 207.041036][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 207.056285][ T45] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 207.072835][ T5177] usb 2-1: Using ep0 maxpacket: 16 [ 207.086419][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.108696][ T5177] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 207.139865][ T45] usb 3-1: config 0 descriptor?? [ 207.147398][ T5177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.173376][ T45] usb 3-1: selecting invalid altsetting 1 [ 207.182638][ T5177] usb 2-1: Product: syz [ 207.186850][ T5177] usb 2-1: Manufacturer: syz [ 207.219724][ T5177] usb 2-1: SerialNumber: syz [ 207.259978][ T5177] usb 2-1: config 0 descriptor?? [ 207.271190][ T45] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 207.897742][ T5177] usb 2-1: no audio or video endpoints found [ 207.905897][ T5177] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 207.916033][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.926719][ T5177] usb 2-1: USB disconnect, device number 7 [ 207.947512][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.793043][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 209.026413][ T29] audit: type=1326 audit(1720576700.499:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6564 comm="syz.3.346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc40975bd9 code=0x0 [ 210.204528][ T5177] usb 3-1: USB disconnect, device number 12 [ 210.222690][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 210.434253][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.452933][ T6579] FAULT_INJECTION: forcing a failure. [ 210.452933][ T6579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.464956][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.482430][ T6579] CPU: 0 PID: 6579 Comm: syz.2.350 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 210.492552][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 210.502650][ T6579] Call Trace: [ 210.505961][ T6579] [ 210.508800][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.508904][ T6579] dump_stack_lvl+0x241/0x360 [ 210.523319][ T6579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.528532][ T6579] ? __pfx__printk+0x10/0x10 [ 210.533157][ T6579] ? __pfx_lock_release+0x10/0x10 [ 210.538192][ T6579] should_fail_ex+0x3b0/0x4e0 [ 210.542886][ T6579] _copy_from_user+0x2f/0xe0 [ 210.547481][ T6579] core_sys_select+0x639/0x910 [ 210.552253][ T6579] ? __pfx_core_sys_select+0x10/0x10 [ 210.557545][ T6579] ? lockdep_hardirqs_on+0x99/0x150 [ 210.562782][ T6579] ? __pfx_set_user_sigmask+0x10/0x10 [ 210.568177][ T6579] ? __fget_files+0x3f6/0x470 [ 210.572881][ T6579] __se_sys_pselect6+0x319/0x3f0 [ 210.577852][ T6579] ? __pfx___se_sys_pselect6+0x10/0x10 [ 210.583417][ T6579] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.589754][ T6579] ? do_syscall_64+0x100/0x230 [ 210.594548][ T6579] ? __x64_sys_pselect6+0x21/0xf0 [ 210.599590][ T6579] do_syscall_64+0xf3/0x230 [ 210.604111][ T6579] ? clear_bhb_loop+0x35/0x90 [ 210.608817][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.614722][ T6579] RIP: 0033:0x7f49bdb75bd9 [ 210.619139][ T6579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.638788][ T6579] RSP: 002b:00007f49be883048 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 210.647223][ T6579] RAX: ffffffffffffffda RBX: 00007f49bdd03f60 RCX: 00007f49bdb75bd9 [ 210.655203][ T6579] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 210.663179][ T6579] RBP: 00007f49be8830a0 R08: 0000000020000300 R09: 0000000000000000 [ 210.671174][ T6579] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 210.679154][ T6579] R13: 000000000000000b R14: 00007f49bdd03f60 R15: 00007ffddfe2c448 [ 210.687147][ T6579] [ 210.755842][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.790659][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.815158][ T45] usb 2-1: Product: syz [ 210.819468][ T45] usb 2-1: Manufacturer: syz [ 210.835725][ T45] usb 2-1: SerialNumber: syz [ 210.857089][ T45] usb 2-1: selecting invalid altsetting 1 [ 210.913943][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 210.929832][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 211.014990][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 211.053062][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'. [ 211.077648][ T45] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 211.090658][ T6589] netlink: 'syz.0.353': attribute type 7 has an invalid length. [ 211.102760][ T45] cdc_ncm 2-1:1.0: bind() failure [ 211.146899][ T45] usb 2-1: USB disconnect, device number 8 [ 211.175867][ T6589] vxlan0: entered promiscuous mode [ 211.333264][ T6599] netlink: 'syz.3.356': attribute type 29 has an invalid length. [ 211.348681][ T6599] netlink: 'syz.3.356': attribute type 29 has an invalid length. [ 211.370394][ T6595] netlink: 596 bytes leftover after parsing attributes in process `syz.3.356'. [ 213.024511][ T6612] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.360'. [ 213.362881][ T6612] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 213.832407][ T6621] FAULT_INJECTION: forcing a failure. [ 213.832407][ T6621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.845816][ T6621] CPU: 1 PID: 6621 Comm: syz.3.363 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 213.855849][ T6621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 213.865913][ T6621] Call Trace: [ 213.869192][ T6621] [ 213.872129][ T6621] dump_stack_lvl+0x241/0x360 [ 213.876847][ T6621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.882063][ T6621] ? __pfx__printk+0x10/0x10 [ 213.886680][ T6621] ? __pfx_lock_release+0x10/0x10 [ 213.891710][ T6621] should_fail_ex+0x3b0/0x4e0 [ 213.896402][ T6621] _copy_from_user+0x2f/0xe0 [ 213.900997][ T6621] snd_ctl_ioctl+0x287/0x1600 [ 213.905692][ T6621] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 213.910808][ T6621] ? kasan_save_track+0x51/0x80 [ 213.915674][ T6621] ? kasan_save_track+0x3f/0x80 [ 213.920578][ T6621] ? kasan_save_free_info+0x40/0x50 [ 213.925811][ T6621] ? poison_slab_object+0xe0/0x150 [ 213.930960][ T6621] ? __kasan_slab_free+0x37/0x60 [ 213.935908][ T6621] ? kfree+0x149/0x360 [ 213.939991][ T6621] ? tomoyo_path_number_perm+0x68d/0x880 [ 213.945631][ T6621] ? security_file_ioctl+0x75/0xb0 [ 213.950742][ T6621] ? __se_sys_ioctl+0x47/0x170 [ 213.955528][ T6621] ? do_syscall_64+0xf3/0x230 [ 213.960244][ T6621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.966350][ T6621] ? do_vfs_ioctl+0xf0e/0x2e50 [ 213.971135][ T6621] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 213.976191][ T6621] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 213.982528][ T6621] ? tomoyo_path_number_perm+0x208/0x880 [ 213.988193][ T6621] ? __pfx_lock_release+0x10/0x10 [ 213.993235][ T6621] ? kfree+0x149/0x360 [ 213.997324][ T6621] ? tomoyo_path_number_perm+0x71a/0x880 [ 214.002978][ T6621] ? tomoyo_path_number_perm+0x208/0x880 [ 214.008622][ T6621] ? smack_log+0x123/0x540 [ 214.013047][ T6621] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.019049][ T6621] ? __pfx_smack_log+0x10/0x10 [ 214.023843][ T6621] ? smk_access+0x4ab/0x4e0 [ 214.028362][ T6621] ? smk_tskacc+0x300/0x370 [ 214.032879][ T6621] ? smack_file_ioctl+0x2fa/0x3a0 [ 214.037937][ T6621] ? __pfx_smack_file_ioctl+0x10/0x10 [ 214.043351][ T6621] ? bpf_lsm_file_ioctl+0x9/0x10 [ 214.048309][ T6621] ? security_file_ioctl+0x87/0xb0 [ 214.053437][ T6621] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 214.058574][ T6621] __se_sys_ioctl+0xfc/0x170 [ 214.063208][ T6621] do_syscall_64+0xf3/0x230 [ 214.067747][ T6621] ? clear_bhb_loop+0x35/0x90 [ 214.072448][ T6621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.078356][ T6621] RIP: 0033:0x7fcc40975bd9 [ 214.082778][ T6621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.102396][ T6621] RSP: 002b:00007fcc416b2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.110832][ T6621] RAX: ffffffffffffffda RBX: 00007fcc40b03f60 RCX: 00007fcc40975bd9 [ 214.118838][ T6621] RDX: 0000000020000000 RSI: 00000000c0505510 RDI: 0000000000000003 [ 214.126817][ T6621] RBP: 00007fcc416b20a0 R08: 0000000000000000 R09: 0000000000000000 [ 214.134803][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.142782][ T6621] R13: 000000000000000b R14: 00007fcc40b03f60 R15: 00007ffed00d0cf8 [ 214.150777][ T6621] [ 214.153819][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.401399][ T29] audit: type=1800 audit(1720576705.869:141): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.360" name="/" dev="fuse" ino=1 res=0 errno=0 [ 214.913320][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 216.602867][ T6658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.374'. [ 217.063590][ T6654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.443011][ T29] audit: type=1326 audit(1720576709.909:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49bdb75bd9 code=0x0 [ 220.011584][ T6694] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.385'. [ 220.067925][ T6694] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 220.587842][ T6680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.896572][ T6720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.123735][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'. [ 226.696403][ T6771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.403'. [ 227.370664][ T6779] vti0: entered promiscuous mode [ 227.583714][ T6793] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 227.682917][ T1148] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 227.873562][ T1148] usb 3-1: Using ep0 maxpacket: 32 [ 227.887694][ T1148] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.908423][ T1148] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.918917][ T1148] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.937658][ T1148] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 227.947828][ T5144] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 228.033094][ T1148] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 228.052048][ T1148] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.079059][ T1148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.097014][ T1148] usb 3-1: Product: syz [ 228.102698][ T1148] usb 3-1: Manufacturer: syz [ 228.108578][ T1148] usb 3-1: SerialNumber: syz [ 228.222829][ T5144] usb 4-1: Using ep0 maxpacket: 32 [ 228.237672][ T5144] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 228.254669][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.276416][ T5144] usb 4-1: config 0 descriptor?? [ 228.302788][ T5144] usb 4-1: selecting invalid altsetting 1 [ 228.310631][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 228.344494][ T5144] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 228.400400][ T1148] cdc_ncm 3-1:1.0: bind() failure [ 228.431144][ T1148] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 228.464109][ T1148] cdc_ncm 3-1:1.1: bind() failure [ 228.511877][ T1148] usb 3-1: USB disconnect, device number 13 [ 229.986584][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 230.012712][ T1148] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 230.167487][ T6793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.188289][ T6793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.212659][ T1148] usb 1-1: Using ep0 maxpacket: 16 [ 230.233866][ T1148] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 230.308741][ T1148] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57 [ 230.360667][ T1148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.374839][ T1148] usb 1-1: Product: syz [ 230.379076][ T1148] usb 1-1: Manufacturer: syz [ 230.387360][ T1148] usb 1-1: SerialNumber: syz [ 230.395212][ T1148] usb 1-1: config 0 descriptor?? [ 230.405348][ T6813] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 230.424191][ T1148] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 230.522961][ T5144] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 230.737090][ T5144] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.765721][ T5144] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.852638][ T5144] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.892050][ T5144] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.923511][ T5144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.970693][ T5144] usb 3-1: Product: syz [ 230.991673][ T5144] usb 3-1: Manufacturer: syz [ 231.016862][ T5144] usb 3-1: SerialNumber: syz [ 231.096644][ T5144] usb 3-1: selecting invalid altsetting 1 [ 231.295542][ T5144] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 231.313451][ T5144] cdc_ncm 3-1:1.0: bind() failure [ 231.351204][ T5144] usb 3-1: USB disconnect, device number 14 [ 231.537924][ T6825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.418'. [ 231.691592][ T5143] usb 4-1: USB disconnect, device number 10 [ 232.643062][ T5143] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 232.684596][ T5142] usb 1-1: USB disconnect, device number 12 [ 232.876161][ T5143] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.925863][ T5143] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.946473][ T5143] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.971686][ T5143] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.988937][ T5143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.011938][ T5143] usb 4-1: Product: syz [ 233.031430][ T5143] usb 4-1: Manufacturer: syz [ 233.032735][ T6850] FAULT_INJECTION: forcing a failure. [ 233.032735][ T6850] name failslab, interval 1, probability 0, space 0, times 0 [ 233.057869][ T5143] usb 4-1: SerialNumber: syz [ 233.061817][ T6850] CPU: 1 PID: 6850 Comm: syz.0.425 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 233.072711][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 233.077121][ T5143] usb 4-1: selecting invalid altsetting 1 [ 233.082774][ T6850] Call Trace: [ 233.082791][ T6850] [ 233.082802][ T6850] dump_stack_lvl+0x241/0x360 [ 233.082846][ T6850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.082880][ T6850] ? __pfx__printk+0x10/0x10 [ 233.109364][ T6850] ? __pfx___might_resched+0x10/0x10 [ 233.114698][ T6850] ? vsnprintf+0x1ccd/0x1da0 [ 233.119335][ T6850] should_fail_ex+0x3b0/0x4e0 [ 233.124062][ T6850] should_failslab+0x9/0x20 [ 233.128593][ T6850] __kmalloc_node_noprof+0xdf/0x440 [ 233.133831][ T6850] ? kvmalloc_node_noprof+0x72/0x190 [ 233.139180][ T6850] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 233.144771][ T6850] kvmalloc_node_noprof+0x72/0x190 [ 233.149927][ T6850] alloc_netdev_mqs+0x9d/0xf80 [ 233.154729][ T6850] ? bpf_lsm_capable+0x9/0x10 [ 233.159439][ T6850] ? security_capable+0x90/0xb0 [ 233.164324][ T6850] rtnl_create_link+0x2f9/0xc20 [ 233.169222][ T6850] rtnl_newlink+0x1421/0x20a0 [ 233.173940][ T6850] ? __kernel_text_address+0xd/0x40 [ 233.179183][ T6850] ? rtnl_newlink+0xae1/0x20a0 [ 233.183993][ T6850] ? __pfx_rtnl_newlink+0x10/0x10 [ 233.189076][ T6850] ? __pfx___mutex_trylock_common+0x10/0x10 [ 233.195096][ T6850] ? rcu_is_watching+0x15/0xb0 [ 233.199886][ T6850] ? trace_contention_end+0x3c/0x120 [ 233.205207][ T6850] ? __mutex_lock+0x2ef/0xd70 [ 233.209919][ T6850] ? __pfx_lock_release+0x10/0x10 [ 233.214990][ T6850] ? __pfx_rtnl_newlink+0x10/0x10 [ 233.220053][ T6850] rtnetlink_rcv_msg+0x89b/0x1180 [ 233.225121][ T6850] ? rtnetlink_rcv_msg+0x208/0x1180 [ 233.230344][ T6850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.235838][ T6850] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 233.241837][ T6850] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 233.248209][ T6850] ? __local_bh_enable_ip+0x168/0x200 [ 233.253613][ T6850] ? lockdep_hardirqs_on+0x99/0x150 [ 233.258878][ T6850] ? __local_bh_enable_ip+0x168/0x200 [ 233.264365][ T6850] ? dev_hard_start_xmit+0x773/0x7e0 [ 233.269682][ T6850] ? __dev_queue_xmit+0x2d2/0x3d30 [ 233.274821][ T6850] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 233.280583][ T6850] ? __dev_queue_xmit+0x2d2/0x3d30 [ 233.285746][ T6850] ? __dev_queue_xmit+0x16c9/0x3d30 [ 233.291005][ T6850] ? __dev_queue_xmit+0x2d2/0x3d30 [ 233.291422][ T5143] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 233.296150][ T6850] ? ref_tracker_free+0x643/0x7e0 [ 233.296196][ T6850] netlink_rcv_skb+0x1e3/0x430 [ 233.296231][ T6850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.296270][ T6850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.296329][ T6850] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.296365][ T6850] netlink_unicast+0x7ea/0x980 [ 233.296405][ T6850] ? __pfx_netlink_unicast+0x10/0x10 [ 233.296432][ T6850] ? __virt_addr_valid+0x183/0x520 [ 233.296469][ T6850] ? __check_object_size+0x49c/0x900 [ 233.296497][ T6850] ? bpf_lsm_netlink_send+0x9/0x10 [ 233.296534][ T6850] netlink_sendmsg+0x8db/0xcb0 [ 233.296581][ T6850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.296616][ T6850] ? __import_iovec+0x536/0x820 [ 233.313595][ T5143] cdc_ncm 4-1:1.0: bind() failure [ 233.317828][ T6850] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 233.330682][ T5143] usb 4-1: USB disconnect, device number 11 [ 233.333052][ T6850] ? security_socket_sendmsg+0x87/0xb0 [ 233.333097][ T6850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.333129][ T6850] __sock_sendmsg+0x221/0x270 [ 233.400372][ T6850] ____sys_sendmsg+0x525/0x7d0 [ 233.405158][ T6850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.410469][ T6850] ? rcu_read_lock_any_held+0xb7/0x160 [ 233.415994][ T6850] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 233.421902][ T6850] __sys_sendmsg+0x2b0/0x3a0 [ 233.426504][ T6850] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.431623][ T6850] ? vfs_write+0x7c4/0xc90 [ 233.436058][ T6850] ? do_sys_openat2+0x17a/0x1d0 [ 233.440938][ T6850] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 233.447273][ T6850] ? do_syscall_64+0x100/0x230 [ 233.452047][ T6850] ? do_syscall_64+0xb6/0x230 [ 233.456762][ T6850] do_syscall_64+0xf3/0x230 [ 233.461277][ T6850] ? clear_bhb_loop+0x35/0x90 [ 233.465967][ T6850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.471867][ T6850] RIP: 0033:0x7f855c975bd9 [ 233.476285][ T6850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.495987][ T6850] RSP: 002b:00007f855d69b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.504403][ T6850] RAX: ffffffffffffffda RBX: 00007f855cb03f60 RCX: 00007f855c975bd9 [ 233.512388][ T6850] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 233.520384][ T6850] RBP: 00007f855d69b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 233.528359][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.536335][ T6850] R13: 000000000000000b R14: 00007f855cb03f60 R15: 00007ffc3362a758 [ 233.544328][ T6850] [ 233.878738][ T6857] vti0: entered promiscuous mode [ 234.242917][ T1148] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 234.351769][ T6871] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 234.452814][ T1148] usb 2-1: Using ep0 maxpacket: 32 [ 234.470552][ T1148] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.545931][ T1148] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.630435][ T1148] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.693772][ T5144] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 234.906171][ T1148] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 234.934641][ T1148] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 234.951611][ T1148] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.967902][ T1148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.192621][ T1148] usb 2-1: Product: syz [ 236.196849][ T1148] usb 2-1: Manufacturer: syz [ 236.201465][ T1148] usb 2-1: SerialNumber: syz [ 236.305139][ T5144] usb 1-1: Using ep0 maxpacket: 32 [ 236.339744][ T5144] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 236.354219][ T5144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.365574][ T5144] usb 1-1: config 0 descriptor?? [ 236.390427][ T5144] usb 1-1: selecting invalid altsetting 1 [ 236.448913][ T1148] cdc_ncm 2-1:1.0: bind() failure [ 236.451281][ T6881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.432'. [ 236.464302][ T5144] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 236.478181][ T1148] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 236.500572][ T1148] cdc_ncm 2-1:1.1: bind() failure [ 236.521240][ T1148] usb 2-1: USB disconnect, device number 9 [ 236.598753][ T6882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.434'. [ 236.702386][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 236.866854][ T6871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.888164][ T6871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.502742][ T5143] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 237.745602][ T5143] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.749927][ T6887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.775722][ T5143] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.820720][ T5143] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.857624][ T5143] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.871737][ T5143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.898002][ T5143] usb 4-1: Product: syz [ 237.920107][ T5143] usb 4-1: Manufacturer: syz [ 237.943946][ T5143] usb 4-1: SerialNumber: syz [ 237.986867][ T5143] usb 4-1: selecting invalid altsetting 1 [ 238.264976][ T9] usb 1-1: USB disconnect, device number 13 [ 238.297548][ T5143] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 238.309892][ T5143] cdc_ncm 4-1:1.0: bind() failure [ 238.330230][ T5143] usb 4-1: USB disconnect, device number 12 [ 239.669995][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.445'. [ 239.864157][ T6927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.447'. [ 242.601042][ T6953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.637097][ T6974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.459'. [ 242.735205][ T5102] Bluetooth: hci2: command 0x0406 tx timeout [ 242.780708][ T6974] blktrace: Concurrent blktraces are not allowed on loop9 [ 245.751501][ T29] audit: type=1326 audit(1720576737.219:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.4.470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fe4eb375bd9 code=0x0 [ 246.218133][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 246.227293][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 248.968131][ T7069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.206607][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 250.263014][ T53] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 250.271707][ T53] Bluetooth: hci1: Injecting HCI hardware error event [ 250.280693][ T53] Bluetooth: hci1: hardware error 0x00 [ 250.443845][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.470740][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.494854][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.507540][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.552642][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.632359][ T45] usb 4-1: Product: syz [ 250.640134][ T45] usb 4-1: Manufacturer: syz [ 250.661224][ T45] usb 4-1: SerialNumber: syz [ 250.728339][ T45] usb 4-1: selecting invalid altsetting 1 [ 250.932198][ T45] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 250.962735][ T45] cdc_ncm 4-1:1.0: bind() failure [ 250.994477][ T45] usb 4-1: USB disconnect, device number 13 [ 251.423979][ T7132] netlink: 188 bytes leftover after parsing attributes in process `syz.0.500'. [ 251.457649][ T7132] netlink: 'syz.0.500': attribute type 1 has an invalid length. [ 252.072686][ T5142] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 252.342975][ T53] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 252.426253][ T7151] netlink: 596 bytes leftover after parsing attributes in process `syz.0.506'. [ 252.495029][ T5142] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.699604][ T5142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 252.708801][ T5142] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.758830][ T5142] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.883753][ T5142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.930262][ T5142] usb 2-1: Product: syz [ 252.955681][ T5142] usb 2-1: Manufacturer: syz [ 252.990037][ T5142] usb 2-1: SerialNumber: syz [ 253.467768][ T7164] random: crng reseeded on system resumption [ 256.064203][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.120168][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.258882][ T5142] usb 2-1: USB disconnect, device number 10 [ 258.132753][ T5142] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 258.352356][ T5142] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.386213][ T5142] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.411251][ T5142] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.465721][ T5142] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.546355][ T5142] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.575703][ T5142] usb 3-1: Product: syz [ 258.579944][ T5142] usb 3-1: Manufacturer: syz [ 258.663375][ T5142] usb 3-1: SerialNumber: syz [ 258.718053][ T5142] usb 3-1: selecting invalid altsetting 1 [ 258.931986][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 258.952066][ T5142] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 258.979111][ T5142] cdc_ncm 3-1:1.0: bind() failure [ 259.047838][ T5142] usb 3-1: USB disconnect, device number 15 [ 259.603538][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 259.851040][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.879050][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 259.955090][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.974922][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.989902][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.000929][ T45] usb 2-1: Product: syz [ 260.016665][ T45] usb 2-1: Manufacturer: syz [ 260.025231][ T45] usb 2-1: SerialNumber: syz [ 263.762022][ T45] usb 2-1: USB disconnect, device number 11 [ 264.236404][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 264.422845][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 264.434323][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.464512][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 264.469123][ T7249] FAULT_INJECTION: forcing a failure. [ 264.469123][ T7249] name failslab, interval 1, probability 0, space 0, times 0 [ 264.492262][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.496117][ T7249] CPU: 0 PID: 7249 Comm: syz.2.534 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 264.510282][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 264.520520][ T7249] Call Trace: [ 264.523805][ T7249] [ 264.526742][ T7249] dump_stack_lvl+0x241/0x360 [ 264.531466][ T7249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.536689][ T7249] ? __pfx__printk+0x10/0x10 [ 264.541295][ T7249] ? __pfx_lock_acquire+0x10/0x10 [ 264.546326][ T7249] ? inet_select_addr+0x5b/0xa20 [ 264.551294][ T7249] ? __pfx_lock_release+0x10/0x10 [ 264.556328][ T7249] should_fail_ex+0x3b0/0x4e0 [ 264.561043][ T7249] ? dst_alloc+0x12b/0x190 [ 264.565463][ T7249] should_failslab+0x9/0x20 [ 264.569977][ T7249] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 264.575359][ T7249] ? inet_select_addr+0x5b/0xa20 [ 264.580312][ T7249] dst_alloc+0x12b/0x190 [ 264.584570][ T7249] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 264.590680][ T7249] ip_route_output_key_hash+0x193/0x2b0 [ 264.596237][ T7249] ? ip_route_output_key_hash+0xdf/0x2b0 [ 264.601882][ T7249] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 264.607959][ T7249] ? __pfx_lock_release+0x10/0x10 [ 264.612992][ T7249] ? __lock_acquire+0x1346/0x1fd0 [ 264.618031][ T7249] ip_route_output_flow+0x29/0x140 [ 264.623151][ T7249] ping_v4_sendmsg+0x13e1/0x2460 [ 264.628096][ T7249] ? reacquire_held_locks+0x3eb/0x690 [ 264.633521][ T7249] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 264.638822][ T7249] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 264.645160][ T7249] ? __local_bh_enable_ip+0x168/0x200 [ 264.650540][ T7249] ? inet_sendmsg+0x16b/0x390 [ 264.655229][ T7249] ? inet_sendmsg+0x16b/0x390 [ 264.659918][ T7249] ? inet_sendmsg+0x330/0x390 [ 264.664605][ T7249] __sock_sendmsg+0x1a6/0x270 [ 264.669292][ T7249] ____sys_sendmsg+0x525/0x7d0 [ 264.674161][ T7249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.679509][ T7249] __sys_sendmsg+0x2b0/0x3a0 [ 264.684111][ T7249] ? __pfx___sys_sendmsg+0x10/0x10 [ 264.689225][ T7249] ? vfs_write+0x7c4/0xc90 [ 264.693686][ T7249] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 264.700035][ T7249] ? do_syscall_64+0x100/0x230 [ 264.704825][ T7249] ? do_syscall_64+0xb6/0x230 [ 264.709539][ T7249] do_syscall_64+0xf3/0x230 [ 264.714058][ T7249] ? clear_bhb_loop+0x35/0x90 [ 264.718749][ T7249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.724665][ T7249] RIP: 0033:0x7f49bdb75bd9 [ 264.729109][ T7249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.748745][ T7249] RSP: 002b:00007f49be883048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.757192][ T7249] RAX: ffffffffffffffda RBX: 00007f49bdd03f60 RCX: 00007f49bdb75bd9 [ 264.765197][ T7249] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 264.773184][ T7249] RBP: 00007f49be8830a0 R08: 0000000000000000 R09: 0000000000000000 [ 264.781198][ T7249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.789187][ T7249] R13: 000000000000000b R14: 00007f49bdd03f60 R15: 00007ffddfe2c448 [ 264.797201][ T7249] [ 265.003687][ T45] usb 2-1: config 0 descriptor?? [ 265.026604][ T45] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 265.750242][ T7229] netlink: 84 bytes leftover after parsing attributes in process `syz.1.528'. [ 265.792717][ T45] gspca_vc032x: reg_w err -71 [ 265.797492][ T45] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 265.834333][ T45] usb 2-1: USB disconnect, device number 12 [ 265.890227][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 267.065516][ T7296] fuse: Bad value for 'fd' [ 267.452637][ T1148] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 267.936021][ T1148] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.981215][ T1148] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 268.054057][ T1148] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.106257][ T1148] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.137480][ T1148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.160031][ T1148] usb 4-1: Product: syz [ 268.166967][ T1148] usb 4-1: Manufacturer: syz [ 268.177241][ T1148] usb 4-1: SerialNumber: syz [ 268.196890][ T1148] cdc_ncm 4-1:1.0: skipping garbage [ 268.202742][ T1148] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 268.213864][ T1148] cdc_ncm 4-1:1.0: bind() failure [ 269.467707][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'. [ 269.533526][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'. [ 273.968184][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 274.298401][ T1148] usb 4-1: USB disconnect, device number 14 [ 274.477260][ T7342] fuse: Bad value for 'fd' [ 275.732860][ T29] audit: type=1326 audit(1720576767.199:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7358 comm="syz.1.567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b4af75bd9 code=0x0 [ 276.127508][ T7363] xt_cluster: node mask cannot exceed total number of nodes [ 276.173058][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 276.238539][ T7371] FAULT_INJECTION: forcing a failure. [ 276.238539][ T7371] name failslab, interval 1, probability 0, space 0, times 0 [ 276.257030][ T7371] CPU: 0 PID: 7371 Comm: syz.2.569 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 276.267076][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 276.277164][ T7371] Call Trace: [ 276.280539][ T7371] [ 276.283473][ T7371] dump_stack_lvl+0x241/0x360 [ 276.288183][ T7371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.293397][ T7371] ? __pfx__printk+0x10/0x10 [ 276.298003][ T7371] ? __pfx___might_resched+0x10/0x10 [ 276.303302][ T7371] should_fail_ex+0x3b0/0x4e0 [ 276.308028][ T7371] ? sk_prot_alloc+0x58/0x210 [ 276.312712][ T7371] should_failslab+0x9/0x20 [ 276.317224][ T7371] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 276.322622][ T7371] sk_prot_alloc+0x58/0x210 [ 276.327128][ T7371] ? sk_alloc+0x26/0x370 [ 276.331376][ T7371] sk_alloc+0x38/0x370 [ 276.335459][ T7371] inet6_create+0x6d4/0x1100 [ 276.340057][ T7371] ? inet6_create+0x78/0x1100 [ 276.344746][ T7371] ? __sock_create+0x337/0x920 [ 276.349510][ T7371] __sock_create+0x490/0x920 [ 276.354109][ T7371] udp_sock_create6+0xe7/0x870 [ 276.358883][ T7371] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 276.364719][ T7371] ? __pfx_udp_sock_create6+0x10/0x10 [ 276.370103][ T7371] ? rxrpc_lookup_local+0xcdb/0x1890 [ 276.375401][ T7371] rxrpc_lookup_local+0xd86/0x1890 [ 276.380530][ T7371] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 276.386092][ T7371] ? __local_bh_enable_ip+0x168/0x200 [ 276.391467][ T7371] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 276.397215][ T7371] ? do_raw_spin_unlock+0x13c/0x8b0 [ 276.402452][ T7371] rxrpc_sendmsg+0x4d9/0x920 [ 276.407059][ T7371] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 276.412174][ T7371] __sock_sendmsg+0x221/0x270 [ 276.416863][ T7371] ____sys_sendmsg+0x525/0x7d0 [ 276.421649][ T7371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.426960][ T7371] __sys_sendmsg+0x2b0/0x3a0 [ 276.431559][ T7371] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.436680][ T7371] ? vfs_write+0x7c4/0xc90 [ 276.441137][ T7371] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.447487][ T7371] ? do_syscall_64+0x100/0x230 [ 276.452260][ T7371] ? do_syscall_64+0xb6/0x230 [ 276.456950][ T7371] do_syscall_64+0xf3/0x230 [ 276.461466][ T7371] ? clear_bhb_loop+0x35/0x90 [ 276.466161][ T7371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.472065][ T7371] RIP: 0033:0x7f49bdb75bd9 [ 276.476485][ T7371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.496387][ T7371] RSP: 002b:00007f49be883048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.504924][ T7371] RAX: ffffffffffffffda RBX: 00007f49bdd03f60 RCX: 00007f49bdb75bd9 [ 276.512928][ T7371] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 276.520914][ T7371] RBP: 00007f49be8830a0 R08: 0000000000000000 R09: 0000000000000000 [ 276.528906][ T7371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.536971][ T7371] R13: 000000000000000b R14: 00007f49bdd03f60 R15: 00007ffddfe2c448 [ 276.544975][ T7371] [ 276.763025][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 276.873419][ T5171] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 277.040357][ T7382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.090514][ T7382] batadv_slave_0: entered allmulticast mode [ 277.126225][ T5171] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.141355][ T7384] fuse: Bad value for 'fd' [ 277.182023][ T5171] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.198949][ T5171] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.310070][ T5171] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.337280][ T5171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.364657][ T5171] usb 4-1: Product: syz [ 277.377545][ T5171] usb 4-1: Manufacturer: syz [ 277.384782][ T5171] usb 4-1: SerialNumber: syz [ 277.421846][ T5171] usb 4-1: selecting invalid altsetting 1 [ 277.767938][ T5171] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 277.776253][ T5171] cdc_ncm 4-1:1.0: bind() failure [ 277.978525][ T7395] input: syz1 as /devices/virtual/input/input7 [ 278.534229][ T5171] usb 4-1: USB disconnect, device number 15 [ 279.963511][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.580'. [ 281.111557][ T7426] fuse: Bad value for 'fd' [ 281.273112][ T5171] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 281.322783][ T1148] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 281.472903][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 281.484259][ T5171] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.503731][ T5171] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.522692][ T1148] usb 3-1: Using ep0 maxpacket: 32 [ 281.553706][ T1148] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.582812][ T5171] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.602595][ T1148] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.616185][ T1148] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 281.628421][ T5171] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.642771][ T5171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.662939][ T5171] usb 1-1: Product: syz [ 281.722683][ T1148] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 281.750913][ T5171] usb 1-1: Manufacturer: syz [ 281.758567][ T5171] usb 1-1: SerialNumber: syz [ 281.764265][ T1148] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 281.782904][ T5171] usb 1-1: selecting invalid altsetting 1 [ 281.792250][ T1148] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.802903][ T1148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.811025][ T1148] usb 3-1: Product: syz [ 281.815656][ T1148] usb 3-1: Manufacturer: syz [ 281.820417][ T1148] usb 3-1: SerialNumber: syz [ 281.996167][ T5171] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 282.008546][ T5171] cdc_ncm 1-1:1.0: bind() failure [ 282.057722][ T1148] cdc_ncm 3-1:1.0: bind() failure [ 282.067261][ T5171] usb 1-1: USB disconnect, device number 15 [ 282.129037][ T1148] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 282.184927][ T1148] cdc_ncm 3-1:1.1: bind() failure [ 282.212169][ T1148] usb 3-1: USB disconnect, device number 16 [ 282.285391][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 282.317154][ T29] audit: type=1326 audit(1720576773.789:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7444 comm="syz.4.589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4eb375bd9 code=0x0 [ 282.582647][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 282.612787][ T7449] xt_cluster: node mask cannot exceed total number of nodes [ 282.793589][ T5140] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 282.803356][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.681853][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 283.692613][ T5102] Bluetooth: hci5: command 0x0406 tx timeout [ 283.706754][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.747172][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.770795][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.783152][ T9] usb 2-1: Product: syz [ 283.783500][ T9] usb 2-1: Manufacturer: syz [ 283.783520][ T9] usb 2-1: SerialNumber: syz [ 283.854491][ T5140] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.891856][ T5140] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.911506][ T5140] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.937146][ T5140] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.982873][ T5140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.186527][ T5140] usb 4-1: Product: syz [ 284.191405][ T5140] usb 4-1: Manufacturer: syz [ 284.196637][ T5140] usb 4-1: SerialNumber: syz [ 284.208190][ T5140] usb 4-1: selecting invalid altsetting 1 [ 286.537873][ T5140] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 286.544096][ T5140] cdc_ncm 4-1:1.0: bind() failure [ 286.563097][ T5140] usb 4-1: USB disconnect, device number 16 [ 287.050438][ T7470] fuse: Bad value for 'fd' [ 287.420600][ T9] usb 2-1: USB disconnect, device number 13 [ 288.068803][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'. [ 288.716243][ T7507] netlink: 'syz.3.603': attribute type 29 has an invalid length. [ 288.743238][ T7507] netlink: 'syz.3.603': attribute type 29 has an invalid length. [ 288.789593][ T7507] netlink: 'syz.3.603': attribute type 29 has an invalid length. [ 288.835530][ T7507] netlink: 500 bytes leftover after parsing attributes in process `syz.3.603'. [ 288.856493][ T7507] unsupported nla_type 40 [ 288.977681][ T5171] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 288.998408][ T7511] fuse: Invalid rootmode [ 289.183753][ T5171] usb 3-1: Using ep0 maxpacket: 32 [ 289.203674][ T5171] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.230176][ T5171] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.257830][ T5171] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 289.304169][ T5171] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 289.326158][ T5171] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 289.345529][ T5171] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.360835][ T5171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.369136][ T5171] usb 3-1: Product: syz [ 289.378046][ T5171] usb 3-1: Manufacturer: syz [ 289.382893][ T5171] usb 3-1: SerialNumber: syz [ 289.516790][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 289.606004][ T5171] cdc_ncm 3-1:1.0: bind() failure [ 289.631419][ T5171] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 289.643214][ T5171] cdc_ncm 3-1:1.1: bind() failure [ 289.656920][ T5171] usb 3-1: USB disconnect, device number 17 [ 289.755028][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.777252][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 289.788698][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.827852][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.847415][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.860938][ T9] usb 4-1: Product: syz [ 289.865492][ T9] usb 4-1: Manufacturer: syz [ 289.871679][ T9] usb 4-1: SerialNumber: syz [ 291.190063][ T5140] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 292.854407][ T9] usb 4-1: USB disconnect, device number 17 [ 292.942697][ T5140] usb 2-1: Using ep0 maxpacket: 16 [ 292.969409][ T5140] usb 2-1: device descriptor read/all, error -71 [ 293.120003][ T7540] process 'syz.0.616' launched './file1' with NULL argv: empty string added [ 293.220944][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 293.270825][ T7543] fuse: Invalid rootmode [ 294.313091][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 294.482675][ T5143] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 294.514682][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.544905][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 294.566914][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.590385][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.605604][ T7574] FAULT_INJECTION: forcing a failure. [ 294.605604][ T7574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.609551][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.635956][ T9] usb 3-1: Product: syz [ 294.640419][ T9] usb 3-1: Manufacturer: syz [ 294.642556][ T7574] CPU: 1 PID: 7574 Comm: syz.0.626 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 294.650643][ T9] usb 3-1: SerialNumber: syz [ 294.654985][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 294.655001][ T7574] Call Trace: [ 294.655011][ T7574] [ 294.655021][ T7574] dump_stack_lvl+0x241/0x360 [ 294.655061][ T7574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.655092][ T7574] ? __pfx__printk+0x10/0x10 [ 294.655122][ T7574] ? __pfx_lock_release+0x10/0x10 [ 294.668518][ T5143] usb 5-1: Using ep0 maxpacket: 32 [ 294.669756][ T7574] should_fail_ex+0x3b0/0x4e0 [ 294.677952][ T5143] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.680639][ T7574] _copy_from_iter+0x1f6/0x1960 [ 294.720951][ T7574] ? __virt_addr_valid+0x183/0x520 [ 294.726087][ T7574] ? skb_set_owner_w+0x238/0x3e0 [ 294.731039][ T7574] ? __pfx_lock_release+0x10/0x10 [ 294.736074][ T7574] ? __lock_acquire+0x1346/0x1fd0 [ 294.741118][ T7574] ? __pfx__copy_from_iter+0x10/0x10 [ 294.746419][ T7574] ? __virt_addr_valid+0x183/0x520 [ 294.751547][ T7574] ? __virt_addr_valid+0x183/0x520 [ 294.756675][ T7574] ? __virt_addr_valid+0x44e/0x520 [ 294.761804][ T7574] ? __phys_addr_symbol+0x2f/0x70 [ 294.766856][ T7574] ? __check_object_size+0x49c/0x900 [ 294.772150][ T7574] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 294.777890][ T7574] skb_copy_datagram_from_iter+0xf3/0x6c0 [ 294.783632][ T7574] ? __lock_acquire+0x1346/0x1fd0 [ 294.788661][ T7574] ? skb_put+0x114/0x1f0 [ 294.792914][ T7574] tun_get_user+0xe9e/0x4560 [ 294.797566][ T7574] ? __pfx_tun_get_user+0x10/0x10 [ 294.802628][ T7574] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 294.808122][ T7574] ? tun_get+0x1e/0x2f0 [ 294.812320][ T7574] ? tun_get+0x1e/0x2f0 [ 294.816494][ T7574] ? tun_get+0x27d/0x2f0 [ 294.820756][ T7574] tun_chr_write_iter+0x113/0x1f0 [ 294.825818][ T7574] vfs_write+0xa72/0xc90 [ 294.830090][ T7574] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 294.835654][ T7574] ? __pfx_vfs_write+0x10/0x10 [ 294.840454][ T7574] ksys_write+0x1a0/0x2c0 [ 294.844803][ T7574] ? __pfx_ksys_write+0x10/0x10 [ 294.849683][ T7574] ? do_syscall_64+0x100/0x230 [ 294.854486][ T7574] ? do_syscall_64+0xb6/0x230 [ 294.859184][ T7574] do_syscall_64+0xf3/0x230 [ 294.863723][ T7574] ? clear_bhb_loop+0x35/0x90 [ 294.868427][ T7574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.874337][ T7574] RIP: 0033:0x7f855c97475f [ 294.878764][ T7574] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 294.898391][ T7574] RSP: 002b:00007f855d69b010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 294.906858][ T7574] RAX: ffffffffffffffda RBX: 00007f855cb03f60 RCX: 00007f855c97475f [ 294.914841][ T7574] RDX: 0000000000001307 RSI: 00000000200007c0 RDI: 00000000000000c8 [ 294.922821][ T7574] RBP: 00007f855d69b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 294.930815][ T7574] R10: 0000000000001307 R11: 0000000000000293 R12: 0000000000000001 [ 294.938797][ T7574] R13: 000000000000000b R14: 00007f855cb03f60 R15: 00007ffc3362a758 [ 294.946800][ T7574] [ 294.960170][ T5143] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.986767][ T5143] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 295.010351][ T5143] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 295.051574][ T5143] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 295.275616][ T5143] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.285108][ T5143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.100213][ T53] Bluetooth: hci0: command tx timeout [ 296.133261][ T5143] usb 5-1: Product: syz [ 296.163081][ T5143] usb 5-1: Manufacturer: syz [ 296.209323][ T5143] usb 5-1: SerialNumber: syz [ 297.476996][ T9] usb 3-1: USB disconnect, device number 18 [ 297.620029][ T5143] cdc_ncm 5-1:1.0: bind() failure [ 297.638496][ T5143] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 297.645657][ T5143] cdc_ncm 5-1:1.1: bind() failure [ 297.664232][ T5143] usb 5-1: USB disconnect, device number 13 [ 297.778333][ T7585] fuse: Invalid rootmode [ 299.262845][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 299.302681][ T1148] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 299.552636][ T5143] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 299.628717][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.641867][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 299.650984][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.665361][ T1148] usb 5-1: Using ep0 maxpacket: 32 [ 299.674301][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.687372][ T1148] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.757211][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.771650][ T45] usb 4-1: Product: syz [ 299.776597][ T1148] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.876801][ T7656] input: syz1 as /devices/virtual/input/input8 [ 300.387766][ T45] usb 4-1: Manufacturer: syz [ 300.392558][ T45] usb 4-1: SerialNumber: syz [ 300.689937][ T1148] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 300.706954][ T1148] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 300.720783][ T1148] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 300.772773][ T5143] usb 3-1: Using ep0 maxpacket: 32 [ 300.803345][ T5143] usb 3-1: config 0 has no interfaces? [ 300.803914][ T1148] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.004925][ T5143] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 301.024191][ T1148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.032795][ T1148] usb 5-1: Product: syz [ 301.037100][ T1148] usb 5-1: Manufacturer: syz [ 301.044064][ T1148] usb 5-1: SerialNumber: syz [ 303.254705][ T5143] usb 3-1: New USB device strings: Mfr=0, Product=59, SerialNumber=0 [ 304.677759][ T45] usb 4-1: USB disconnect, device number 18 [ 304.754579][ T5143] usb 3-1: Product: syz [ 304.805872][ T5143] usb 3-1: config 0 descriptor?? [ 304.811949][ T1148] usb 5-1: can't set config #1, error -71 [ 304.870270][ T1148] usb 5-1: USB disconnect, device number 14 [ 304.909999][ T5143] usb 3-1: can't set config #0, error -71 [ 304.940225][ T5143] usb 3-1: USB disconnect, device number 19 [ 305.029155][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.645'. [ 305.111503][ T7678] netlink: 40 bytes leftover after parsing attributes in process `syz.3.647'. [ 305.552601][ T1148] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 305.554416][ T7674] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 305.754836][ T1148] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.771946][ T1148] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.786041][ T1148] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.813227][ T1148] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.824392][ T1148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.832406][ T1148] usb 5-1: Product: syz [ 305.837598][ T1148] usb 5-1: Manufacturer: syz [ 305.842227][ T1148] usb 5-1: SerialNumber: syz [ 305.852385][ T1148] usb 5-1: selecting invalid altsetting 1 [ 306.104870][ T1148] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 306.143190][ T1148] cdc_ncm 5-1:1.0: bind() failure [ 306.180100][ T1148] usb 5-1: USB disconnect, device number 15 [ 307.366903][ T5143] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 307.440281][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 307.572696][ T5143] usb 5-1: Using ep0 maxpacket: 32 [ 307.586920][ T5143] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.609239][ T5143] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.623965][ T5143] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 307.666518][ T5143] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 307.689665][ T5143] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 307.713226][ T5143] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.722539][ T5143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.731099][ T5143] usb 5-1: Product: syz [ 307.736099][ T5143] usb 5-1: Manufacturer: syz [ 307.741889][ T5143] usb 5-1: SerialNumber: syz [ 308.018841][ T5143] cdc_ncm 5-1:1.0: bind() failure [ 308.065127][ T5143] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 308.091757][ T5143] cdc_ncm 5-1:1.1: bind() failure [ 308.138536][ T5143] usb 5-1: USB disconnect, device number 16 [ 308.574191][ T5140] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 308.637004][ T7750] Bluetooth: MGMT ver 1.22 [ 308.800401][ T5140] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.829635][ T5140] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 308.863988][ T5140] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 308.891537][ T5140] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.901341][ T5140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.911738][ T5140] usb 3-1: Product: syz [ 308.916205][ T5140] usb 3-1: Manufacturer: syz [ 308.920954][ T5140] usb 3-1: SerialNumber: syz [ 309.080542][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 309.092067][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 309.102255][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 309.110177][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 309.118763][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 309.129195][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 309.138521][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 309.147590][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 309.155855][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 309.164806][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 309.387115][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 313.751227][ T5140] usb 3-1: USB disconnect, device number 20 [ 314.181794][ T9] usb 4-1: device not accepting address 19, error -71 [ 315.969117][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 316.688405][ T7791] kvm: emulating exchange as write [ 316.754113][ T7800] FAULT_INJECTION: forcing a failure. [ 316.754113][ T7800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.813545][ T7800] CPU: 0 PID: 7800 Comm: syz.1.680 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 316.823574][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 316.833646][ T7800] Call Trace: [ 316.836938][ T7800] [ 316.839887][ T7800] dump_stack_lvl+0x241/0x360 [ 316.844585][ T7800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.849812][ T7800] ? __pfx__printk+0x10/0x10 [ 316.854502][ T7800] ? __pfx_lock_release+0x10/0x10 [ 316.859538][ T7800] should_fail_ex+0x3b0/0x4e0 [ 316.864230][ T7800] _copy_from_iter+0x1f6/0x1960 [ 316.869119][ T7800] ? __virt_addr_valid+0x183/0x520 [ 316.874253][ T7800] ? skb_set_owner_w+0x238/0x3e0 [ 316.879209][ T7800] ? __pfx__copy_from_iter+0x10/0x10 [ 316.884503][ T7800] ? __pfx__copy_from_iter+0x10/0x10 [ 316.889805][ T7800] ? page_copy_sane+0x154/0x260 [ 316.894667][ T7800] copy_page_from_iter+0x7a/0x100 [ 316.899713][ T7800] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 316.905567][ T7800] tun_get_user+0xe9e/0x4560 [ 316.910190][ T7800] ? __pfx_tun_get_user+0x10/0x10 [ 316.915231][ T7800] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 316.920706][ T7800] ? tun_get+0x1e/0x2f0 [ 316.924915][ T7800] ? tun_get+0x1e/0x2f0 [ 316.929096][ T7800] ? tun_get+0x27d/0x2f0 [ 316.933360][ T7800] tun_chr_write_iter+0x113/0x1f0 [ 316.938411][ T7800] vfs_write+0xa72/0xc90 [ 316.942680][ T7800] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 316.948241][ T7800] ? __pfx_vfs_write+0x10/0x10 [ 316.953041][ T7800] ksys_write+0x1a0/0x2c0 [ 316.957389][ T7800] ? __pfx_ksys_write+0x10/0x10 [ 316.962256][ T7800] ? do_syscall_64+0x100/0x230 [ 316.967046][ T7800] ? do_syscall_64+0xb6/0x230 [ 316.971749][ T7800] do_syscall_64+0xf3/0x230 [ 316.976277][ T7800] ? clear_bhb_loop+0x35/0x90 [ 316.980972][ T7800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.986880][ T7800] RIP: 0033:0x7f9b4af75bd9 [ 316.991332][ T7800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.011050][ T7800] RSP: 002b:00007f9b4bd9c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.019481][ T7800] RAX: ffffffffffffffda RBX: 00007f9b4b103f60 RCX: 00007f9b4af75bd9 [ 317.027578][ T7800] RDX: 000000000000fdef RSI: 0000000020000600 RDI: 0000000000000003 [ 317.035562][ T7800] RBP: 00007f9b4bd9c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 317.043548][ T7800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.051612][ T7800] R13: 000000000000000b R14: 00007f9b4b103f60 R15: 00007ffd476f6918 [ 317.059694][ T7800] [ 317.466032][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.476353][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.498427][ T7805] overlay: Unknown parameter '\dev/input/event#' [ 318.492637][ T5144] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 318.782783][ T5144] usb 3-1: Using ep0 maxpacket: 16 [ 318.992760][ T5144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 319.031619][ T5144] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 319.048708][ T5144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.237007][ T5144] usb 3-1: Product: syz [ 319.251720][ T7832] fuse: Bad value for 'fd' [ 319.266883][ T5144] usb 3-1: Manufacturer: syz [ 319.271507][ T5144] usb 3-1: SerialNumber: syz [ 319.456642][ T7835] input: syz1 as /devices/virtual/input/input9 [ 320.223046][ T5144] usb 3-1: config 0 descriptor?? [ 320.254703][ T5144] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 320.272645][ T5144] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 320.494860][ T7810] net_ratelimit: 5 callbacks suppressed [ 320.494879][ T7810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.531734][ T7842] random: crng reseeded on system resumption [ 321.543373][ T5144] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 321.644395][ T5144] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 321.677425][ T5144] em28xx 3-1:0.0: board has no eeprom [ 321.772784][ T5144] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 321.802826][ T5144] em28xx 3-1:0.0: dvb set to bulk mode. [ 321.837688][ T45] em28xx 3-1:0.0: Binding DVB extension [ 323.680378][ T7817] sched: RT throttling activated [ 323.904568][ T7853] fuse: Unknown parameter 'fְ0xffffffffffffffff00000000000000000000' [ 323.956996][ T7821] syz.4.685 (7821) used greatest stack depth: 18288 bytes left [ 324.000618][ T45] em28xx 3-1:0.0: Registering input extension [ 324.497620][ T5142] usb 3-1: USB disconnect, device number 21 [ 324.515591][ T5142] em28xx 3-1:0.0: Disconnecting em28xx [ 324.531236][ T5142] em28xx 3-1:0.0: Closing input extension [ 324.595962][ T5142] em28xx 3-1:0.0: Freeing device [ 325.072651][ T45] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 325.992721][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.087984][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 326.111549][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.127845][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.147271][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.158929][ T45] usb 5-1: Product: syz [ 326.169586][ T7876] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 326.178628][ T45] usb 5-1: Manufacturer: syz [ 326.189968][ T45] usb 5-1: SerialNumber: syz [ 326.195683][ T7876] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 326.211213][ T45] cdc_ncm 5-1:1.0: skipping garbage [ 326.216619][ T45] cdc_ncm 5-1:1.0: skipping garbage [ 326.226572][ T45] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 326.242616][ T45] cdc_ncm 5-1:1.0: bind() failure [ 326.311487][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 326.328488][ T7880] netlink: 'syz.2.696': attribute type 15 has an invalid length. [ 326.347249][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 330.467653][ T5139] usb 5-1: USB disconnect, device number 17 [ 332.713588][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'. [ 333.962426][ T7965] dlm: non-version read from control device 8 [ 334.132428][ T7971] netlink: 3 bytes leftover after parsing attributes in process `syz.2.720'. [ 334.169861][ T7971] 0: renamed from caif0 [ 334.242688][ T5142] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 334.252750][ T7971] 0: entered allmulticast mode [ 334.257990][ T7971] A link change request failed with some changes committed already. Interface 60 may have been left with an inconsistent configuration, please check. [ 334.472749][ T5142] usb 1-1: Using ep0 maxpacket: 8 [ 334.731760][ T5142] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 334.752074][ T5142] usb 1-1: config 0 has no interface number 0 [ 334.767964][ T5142] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 334.781230][ T5142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.794111][ T5142] usb 1-1: config 0 descriptor?? [ 334.807418][ T5142] hso 1-1:0.1: Failed to find BULK IN ep [ 334.956345][ T7979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.723'. [ 334.985129][ T7979] blktrace: Concurrent blktraces are not allowed on loop9 [ 335.004697][ T5142] usb 1-1: USB disconnect, device number 16 [ 335.046892][ T5143] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 335.204516][ T7986] x_tables: duplicate underflow at hook 3 [ 335.245277][ T5143] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.256029][ T5143] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 335.273125][ T5143] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.300019][ T5143] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.316318][ T5143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.327353][ T5143] usb 3-1: Product: syz [ 335.331679][ T5143] usb 3-1: Manufacturer: syz [ 335.341196][ T5143] usb 3-1: SerialNumber: syz [ 335.428314][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'. [ 335.453930][ T7995] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 335.537847][ T7998] syz.3.729[7998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.538116][ T7998] syz.3.729[7998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.273611][ T8004] FAULT_INJECTION: forcing a failure. [ 339.273611][ T8004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.361189][ T8004] CPU: 1 PID: 8004 Comm: syz.0.730 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 339.371242][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 339.381338][ T8004] Call Trace: [ 339.384631][ T8004] [ 339.387573][ T8004] dump_stack_lvl+0x241/0x360 [ 339.392281][ T8004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.397509][ T8004] ? __pfx__printk+0x10/0x10 [ 339.402121][ T8004] ? __pfx_lock_release+0x10/0x10 [ 339.407159][ T8004] ? __lock_acquire+0x1346/0x1fd0 [ 339.412200][ T8004] should_fail_ex+0x3b0/0x4e0 [ 339.416914][ T8004] _copy_from_user+0x2f/0xe0 [ 339.421535][ T8004] kstrtouint_from_user+0xc6/0x190 [ 339.426672][ T8004] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 339.432415][ T8004] ? __pfx_lock_acquire+0x10/0x10 [ 339.437478][ T8004] proc_fail_nth_write+0xaa/0x2d0 [ 339.442523][ T8004] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 339.448435][ T8004] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 339.454085][ T8004] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 339.459729][ T8004] vfs_write+0x2a2/0xc90 [ 339.463999][ T8004] ? __pfx_vfs_write+0x10/0x10 [ 339.468780][ T8004] ? __fget_files+0x29/0x470 [ 339.473389][ T8004] ? __fget_files+0x3f6/0x470 [ 339.478085][ T8004] ksys_write+0x1a0/0x2c0 [ 339.482436][ T8004] ? __pfx_ksys_write+0x10/0x10 [ 339.487304][ T8004] ? do_syscall_64+0x100/0x230 [ 339.492091][ T8004] ? do_syscall_64+0xb6/0x230 [ 339.496797][ T8004] do_syscall_64+0xf3/0x230 [ 339.501322][ T8004] ? clear_bhb_loop+0x35/0x90 [ 339.506021][ T8004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.511936][ T8004] RIP: 0033:0x7f855c97475f [ 339.516371][ T8004] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 339.535997][ T8004] RSP: 002b:00007f855d69b040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 339.544424][ T8004] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f855c97475f [ 339.552404][ T8004] RDX: 0000000000000001 RSI: 00007f855d69b0b0 RDI: 0000000000000004 [ 339.560387][ T8004] RBP: 00007f855d69b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 339.568366][ T8004] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 339.576434][ T8004] R13: 000000000000000b R14: 00007f855cb03f60 R15: 00007ffc3362a758 [ 339.584522][ T8004] [ 339.665262][ T5143] usb 3-1: USB disconnect, device number 22 [ 339.880442][ T8016] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 339.915202][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.734'. [ 339.922588][ T5139] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 339.931951][ T8016] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 340.126876][ T8028] netlink: 3 bytes leftover after parsing attributes in process `syz.0.738'. [ 340.137825][ T5139] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.158904][ T8028] 0: renamed from caif0 [ 340.173517][ T5139] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 340.188390][ T5139] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.192754][ T8028] FAULT_INJECTION: forcing a failure. [ 340.192754][ T8028] name failslab, interval 1, probability 0, space 0, times 0 [ 340.215221][ T5139] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.230735][ T8028] CPU: 0 PID: 8028 Comm: syz.0.738 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 340.240747][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 340.250803][ T8028] Call Trace: [ 340.254083][ T8028] [ 340.257027][ T8028] dump_stack_lvl+0x241/0x360 [ 340.261754][ T8028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.267011][ T8028] ? __pfx__printk+0x10/0x10 [ 340.271687][ T8028] should_fail_ex+0x3b0/0x4e0 [ 340.276568][ T8028] should_failslab+0x9/0x20 [ 340.281078][ T8028] kmalloc_node_track_caller_noprof+0xda/0x440 [ 340.287244][ T8028] ? kernfs_rename_ns+0x3e2/0xb50 [ 340.292280][ T8028] kstrdup+0x3a/0x80 [ 340.296180][ T8028] kernfs_rename_ns+0x3e2/0xb50 [ 340.301050][ T8028] sysfs_rename_link_ns+0x178/0x1c0 [ 340.306257][ T8028] device_rename+0x113/0x1b0 [ 340.310852][ T8028] dev_change_name+0x2bd/0x920 [ 340.315644][ T8028] ? preempt_count_add+0x93/0x190 [ 340.320718][ T8028] ? do_setlink+0xa4b/0x41f0 [ 340.325336][ T8028] ? __pfx_dev_change_name+0x10/0x10 [ 340.330630][ T8028] ? vprintk_emit+0x631/0x770 [ 340.335314][ T8028] ? nla_strscpy+0x100/0x180 [ 340.339907][ T8028] ? __asan_memset+0x23/0x50 [ 340.344500][ T8028] ? nla_strscpy+0x113/0x180 [ 340.349091][ T8028] do_setlink+0xa4b/0x41f0 [ 340.353522][ T8028] ? _printk+0xd5/0x120 [ 340.357712][ T8028] ? __nla_validate_parse+0x2660/0x3090 [ 340.363273][ T8028] ? __pfx__printk+0x10/0x10 [ 340.367884][ T8028] ? __pfx_do_setlink+0x10/0x10 [ 340.372737][ T8028] ? rcu_is_watching+0x15/0xb0 [ 340.377501][ T8028] ? do_trace_netlink_extack+0x8b/0x1f0 [ 340.383059][ T8028] ? __nla_validate_parse+0x27eb/0x3090 [ 340.388621][ T8028] ? __pfx___nla_validate_parse+0x10/0x10 [ 340.394341][ T8028] ? __pfx_validate_chain+0x10/0x10 [ 340.399551][ T8028] ? mark_lock+0x9a/0x350 [ 340.403879][ T8028] ? __lock_acquire+0x1346/0x1fd0 [ 340.408909][ T8028] ? validate_linkmsg+0x71e/0x900 [ 340.413939][ T8028] rtnl_setlink+0x40d/0x5a0 [ 340.418456][ T8028] ? mark_lock+0x9a/0x350 [ 340.422820][ T8028] ? __pfx_rtnl_setlink+0x10/0x10 [ 340.427902][ T8028] ? __pfx_lock_release+0x10/0x10 [ 340.433013][ T8028] ? __pfx___mutex_lock+0x10/0x10 [ 340.438062][ T8028] ? __pfx_rtnl_setlink+0x10/0x10 [ 340.443096][ T8028] rtnetlink_rcv_msg+0x89b/0x1180 [ 340.448126][ T8028] ? rtnetlink_rcv_msg+0x208/0x1180 [ 340.453329][ T8028] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 340.458791][ T8028] ? __lock_acquire+0x1346/0x1fd0 [ 340.463829][ T8028] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 340.469805][ T8028] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.476222][ T8028] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 340.482117][ T8028] ? lockdep_hardirqs_on+0x99/0x150 [ 340.487345][ T8028] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 340.493371][ T8028] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 340.499772][ T8028] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 340.506512][ T8028] netlink_rcv_skb+0x1e3/0x430 [ 340.511293][ T8028] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 340.516763][ T8028] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 340.522099][ T8028] ? __rcu_read_unlock+0xa1/0x110 [ 340.527158][ T8028] netlink_unicast+0x7ea/0x980 [ 340.531930][ T8028] ? __pfx_netlink_unicast+0x10/0x10 [ 340.537234][ T8028] ? __virt_addr_valid+0x183/0x520 [ 340.542357][ T8028] ? __check_object_size+0x49c/0x900 [ 340.547642][ T8028] ? bpf_lsm_netlink_send+0x9/0x10 [ 340.552777][ T8028] netlink_sendmsg+0x8db/0xcb0 [ 340.557556][ T8028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.562862][ T8028] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 340.568154][ T8028] ? security_socket_sendmsg+0x87/0xb0 [ 340.573643][ T8028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.578945][ T8028] __sock_sendmsg+0x221/0x270 [ 340.583736][ T8028] sock_write_iter+0x2dd/0x400 [ 340.588635][ T8028] ? __pfx_sock_write_iter+0x10/0x10 [ 340.593967][ T8028] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 340.599962][ T8028] do_iter_readv_writev+0x5a4/0x800 [ 340.605180][ T8028] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 340.610903][ T8028] ? bpf_lsm_file_permission+0x9/0x10 [ 340.616278][ T8028] ? security_file_permission+0x7f/0xa0 [ 340.621830][ T8028] ? rw_verify_area+0x1d2/0x6b0 [ 340.626697][ T8028] vfs_writev+0x37c/0xbb0 [ 340.631059][ T8028] ? __pfx_lock_acquire+0x10/0x10 [ 340.636111][ T8028] ? __pfx_vfs_writev+0x10/0x10 [ 340.640962][ T8028] ? vfs_write+0x7c4/0xc90 [ 340.645392][ T8028] ? __fget_files+0x29/0x470 [ 340.649997][ T8028] do_writev+0x1b1/0x350 [ 340.654276][ T8028] ? __pfx_do_writev+0x10/0x10 [ 340.659038][ T8028] ? do_syscall_64+0x100/0x230 [ 340.663809][ T8028] ? do_syscall_64+0xb6/0x230 [ 340.668490][ T8028] do_syscall_64+0xf3/0x230 [ 340.673009][ T8028] ? clear_bhb_loop+0x35/0x90 [ 340.677702][ T8028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.683606][ T8028] RIP: 0033:0x7f855c975bd9 [ 340.688024][ T8028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.707631][ T8028] RSP: 002b:00007f855d69b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 340.716059][ T8028] RAX: ffffffffffffffda RBX: 00007f855cb03f60 RCX: 00007f855c975bd9 [ 340.724032][ T8028] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 340.732052][ T8028] RBP: 00007f855d69b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 340.740026][ T8028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.747995][ T8028] R13: 000000000000000b R14: 00007f855cb03f60 R15: 00007ffc3362a758 [ 340.755980][ T8028] [ 340.761511][ T5139] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.770128][ T5139] usb 5-1: Product: syz [ 340.774491][ T5139] usb 5-1: Manufacturer: syz [ 340.786318][ T5139] usb 5-1: SerialNumber: syz [ 340.829121][ T5139] cdc_ncm 5-1:1.0: skipping garbage [ 340.839824][ T5139] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 340.846865][ T5139] cdc_ncm 5-1:1.0: bind() failure [ 341.329047][ T5144] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 341.574561][ T8035] input: syz1 as /devices/virtual/input/input11 [ 341.670402][ T5144] usb 3-1: Using ep0 maxpacket: 32 [ 342.453669][ T5144] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.504739][ T5144] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.529116][ T5144] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 342.557749][ T5144] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 342.612852][ T5144] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 342.827543][ T5144] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.836892][ T5144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.013091][ T8043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.740'. [ 348.649520][ T5140] usb 5-1: USB disconnect, device number 18 [ 348.857577][ T5144] usb 3-1: Product: syz [ 348.861909][ T5144] usb 3-1: Manufacturer: syz [ 348.866782][ T5144] usb 3-1: SerialNumber: syz [ 348.878901][ T5144] usb 3-1: can't set config #1, error -71 [ 348.894805][ T5144] usb 3-1: USB disconnect, device number 23 [ 349.873980][ T8070] input: syz1 as /devices/virtual/input/input12 [ 351.051673][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.749'. [ 351.103378][ T8074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.747'. [ 351.121736][ T8078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.749'. [ 351.157134][ T8080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.749'. [ 351.195763][ T8080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.749'. [ 351.502081][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.527325][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 351.537027][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 351.573039][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 351.703485][ T5140] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 351.711781][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 351.719473][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 351.954612][ T5140] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.012778][ T5142] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 352.647738][ T5140] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 352.672649][ T5140] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.708365][ T8096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.753'. [ 352.728433][ T5140] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.739374][ T5140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.749921][ T5140] usb 4-1: Product: syz [ 352.754867][ T5140] usb 4-1: Manufacturer: syz [ 352.759643][ T5140] usb 4-1: SerialNumber: syz [ 352.791881][ T5140] cdc_ncm 4-1:1.0: skipping garbage [ 352.797960][ T5140] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 352.822901][ T5142] usb 5-1: Using ep0 maxpacket: 32 [ 352.828525][ T5140] cdc_ncm 4-1:1.0: bind() failure [ 352.856662][ T5142] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.915037][ T5142] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.918352][ T5274] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.960309][ T5142] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 353.004572][ T5142] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 353.051538][ T5142] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 353.090496][ T5142] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.106522][ T5274] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.110231][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.142885][ T5142] usb 5-1: Product: syz [ 353.147123][ T5142] usb 5-1: Manufacturer: syz [ 353.160280][ T5142] usb 5-1: SerialNumber: syz [ 353.325259][ T5274] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.390461][ T8091] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.752'. [ 353.555285][ T5274] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.647631][ T5142] cdc_ncm 5-1:1.0: bind() failure [ 353.669229][ T5142] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 353.679377][ T5142] cdc_ncm 5-1:1.1: bind() failure [ 353.713192][ T5142] usb 5-1: USB disconnect, device number 19 [ 353.774633][ T53] Bluetooth: hci6: command tx timeout [ 354.273019][ T5274] hsr0: left allmulticast mode [ 354.278040][ T5274] hsr_slave_0: left allmulticast mode [ 354.297979][ T5274] hsr_slave_1: left allmulticast mode [ 354.307012][ T5274] bridge0: port 3(hsr0) entered disabled state [ 354.519006][ T5274] bridge_slave_1: left allmulticast mode [ 354.529234][ T5274] bridge_slave_1: left promiscuous mode [ 354.541023][ T5274] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.664256][ T53] Bluetooth: hci6: command tx timeout [ 358.593515][ T5274] bridge_slave_0: left allmulticast mode [ 358.599235][ T5274] bridge_slave_0: left promiscuous mode [ 358.622268][ T5274] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.690734][ T5142] usb 4-1: USB disconnect, device number 21 [ 358.701373][ T8124] syz.4.760: attempt to access beyond end of device [ 358.701373][ T8124] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 358.816665][ T53] Bluetooth: hci6: command tx timeout [ 359.104080][ T8133] snd_dummy snd_dummy.0: control 1:0:8:syz0:2289 is already present [ 359.497738][ T5274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.517305][ T5274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.539812][ T5274] bond0 (unregistering): Released all slaves [ 359.599132][ T8086] chnl_net:caif_netlink_parms(): no params data found [ 359.824096][ T8152] netlink: 72 bytes leftover after parsing attributes in process `syz.0.770'. [ 360.033578][ T5140] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 360.112328][ T8163] tmpfs: Unknown parameter 'usrquotaNL| U [ 360.112328][ T8163] ' [ 360.116533][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.132805][ T8086] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.150988][ T8086] bridge_slave_0: entered allmulticast mode [ 360.162022][ T8086] bridge_slave_0: entered promiscuous mode [ 360.187507][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.196151][ T8086] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.203738][ T8086] bridge_slave_1: entered allmulticast mode [ 360.211906][ T8086] bridge_slave_1: entered promiscuous mode [ 360.235237][ T5274] hsr_slave_0: left promiscuous mode [ 360.248815][ T5274] hsr_slave_1: left promiscuous mode [ 360.258751][ T5274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.276047][ T5274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.280629][ T8166] ================================================================== [ 360.295909][ T8166] BUG: KASAN: slab-use-after-free in skb_release_head_state+0x39/0x250 [ 360.304155][ T8166] Read of size 8 at addr ffff88801baea558 by task syz.2.773/8166 [ 360.311868][ T8166] [ 360.314188][ T8166] CPU: 0 PID: 8166 Comm: syz.2.773 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 360.324163][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 360.334242][ T8166] Call Trace: [ 360.337522][ T8166] [ 360.340448][ T8166] dump_stack_lvl+0x241/0x360 [ 360.345138][ T8166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.350343][ T8166] ? __pfx__printk+0x10/0x10 [ 360.354936][ T8166] ? _printk+0xd5/0x120 [ 360.359096][ T8166] ? __virt_addr_valid+0x183/0x520 [ 360.364245][ T8166] ? __virt_addr_valid+0x183/0x520 [ 360.369388][ T8166] print_report+0x169/0x550 [ 360.373906][ T8166] ? __virt_addr_valid+0x183/0x520 [ 360.379058][ T8166] ? __virt_addr_valid+0x183/0x520 [ 360.384210][ T8166] ? __virt_addr_valid+0x44e/0x520 [ 360.389363][ T8166] ? __phys_addr+0xba/0x170 [ 360.393910][ T8166] ? skb_release_head_state+0x39/0x250 [ 360.399496][ T8166] kasan_report+0x143/0x180 [ 360.404035][ T8166] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 360.410420][ T8166] ? skb_release_head_state+0x39/0x250 [ 360.415928][ T8166] skb_release_head_state+0x39/0x250 [ 360.421264][ T8166] ? __hci_req_sync+0x62f/0x950 [ 360.426163][ T8166] kfree_skb_reason+0x16d/0x3b0 [ 360.431061][ T8166] __hci_req_sync+0x62f/0x950 [ 360.435799][ T8166] ? __pfx___hci_req_sync+0x10/0x10 [ 360.441042][ T8166] ? trace_contention_end+0x3c/0x120 [ 360.446382][ T8166] ? __pfx___mutex_lock+0x10/0x10 [ 360.451452][ T8166] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 360.457482][ T8166] ? __pfx_hci_inq_req+0x10/0x10 [ 360.462466][ T8166] hci_req_sync+0xa9/0xd0 [ 360.466847][ T8166] hci_inquiry+0x3e1/0x7d0 [ 360.471308][ T8166] ? do_raw_spin_unlock+0x13c/0x8b0 [ 360.476558][ T8166] ? __pfx_hci_inquiry+0x10/0x10 [ 360.481537][ T8166] ? hci_sock_ioctl+0x55c/0xa40 [ 360.486437][ T8166] sock_do_ioctl+0x158/0x460 [ 360.491082][ T8166] ? __pfx_smack_log+0x10/0x10 [ 360.495897][ T8166] ? __pfx_sock_do_ioctl+0x10/0x10 [ 360.501058][ T8166] ? smk_tskacc+0x300/0x370 [ 360.505615][ T8166] ? smack_file_ioctl+0x2fa/0x3a0 [ 360.510690][ T8166] sock_ioctl+0x629/0x8e0 [ 360.515073][ T8166] ? __pfx_sock_ioctl+0x10/0x10 [ 360.519979][ T8166] ? __fget_files+0x3f6/0x470 [ 360.524691][ T8166] ? __fget_files+0x29/0x470 [ 360.529323][ T8166] ? bpf_lsm_file_ioctl+0x9/0x10 [ 360.534303][ T8166] ? security_file_ioctl+0x87/0xb0 [ 360.539448][ T8166] ? __pfx_sock_ioctl+0x10/0x10 [ 360.544350][ T8166] __se_sys_ioctl+0xfc/0x170 [ 360.548997][ T8166] do_syscall_64+0xf3/0x230 [ 360.553545][ T8166] ? clear_bhb_loop+0x35/0x90 [ 360.558264][ T8166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.564197][ T8166] RIP: 0033:0x7f49bdb75bd9 [ 360.568642][ T8166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.588285][ T8166] RSP: 002b:00007f49be862048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.596748][ T8166] RAX: ffffffffffffffda RBX: 00007f49bdd04038 RCX: 00007f49bdb75bd9 [ 360.604757][ T8166] RDX: 0000000020019780 RSI: 00000000800448f0 RDI: 0000000000000009 [ 360.612766][ T8166] RBP: 00007f49bdbe4e60 R08: 0000000000000000 R09: 0000000000000000 [ 360.620786][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.628795][ T8166] R13: 000000000000006e R14: 00007f49bdd04038 R15: 00007ffddfe2c448 [ 360.636828][ T8166] [ 360.639846][ T8166] [ 360.642167][ T8166] Allocated by task 53: [ 360.646327][ T8166] kasan_save_track+0x3f/0x80 [ 360.651014][ T8166] __kasan_slab_alloc+0x66/0x80 [ 360.655873][ T8166] kmem_cache_alloc_noprof+0x135/0x2a0 [ 360.661345][ T8166] skb_clone+0x20c/0x390 [ 360.665612][ T8166] hci_cmd_work+0x29e/0x670 [ 360.670140][ T8166] process_scheduled_works+0xa2c/0x1830 [ 360.675696][ T8166] worker_thread+0x86d/0xd50 [ 360.680289][ T8166] kthread+0x2f0/0x390 [ 360.684362][ T8166] ret_from_fork+0x4b/0x80 [ 360.688792][ T8166] ret_from_fork_asm+0x1a/0x30 [ 360.693575][ T8166] [ 360.695908][ T8166] Freed by task 53: [ 360.699720][ T8166] kasan_save_track+0x3f/0x80 [ 360.704432][ T8166] kasan_save_free_info+0x40/0x50 [ 360.709462][ T8166] poison_slab_object+0xe0/0x150 [ 360.714412][ T8166] __kasan_slab_free+0x37/0x60 [ 360.719204][ T8166] kmem_cache_free+0x145/0x350 [ 360.723998][ T8166] hci_cmd_work+0x273/0x670 [ 360.728509][ T8166] process_scheduled_works+0xa2c/0x1830 [ 360.734056][ T8166] worker_thread+0x86d/0xd50 [ 360.738652][ T8166] kthread+0x2f0/0x390 [ 360.742737][ T8166] ret_from_fork+0x4b/0x80 [ 360.747178][ T8166] ret_from_fork_asm+0x1a/0x30 [ 360.751992][ T8166] [ 360.754318][ T8166] The buggy address belongs to the object at ffff88801baea500 [ 360.754318][ T8166] which belongs to the cache skbuff_head_cache of size 240 [ 360.768920][ T8166] The buggy address is located 88 bytes inside of [ 360.768920][ T8166] freed 240-byte region [ffff88801baea500, ffff88801baea5f0) [ 360.782642][ T8166] [ 360.784970][ T8166] The buggy address belongs to the physical page: [ 360.791560][ T8166] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1baea [ 360.800328][ T8166] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 360.807884][ T8166] page_type: 0xffffefff(slab) [ 360.812570][ T8166] raw: 00fff00000000000 ffff888019698780 ffffea000071c840 dead000000000005 [ 360.821158][ T8166] raw: 0000000000000000 00000000000c000c 00000001ffffefff 0000000000000000 [ 360.829746][ T8166] page dumped because: kasan: bad access detected [ 360.836170][ T8166] page_owner tracks the page as allocated [ 360.841883][ T8166] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 0, tgid 0 (swapper/0), ts 200130734366, free_ts 192994605824 [ 360.861959][ T8166] post_alloc_hook+0x1f3/0x230 [ 360.866729][ T8166] get_page_from_freelist+0x2e4c/0x2f10 [ 360.872278][ T8166] __alloc_pages_noprof+0x256/0x6c0 [ 360.877479][ T8166] alloc_slab_page+0x5f/0x120 [ 360.882189][ T8166] allocate_slab+0x5a/0x2f0 [ 360.886700][ T8166] ___slab_alloc+0xcd1/0x14b0 [ 360.891380][ T8166] __slab_alloc+0x58/0xa0 [ 360.895737][ T8166] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 360.901659][ T8166] __alloc_skb+0x1c3/0x440 [ 360.906086][ T8166] skb_copy+0x12b/0x820 [ 360.910244][ T8166] mac80211_hwsim_tx_frame_no_nl+0x1068/0x18d0 [ 360.916423][ T8166] mac80211_hwsim_tx_frame+0x1cc/0x220 [ 360.921908][ T8166] mac80211_hwsim_beacon_tx+0x3bf/0x850 [ 360.927456][ T8166] __iterate_interfaces+0x223/0x4c0 [ 360.932653][ T8166] ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 [ 360.939673][ T8166] mac80211_hwsim_beacon+0xd4/0x1f0 [ 360.944878][ T8166] page last free pid 6261 tgid 6261 stack trace: [ 360.951197][ T8166] free_unref_page+0xd19/0xea0 [ 360.955961][ T8166] __put_partials+0xeb/0x130 [ 360.960580][ T8166] put_cpu_partial+0x17c/0x250 [ 360.965350][ T8166] __slab_free+0x2ea/0x3d0 [ 360.969784][ T8166] qlist_free_all+0x9e/0x140 [ 360.974392][ T8166] kasan_quarantine_reduce+0x14f/0x170 [ 360.979864][ T8166] __kasan_slab_alloc+0x23/0x80 [ 360.984726][ T8166] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 360.990626][ T8166] __alloc_skb+0x1c3/0x440 [ 360.995073][ T8166] netlink_sendmsg+0x631/0xcb0 [ 360.999851][ T8166] __sock_sendmsg+0x221/0x270 [ 361.004574][ T8166] __sys_sendto+0x3a4/0x4f0 [ 361.009104][ T8166] __x64_sys_sendto+0xde/0x100 [ 361.013869][ T8166] do_syscall_64+0xf3/0x230 [ 361.018375][ T8166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.024277][ T8166] [ 361.026595][ T8166] Memory state around the buggy address: [ 361.032218][ T8166] ffff88801baea400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 361.040274][ T8166] ffff88801baea480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 361.048328][ T8166] >ffff88801baea500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 361.056377][ T8166] ^ [ 361.063300][ T8166] ffff88801baea580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 361.071351][ T8166] ffff88801baea600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 361.079401][ T8166] ================================================================== [ 361.096413][ T8166] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 361.103652][ T8166] CPU: 1 PID: 8166 Comm: syz.2.773 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 361.113632][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 361.123716][ T8166] Call Trace: [ 361.126997][ T8166] [ 361.129925][ T8166] dump_stack_lvl+0x241/0x360 [ 361.134613][ T8166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.139814][ T8166] ? __pfx__printk+0x10/0x10 [ 361.144424][ T8166] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 361.150407][ T8166] ? vscnprintf+0x5d/0x90 [ 361.154764][ T8166] panic+0x349/0x860 [ 361.158665][ T8166] ? check_panic_on_warn+0x21/0xb0 [ 361.163779][ T8166] ? __pfx_panic+0x10/0x10 [ 361.168202][ T8166] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 361.174190][ T8166] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 361.180524][ T8166] check_panic_on_warn+0x86/0xb0 [ 361.185467][ T8166] ? skb_release_head_state+0x39/0x250 [ 361.190928][ T8166] end_report+0x77/0x160 [ 361.195172][ T8166] kasan_report+0x154/0x180 [ 361.199672][ T8166] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 361.206022][ T8166] ? skb_release_head_state+0x39/0x250 [ 361.211510][ T8166] skb_release_head_state+0x39/0x250 [ 361.216800][ T8166] ? __hci_req_sync+0x62f/0x950 [ 361.221655][ T8166] kfree_skb_reason+0x16d/0x3b0 [ 361.226524][ T8166] __hci_req_sync+0x62f/0x950 [ 361.231206][ T8166] ? __pfx___hci_req_sync+0x10/0x10 [ 361.236408][ T8166] ? trace_contention_end+0x3c/0x120 [ 361.241701][ T8166] ? __pfx___mutex_lock+0x10/0x10 [ 361.246728][ T8166] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 361.252712][ T8166] ? __pfx_hci_inq_req+0x10/0x10 [ 361.257646][ T8166] hci_req_sync+0xa9/0xd0 [ 361.261980][ T8166] hci_inquiry+0x3e1/0x7d0 [ 361.266395][ T8166] ? do_raw_spin_unlock+0x13c/0x8b0 [ 361.271598][ T8166] ? __pfx_hci_inquiry+0x10/0x10 [ 361.276533][ T8166] ? hci_sock_ioctl+0x55c/0xa40 [ 361.281382][ T8166] sock_do_ioctl+0x158/0x460 [ 361.285979][ T8166] ? __pfx_smack_log+0x10/0x10 [ 361.290771][ T8166] ? __pfx_sock_do_ioctl+0x10/0x10 [ 361.295896][ T8166] ? smk_tskacc+0x300/0x370 [ 361.300409][ T8166] ? smack_file_ioctl+0x2fa/0x3a0 [ 361.305442][ T8166] sock_ioctl+0x629/0x8e0 [ 361.309784][ T8166] ? __pfx_sock_ioctl+0x10/0x10 [ 361.314647][ T8166] ? __fget_files+0x3f6/0x470 [ 361.319324][ T8166] ? __fget_files+0x29/0x470 [ 361.323912][ T8166] ? bpf_lsm_file_ioctl+0x9/0x10 [ 361.328843][ T8166] ? security_file_ioctl+0x87/0xb0 [ 361.333950][ T8166] ? __pfx_sock_ioctl+0x10/0x10 [ 361.338804][ T8166] __se_sys_ioctl+0xfc/0x170 [ 361.343403][ T8166] do_syscall_64+0xf3/0x230 [ 361.347915][ T8166] ? clear_bhb_loop+0x35/0x90 [ 361.352597][ T8166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.358495][ T8166] RIP: 0033:0x7f49bdb75bd9 [ 361.362944][ T8166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.382562][ T8166] RSP: 002b:00007f49be862048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.390986][ T8166] RAX: ffffffffffffffda RBX: 00007f49bdd04038 RCX: 00007f49bdb75bd9 [ 361.398958][ T8166] RDX: 0000000020019780 RSI: 00000000800448f0 RDI: 0000000000000009 [ 361.406927][ T8166] RBP: 00007f49bdbe4e60 R08: 0000000000000000 R09: 0000000000000000 [ 361.414900][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.422872][ T8166] R13: 000000000000006e R14: 00007f49bdd04038 R15: 00007ffddfe2c448 [ 361.430852][ T8166] [ 361.434173][ T8166] Kernel Offset: disabled [ 361.438501][ T8166] Rebooting in 86400 seconds..