last executing test programs: 13.237488168s ago: executing program 2 (id=1922): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x3) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x3) syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x0) (async) syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) r1 = syz_open_dev$video4linux(&(0x7f0000000540), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0585605, &(0x7f0000000080)={0x0, 0x1, @stop_pts=0x6}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x9, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000100)={r3, 0x0, 0x2000000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000180)={r4, 0x3, r2, 0x6}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x2}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x18}, 0xc) socket$inet6(0xa, 0x2, 0x0) gettid() (async) gettid() timer_create(0x7, &(0x7f0000000300)={0x0, 0x41e, 0x4, @thr={&(0x7f0000000240)="1f871954321436624389570d43f8ae050de3bd2bfca6d531f5a530a57f94382c1e8e38a640a6d08d1c77648659f217207faf0de5a4681c18f045be48ca4908a856358e4e56d370d6bd751a0e", &(0x7f0000000440)="718a757c2d20488d6644b9b64a0437e0f49e61bc258be3c5f0cafdf2d128a073683d55b872f2f9385fb709837e85fd6b8f1bdb811df7c3086aba59a5263cac4aaa"}}, &(0x7f0000000140)) (async) timer_create(0x7, &(0x7f0000000300)={0x0, 0x41e, 0x4, @thr={&(0x7f0000000240)="1f871954321436624389570d43f8ae050de3bd2bfca6d531f5a530a57f94382c1e8e38a640a6d08d1c77648659f217207faf0de5a4681c18f045be48ca4908a856358e4e56d370d6bd751a0e", &(0x7f0000000440)="718a757c2d20488d6644b9b64a0437e0f49e61bc258be3c5f0cafdf2d128a073683d55b872f2f9385fb709837e85fd6b8f1bdb811df7c3086aba59a5263cac4aaa"}}, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000500)) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x342) (async) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x342) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x0, @multicast2, 0x0, 0x1, 'rr\x00', 0x36, 0x40, 0xfffffffc}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x0, @multicast2, 0x0, 0x1, 'rr\x00', 0x36, 0x40, 0xfffffffc}, 0x2c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = mq_open(&(0x7f0000000180)='\xad\x9e\x9cEq 4\xdd\xab\xc0\x02x\r\xb6\x03J#\xd8LK\xe4P0s\xf5\x10$R\x04\xf4\x18\xbc\xef\xe1\x9b\xb0h\x14\x8c\x99Vf[\xc3\xb2[\x03\n3\xb3\x15\xdf\x90T\x16XLh\x9e\xa52\x1b\x9f\xa3\x8cs\xb1\xd8f;\xbe\xc7\xab\x04\x1f\x10G\x1a\x01\x95\xcbV({\x8a8\x10\xd3\xa2\xcf\b\x05\xd6\xc8\'q;\xe7P\x9dc\xf5\xbfp\xb7`l\x82\x04\t\x93\x9f\xab=NX\x89P4\xb8\x8a\xe1\xa8\xb8\x1e_\x1f\x18\xc1\xae\xa8', 0x2, 0x0, 0x0) dup3(r6, r7, 0x0) (async) dup3(r6, r7, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 12.204120613s ago: executing program 2 (id=1929): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, 0x0) read(0xffffffffffffffff, 0x0, 0x2006) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) 11.83307512s ago: executing program 2 (id=1931): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)=""/157, 0x130, 0x9d, 0x1, 0x2}, 0x20) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0xe4, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8], 0x0, [0x8, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c79], [0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x50, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4f}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x61}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}]}, {0x4}]}]}}]}, 0xe4}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000001280)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r6, &(0x7f00000001c0)=""/4068, 0xfe4) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r8 = socket$inet6(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)) r11 = getpgrp(0x0) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010200000000800000001000000706000000", @ANYRES32=r11, @ANYRES64=r10], 0x1c}}, 0x4000800) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 11.54731749s ago: executing program 2 (id=1935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0107000000000000000020"], 0x1c}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x18000202) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x150, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000}}, {0x0, 0x0, 0x8, 0x0, 'group_id'}}, {{0x3, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}, {0x0, 0x0, 0x8, 0x0, 'group_id'}}]}, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x0, 0x0, 0x1, '8'}, 0x0, 0x0}) r10 = dup(r8) write$UHID_INPUT(r10, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1006) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{}]}) ioctl$KVM_NMI(r12, 0xae9a) 10.209525275s ago: executing program 1 (id=1938): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=@delqdisc={0x160, 0x25, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0xffe0}, {0x5, 0x1}, {0xb}}, [@TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x9, 0x6, 0x1, 0x0, 0xfffffffb, 0x9, 0x2}}, {0x8, 0x2, [0xfff, 0xc34]}}, {{0x1c, 0x1, {0x5, 0x0, 0x4, 0x2, 0x1, 0x8, 0x9, 0x2}}, {0x8, 0x2, [0x5, 0x5]}}, {{0x1c, 0x1, {0x7, 0x4, 0x8, 0x5, 0x2, 0x8, 0xffffffff, 0x2}}, {0x8, 0x2, [0x7fff, 0x1ff]}}, {{0x1c, 0x1, {0x6, 0x5, 0x7, 0x69, 0x1, 0x5, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x7, 0x0, 0x80000001, 0x1, 0x914e, 0x624ef7af, 0x7}}, {0x12, 0x2, [0xfff, 0x8, 0x1ff, 0xb9c0, 0x5, 0x861, 0x101]}}, {{0x1c, 0x1, {0x1, 0x3, 0x5, 0x9, 0x0, 0x7, 0x7, 0x2}}, {0x8, 0x2, [0x402, 0xfe00]}}, {{0x1c, 0x1, {0x5, 0x6, 0x9, 0x1, 0x0, 0x7, 0x0, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0xa, 0x2, 0x10, 0x7, 0x0, 0x10001, 0x800, 0x9}}, {0x16, 0x2, [0x7, 0xfffb, 0x0, 0x200, 0x9, 0x0, 0x9, 0x69e5, 0xfff]}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000800)="ac38c62deab683b6be4047419a10251003605b50868d7be6d8f1c8ca3208cc3b086f54b83a36b6ba9e9d2c5bfc0421de1abcfa9574c1881561d4f3593c3932ad4c61d989018917abb9aa90a620000b5432187c5e6771ce5d20d94a1182e1adc9bdc12e53f6c8d374bcbfe04f498c2f3b6379b8e4957a77d393da334034b33edfb4c217c504d77afe842be54c52ff793b11b56ac4e96b61bf07e353240826dec5cd88fcac9f9dd61d8416d6779c3e74d54da63e6f0a60543a60dfa78b4145cb582d83262800b4f5fc9405ffc7f470237fdb0468b17647d2cca5196bdd50cb478b990c896d460b37d7a66cf82b53812cc798bf4c797041cbcc0292647a", 0xfc) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99bfa00180133070000000f0000bd30", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f00000004c0)=""/120, 0x78}], 0x2}, 0x0) sendmmsg$alg(r7, &(0x7f0000001800)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5290d6f433d8288dc4ef47", 0xb}, {&(0x7f00000001c0)="75bbf8406512d05b5f0d20e228166f9c4e9e6b75da23168a98e3210fb20935c7df492f0ff5", 0x25}, {&(0x7f0000001540)="63c1ff49a46eb98a92633cc56009763af40a1bd25c8fcb39cb77d837dd3273d7680153e15dd3c31c623317c6ac5d7ce3e5e68ef6a5e83a0f213b6a15e3382c10593432eae28d401625a52906e10746d0e3d257574804e669234515db2fbd670c9e60c24900b1e4a651da7f25e091f6e1640000000001000000edfb30056a27f93f059b6de2fcd74d6d05382c303e1791df856f176033efb109af22e8eef1501a9865b3f71706c0500c16be3da4", 0xad}, {&(0x7f00000003c0)="f7d4dc4662ea8511eba6de311789de2fd0c169fcb736bc01d4ea1af2e242d63fc506b15d9d198ed5f22d10", 0x2b}], 0x4}], 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r4, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f0000000700)=""/231, 0xe7}], 0x4}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r9, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) readv(r8, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x60, 0x32, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x60}}, 0x0) 9.293763653s ago: executing program 1 (id=1942): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r2}, 0x20) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000000)={0x0, 0x8, 0x443}) io_setup(0x800, &(0x7f0000000440)) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff9000/0x4000)=nil) io_setup(0x2007, &(0x7f0000000200)) eventfd2(0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6020000000442f00fe880000000000000000000000000001ff020000000000000000000000000001042081000000000000000800e30086dd080088be00000000100000000100000000000000080022eb0000000020000000020000000000000000000000080065"], 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0xf4, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x1, 0x1, 0x0, 0x30, 0x9, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x9, 0x24, 0x6, 0x0, 0x0, "a598dd3b"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x40, 0x1}, [@country_functional={0xa, 0x24, 0x7, 0x40, 0x0, [0x9, 0x7]}, @mdlm_detail={0x93, 0x24, 0x13, 0x0, "060f26efd3f6c543a6a0ec345a18e0d5524c87b072eaea79404a6931cce2b1c213ce0be9a1964d03e1cdd672d4c7da555368f56fc1c71753a9db54e5d6016cb883fec9e3b2c7ccdb24929424e3d4c983fdd9d2562a9ff8928ebaaaa7ae3a0d1c71d541e1e52f4bd114e7cbd062b232865af3a2d2339bff286090d19d8942528cc730af54dd87fc5f360024dbc7fa45"}, @ncm={0x6, 0x24, 0x1a, 0x84, 0xa}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3d, 0xfa, 0xc9}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x1f, 0x0, 0x0, 0x0, 0xff}, 0x39, &(0x7f0000000640)={0x5, 0xf, 0x39, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0xc0, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x68, 0x4, 0x40, 0x1ff, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x3, 0x6, 0x7ff}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0xff, 0xf, 0x6, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x0, 0x40, 0x8}]}, 0x5, [{0x14, &(0x7f0000000300)=@string={0x14, 0x3, "b303d3cc54b144f4feb8443318ab54f775ad"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc16}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x8d, &(0x7f0000000400)=@string={0x8d, 0x3, "179a3c7ffb332e50dd0f841b8e13b9aea5594cb0aefdb7c40bb1e45f3e3320093cae9abba186f9352fdfcf7d54437290397d0b0cfde14c2feba3e5597fe111dba30584ee811ced0d720accb9c46ac8a1ed6deaa22d4714c28cea81ad530c81ec46c8933bc32c4af5a2529ab4259bbda1b5d81daaafef574bc2e0741614bb59f4ec2c9973ca712f35554df4"}}, {0x60, &(0x7f00000004c0)=@string={0x60, 0x3, "7d16be1e11910d7cafc576aeb30f872005a4f630ddf4f468ee01c4aa8b78aed8aaa0c62e9f0a732297ec926f8de5e7ae83fcf50875995ac8dd9f000d9499bed67af9f66899b14a0f8b7b14fa4e2428d34c86b43f258f3b471f93be9f232e"}}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000079"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r5}, 0x10) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000600)={0x30, 0x5, 0x0, {0x0, 0x6, 0x1, 0x2}}, 0x30) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r7, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) 9.261808092s ago: executing program 2 (id=1943): fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r1 = socket(0x11, 0x5, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xa4eb, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xfdef) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x1}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000200)={0x0, 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x68, r8}}, 0x20}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000280)={r6, 0x80000}) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22, 0x3}, 0x1c) listen(r10, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaade9ea3f675c186dd60083ff200540600fe8000000000000000000000000000bbff02000000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0000000907800001d12"], 0x0) r11 = accept4(r5, 0x0, 0x0, 0x0) sendfile(r11, r4, 0x0, 0x7ffff000) 8.881594433s ago: executing program 2 (id=1947): socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="140002010000"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) preadv(r0, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/34, 0x22}], 0x1, 0xffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xc50525bd63f44c3b) unlink(0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x8, 0x48, 0x8}, 0x48) read$FUSE(r2, &(0x7f0000004800)={0x2020}, 0x2020) lseek(r2, 0xfffffffffffffff5, 0x1) read(r2, &(0x7f00000003c0)=""/149, 0x95) 8.474412146s ago: executing program 0 (id=1949): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0xff, 0x3}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 8.321894573s ago: executing program 0 (id=1950): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb9a}, 0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) write(r1, &(0x7f00000010c0)="fc0000001c000704aa5b25098000000000000000010000007b01481093210001c0f0030584050060100080000000039815fa2c34c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b2dd", 0x77) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x0, 0x4, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x64}}, 0x0) r5 = semget$private(0x0, 0x4, 0x0) semctl$GETPID(r5, 0x1, 0xb, &(0x7f00000001c0)=""/123) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x13}]}], {0x14}}, 0x44}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d7401097307733960000000109021200"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000001040)={0x0, 0x0}) sched_setscheduler(r8, 0x6, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x48}}, 0x0) r10 = socket(0x2, 0x80805, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x8, 0x0) getsockopt$bt_hci(r10, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 7.668645591s ago: executing program 4 (id=1953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000030801020000000000000000000000000c0004800800014000000000050003008400000006000240000000004af2ef08a0150c7d3e5e541b77229309d3ecd1f2160c83c978f1ae2517c551120ce770d04dd5c4cb9252df1705da97a9ba629a961f9488165e2f2b12bce267514b9ce6a4acc0f389825605127d5cd63dfc3ee0e1c59e69855bba011172ee6a73013c88b3ea679eefb6ee4fe08c3c7c9c66711257e3"], 0x30}}, 0x0) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = memfd_secret(0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map}, 0x10) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES64=r1], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000020000000000000000000000001d01000005000d"], 0x1c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRES32=0x0, @ANYRES32], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x1c) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x1000003, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) sendto$inet6(r2, &(0x7f0000000580)="03", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7.073263788s ago: executing program 1 (id=1954): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x8014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x100, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)="abe7443abcd4eec0e80b1ee1ba8ae3bf5a4c0abd4018e4b24681a6b2ac6aa5584805678d885041a7ab94239068e570d8a16e51493102984cb24567267d53525b0bb351cb6056a30b887122aaf224ec4a51a7f3bc1a31f8b246f796dcb50849422b13ccb40a7d93bf0ec6cf5516d5d5116d3384e6141c91cb0c5a9bdf7cc019f5", &(0x7f0000000340)="72ef3643a9c8450ea968a6c998a5c8571aec6fe77967a93f1d79236ab969745397f8e988a9aaebfddf2a562c2b9521535e3b4ea33dda0411bbdab6640f90fb4610", 0x1000, r2, 0x0, 0xa0023800}, 0x38) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2002, 0x866b01) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @private}]}, 0x20}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x10, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000002640), 0x0, 0x0) lseek(r5, 0x4, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) 6.475765926s ago: executing program 4 (id=1955): r0 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000095af324044060f8077c501020301090212000100000000090401"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xf9, 0xfffff034}, {0x80000006}]}, 0x6) syz_emit_ethernet(0x20e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6ccddd7f01d82bfffc010000000000000000000000000001ff02000000000000000000000000000188"], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x7, 0x1, 0xfffffffffffff0df, 0x3, 0x6, 0x4, 0x353, 0x40, 0x396, 0xf9, 0x6, 0x38, 0x1, 0x2, 0x200, 0x8001}, [{0x3, 0x4, 0x64f, 0x401, 0x1, 0x2, 0x75f2, 0x6}], "e68f9e69672683ab1aa0001a3ca1c9d97f3351a4806a5e198f48046c714d81c29ae74cfd9e01245430a290f97d805ca4eff5ebaa66f263fd8bc80c5ed8a633b65ad3fe1785912c78ff0510", ['\x00', '\x00']}, 0x2c3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)="c4", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12412b22386ac961ca402d080001a22d000000010902120001000000000904000000fb92ad01cf3a39f635a2727ab8bf41d6bade918f14713005871ffb140d8fc78c2bbb9f2ee705431aa54456bb92f5a5833eb71c43a9e1318c55726f17fe"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1000, @private0={0xfc, 0x0, '\x00', 0xe}, 0x7}], 0x1c) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008002e000000000008001c"], 0x3c}}, 0x0) 5.673307983s ago: executing program 1 (id=1956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008040}, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010000c0000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a310000000048000000030a010100000000000000000a00000008000a400000000314000480080002400000010008000140000000050900010073797a3100000000090003"], 0x90}}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64=r3, @ANYBLOB='F'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xf8) r7 = openat$cgroup_pressure(r6, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) read(r7, &(0x7f00000001c0)=""/230, 0xe6) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x28, r9, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r10, &(0x7f0000000240)={0x1d, r11}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f00000002c0)=ANY=[], 0x118) write$binfmt_script(r10, &(0x7f0000000100), 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x154}}, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x40045b17, 0x0) r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r13, r14, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000001c0)="660f38f62bf3ab66b8a77b9a660f23c80f21f866350c0070000f23f866b8008000000f23c80f21f86635000050000f23f8f30fc7b6491666b8010000000f01d90f01c566b8010000000f01c10fc6ec09660f38822d", 0x55}], 0x1, 0x0, &(0x7f0000000280), 0x0) 5.101433296s ago: executing program 0 (id=1957): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0xa8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3b}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc, 0xb7, 0x68, 0x40, 0x45e, 0x283, 0x990b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x5c, 0x29, 0x1d, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r4, &(0x7f00000002c0)=ANY=[], 0x15) splice(r3, 0x0, r5, 0x0, 0x19404, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r6 = syz_io_uring_setup(0x48be, &(0x7f0000000000), &(0x7f00000011c0), &(0x7f0000ff4000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) dup2(r0, r1) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000001c0)) 4.212287037s ago: executing program 3 (id=1959): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfeff}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x68, 0x800, 0x0, &(0x7f0000000200)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) 3.197681501s ago: executing program 4 (id=1960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00120806"], 0xfdef) 2.347999528s ago: executing program 1 (id=1961): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400), 0x24, 0x0) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00') r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x2}]}}]}, 0x3c}}, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f00000000c0)=@usbdevfs_connect={0x4}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000080)="02", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) shutdown(r3, 0x1) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000200)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000040) 2.190806093s ago: executing program 3 (id=1962): r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x0, &(0x7f0000000180)={0x0, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) socket$xdp(0x2c, 0x3, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_NH_ID={0x8, 0x1e, 0x101}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_SRH={0xc}}]}, 0x34}}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x1) flock(r3, 0x2) dup3(r3, r2, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x1010, r2, 0x0) mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) 1.985017548s ago: executing program 0 (id=1963): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r1 = gettid() r2 = io_uring_setup(0x7fe7, &(0x7f0000000140)={0x0, 0x0, 0x3000}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18bf9a6ca711e64a91a970310000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="5a003300800008000802110000010802110000015050505050500000001000000000000000000000010005030000003c040000b7002d1a02001a0000000000000000ff0003001d000000010001010000057107010101000000600000"], 0x78}, 0x1, 0x0, 0x0, 0x4005}, 0x0) io_uring_enter(r2, 0x0, 0xe257, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000000), 0xffe000) r8 = syz_io_uring_setup(0xd5, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0x9b84, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x10000000) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r11 = socket(0x200000100000011, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r13 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x0, 0x20000070], 0x0, 0x0, &(0x7f0000000040)=[{}, {0x2}, {}]}, 0xe0) bind$packet(r11, &(0x7f0000000040)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYRES16], 0xa}, {0x0}], 0x2}, 0x8000) r14 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r14, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x5, 0x2, 0x0, 0x0, "000080000000e200", "0100", '\x00', "97ad3700", ["fdffffffffffff7ffaff00", '\x00\x00\x00.\x00', "0000efffffffffffbfff00", "3bf100000000000000c48400"]}) r15 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800010007080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) 1.929348898s ago: executing program 4 (id=1964): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x200}, {0x6, 0x16, 0x9}, {0x5}}]}, 0x50}}, 0x10000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'netpci0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x51}, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x80000000, 0x4}}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x58, &(0x7f0000000380)}, 0x10) clock_gettime(0x0, &(0x7f0000002700)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000002640)=[{{&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000004c0)=""/148, 0x94}, {&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000000640)=""/90, 0x5a}, {&(0x7f00000006c0)=""/252, 0xfc}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/14, 0xe}, {&(0x7f0000000880)=""/22, 0x16}, {&(0x7f00000008c0)=""/72, 0x48}, {&(0x7f0000000940)=""/132, 0x84}, {&(0x7f0000000a00)=""/43, 0x2b}], 0xa}, 0x6}, {{&(0x7f0000000ac0)=@ax25={{0x3, @default}, [@remote, @rose, @bcast, @remote, @null, @netrom, @default, @rose]}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/44, 0x2c}, {&(0x7f0000000c40)=""/66, 0x42}, {&(0x7f0000000cc0)=""/83, 0x53}], 0x4, &(0x7f0000000d80)=""/243, 0xf3}, 0x7}, {{&(0x7f0000000e80)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000002140)=[{&(0x7f0000000f00)=""/84, 0x54}, {&(0x7f0000000f80)=""/193, 0xc1}, {&(0x7f0000001080)=""/99, 0x63}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/44, 0x2c}], 0x5, &(0x7f0000002180)}, 0x6}, {{&(0x7f00000021c0)=@ax25={{0x3, @null}, [@remote, @netrom, @bcast, @netrom, @bcast, @null]}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002240)=""/220, 0xdc}, {&(0x7f0000002340)=""/60, 0x3c}, {&(0x7f0000002380)=""/181, 0xb5}], 0x3}, 0x3f42}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002480)=""/61, 0x3d}, {&(0x7f00000024c0)=""/177, 0xb1}, {&(0x7f0000002580)=""/44, 0x2c}], 0x3, &(0x7f0000002600)=""/58, 0x3a}}], 0x5, 0x10100, &(0x7f0000002740)={r4, r5+10000000}) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000002780)) r7 = dup3(r3, r3, 0x0) setsockopt(r6, 0x2, 0x7f, &(0x7f00000027c0)="ec48f492712825c9b93f824f6ce103af07ad240a902330cfe17060c3094c3a50199c2029619fc5b3c3a805696d0f087a47cff50ae8f871c26428f7cf09dd456eb8496565c301d611ca750198359666c1a002f06bd0fd92cdd550d4c28ba99117327bc181bbd27721c9592850b72513791bb231f8584740285b3ca943b6b8d3f22d14", 0x82) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000002880)=0x0) sched_setaffinity(r8, 0x8, &(0x7f00000028c0)=0x6c48) r9 = getuid() lstat(&(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002b80)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000002c80)=0xe4) r12 = openat$vhost_vsock(0xffffff9c, &(0x7f0000002cc0), 0x2, 0x0) fstat(r0, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpgid(r8) r15 = getuid() sendmmsg$unix(r6, &(0x7f0000002e80)=[{{&(0x7f0000002900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002980)="892bd78dc8df65af96583d62a7055afa6a1115195aa4368abc5fbcf9d34d68ebf4e4cdc80a8cf59fea47842ac1e4a504e606f86559d83ba2b011c73a7d479763293cc2202a1080c872c34bc693d788962e7fd3e7dd23427ddc0f53ef9281fcbedf66855c93bf476ec6d790b731e3af67c42a97d44afdfc8b8ea331771f133ce8534dc538fc27fc9472a4917a2167fa1a0943a9414cbf74b52f1a8aef86b41d658de054f6002e3f1fa50f7ea6b01c90351f8dafffa1b0be3b755da55f19001ba3d424e63cdc5a0356fc76028d949549cdd06b1fbd78ee5ebab38e0422a6fe5eec2da0835dc12ab078a62077aa6f8070", 0xef}], 0x1, &(0x7f0000002d80)=[@cred={{0x18, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r3, r0]}}, @cred={{0x18, 0x1, 0x2, {r8, r11, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r2, r12, r2, r7, r6]}}, @rights={{0x18, 0x1, 0x1, [r0, r6, r2]}}, @cred={{0x18, 0x1, 0x2, {r8, r13, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {r14, 0xee00, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {r8, r15, 0xffffffffffffffff}}}], 0xc4, 0x8814}}], 0x1, 0x44844) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000002ec0)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) r16 = dup3(r0, r12, 0x0) accept4$unix(r6, 0x0, &(0x7f0000002f00), 0xc0000) fcntl$setlease(r7, 0x400, 0x2) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), r3) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r16, &(0x7f0000003040)={&(0x7f0000002f40), 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x20, r17, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}]}, 0x20}}, 0x0) 1.769162326s ago: executing program 3 (id=1965): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a0001f400000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1f4fa2f4c3f2de9d7f13d59f3544d5d1a2e990732eeac604b531677783f8ab52b61be438691134fe25d07c6273975158e756b864992ace7289279a0ad66e16a824a70caaed96b367e65e67e07422a4f0fa42160a6ddc582870f6e579c0e1251ac3c41db5d98c5cfd9bf9c7a5e65c7ec61df594eb1177f47dee661fe6db810a74d9f976eb7612882786a912c0083b8c80a03cf81d2fea72e0817575a2229ee168002e7d31c25974daa94419815dbdda9cb47265fc88f73bcbebad46280c15776aca3a08d7497766a730b22ec9695776faca2aacfbb0fc6adc41f92981ba730fd59f1754481f1bce2959beaba6f5"], 0x74}}, 0x88c1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/26, 0x1a, 0x1, 0x8}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/190, 0xbe}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) r6 = creat(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x814}, 0x20000141) sendmsg$key(r0, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a000000000000000000000000000000000000000000000100000000000000000200010000000000000000060000000005000500000000000a00000000000000000000000000000000000000000000010000000000000000767ed99f7743bb7e68cbd4dca73c801ba15236309435c81de4e026921d352a6e32efae6bbac1f00117c17a0e9ce31cd9b19b0abab057576784"], 0x70}, 0x1, 0x7}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x14, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, r11, r12, 0x0, 0x0, 0x8000, 0x7b46, {0x5, 0x1, 0x3, 0x65, 0x1fe, 0x0, 0x9, 0x2, 0x106, 0x0, 0x0, 0x0, 0x9, 0x0, "fe1daf6f74192ae516fc4b0000002900"}}) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="028600001a00000000000000000000001100180001097a004e6ffc55750588e15f3d8eda24b1e7656407871ddb1d454add29f73eb4deb2ba013f26ecbda0b1019615bcabfe7d06a372d90d4e1e1186ed100325a3d0558353c87a03893a9eeb5b790c196ee0ae5737ac0340163bfade35245f053e96f65989559d0243de1d67cc21528c7adf0c01986e20f3cf00407a3a4698000000000000030005003c80000002004e24000000000000000000000000040004007ae400000100000000000000e4040000000000002594000000000000"], 0xd0}}, 0x0) 1.765116096s ago: executing program 1 (id=1966): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x200080) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x1, 0x30, 0x1, &(0x7f0000000240)={0x12, "6bf69148b93c5513dad1db1a9303411425c80a8efd21d724d7171b4793d87ec7a5"}}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x3, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x2) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x10, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 1.477410778s ago: executing program 4 (id=1967): openat(0xffffffffffffff9c, &(0x7f000000c380)='.\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000004000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0x6, {0x25a80917, 0xe6000000, 0x81, 0x8}}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x800}}]}}}]}, 0x74}}, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) memfd_create(&(0x7f0000000540)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000140)=0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvfrom(r8, &(0x7f0000000100)=""/202, 0xca, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10) sendmsg(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)='4', 0x1}], 0x1}, 0x0) sendmsg$tipc(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000100000008000a00", @ANYRES32=r7, @ANYBLOB="14003500776c616e3100"/20], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 839.166585ms ago: executing program 3 (id=1968): socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="140002010000"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) preadv(r0, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/34, 0x22}], 0x1, 0xffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xc50525bd63f44c3b) unlink(0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x8, 0x48, 0x8}, 0x48) read$FUSE(r2, &(0x7f0000004800)={0x2020}, 0x2020) lseek(r2, 0xfffffffffffffff5, 0x1) read(r2, &(0x7f00000003c0)=""/149, 0x95) 759.093808ms ago: executing program 0 (id=1969): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="0000001409000000", 0x8) 397.407455ms ago: executing program 4 (id=1970): syz_usb_connect(0x0, 0x32, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x7c, 0x96, 0x5c, 0x40, 0x2013, 0x251, 0xe86e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x5, 0x5, "839935"}]}}]}}]}}]}}, 0x0) (fail_nth: 11) 396.902051ms ago: executing program 0 (id=1971): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfeff}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x68, 0x800, 0x0, &(0x7f0000000200)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) 353.480919ms ago: executing program 3 (id=1972): syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x128e, 0x13580}, &(0x7f0000000040), &(0x7f0000000280)) r2 = eventfd(0x80000001) close(r2) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2a66, 0x40000) io_uring_enter(r3, 0x5ad0, 0x0, 0x0, 0x0, 0x0) openat$pidfd(0xffffff9c, &(0x7f0000000200), 0xa001, 0x0) bind$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1e) syz_open_dev$usbfs(&(0x7f0000000100), 0x92, 0x40200) 0s ago: executing program 3 (id=1973): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002080)="6d797d42fb74562ec642068eb410c60f8cdc42cf09864b1dd1d244ec3ecfb9103306a02bd120cd2c684eee7cd734914ad7ec2bdd4402eeab7a2972f1672f126c4b5f6c5ff748548170bdf1020c2c3d09186940feb185436981cd578c3a2bdc19c16209468100cc1d67247885420cbc0ea004f07283bc4a5cf8499ad5ef4df93b2fa2eb26895ed9260cc61afbc766adadf7809b3a8f76d9f835acae2dac8abc42896374a6a82a8894552441bd0202daa10048b49d3bc74bba1e5258ab8ac5169facb96d9f68705a7709f6d9a66a9988c13d13a2b8b34d9f234e1c5fae79e4cb76ff3102184ed9032d2402087dcb3eff6bfac7bc4d2fdc9ea25f5289d52ed75ffcd83a2781eb4a23fdd078d1e53495305e3ed5bb4e060e89d6eb2b13586f7f5df32e34390d70f074b4f92c4624312698d86578f3d951021db151806fc314c98d819604d8d9572efc7dd71c0d1a9176ffbd48361908e927e03caa4c1ccc805fe755e616d983442660299e9dd34e5612eff964a45d613a832a0ef8e4410fcdb0313712795b369c08f907c91a4f20e5c18ff903e0ee410d77bc076f49debfd6e411104cace38e0318023527d1c54cec66790638c9ee70c29de0406b3483ca1663245edcda56dc9612e93f40f19cbde5cabb8816d7b75a266e404a8e5364d43c08cf5cc645b533c4b6fe349819c5374fac7a923a7a803ab138c873aee3718921043a60a0ce84df8b991dfa525f0955acbc866182f2409d032981ad824f037ef068501f955898c4500049f0b30014832e3b668f5873305ebd1e094f244caa90610be83a5f674decf451a82d9edca6664da89cad8dc212943828570fb365b41993f89c6d36c579157c4055a77eb1dad1dc466e743129e5e3098f4432fbe289111e102223ff04d02e8108b0925ce76118445efa09233e579f398ab373303c0bb64ff82ddb597040e58a61f82cc5614beaec13ed297a8daa9514468283037e5d0077c9803b69421070718fba4865e4b9c6d7d272c562cc4dd998e16fe288dac68b0bdf05eb2a02fd40b900944d10a94f2b3be9b6c6dc628044aa9eaf34e0474771c10bef03f6af2029643acc1e97efa0748cfca63aa9546bbfa6d7533c4dab0b931ac35b331aef91a80d5ea08ba35cf66e1779298d3338114c12f024970d12af8d67f9b165c15a8b7e37c14c2d512dca76cf6077e2011bb47cc993f3088027b2d53daca574e8b443fddf5c252788854be8aec357db43f2147f23061641d2910a4a503a3a9ca86b3656d37d443e5e4207bb38b6e8879bf3de21309eb90113ccaa75e1d1e0900efc17aecd35078b8f3d579d2d4fb576127278290d6a9ea379e22dcc4ad369d3405311efbc74702020d6cdb31267c2e4dfc6a34bf39c9db32da7f387760909843fbd02e9e291e838fcd8faac4c9ad909cc19440bb775070496ef69250f4cf90372c0f1835dacd4d605a69334d73b1228cce41fe3c6457a37531bbab6d8b15a8214ff3002d29016932de969f05ed64b720ad249b8164ea82fde08303277e7d5f0d3e86bd6021024bdb1d24afe3ae28cece041943db60034fa11c3b6ec7b09c117b086fa4016e68e46678a7c5e91c40d2866295247276109a8778b043b51ffe3ec33dbb665806cf6ca41e7143885b6ca920fd8caf475ddcc698a09d368c721f048efe9e0d372d9cc58deba32f81e7e7f6d53209050d72545bbf04356ea95c9bcec3b8b87f56963111c5454b30a12b8479afc26361a7e00a66c03aae8ebc3348ac2e9b0f52453a32efa9b8ec038e671122dc2965d3b7395051974088f4aa47a76327a0dffce6db0a2cd65e2da5539fd7673911d5605cadf30d85563a60afd58767b6adc549173818de01b0de192894a76bc4e62d8c9e341729e6ef37574cf63c27674081202b8ab9cb9d92d346b1c2dadb253532c1674b2440504f8430c0a2ae5829b016af877831ecce9b13743e821436a6c1c46a1176922dbf2721d9722edf72817f8d15fa5c7ecad046df91bb57b8d16244527c855a40403ddf1757c31361c8bec9b5701b5c10a1e96547fa2c93e03f264a366a96666e24d7f908f6fa4c3f26722961e70adfc4ccd413c2c05adeda400de500babfb80a4e4ae5e9e04444c55f006337c0a98c33f04ae0a6620a1acbc26b5c7d125c30ca542c64604a109c6022029da452a717b219456cca6bc9959f088a5f2360c390b531baf92ae2429a2d0b6c7a20c137a3a0050ae2216b871c03c56410d28472d1035bb870f94589b93ceb57a504bba5acb7a6f77699fc10ea96d8e8fb913ca78c0af33a8435344b71531207344d78ac349894aab972c1b471d52b266bbe4313ef2ba71e7a4680ff442a358699c1e18322dfd50c55b637b6e6d5f02fa61b0e8ae4ef7cbb6359f70028a6b60fe901b2ad97a62b5d527efaf5ebe23fccd80d80e02eabb1be14d40faac8a56b4785fe47c8ff4ac4ad7fcef2134b1ec599074dd45d2b7a5c45845787e0490d9d7db95b58b18f14ae6ccc39623ba0fdf64c8d027f1e7652cc90e82732d4292f4ab0f959a44ff906484fcf83e222088345541ba2b1c50b63711d8adb63c8556452c142de8a06f4b28a86f629cc1dc713dcddcfebc8b1420a603fb970ddaedfc82250637327beb5c0ad04947477bc9aec0914cd78cbf5060e4ef7806b3443c85dbe79b8e87807b1a8d141583998c412d89c23dca4aa16af321dead51a12a73be98bd8ebb4d58b3ccd2d67ec936f2596afff2ba4166015aa4cc6c433acf33df30e3d40a0d6468944a07d1f9eba1bb9eb03dbfb42ba790dc1e7f66ad1834fad94440bffe3879509120b6a5cd1890281bf0f4c2d1be00fbe6b2d09ebdf594110f2bda035262d4830dbe64aa3152612df991a6fe1d035e0b301cf527d74140c85ad79acc001fd2ddb3f283c21e8d253c6c4685584f753e01aae2dee4158c68e2e612f056eb602ad8199d84784e05b363292956247d1fd8e4201330d6060d66e10e316143015908554e5325550d61b8af87a92237edd75cf687919ed0164de95042cbcfe96b9102fe3b71f43bbb1fc24d9d2d0d81dad29ac18cce353ca7c4a7c32e12e451654addc5dc6a44d001c40913eaaf14dacab7037a68e9875ae51321d1852820794206fcc1cdd51443d5e3fcd1dc4dbf728d1ed8dc29437db0154c2f59d1d0d0b0048cb56ad965682afeda337b172cf6a77be36ab8424b919e493628846bbf485d5fefd73228e40295fa2070027f6f2ed565024b82d1058a1be0d0c364b765f2a58f382e378692d1ca4fc7f09f867ed4684dd82dd4c76e0e640f5f87d1c6c2fafdb733f1cef6572cb5e104ae9c94d26c81cbc9a5fd8fbe61ddbdc683b7f4030132b932abf0d66afafc9a9d3121f0ed962a14294bf0ba7b1d33d7808efa427b5531cd881b5c87ec159bc9557009d9762010a497ad52b57283cde9715b48a3e35a22aec3730a0cb476a59f438684346ce0c14f22d5f1e5826d3f670e9ef60f6dd51a11fd32eed673b9d0a12d8eeb8046b96c51cfc54c21b2c48c4a89273963b8345b01159f53f6b6589333afd871875b930d7a4e2e1f5dfb44157ca004a739b0e98562c83b1d8414220f677f2882ef6ab1039fc5f132d7f55046d0c9545033624338e2ca6bdfcdd9d78306818c6214f524a7d036c80b5506f97fe383c1cae3c73dd2a0c628bff47d13dc7d9f88a3c1bb84ccbcb82fd881c6f5e9aa7516bec86fd6bee49f4db3bbf468922f1ef37c499b011e36173edc0ccb92d13dda668cf88bb99649e606fee23d3d3bc1fcbdfb40c7d4a4a60b89c63e65d02a283137561ccacd0c71cf70c6f039ebd1d29cd58571fa07d74187a7931d3d8b7db3062594b696b0e11a587724440bd77aa01fbe26a031a4c3f16ef3ba7f7544d01e8b7dd0b74f3025fe54cd01be16ee80ab0cd7c56671390f2e9bd62b212cf3ff58da7207846bacf85858130a89a2cb45da85b3ee574e8bb43c6642a3060b6f07228951aeab0fe4f4099b86bf07ec39262acca7319df3d5d057baa794234b89eccf36da5d32e4a5283386a0a271be30f75917ffd9f6d96eb8b50a7f6a0b861c5d12a624f3630a18e3bc94eb58bc835cef0a1b77952df6443cc12f221fb8460f4862f382abe13b409056644ec46fde96e1992e79ec0acdf3066f77bbcd6cf1a24d9b49ce84bd3bc58cd898da801d6b1ab12fd7cecc29894b98d616ccff855116a8985653ca88722dc00aed777dfe1839251be42716824dc0c40b6548319f613faffb2f1900a1f563724b0dcb7aa694110d268e945747d860d4bcaba7837342e3d7f207547ba8c093e8d2a1a5e3e098d19343de5fa773642cfb1a2e49f98df7e13254787cc35b2d689db16e551917c0db1034b175d1f4647c35c4cfe8a871cc7983b052050be9d24ed6e6f70d9d4b7cdebc9ba7a761b8c5f2207761a6fe9db5d4ac975dbe398ae05ed180f028037f2d9684dd3b28135e150db8a8adc6c34d0cca2cb95e6babf8702f26062d0ff0f88fc915caee5597a006e211c61f6fa4ca685e79655af85cb3489f94cd9836af4b80cd20ed23ed8f3f4107814407715b471354c5274595963b00482f3723ca88f4eee346c78bd29d65899163d848c9844991e976ff817120a13ce40aab11632b6fdd9d00acb82a5ac7769a0a7ed5d30ae077bf393f5de5b12114e4d1a32c7297bc5e14b673c78cc675b097d56f7a35c3206b1584996972153e2446465492528e0565718252139e1cf500f05a0ca529d58f5b91fa9bb2822c21248a7a8a92d0a7be5f4d249087176c7c23e27d72bd232fca3f7b36970daf2ccd64be4a798a6c30a068fbae324b4c158715949b37c3942f0eee35b90d2fe9d322420917532f6dceaf8633f4f9618f099ece4186e1adc1323b827c984ba54c887b462e169867c2e063fb60b7906434ef362200559e4d02413667dde0c6111750995824c316305f2ddfa3035ee09fdbc28c7f3c095f5a4382ce033746394a37b4d8a61ae8c7270d3863df7382a4786d7bed9543538166dfd01d122a384a7a3de7958c0272a35856f175fa29ee100d2a0f3a6dacbbe8702cf7e8d307ac0cc7921539a371a1c2e7f834db5a903069c07ff562fee851ac9cc3f2f045146db26b13401258733c67d820d06aa068b789300ac90481f84725311544e9a2363f2ce502c02c100bb41e18a103c79bd2bf14f6b52290fa60d978c284f927829b5027ae0ea842efb3450a8ddcabf0eaff6a6a8300de389e78cee73bd8de9a2809e346ff6c79dceca4277eee4b0dae1a3e1740f306044d6e67a5783e665f9637a8f8154f9ebecf95f48146c750826fccebbb1bef247666a710cd71dcf3ac3aa9d0bcbd4c4ad432bba642366e4a3b12981901358ee1d7babbb7e10737cbd8a1c159d8dd9dd521c48d2911ebb8162b51ea32185c37097c299c0e477914b49d04cabf5033a5a3660f829ce4dfb2f821e6cb19ce37df64f79eca0649ea8c6b41c6c5d08fb1dae021314609946310c833d08d46c026ddc5dbb7ac62f1123be2004729daa8156ee12bdde9529c7498c8d1a3fd59aa07b9ab7870c4e57b2f54dcc26edd206b28870cf346d741b46bcb508a5f9805ed63c6cb03a9334abfea33626b0681e59b1cecb02202c3190260b8e2963ee84d9a6b5e6be99cbf6a17e4a11e154c2a50d625ef1fd4690cb8e030e46e07c891e6db43626525d464302c44dbf65f71a485f9ea05c347b870bf63fddeaaa2336d9eca1d4c56e8a2734287f0f8a185bd8e3165a681175d1ee9d24f48c9182fd40179ea3d128c0b43c4e2c85eeefa4c932fcaf9297488a3d44e602477d94193410728a0ef0f6730e64b8cfb3e2235c6241d1252196f943d9eb9b2ce70f8c5cf21394875081f56ceb6749a8bfa43e0e545fbc6903b63c55b67ba1e064a682d58fb7117eab5407d1c998aa53a0ca190b0a4aaaa657299cee41be166a7622789b81cff0e892ba87c6ff22f29ed512ebe40cf7306b7597607de5c1c6fb2980a03cc0c6f396ecc27b6b5a3fb0a3f3375fccc397527797f6d1e98f9a873882f85a4e5b11eea65cddb12b0cec9e531a3b5de958963e20d8a520aa71588aa3ab92186e64a710ef07debe3fce6313ea69fd5bd45ca3d50e5c98ac632d5479bc0763b05509ffca67158ad8665cb858e4a8eae29ae667cfa8e39dbd15ca03846298faf7169187feae6e84deaee4ae51cd2016a867b3d11c4e6ec3ae39aeb8c8ec36a885e475f3e1e47e1fa464ef9569aba053cd066907a112612de411a5be0868543116f32d0781323c744dfeef87601981afe063122bac14b9059a68d9f356e85ec04c2767cbe79e245d7916daf222b5134ce684f7dec8fc0630cc9aeb5fbc38dfd19628ece15342c941e52be8abf0d82ed7b0b4bf5e6184edcae53949ef5987fd7fc479fc9921f2f332ae68f5dde23a3dd0b4713c3d18913edd9ce59870f7d50fdf33f3d2e8e5045d35555b4db5f48946e1b8d8d682f0c2bdd2d0de6bfff349e5e826cfb2d18d7bb43347362f13f5e80619451527bf0d3cc617881ef718466bf2efcb5f1404c573df09e00a5c0d1648b04860ee20d9e79d4ebac94a35e0a4919b1ab0db9e9dbdce1324223850e2e137ebb0c0e1cd690a3c5c9f8576538cba5e3831e6ba56809644e389ee984df3ea8e4743d5d03619b713c984fe8b43c589b78715b9147384b5bb15af8898cd82b31aca722cbe7938f119251d9142f2661f09b49f99d8988c66198dfb9db7f225086bed1deffa78995a56f905a7ab978a9c557ea1ad306bc0cd1cd8e5acaec1e4430a42068adec4a73f891c8010f0271c38685ca66c36313d15ab5bb6948c089b1fccf7fbb340eb03446a9bcda34b2d14a11e09f71e799fda19dd85293e2b0e2ca3e68145b4ea5705592562962cc6c0b65c88d06067903716656a0a7742850b956b609740c913f54225ae18ffb46162d6a0c1dac8b6c59541c8ef6bfcfa87ad59cb0e8ef6ef1d7f739c0a56cf975f9cca9ee89bac15cae197d02fc72505d23ebc6153491adccd22262979d2909fb8abd25683894e5a776824b81598a833e339a582b9ce3f8d7ce59fc3147eb3e92751867ee9c3506692b25b2d7f38d97280e85c01bf6d71a602d039aec747620d33660a9d5c9cf4010d01f9cb86db4704872307942df56f04cf6c17e57612635e769218cc91da9e2de29aac4563d695a6ebe249c14ba5332b54150a291bec28417febc4c3efae9e14a0323e561dbc80e98bf71deccff5babbcdc8015ef7a86a52781a67a4915645cfb18379084c58110f1294b2e08a6994d1a3dd4fb79437a75cdb05f36a7b3fdb449c0cea5682d37e5b0217676ff7a383a19d48860476b23ccb66779093b0f6b5b6a1ff0cef503dadf5b67382b2a501d0c13d89eec496374f43fcfa751864330479e0d1f7aa0883c2aafbb5c21b06cbea3c8b515fb1f6d061e269c3de372dc48f0b1c0a935de648a0fc4a1a32ce6aaa8432240bbc977a0ece5fd60d92ba49f1443bfc83668e8251260a5b275098e4a072d44726b91d850bd9c2485cacbf2b33be73785421c2fb259b0c1c0955339713f75ca72b9bc56a7167d8a942015385eb4f1bc3e07b23a71779d043a4f420b0fd9e889d398c955f13542c811683636b71a2fb178e951e37ed5519146c5d61e697d1148458c2f224dc6911363edd1b4d30c5cb12d0e2fb035adc33656615c05266f32c2faf5144e24086c97816c87569feb1fd41775263999ff057d9832b872506aba01db7482251f65a74c66cc01b83056970f843ef58df0d89c44f9265d5bfb50c287f330795b30848341dd26683e5df82bfc1cd1a3f2df3dae99fc38edcc614b39c8a8fa6ada4b5dff08914a92b6a16b05f13bbdbdc5e9f14a08e827ee5f364ce115e12bce05122f0dea62d8dd41222fafa3c6bdecea63d3fbd0bfdef667d6ac12b6918273631bf0ec25da2783f06f77a9a0ef2490afe43f3e8b0f553c0c1078141ec0d8f426b1924bd464e4240cda50e9b8a97050360a617eb4f88baa158da8672572f641b20ab3bcbab3d38ff3c84c5c3bf309e26c8ba735503700028c0806c29e02d0a0ed73b9c5c2f2a39f57ee08b935e6e056f01733a12b08603987b14aa7fc542c65a0c03e278723127bced6ac65d2386cf847a73057d19795d5a7517e71d5e480b7380866a64da32fcd1158af9a82559898a7931535a4b75326e2769711ff857d180f16acf316130574fd37bdb658b877f06db42ab96641bc75e3d4ad7fdd9028072139dd3019b03aad32907debef345bcc57423ddfc94683884a00c5f864b8c2dd5af081fa970da251d3afc65dd360c661d8ee2ab58dc9060e2d98b39ae95bb89c319cc93c9e653bf9db205338dc5528c11a391137fe496d726f1407945b243a49a1f3a786047fc47d5e5074e0ec678f26f30cba747d50070c00323d16cff4b06089830931ca704d386140f9c201a5b50a116410be001135aeaf30d7918ccdaf35482659fbb2933e97f1a2e0fc20e6a610e37511d06d4cf931e54ce8f5ab5f688e460e3943bbbe6949a8b4ae309ee31330ece6cb9dfcae0035f3808b7295776ae7bdafffadb6113faac5cd966c2875abb7b20f1b298b48cb78c467f1be92cd3a9d0fd35b7720334274a53a6cbd041b85b6f8f9d622293f0e95a8835204de1faeb7fcdcc57fbdf0afc2e6422bc114355cb5bc979f1bf6d0fb6eb31ee98e06cdcaa1ac36ed3246d85cbdaf999da5d6a7187e8622e6d224c5549a2f2802691a08242ed44a47fc9ad627af949ec3ab5b191025ac75ee7746e2762b530a622a716edbf341e4f9e04fa5d3f77c78dcde06f3845f45c8c1954120ac5949da541882d99adbbca4b0e422e4364289ff1a903bfd1ee63faaa40ef43d3e54249909066e1727591a9632cc8440dcedf931a823e9b542d51aee43897bbbc1f652ae774c326e8400a3a6ab8d90a04e5724fb39c05875ce5afff0502bb6164bc65c107593c155da4b77f136a34c9ec39a4e70cdc4f7fec68245402b2c0fb508eac623ab41a184d3bebe5e9f24c6590c1fee571ed55a76b8554b12116a36101691397d532b46924e6ccb688ab52ffc44f8a670d542477ebd3756d6ef5373024d3f915c187a35feaf39b76453ff835f73862bad13f19e76d47c70122911431e5f71b05a9728631df66b162e708584e83349db1a68368a37cfb4e16c9987a956b3018f2f12c639bf90b5fb0f0560fa7c19887a9d12316dab9bb515cddbae2e9056a556919476b47546c0dae631a88eb8bb9da49879f56efd3d1b65d50bb01c8b4ddc20374877189915cc5824200dfac8f422364b7178f2e7799665b464ac9ec54ffd87fc8dc68e08ab178059ec02bff4ae3c683d0c96796765bdc188c1a4ef46cfa9e6376678245f8d0c907e83e6eb78ffb19e75534925b5b5bfa489fb9cd2c68f00a079c9b34dc45e76044bbfc87c75bbdc5ed0ea7ca0f249007be79116fefa74085f982f670f821ccd0bb14e1086b677f379fd1a1c96bbb4a7338e867d3f91f41b0a7eb2f1104c2ed1593691e601f2e045b3db1cac5dc0d3b302b54967558057e767c4a96f0355d97beace9fe05f0513629b2dd4e86e523d16d7e2e129264e1749b07c062d3a92d96fff5cc976855540eb441a3cef8fc59bf236c85e778b04e30fa807c3ea634af17f005fb55b55f082ca54fc154e6b9df95b951ab9612da7223efc8b63f4528dc3353a15988790d507d9fda18dc8c4adefebc12567e040fd49d2d571437bada1c08054f45545e5cb33c8db8e5b4f2d6735a7fad407fea2ac6e516016c186b7a9b5586650178b3c201eb4fcda3a22291c1f5d66557675dfc73b17edd463abd17a3ec0f1b28adeb4c294c3792c5d2665d504610d37de5dc68fa03e16243ebca169797205d2b24cd64cb1e37328530d68c9a279e36aa0c7f718831ac30607633eab2c9e1b8d6b78649a78fd573d07f0edc18d2f52da2213e2ad44a4bfb3a80ae71d8cf57a2ae2658999d542f7c46da5a30f0f4a82296d0c95e4c6f046db42a00d8631b120a64ee260bf4dbf29103d4e2233fed2ec9ae65fb109f212f967c34e0efb52f56a9a7ab4de472f9cdb0fbcd19fed42d80216c4c717e77a5e6a9118423e0a6dc9d2f3cef598fb9bed6b4e66b279ebbc265560a471d132a854ff230673e843338dcb1ae202c797cfa59dd18eb46e313f1b0dcafdb6518c1da6b08aa1c92bd433a0b65358356a8d03a454f96add1237380049b2567a24836b7bfbdfa58186f2e295e0911dcad6c5413fb36a6e637156291efc016e8513664d515d3ddba1d2c63fa6c5a3331c3cb2f5e2eaad83a75588aca785ada46973d8a2d89686a416720a8f98e1a1eaa8c95aa0bea1dad03ec69bc4bf8300a821f67db4e0c1aab57ef1d1e06880130f6ffe76297acc62879f60e03933666a0da462b7a6b584d28041a3fbafe9a08b7a4664c46b8d40ce4f31a14b122ad74cc4a003f591e019e23cf764795d4235cc8d491c58d3be78a781a708d9fda492306a5afa7c0a43f52f39cafc6a6abc850bbbfa6254fdfd5115727210e19ec8a8857c10a9e9d5cb3001c6e04132667a30a6528e8b59661b483e5365761ac0f5c61e339833b35fd8159875177ed2b78df49ef83b45584c4609562ed2e8bb9add69e88fc0774517a15575f0250d26ae8f6f138daba5311b492c986005bef123a6fc3c1912e378cae2b64e58542293489d5a0f8b582b089c1b05f3ad0aec776b9dcfc0feb1386a98b7e2e09671a73f0eca92364d7f6da861280815b71e48934bc3d321da07878290ec81d3c5c64b8d7f55c1d2e2713edbb5fef28bc36d02302b01c4c29e5df4a9692b41e8d9364e2e408c55b9b14d3ad93889a48787df0673c3df6ba3d9222ee348199aba478e2d398b1e4ae012ca19473b3454327e5bfefb3c56576b6a6c035466f7641464806e63d7086223395a58d886b0dbedd365ce840a6990f56d697605b7d0ac60809270e4e392e89413cc94cea1cb277c4aee023bf90ded9910c96eeead4c6a10ca17151c4966f84bea565746eab573e4295e564d41bc5a6cc9df38c3d7cbd4cd618bd9f292daf95472839fe71c1edc202b6b8b5b939250b089b0dc978397fbaa7533fcce0c4b2eed8ad47779aa4b21504307c7d15e0bcb01bb60e5bafabe66e4b689e4873a1067063e17ba7d647a9a047b1b4ef7350402653b564ae1b34b8597a2357891c90ca2af6b68b794680a0511279fd213eec48dfddba7cbeeb9f9335a0679b1e6db44f27b12d898575d157c2159a86f676df18858857582bffdc006d4732257ade5dde2d1b2cf316fe2a7c5b44505cc808eae5427c43d50e9b99f9317e437df2bc640351e3e8ac249c42f782d07886b6d8875c253ee0e489f1196fa604747586df87e18a893721e6cecfe61dd82daf9b3e4f1eb745c93402c121bb639c56b91bdc77262acfa55389ede1f092733d8a69ae759f82ceda537ffbf32b65138aa3e43e8883048eccf0929de8dee297c5eee97ac7633beae01198e1b00c11276502e7660cd1f59ac619200042656c6e9757b082d374c80182290845f1bc8f2589eaf96948f148ebe675ee7fdb83e32a18eade32f99cca160a4d3504c4bea9c82cfdfe1dd80fbda7c484f2c17c20eea", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x78, 0x0, 0x0, {0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4009}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f0000000540)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fq=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x3e, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e0501460c1f00c7f641737da8c5df97e629d54f8eef8f4b4c287248623393943b5ba71f4c252077dee7cda5f191af639f6bc9ccce6307303924e47e62deed5d1bb5921eea00000c30f73971da9388b9ec29139dedf9d61d113d31eeef342c9d"], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x2b, &(0x7f0000000040)=0x200000000005) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf5, 0x3, 0x5, "a938a9", 0x80, 0xb1}]}}}, 0x13) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9100, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_create_chan_req={{0xc, 0xfb, 0x5}, {0x6, 0xfffe, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x7f, 0x8}, {0x2, 0x8, 0x0, 0x100}}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x0, 0x2}}, @l2cap_disconn_rsp={{0x7, 0xfb, 0x4}, {0x5, 0x4}}, @l2cap_move_chan_rsp={{0xf, 0x9, 0x4}, {0xfff, 0x3}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x7, 0xc0}}, @l2cap_create_chan_rsp={{0xd, 0xc, 0x8}, {0x5, 0x2, 0xff, 0x3ff}}]}}, 0x4b) ioctl$USBDEVFS_CONTROL(r5, 0x4008550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x1) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) kernel console output (not intermixed with test programs): ngth. [ 506.896567][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1648'. [ 507.102936][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.109746][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.139963][ T29] audit: type=1326 audit(1722955322.619:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12301 comm="syz.3.1651" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x0 [ 507.883969][ T5278] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 507.999171][ T1179] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 508.108209][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 508.133424][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 508.154179][ T5278] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 508.167178][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.179009][ T5278] usb 2-1: Product: syz [ 508.183245][ T5278] usb 2-1: Manufacturer: syz [ 508.189678][ T5278] usb 2-1: SerialNumber: syz [ 508.197595][ T5278] usb 2-1: config 0 descriptor?? [ 508.209692][ T5278] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 508.219310][ T1179] usb 3-1: Using ep0 maxpacket: 8 [ 508.224561][ T5278] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 508.236673][ T1179] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 508.249839][ T1179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 508.261139][ T1179] usb 3-1: Product: syz [ 508.265360][ T1179] usb 3-1: Manufacturer: syz [ 508.273188][ T1179] usb 3-1: SerialNumber: syz [ 508.284296][ T1179] usb 3-1: config 0 descriptor?? [ 508.302271][ T1179] hub 3-1:0.0: bad descriptor, ignoring hub [ 508.313193][ T1179] hub 3-1:0.0: probe with driver hub failed with error -5 [ 508.325822][ T1179] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 508.388039][ T5282] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 508.568014][ T5282] usb 4-1: Using ep0 maxpacket: 16 [ 508.577335][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 508.588588][ T5282] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 508.597687][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.611906][ T5282] usb 4-1: config 0 descriptor?? [ 508.630890][ T5282] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 508.871872][T12328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.883318][T12328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.901193][ T5278] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 508.912335][T12320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.933346][T12320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.043389][ T5278] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 509.062726][ T5278] em28xx 2-1:0.0: board has no eeprom [ 509.158199][ T5278] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 509.186859][ T5278] em28xx 2-1:0.0: dvb set to bulk mode. [ 509.223708][ T5278] usb 2-1: USB disconnect, device number 77 [ 509.245034][ T25] em28xx 2-1:0.0: Binding DVB extension [ 509.253300][ T5278] em28xx 2-1:0.0: Disconnecting em28xx [ 509.306641][T12343] input: syz1 as /devices/virtual/input/input22 [ 509.384983][ T1179] gspca_zc3xx: reg_w_i err -71 [ 509.398524][ T25] em28xx 2-1:0.0: Registering input extension [ 509.418859][ T5278] em28xx 2-1:0.0: Closing input extension [ 509.464282][ T5278] em28xx 2-1:0.0: Freeing device [ 509.497170][T12345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.865065][ T29] audit: type=1326 audit(1722955325.349:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12352 comm="syz.1.1668" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x0 [ 509.886636][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.014602][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'. [ 510.028501][ T1179] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 510.037948][ T1179] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 510.092896][ T1179] usb 3-1: USB disconnect, device number 84 [ 510.301902][T12362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1670'. [ 510.419220][T12365] netlink: 'syz.0.1671': attribute type 11 has an invalid length. [ 510.968267][T12375] program syz.0.1674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 511.137000][T12378] FAULT_INJECTION: forcing a failure. [ 511.137000][T12378] name failslab, interval 1, probability 0, space 0, times 0 [ 511.150410][T12378] CPU: 0 UID: 0 PID: 12378 Comm: syz.1.1676 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 511.161212][T12378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 511.170551][ T25] usb 4-1: USB disconnect, device number 83 [ 511.171287][T12378] Call Trace: [ 511.180548][T12378] [ 511.183523][T12378] dump_stack_lvl+0x241/0x360 [ 511.188270][T12378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.193547][T12378] ? __pfx__printk+0x10/0x10 [ 511.198237][T12378] ? __rt6_find_exception_spinlock+0x381/0x490 [ 511.204469][T12378] should_fail_ex+0x3b0/0x4e0 [ 511.209227][T12378] should_failslab+0xac/0x100 [ 511.214065][T12378] ? rt6_insert_exception+0x740/0xc90 [ 511.219586][T12378] __kmalloc_cache_noprof+0x6c/0x2c0 [ 511.225046][T12378] rt6_insert_exception+0x740/0xc90 [ 511.230313][T12378] ? rt6_insert_exception+0x39f/0xc90 [ 511.233141][T12380] program syz.2.1677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 511.235735][T12378] ? __pfx_rt6_insert_exception+0x10/0x10 [ 511.235775][T12378] ? rt6_do_update_pmtu+0x19d/0x530 [ 511.255981][T12378] ? rt6_do_update_pmtu+0x432/0x530 [ 511.261244][T12378] ? __ip6_rt_update_pmtu+0x43f/0xf40 [ 511.266685][T12378] __ip6_rt_update_pmtu+0xc06/0xf40 [ 511.271968][T12378] ? __pfx___ip6_rt_update_pmtu+0x10/0x10 [ 511.277763][T12378] ? __pfx_lock_release+0x10/0x10 [ 511.282965][T12378] ? ip6_route_output_flags+0x30/0x610 [ 511.288496][T12378] ? ip6_route_output_flags+0x30/0x610 [ 511.294029][T12378] ? ip6_route_output_flags+0x30/0x610 [ 511.299555][T12378] ? ip6_route_output_flags+0x499/0x610 [ 511.305181][T12378] ip6_update_pmtu+0x342/0x4f0 [ 511.310024][T12378] ? __pfx_ip6_update_pmtu+0x10/0x10 [ 511.315394][T12378] ? seg6_get_srh+0x3a6/0x770 [ 511.320157][T12378] ip6gre_err+0x32d/0x7d0 [ 511.324562][T12378] ? __pfx_ip6gre_err+0x10/0x10 [ 511.329491][T12378] ? __pfx_ip6gre_err+0x10/0x10 [ 511.334404][T12378] icmpv6_notify+0x391/0x830 [ 511.339062][T12378] ? __pfx_icmpv6_notify+0x10/0x10 [ 511.344219][T12378] ? __xfrm_policy_check2+0x3de/0x7b0 [ 511.349634][T12378] ? csum_ipv6_magic+0x1e5/0x2f0 [ 511.354645][T12378] icmpv6_rcv+0x1092/0x1980 [ 511.359222][T12378] ? ipv6_chk_mcast_addr+0x78f/0x840 [ 511.364578][T12378] ? __pfx_icmpv6_rcv+0x10/0x10 [ 511.369491][T12378] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 511.374486][T12378] ip6_protocol_deliver_rcu+0x1058/0x1570 [ 511.380313][T12378] ? ip6_input_finish+0xdc/0x2d0 [ 511.385325][T12378] ip6_input_finish+0x187/0x2d0 [ 511.390264][T12378] ? __pfx_ip6_input_finish+0x10/0x10 [ 511.395692][T12378] NF_HOOK+0x3a4/0x450 [ 511.399828][T12378] ? NF_HOOK+0x9a/0x450 [ 511.404043][T12378] ? __pfx_NF_HOOK+0x10/0x10 [ 511.408706][T12378] ? __pfx_ip6_input_finish+0x10/0x10 [ 511.414240][T12378] ? ipv6_chk_mcast_addr+0x2e/0x840 [ 511.419513][T12378] ? ipv6_chk_mcast_addr+0x78f/0x840 [ 511.424853][T12378] ? ipv6_chk_mcast_addr+0x2e/0x840 [ 511.430117][T12378] ip6_mc_input+0x9c5/0xc30 [ 511.434707][T12378] ? __pfx_ip6_mc_input+0x10/0x10 [ 511.439883][T12378] ? skb_dst+0x72/0xd0 [ 511.444027][T12378] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 511.449292][T12378] NF_HOOK+0x3a4/0x450 [ 511.453437][T12378] ? skb_orphan+0x4b/0xd0 [ 511.457938][T12378] ? NF_HOOK+0x9a/0x450 [ 511.462180][T12378] ? __pfx_NF_HOOK+0x10/0x10 [ 511.466850][T12378] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 511.472133][T12378] ? __pfx_ipv6_rcv+0x10/0x10 [ 511.476942][T12378] __netif_receive_skb+0x1ea/0x650 [ 511.482135][T12378] ? __pfx_lock_acquire+0x10/0x10 [ 511.487325][T12378] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 511.493647][T12378] ? __pfx___netif_receive_skb+0x10/0x10 [ 511.499356][T12378] ? __kasan_slab_alloc+0x66/0x80 [ 511.504462][T12378] ? read_tsc+0x9/0x20 [ 511.508596][T12378] ? timekeeping_get_ns+0x2c0/0x420 [ 511.513873][T12378] ? netif_receive_skb+0x131/0x890 [ 511.519052][T12378] ? netif_receive_skb+0x131/0x890 [ 511.524230][T12378] netif_receive_skb+0x1e8/0x890 [ 511.529235][T12378] ? tun_rx_batched+0x160/0x8f0 [ 511.534154][T12378] ? __pfx_netif_receive_skb+0x10/0x10 [ 511.539789][T12378] ? tun_rx_batched+0x160/0x8f0 [ 511.544709][T12378] tun_rx_batched+0x1b7/0x8f0 [ 511.549459][T12378] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 511.555871][T12378] ? __pfx_lock_acquire+0x10/0x10 [ 511.560973][T12378] ? __pfx_tun_rx_batched+0x10/0x10 [ 511.566352][T12378] tun_get_user+0x2f84/0x4720 [ 511.571153][T12378] ? tun_get_user+0x2a78/0x4720 [ 511.576081][T12378] ? __lock_acquire+0x137a/0x2040 [ 511.581190][T12378] ? __pfx_tun_get_user+0x10/0x10 [ 511.586305][T12378] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 511.591835][T12378] ? tun_get+0x1e/0x2f0 [ 511.596051][T12378] ? __pfx_lock_release+0x10/0x10 [ 511.601163][T12378] ? tun_get+0x1e/0x2f0 [ 511.605378][T12378] ? tun_get+0x27d/0x2f0 [ 511.609683][T12378] tun_chr_write_iter+0x113/0x1f0 [ 511.614856][T12378] vfs_write+0xa72/0xc90 [ 511.619166][T12378] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 511.624784][T12378] ? __pfx_vfs_write+0x10/0x10 [ 511.629641][T12378] ksys_write+0x1a0/0x2c0 [ 511.634042][T12378] ? __pfx_ksys_write+0x10/0x10 [ 511.639050][T12378] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 511.645706][T12378] ? lockdep_hardirqs_on+0x99/0x150 [ 511.650976][T12378] __do_fast_syscall_32+0xb4/0x110 [ 511.656167][T12378] ? exc_page_fault+0x590/0x8c0 [ 511.661102][T12378] do_fast_syscall_32+0x34/0x80 [ 511.666040][T12378] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 511.672447][T12378] RIP: 0023:0xf7f82579 [ 511.676572][T12378] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 511.696499][T12378] RSP: 002b:00000000f5736540 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 511.704982][T12378] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000020000080 [ 511.713015][T12378] RDX: 00000000000000ae RSI: 00000000f740cff4 RDI: 0000000000000000 [ 511.721045][T12378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 511.729069][T12378] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 511.737069][T12378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 511.745089][T12378] [ 511.748148][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.778798][ T25] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 512.009872][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 512.039213][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 512.088099][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 512.101571][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.151094][T12391] qrtr: Invalid version 0 [ 512.182145][ T25] usb 4-1: config 0 descriptor?? [ 512.435311][ T25] ath6kl: Failed to submit usb control message: -71 [ 512.444953][ T25] ath6kl: unable to send the bmi data to the device: -71 [ 512.457916][ T25] ath6kl: Unable to send get target info: -71 [ 512.469688][ T25] ath6kl: Failed to init ath6kl core: -71 [ 512.477353][ T25] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 512.502787][ T25] usb 4-1: USB disconnect, device number 84 [ 512.544081][T12399] FAULT_INJECTION: forcing a failure. [ 512.544081][T12399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.628261][T12399] CPU: 0 UID: 0 PID: 12399 Comm: syz.1.1684 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 512.639192][T12399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 512.649284][T12399] Call Trace: [ 512.652571][T12399] [ 512.655527][T12399] dump_stack_lvl+0x241/0x360 [ 512.660255][T12399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.665478][T12399] ? __pfx__printk+0x10/0x10 [ 512.670122][T12399] ? __pfx_lock_release+0x10/0x10 [ 512.675163][T12399] ? stack_trace_save+0x118/0x1d0 [ 512.680205][T12399] should_fail_ex+0x3b0/0x4e0 [ 512.684892][T12399] _copy_to_user+0x2f/0xb0 [ 512.689357][T12399] scsi_ioctl+0x16f7/0x2d80 [ 512.693913][T12399] ? kasan_save_track+0x51/0x80 [ 512.698779][T12399] ? kasan_save_track+0x3f/0x80 [ 512.703642][T12399] ? __kasan_slab_free+0x37/0x60 [ 512.708592][T12399] ? tomoyo_path_number_perm+0x68d/0x880 [ 512.714269][T12399] ? security_file_ioctl_compat+0x75/0xb0 [ 512.720007][T12399] ? do_fast_syscall_32+0x34/0x80 [ 512.725048][T12399] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.731562][T12399] ? do_vfs_ioctl+0xf0e/0x2e50 [ 512.736340][T12399] ? __pfx_scsi_ioctl+0x10/0x10 [ 512.741275][T12399] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 512.746330][T12399] ? tomoyo_path_number_perm+0x208/0x880 [ 512.752064][T12399] ? __pfx_lock_release+0x10/0x10 [ 512.757111][T12399] ? __pfx___might_resched+0x10/0x10 [ 512.762418][T12399] ? kfree+0x149/0x360 [ 512.766506][T12399] ? scsi_block_when_processing_errors+0x295/0x360 [ 512.773029][T12399] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 512.779894][T12399] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 512.785894][T12399] sg_ioctl+0x1c82/0x2e80 [ 512.790447][T12399] ? __pfx_sg_ioctl+0x10/0x10 [ 512.795181][T12399] ? __fget_files+0x29/0x470 [ 512.799845][T12399] ? __fget_files+0x3f6/0x470 [ 512.804571][T12399] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 512.810152][T12399] ? security_file_ioctl_compat+0x87/0xb0 [ 512.815914][T12399] __se_compat_sys_ioctl+0x51c/0xca0 [ 512.821254][T12399] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 512.827080][T12399] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 512.833185][T12399] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 512.839589][T12399] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 512.846223][T12399] ? lockdep_hardirqs_on+0x99/0x150 [ 512.851448][T12399] __do_fast_syscall_32+0xb4/0x110 [ 512.856579][T12399] ? exc_page_fault+0x590/0x8c0 [ 512.861467][T12399] do_fast_syscall_32+0x34/0x80 [ 512.866366][T12399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.872715][T12399] RIP: 0023:0xf7f82579 [ 512.876791][T12399] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 512.896430][T12399] RSP: 002b:00000000f573657c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 512.904906][T12399] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000005385 [ 512.912920][T12399] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 512.920919][T12399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 512.928919][T12399] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 512.936908][T12399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 512.944912][T12399] [ 512.947993][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.118036][ T8] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 513.310335][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 513.349597][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 513.390180][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 513.422910][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 513.468358][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 513.477670][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.490184][ T8] usb 5-1: config 0 descriptor?? [ 513.496169][T12401] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 513.505188][ T8] hub 5-1:0.0: USB hub found [ 513.713700][ T8] hub 5-1:0.0: 2 ports detected [ 514.056735][T12418] netlink: 'syz.3.1689': attribute type 29 has an invalid length. [ 514.089075][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1689'. [ 514.522529][T12426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.600637][T12426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.946470][T12438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1693'. [ 514.970049][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.984404][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.395669][ T8] usb 5-1: USB disconnect, device number 72 [ 515.525630][T12449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1696'. [ 516.128097][ T1179] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 516.330778][ T1179] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 516.357875][ T1179] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.383024][ T1179] usb 3-1: config 0 has no interface number 0 [ 516.408040][ T1179] usb 3-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 516.433648][ T1179] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 516.452517][ T1179] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 516.469674][T12481] binder: 12476:12481 ioctl 4018620d 0 returned -22 [ 516.498296][ T1179] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 516.522060][ T1179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.555400][T12483] program syz.1.1703 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.590637][ T1179] usb 3-1: config 0 descriptor?? [ 516.632522][ T1179] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 516.820927][T12490] binder: 12487:12490 ioctl 4018620d 0 returned -22 [ 517.648784][ T6691] usb 3-1: Failed to submit usb control message: -110 [ 517.656221][ T6691] usb 3-1: unable to send the bmi data to the device: -110 [ 517.689769][ T6691] usb 3-1: unable to get target info from device [ 517.703031][ T6691] usb 3-1: could not get target info (-110) [ 517.728056][ T6691] usb 3-1: could not probe fw (-110) [ 517.843365][T12505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1709'. [ 517.869772][T12505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1709'. [ 518.558174][ T5283] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 518.789150][ T5283] usb 4-1: Using ep0 maxpacket: 16 [ 518.799022][ T5283] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 8 [ 518.824668][ T5283] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1023 [ 518.885950][ T5283] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 518.905990][ T5283] usb 4-1: config 1 interface 0 has no altsetting 0 [ 518.931647][ T5283] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 518.952869][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.972682][ T5283] usb 4-1: Product: syz [ 518.977106][ T5283] usb 4-1: Manufacturer: syz [ 518.985385][ T5283] usb 4-1: SerialNumber: syz [ 519.031409][T12519] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 519.048452][T12519] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 519.090542][ T5300] usb 3-1: USB disconnect, device number 85 [ 519.301589][T12519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1713'. [ 519.412367][ T5283] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 519.460452][ T5283] usb 4-1: USB disconnect, device number 85 [ 520.254615][T12553] netlink: 'syz.1.1724': attribute type 29 has an invalid length. [ 520.264270][T12553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 520.388251][ T1179] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 520.588051][ T1179] usb 4-1: Using ep0 maxpacket: 8 [ 520.598686][ T1179] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 520.611888][ T1179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.629065][ T1179] usb 4-1: config 0 descriptor?? [ 520.854126][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1728'. [ 521.236984][T12572] fuse: Unknown parameter 'roomode' [ 521.272845][ T1179] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 521.305721][ T1179] asix 4-1:0.0: probe with driver asix failed with error -32 [ 521.727995][ T1179] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 521.918382][ T1179] usb 2-1: Using ep0 maxpacket: 32 [ 521.925866][ T1179] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.941947][ T1179] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.955613][ T1179] usb 2-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 521.965056][ T1179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.987358][ T1179] usb 2-1: config 0 descriptor?? [ 522.048569][ T25] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 522.238007][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 522.250729][ T25] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 8 [ 522.274298][ T25] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1023 [ 522.286439][ T25] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.301761][ T25] usb 5-1: config 1 interface 0 has no altsetting 0 [ 522.313223][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.331406][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.349664][ T25] usb 5-1: Product: syz [ 522.358484][ T25] usb 5-1: Manufacturer: syz [ 522.363285][ T25] usb 5-1: SerialNumber: syz [ 522.368435][ T5237] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 522.377572][ T5237] Bluetooth: hci4: Injecting HCI hardware error event [ 522.388004][ T55] Bluetooth: hci4: hardware error 0x00 [ 522.388201][T12580] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 522.417339][ T1179] hid_mf 0003:0079:1801.000D: item fetching failed at offset 0/2 [ 522.422095][T12580] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 522.450624][ T1179] hid_mf 0003:0079:1801.000D: HID parse failed. [ 522.469717][ T1179] hid_mf 0003:0079:1801.000D: probe with driver hid_mf failed with error -22 [ 522.651568][T12577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.682435][T12577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.254658][T12580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1732'. [ 523.288378][T12593] sch_tbf: burst 0 is lower than device macsec0 mtu (1482) ! [ 523.309715][ T1179] usb 2-1: USB disconnect, device number 79 [ 523.350740][ T25] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 523.416902][ T25] usb 5-1: USB disconnect, device number 73 [ 523.620114][T12605] FAULT_INJECTION: forcing a failure. [ 523.620114][T12605] name failslab, interval 1, probability 0, space 0, times 0 [ 523.647157][T12605] CPU: 1 UID: 0 PID: 12605 Comm: syz.0.1738 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 523.658026][T12605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 523.668161][T12605] Call Trace: [ 523.671485][T12605] [ 523.674448][T12605] dump_stack_lvl+0x241/0x360 [ 523.679168][T12605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.684416][T12605] ? __pfx__printk+0x10/0x10 [ 523.689065][T12605] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 523.695079][T12605] ? __pfx___might_resched+0x10/0x10 [ 523.700406][T12605] should_fail_ex+0x3b0/0x4e0 [ 523.705128][T12605] should_failslab+0xac/0x100 [ 523.709839][T12605] ? __alloc_skb+0x1c3/0x440 [ 523.714483][T12605] kmem_cache_alloc_node_noprof+0x71/0x320 [ 523.720339][T12605] ? aa_label_sk_perm+0x4f0/0x6d0 [ 523.725423][T12605] __alloc_skb+0x1c3/0x440 [ 523.726994][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1739'. [ 523.729878][T12605] ? __pfx___alloc_skb+0x10/0x10 [ 523.729920][T12605] pfkey_sendmsg+0x1da/0x1050 [ 523.729944][T12605] ? __lock_acquire+0x137a/0x2040 [ 523.729978][T12605] ? __pfx___might_resched+0x10/0x10 [ 523.730018][T12605] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 523.730047][T12605] ? aa_sk_perm+0x967/0xab0 [ 523.730081][T12605] ? __pfx_aa_sk_perm+0x10/0x10 [ 523.730106][T12605] ? __pfx___might_resched+0x10/0x10 [ 523.778857][T12605] ? __might_fault+0xaa/0x120 [ 523.783682][T12605] ? aa_sock_msg_perm+0x91/0x160 [ 523.788684][T12605] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 523.794040][T12605] ? security_socket_sendmsg+0x87/0xb0 [ 523.799574][T12605] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 523.804752][T12605] __sock_sendmsg+0x221/0x270 [ 523.809483][T12605] ____sys_sendmsg+0x525/0x7d0 [ 523.814317][T12605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.819672][T12605] __sys_sendmsg+0x2b0/0x3a0 [ 523.824303][T12605] ? __pfx___sys_sendmsg+0x10/0x10 [ 523.829453][T12605] ? vfs_write+0x7c4/0xc90 [ 523.833947][T12605] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 523.840586][T12605] ? lockdep_hardirqs_on+0x99/0x150 [ 523.845936][T12605] __do_fast_syscall_32+0xb4/0x110 [ 523.851125][T12605] ? exc_page_fault+0x590/0x8c0 [ 523.856023][T12605] do_fast_syscall_32+0x34/0x80 [ 523.860920][T12605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 523.867268][T12605] RIP: 0023:0xf7fd3579 [ 523.871367][T12605] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 523.891035][T12605] RSP: 002b:00000000f578657c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 523.899516][T12605] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 523.907553][T12605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 523.915587][T12605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 523.923609][T12605] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 523.931746][T12605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 523.939873][T12605] [ 523.942997][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.028126][T12610] FAULT_INJECTION: forcing a failure. [ 524.028126][T12610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.077396][T12610] CPU: 0 UID: 0 PID: 12610 Comm: syz.2.1740 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 524.088243][T12610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 524.090631][ T25] usb 4-1: USB disconnect, device number 86 [ 524.098323][T12610] Call Trace: [ 524.098343][T12610] [ 524.098355][T12610] dump_stack_lvl+0x241/0x360 [ 524.115275][T12610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.120547][T12610] ? __pfx__printk+0x10/0x10 [ 524.125210][T12610] ? __pfx_lock_release+0x10/0x10 [ 524.130392][T12610] should_fail_ex+0x3b0/0x4e0 [ 524.135143][T12610] _copy_to_user+0x2f/0xb0 [ 524.139632][T12610] generic_map_lookup_batch+0x95d/0xf90 [ 524.145268][T12610] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 524.151406][T12610] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 524.157535][T12610] bpf_map_do_batch+0x2d2/0x690 [ 524.162457][T12610] __sys_bpf+0x654/0x810 [ 524.166764][T12610] ? __pfx___sys_bpf+0x10/0x10 [ 524.171611][T12610] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 524.178081][T12610] __ia32_sys_bpf+0x7c/0x90 [ 524.182645][T12610] __do_fast_syscall_32+0xb4/0x110 [ 524.187838][T12610] ? exc_page_fault+0x590/0x8c0 [ 524.192754][T12610] do_fast_syscall_32+0x34/0x80 [ 524.197832][T12610] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 524.204222][T12610] RIP: 0023:0xf7ff6579 [ 524.208351][T12610] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 524.228010][T12610] RSP: 002b:00000000f578557c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 524.236499][T12610] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000200003c0 [ 524.244528][T12610] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 524.252591][T12610] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 524.260613][T12610] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 524.268628][T12610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 524.276662][T12610] [ 524.303366][T12613] netlink: 'syz.0.1741': attribute type 29 has an invalid length. [ 524.324704][T12613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1741'. [ 524.612408][ T55] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 524.788001][ T1179] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 524.997948][ T1179] usb 3-1: Using ep0 maxpacket: 32 [ 525.017166][ T8] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 525.036549][ T1179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.048398][ T1179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.061760][ T1179] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 525.072024][ T1179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.087753][ T1179] usb 3-1: config 0 descriptor?? [ 525.096283][ T1179] hub 3-1:0.0: USB hub found [ 525.217429][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 525.248012][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 525.271369][ T8] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 525.287919][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.337684][ T8] usb 5-1: config 0 descriptor?? [ 525.540694][ T1179] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 525.589829][ T8] ath6kl: Failed to submit usb control message: -71 [ 525.599200][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 525.606392][ T8] ath6kl: Unable to send get target info: -71 [ 525.637975][ T8] ath6kl: Failed to init ath6kl core: -71 [ 525.645138][ T8] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 525.714259][ T8] usb 5-1: USB disconnect, device number 74 [ 525.970943][ T1179] usbhid 3-1:0.0: can't add hid device: -71 [ 525.995271][ T1179] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 526.071862][ T1179] usb 3-1: USB disconnect, device number 86 [ 526.672193][ T29] audit: type=1326 audit(1722955342.159:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12649 comm="syz.2.1751" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x0 [ 526.700700][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1750'. [ 527.900850][ T1179] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 528.099897][ T1179] usb 3-1: Using ep0 maxpacket: 16 [ 528.107568][ T1179] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 8 [ 528.118568][ T1179] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1023 [ 528.137240][ T1179] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.151848][ T1179] usb 3-1: config 1 interface 0 has no altsetting 0 [ 528.162336][ T1179] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.171894][ T1179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.181972][ T1179] usb 3-1: Product: syz [ 528.186303][ T1179] usb 3-1: Manufacturer: syz [ 528.191418][ T1179] usb 3-1: SerialNumber: syz [ 528.207727][T12659] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 528.216726][T12659] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 528.748863][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1754'. [ 528.960802][ T1179] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 529.008080][ T1179] usb 3-1: USB disconnect, device number 87 [ 529.323674][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 529.351347][T12683] @: renamed from vlan0 (while UP) [ 529.437984][ T5279] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 529.628391][ T5279] usb 5-1: Using ep0 maxpacket: 16 [ 529.642421][ T5279] usb 5-1: config 0 has no interfaces? [ 529.649015][ T5279] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 529.653105][T12690] FAULT_INJECTION: forcing a failure. [ 529.653105][T12690] name failslab, interval 1, probability 0, space 0, times 0 [ 529.675011][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.696815][ T5279] usb 5-1: config 0 descriptor?? [ 529.705652][T12690] CPU: 1 UID: 0 PID: 12690 Comm: syz.1.1761 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 529.716569][T12690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 529.726725][T12690] Call Trace: [ 529.730015][T12690] [ 529.732959][T12690] dump_stack_lvl+0x241/0x360 [ 529.737660][T12690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.742960][T12690] ? __pfx__printk+0x10/0x10 [ 529.747565][T12690] ? __kmalloc_noprof+0xb0/0x400 [ 529.752510][T12690] ? __pfx___might_resched+0x10/0x10 [ 529.757823][T12690] should_fail_ex+0x3b0/0x4e0 [ 529.762622][T12690] ? drm_atomic_state_init+0xff/0x2f0 [ 529.768095][T12690] should_failslab+0xac/0x100 [ 529.772913][T12690] ? drm_atomic_state_init+0xff/0x2f0 [ 529.778370][T12690] __kmalloc_noprof+0xd8/0x400 [ 529.783180][T12690] drm_atomic_state_init+0xff/0x2f0 [ 529.788526][T12690] drm_atomic_state_alloc+0xb9/0x100 [ 529.793848][T12690] drm_mode_atomic_ioctl+0x460/0x1420 [ 529.799335][T12690] ? mark_lock+0x9a/0x350 [ 529.803689][T12690] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 529.809525][T12690] ? do_raw_spin_unlock+0x13c/0x8b0 [ 529.814785][T12690] ? _raw_spin_unlock+0x28/0x50 [ 529.819707][T12690] drm_ioctl_kernel+0x33a/0x440 [ 529.824598][T12690] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 529.830437][T12690] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 529.835832][T12690] ? __might_fault+0xc6/0x120 [ 529.840543][T12690] drm_ioctl+0x611/0xad0 [ 529.844804][T12690] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 529.850638][T12690] ? __pfx_drm_ioctl+0x10/0x10 [ 529.855446][T12690] ? drm_compat_ioctl+0xae/0x350 [ 529.860405][T12690] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 529.865984][T12690] ? security_file_ioctl_compat+0x87/0xb0 [ 529.871720][T12690] __se_compat_sys_ioctl+0x51c/0xca0 [ 529.877023][T12690] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 529.882851][T12690] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 529.888867][T12690] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 529.895239][T12690] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 529.901876][T12690] ? lockdep_hardirqs_on+0x99/0x150 [ 529.907123][T12690] __do_fast_syscall_32+0xb4/0x110 [ 529.912265][T12690] ? exc_page_fault+0x590/0x8c0 [ 529.917144][T12690] do_fast_syscall_32+0x34/0x80 [ 529.922044][T12690] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 529.928388][T12690] RIP: 0023:0xf7f82579 [ 529.932613][T12690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 529.952501][T12690] RSP: 002b:00000000f56f457c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 529.960931][T12690] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c03864bc [ 529.968912][T12690] RDX: 0000000020000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 529.976890][T12690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 529.984952][T12690] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 529.992929][T12690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 530.000937][T12690] [ 530.004118][ C1] vkms_vblank_simulate: vblank timer overrun [ 530.262849][ T29] audit: type=1326 audit(1722955345.749:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.1.1764" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x0 [ 530.284445][ C1] vkms_vblank_simulate: vblank timer overrun [ 530.470427][T12675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.500141][T12675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.585382][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1767'. [ 530.792305][T12714] fuse: Unknown parameter 'soup_id' [ 531.217675][T12726] input: syz0 as /devices/virtual/input/input24 [ 531.458114][ T25] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 531.692108][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 531.798315][ T25] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 8 [ 532.217411][ T25] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1023 [ 532.235505][ T25] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.268236][ T25] usb 3-1: config 1 interface 0 has no altsetting 0 [ 532.357301][ T8] usb 5-1: USB disconnect, device number 75 [ 532.376389][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 532.553594][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.760465][ T25] usb 3-1: Product: syz [ 532.764701][ T25] usb 3-1: Manufacturer: syz [ 532.818941][ T5283] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 532.820292][ T25] usb 3-1: SerialNumber: syz [ 532.876489][T12723] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 532.894696][T12723] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 533.017960][ T5283] usb 4-1: Using ep0 maxpacket: 8 [ 533.026931][ T5283] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 533.038435][ T5283] usb 4-1: config 0 has no interface number 0 [ 533.044605][ T5283] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 533.063800][ T5283] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 533.084717][ T8] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 533.096629][ T5283] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 533.124859][T12723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1772'. [ 533.139174][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.169330][ T5283] usb 4-1: config 0 descriptor?? [ 533.175213][T12742] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 533.239261][ T5283] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 533.299455][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 533.315609][ T8] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 533.335981][ T8] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 533.379833][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.430822][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 533.456040][ T8] usb 5-1: config 1 has no interface number 0 [ 533.467555][ T5283] usb 4-1: USB disconnect, device number 87 [ 533.467611][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 533.511375][ T8] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 533.537211][ T5283] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 533.548316][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.600527][ T8] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 533.752727][ T25] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 533.785781][ T8] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 533.807728][ T25] usb 3-1: USB disconnect, device number 88 [ 533.845332][ T8] snd_usb_pod 5-1:1.1: invalid control EP [ 533.860673][ T8] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 533.895992][ T8] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 533.906707][ T8] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 534.061893][ T8] usb 5-1: USB disconnect, device number 76 [ 534.925447][T12767] binder: 12762:12767 ioctl 4018620d 0 returned -22 [ 535.000456][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880264ec800: rx timeout, send abort [ 535.409268][T12779] FAULT_INJECTION: forcing a failure. [ 535.409268][T12779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.423546][T12779] CPU: 1 UID: 0 PID: 12779 Comm: syz.2.1791 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 535.434357][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 535.444452][T12779] Call Trace: [ 535.447762][T12779] [ 535.450726][T12779] dump_stack_lvl+0x241/0x360 [ 535.455479][T12779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.460718][T12779] ? __pfx__printk+0x10/0x10 [ 535.465367][T12779] ? __pfx_lock_release+0x10/0x10 [ 535.470459][T12779] should_fail_ex+0x3b0/0x4e0 [ 535.475187][T12779] _copy_from_user+0x2f/0xe0 [ 535.479820][T12779] input_event_from_user+0x1a9/0x4a0 [ 535.485160][T12779] ? __pfx_input_event_from_user+0x10/0x10 [ 535.490997][T12779] ? input_inject_event+0xd6/0x340 [ 535.496142][T12779] evdev_write+0x4f2/0x7c0 [ 535.500587][T12779] ? __pfx_evdev_write+0x10/0x10 [ 535.505548][T12779] ? bpf_lsm_file_permission+0x9/0x10 [ 535.510944][T12779] ? security_file_permission+0x7f/0xa0 [ 535.516506][T12779] ? rw_verify_area+0x1d2/0x6b0 [ 535.521384][T12779] ? __pfx_evdev_write+0x10/0x10 [ 535.526347][T12779] vfs_write+0x2a2/0xc90 [ 535.530641][T12779] ? __pfx_vfs_write+0x10/0x10 [ 535.535442][T12779] ? __fget_files+0x29/0x470 [ 535.540189][T12779] ? __fget_files+0x3f6/0x470 [ 535.544891][T12779] ? __fget_files+0x29/0x470 [ 535.549525][T12779] ksys_write+0x1a0/0x2c0 [ 535.553879][T12779] ? __pfx_ksys_write+0x10/0x10 [ 535.558760][T12779] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 535.565390][T12779] ? lockdep_hardirqs_on+0x99/0x150 [ 535.570619][T12779] __do_fast_syscall_32+0xb4/0x110 [ 535.575755][T12779] ? exc_page_fault+0x590/0x8c0 [ 535.580672][T12779] do_fast_syscall_32+0x34/0x80 [ 535.585584][T12779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 535.591946][T12779] RIP: 0023:0xf7ff6579 [ 535.596040][T12779] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 535.615688][T12779] RSP: 002b:00000000f57a657c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 535.624144][T12779] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 535.632163][T12779] RDX: 0000000000002778 RSI: 0000000000000000 RDI: 0000000000000000 [ 535.640151][T12779] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 535.648168][T12779] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 535.656164][T12779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 535.664200][T12779] [ 535.667367][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.675108][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880264ec800: abort rx timeout. Force session deactivation [ 535.987985][ T5279] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 536.169133][ T5279] usb 5-1: Using ep0 maxpacket: 16 [ 536.176721][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 536.195109][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 536.205435][ T5279] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 536.223099][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.244791][ T5279] usb 5-1: config 0 descriptor?? [ 536.282137][T12790] fuse: Bad value for 'fd' [ 536.291937][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1797'. [ 536.578029][ T25] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 536.738154][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1793'. [ 536.754753][T12781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.766140][T12781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.782859][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.791467][ T5279] usbhid 5-1:0.0: can't add hid device: -71 [ 536.813131][ T5279] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 536.817820][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.838910][ T25] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 536.848412][ T5279] usb 5-1: USB disconnect, device number 77 [ 536.863846][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.887452][ T25] usb 2-1: config 0 descriptor?? [ 536.902620][ T25] usbhid 2-1:0.0: can't add hid device: -22 [ 536.917982][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 537.022787][T12799] bond0: entered promiscuous mode [ 537.028186][T12799] bond_slave_0: entered promiscuous mode [ 537.034023][T12799] bond_slave_1: entered promiscuous mode [ 537.527975][ T8] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 537.665622][T12814] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 537.675491][ T5279] IPVS: starting estimator thread 0... [ 537.682766][ T5288] usb 2-1: USB disconnect, device number 80 [ 537.722338][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 537.756583][ T8] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 537.798063][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.801870][T12815] IPVS: using max 17 ests per chain, 40800 per kthread [ 537.822220][ T8] usb 3-1: config 0 descriptor?? [ 537.859952][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 537.943053][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1808'. [ 537.974687][ T1115] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.995786][T12819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1808'. [ 538.145646][ T8] usb 3-1: USB disconnect, device number 89 [ 538.222953][ T1115] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.347460][ T1115] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.504098][ T1115] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.518250][ T5288] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 538.734335][ T5288] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 538.775844][ T5288] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 538.813352][ T5288] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 538.865893][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.916090][ T1115] bridge_slave_1: left allmulticast mode [ 538.944105][ T1115] bridge_slave_1: left promiscuous mode [ 538.961129][ T1115] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.049059][ T1115] bridge_slave_0: left allmulticast mode [ 539.054800][ T1115] bridge_slave_0: left promiscuous mode [ 539.111157][T12831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1811'. [ 539.121623][ T1115] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.222576][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 539.237595][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 539.251669][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 539.270389][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 539.279910][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 539.287471][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 539.391937][ T29] audit: type=1800 audit(1722955354.869:160): pid=12840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1814" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 539.462751][ T29] audit: type=1800 audit(1722955354.949:161): pid=12840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1814" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 540.631360][ T1115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.645887][ T1115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.658552][ T1115] bond0 (unregistering): Released all slaves [ 540.770446][T11129] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 540.965018][ T5288] usb 4-1: string descriptor 0 read error: -71 [ 540.977954][T11129] usb 2-1: Using ep0 maxpacket: 16 [ 540.996067][T11129] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 541.007164][T11129] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 541.020519][T11129] usb 2-1: Product: syz [ 541.038477][ T5288] usb 4-1: USB disconnect, device number 88 [ 541.055419][T11129] usb 2-1: Manufacturer: syz [ 541.075027][T11129] usb 2-1: SerialNumber: syz [ 541.097448][T11129] usb 2-1: config 0 descriptor?? [ 541.207801][T12881] fuse: Unknown parameter 'f$' [ 541.284061][ T29] audit: type=1800 audit(1722955356.759:162): pid=12875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1818" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 541.304446][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.329785][ T55] Bluetooth: hci4: command tx timeout [ 541.416834][T12873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.444786][T12873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.502046][ T5283] usb 2-1: USB disconnect, device number 81 [ 541.703050][ T1115] hsr_slave_0: left promiscuous mode [ 541.732797][ T1115] hsr_slave_1: left promiscuous mode [ 541.744045][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.758078][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.769715][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.777319][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.823850][ T1115] veth1_macvtap: left promiscuous mode [ 541.836153][ T1115] veth0_macvtap: left promiscuous mode [ 541.864516][ T1115] veth1_vlan: left promiscuous mode [ 541.881519][ T1115] veth0_vlan: left promiscuous mode [ 542.821440][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 542.832923][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 542.842547][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 542.851379][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 542.860551][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 542.870319][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 543.314100][ T1115] team0 (unregistering): Port device team_slave_1 removed [ 543.386433][ T1115] team0 (unregistering): Port device team_slave_0 removed [ 543.412797][ T5237] Bluetooth: hci4: command tx timeout [ 544.047338][T12891] netlink: 'syz.3.1824': attribute type 29 has an invalid length. [ 544.056764][T12891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1824'. [ 544.094269][T12847] chnl_net:caif_netlink_parms(): no params data found [ 544.509256][T12847] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.524311][T12847] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.532721][T12847] bridge_slave_0: entered allmulticast mode [ 544.540775][T12847] bridge_slave_0: entered promiscuous mode [ 544.550509][T12847] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.566898][T12847] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.574943][T12847] bridge_slave_1: entered allmulticast mode [ 544.581899][ T1179] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 544.609676][T12847] bridge_slave_1: entered promiscuous mode [ 544.703659][T12847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.732406][T12847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.798570][ T1179] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 544.858120][ T1179] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 544.898500][ T1179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.924141][ T1179] usb 2-1: config 0 descriptor?? [ 544.929343][ T5237] Bluetooth: hci2: command tx timeout [ 544.971271][ T1179] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 545.004569][T12847] team0: Port device team_slave_0 added [ 545.119535][T12847] team0: Port device team_slave_1 added [ 545.209141][T12928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.231135][T12928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.257697][T12928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.277441][T12928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.289575][T12847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.296596][T12847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.354218][T12847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.421717][T12914] chnl_net:caif_netlink_parms(): no params data found [ 545.452387][T12847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.466618][T12847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.489490][ T5237] Bluetooth: hci4: command tx timeout [ 545.509324][T12847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.718865][ T8] usb 2-1: USB disconnect, device number 82 [ 545.815221][T12847] hsr_slave_0: entered promiscuous mode [ 545.825654][T12847] hsr_slave_1: entered promiscuous mode [ 545.832947][T12847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.842402][T12847] Cannot create hsr debugfs directory [ 545.995611][T12914] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.021346][T12914] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.038762][T12914] bridge_slave_0: entered allmulticast mode [ 546.065403][T12914] bridge_slave_0: entered promiscuous mode [ 546.131343][T12914] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.148058][T12914] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.165606][T12914] bridge_slave_1: entered allmulticast mode [ 546.173803][T12914] bridge_slave_1: entered promiscuous mode [ 546.371717][T12914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.399047][T12914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.576905][T12914] team0: Port device team_slave_0 added [ 546.618650][T12914] team0: Port device team_slave_1 added [ 546.657925][T11129] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 546.785110][T12914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.798016][T12914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.835136][T12914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.857888][T11129] usb 2-1: Using ep0 maxpacket: 16 [ 546.867641][T11129] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 546.891097][T11129] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 546.907857][T11129] usb 2-1: Product: syz [ 546.912107][T11129] usb 2-1: Manufacturer: syz [ 546.924851][T11129] usb 2-1: SerialNumber: syz [ 546.945099][T11129] usb 2-1: config 0 descriptor?? [ 547.010147][ T5237] Bluetooth: hci2: command tx timeout [ 547.126073][T12914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.135856][T12914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.207300][T12914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.235654][T12971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.265084][T12971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.313923][ T1179] usb 2-1: USB disconnect, device number 83 [ 547.568156][ T5237] Bluetooth: hci4: command tx timeout [ 547.809702][T12914] hsr_slave_0: entered promiscuous mode [ 547.828168][T12914] hsr_slave_1: entered promiscuous mode [ 547.867181][T12914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.887867][T12914] Cannot create hsr debugfs directory [ 548.432760][T12989] netlink: 'syz.0.1840': attribute type 29 has an invalid length. [ 548.477907][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1840'. [ 548.635415][T12847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 548.679578][T12847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 548.827333][T12914] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.915735][T12847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 548.935848][T12847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 549.077351][T12914] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.087944][ T5237] Bluetooth: hci2: command tx timeout [ 549.254324][T12914] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.470903][T12914] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.669608][T12847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.769903][T12847] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.824605][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.831883][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.983188][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.990469][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.108106][T12914] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 550.134355][T12914] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 550.154139][T12914] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 550.203238][T12914] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 550.238537][ T5288] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 550.399550][T12847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.448868][ T5288] usb 2-1: Using ep0 maxpacket: 16 [ 550.463994][ T5288] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 550.508352][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 550.516514][ T5288] usb 2-1: Product: syz [ 550.556465][ T5288] usb 2-1: Manufacturer: syz [ 550.568023][ T5288] usb 2-1: SerialNumber: syz [ 550.580731][T12914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.599238][ T5288] usb 2-1: config 0 descriptor?? [ 550.667621][T12847] veth0_vlan: entered promiscuous mode [ 550.758841][T12914] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.787512][T12847] veth1_vlan: entered promiscuous mode [ 550.802343][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.809654][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.859155][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.866429][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.888311][T13040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.899281][T13040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.956251][ T5283] usb 2-1: USB disconnect, device number 84 [ 551.068386][ T5288] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 551.082670][T12847] veth0_macvtap: entered promiscuous mode [ 551.106867][T12847] veth1_macvtap: entered promiscuous mode [ 551.143578][T12914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.159220][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.168668][ T5237] Bluetooth: hci2: command tx timeout [ 551.177660][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.188758][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.200728][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.211137][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.224161][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.234874][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.247526][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.264683][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.279220][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 551.300581][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.317878][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 551.335106][T12847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.343284][ T5288] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 551.361198][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.376925][ T5288] usb 4-1: config 0 descriptor?? [ 551.391495][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.402953][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.414419][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.428376][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.438988][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.450390][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.461204][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.472394][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.484592][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.496071][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.509449][T12847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.543136][T12847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.552703][T12847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.561805][T12847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.571642][T12847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.657627][ T5288] ath6kl: Failed to submit usb control message: -71 [ 551.679442][ T5288] ath6kl: unable to send the bmi data to the device: -71 [ 551.686554][ T5288] ath6kl: Unable to send get target info: -71 [ 551.694129][ T5288] ath6kl: Failed to init ath6kl core: -71 [ 551.701904][ T5288] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 551.791992][ T5288] usb 4-1: USB disconnect, device number 89 [ 551.947595][T12914] veth0_vlan: entered promiscuous mode [ 551.998404][T12914] veth1_vlan: entered promiscuous mode [ 552.016115][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.050165][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.157290][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.162031][T12914] veth0_macvtap: entered promiscuous mode [ 552.204150][T12914] veth1_macvtap: entered promiscuous mode [ 552.212561][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.288671][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.310005][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.363372][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.396251][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.463094][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.474463][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.485700][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.517291][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.540397][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.617867][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.682636][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.718502][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.780397][T12914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.855651][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.926953][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.934077][T13090] FAULT_INJECTION: forcing a failure. [ 552.934077][T13090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.956508][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.002237][T13090] CPU: 0 UID: 0 PID: 13090 Comm: syz.3.1854 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 553.007844][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.013136][T13090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 553.013160][T13090] Call Trace: [ 553.013171][T13090] [ 553.013183][T13090] dump_stack_lvl+0x241/0x360 [ 553.013227][T13090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.013260][T13090] ? __pfx__printk+0x10/0x10 [ 553.013294][T13090] ? __pfx_lock_release+0x10/0x10 [ 553.013334][T13090] should_fail_ex+0x3b0/0x4e0 [ 553.013365][T13090] _copy_to_user+0x2f/0xb0 [ 553.013398][T13090] scsi_ioctl+0x16f7/0x2d80 [ 553.013433][T13090] ? kasan_save_track+0x51/0x80 [ 553.013464][T13090] ? kasan_save_track+0x3f/0x80 [ 553.013495][T13090] ? __kasan_slab_free+0x37/0x60 [ 553.013527][T13090] ? tomoyo_path_number_perm+0x68d/0x880 [ 553.013552][T13090] ? security_file_ioctl_compat+0x75/0xb0 [ 553.013578][T13090] ? do_fast_syscall_32+0x34/0x80 [ 553.013612][T13090] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 553.013646][T13090] ? do_vfs_ioctl+0xf0e/0x2e50 [ 553.013676][T13090] ? __pfx_scsi_ioctl+0x10/0x10 [ 553.013713][T13090] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 553.013762][T13090] ? tomoyo_path_number_perm+0x208/0x880 [ 553.042015][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.044500][T13090] ? __pfx_lock_release+0x10/0x10 [ 553.073075][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.077740][T13090] ? __pfx___might_resched+0x10/0x10 [ 553.077786][T13090] ? kfree+0x149/0x360 [ 553.077817][T13090] ? scsi_block_when_processing_errors+0x295/0x360 [ 553.093396][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.098951][T13090] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 553.098998][T13090] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 553.099040][T13090] sg_ioctl+0x1c82/0x2e80 [ 553.099082][T13090] ? __pfx_sg_ioctl+0x10/0x10 [ 553.099114][T13090] ? __fget_files+0x29/0x470 [ 553.099155][T13090] ? __fget_files+0x3f6/0x470 [ 553.099196][T13090] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 553.099231][T13090] ? security_file_ioctl_compat+0x87/0xb0 [ 553.099259][T13090] __se_compat_sys_ioctl+0x51c/0xca0 [ 553.099295][T13090] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 553.099336][T13090] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 553.099373][T13090] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 553.099413][T13090] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 553.099448][T13090] ? lockdep_hardirqs_on+0x99/0x150 [ 553.099482][T13090] __do_fast_syscall_32+0xb4/0x110 [ 553.099518][T13090] ? exc_page_fault+0x590/0x8c0 [ 553.099554][T13090] do_fast_syscall_32+0x34/0x80 [ 553.099590][T13090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 553.099619][T13090] RIP: 0023:0xf7fa2579 [ 553.099642][T13090] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 553.099662][T13090] RSP: 002b:00000000f575657c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 553.099690][T13090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005385 [ 553.099708][T13090] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 553.099724][T13090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 553.099739][T13090] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 553.099754][T13090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 553.099787][T13090] [ 553.448245][T11129] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 553.468774][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.479105][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.512137][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.522602][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.533651][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.554987][T12914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.601645][T13082] netlink: 'syz.0.1853': attribute type 29 has an invalid length. [ 553.628567][T13082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1853'. [ 553.721291][T11129] usb 2-1: config 0 has an invalid interface number: 76 but max is 3 [ 553.732484][T11129] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 553.797100][T11129] usb 2-1: config 0 has an invalid interface number: 12 but max is 3 [ 553.837118][T11129] usb 2-1: config 0 has an invalid interface number: 63 but max is 3 [ 553.862687][T11129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.870832][T12914] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.909743][T11129] usb 2-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 553.949802][T12914] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.988410][T12914] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.007071][T11129] usb 2-1: config 0 has no interface number 0 [ 554.035606][T11129] usb 2-1: config 0 has no interface number 1 [ 554.036028][T12914] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.176508][T11129] usb 2-1: config 0 has no interface number 2 [ 554.215504][T11129] usb 2-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 554.278605][T11129] usb 2-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 554.325169][T11129] usb 2-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 554.496813][T11129] usb 2-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 554.554109][ T3253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.602045][T11129] usb 2-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 554.608395][ T3253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.669775][T11129] usb 2-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 554.678060][ T5278] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 554.768359][T11129] usb 2-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 554.794774][ T3253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.845864][T11129] usb 2-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 554.846944][ T3253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.908341][T11129] usb 2-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 554.930220][ T5278] usb 4-1: Using ep0 maxpacket: 16 [ 554.960452][ T5278] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 8 [ 554.968637][T11129] usb 2-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 554.997812][ T5278] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1023 [ 555.050719][T11129] usb 2-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 555.078955][ T5278] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 555.088698][T11129] usb 2-1: config 0 interface 76 has no altsetting 0 [ 555.128030][ T5278] usb 4-1: config 1 interface 0 has no altsetting 0 [ 555.155301][T11129] usb 2-1: config 0 interface 12 has no altsetting 0 [ 555.158688][ T5278] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 555.198087][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.243707][ T5278] usb 4-1: Product: syz [ 555.250635][T11129] usb 2-1: Dual-Role OTG device on HNP port [ 555.271388][ T5278] usb 4-1: Manufacturer: syz [ 555.276483][ T5278] usb 4-1: SerialNumber: syz [ 555.282324][T11129] usb 2-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 555.323679][T13111] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 555.332068][T13111] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 555.358454][T11129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.366526][T11129] usb 2-1: Product: syz [ 555.407698][T11129] usb 2-1: Manufacturer: syz [ 555.427956][T11129] usb 2-1: SerialNumber: syz [ 555.441466][T11129] usb 2-1: config 0 descriptor?? [ 555.463581][T11129] cp210x 2-1:0.76: cp210x converter detected [ 555.588601][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1857'. [ 555.650749][ T8] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 555.678124][T13084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.688670][T13084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.758747][ T5288] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 555.800370][T13084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.832854][ T5278] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 555.877969][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 555.882678][ T5278] usb 4-1: USB disconnect, device number 90 [ 555.888857][ T8] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.916359][T13084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.947984][ T8] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.975262][ T5288] usb 3-1: Using ep0 maxpacket: 16 [ 555.985381][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 556.001031][ T5288] usb 3-1: config 0 has no interfaces? [ 556.016538][ T5288] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 556.041342][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.048018][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.078944][ T5288] usb 3-1: config 0 descriptor?? [ 556.111645][ T8] hub 5-1:4.0: USB hub found [ 556.144767][T11129] cp210x 2-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 556.168312][T11129] cp210x 2-1:0.76: querying part number failed [ 556.199305][T11129] usb 2-1: cp210x converter now attached to ttyUSB0 [ 556.251146][T11129] cp210x 2-1:0.12: cp210x converter detected [ 556.278158][T11129] cp210x 2-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 556.285861][T11129] cp210x 2-1:0.12: querying part number failed [ 556.338806][T11129] usb 2-1: cp210x converter now attached to ttyUSB1 [ 556.347423][ T8] hub 5-1:4.0: 2 ports detected [ 556.382732][T11129] cp210x 2-1:0.63: cp210x converter detected [ 556.415044][T11129] cp210x 2-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 556.434989][T11129] cp210x 2-1:0.63: querying part number failed [ 556.476880][T11129] usb 2-1: cp210x converter now attached to ttyUSB2 [ 556.524729][T11129] usb 2-1: USB disconnect, device number 85 [ 556.586105][T13125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.609394][T13125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.620816][T11129] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 556.678345][T11129] cp210x 2-1:0.76: device disconnected [ 556.738736][T11129] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 556.783547][ T8] hub 5-1:4.0: set hub depth failed [ 556.812857][T11129] cp210x 2-1:0.12: device disconnected [ 556.838214][ T8] usb 5-1: USB disconnect, device number 78 [ 556.865354][T11129] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 556.912869][T11129] cp210x 2-1:0.63: device disconnected [ 556.984591][T13146] FAULT_INJECTION: forcing a failure. [ 556.984591][T13146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.002375][T13146] CPU: 0 UID: 0 PID: 13146 Comm: syz.3.1861 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 557.013225][T13146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 557.023327][T13146] Call Trace: [ 557.026646][T13146] [ 557.029607][T13146] dump_stack_lvl+0x241/0x360 [ 557.034338][T13146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.039589][T13146] ? __pfx__printk+0x10/0x10 [ 557.044236][T13146] ? __pfx_lock_release+0x10/0x10 [ 557.049317][T13146] ? stack_trace_save+0x118/0x1d0 [ 557.054402][T13146] should_fail_ex+0x3b0/0x4e0 [ 557.059132][T13146] _copy_to_user+0x2f/0xb0 [ 557.063595][T13146] scsi_ioctl+0x16f7/0x2d80 [ 557.068142][T13146] ? kasan_save_track+0x51/0x80 [ 557.073038][T13146] ? kasan_save_track+0x3f/0x80 [ 557.077939][T13146] ? __kasan_slab_free+0x37/0x60 [ 557.082930][T13146] ? tomoyo_path_number_perm+0x68d/0x880 [ 557.088607][T13146] ? security_file_ioctl_compat+0x75/0xb0 [ 557.094372][T13146] ? do_fast_syscall_32+0x34/0x80 [ 557.099453][T13146] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.106017][T13146] ? do_vfs_ioctl+0xf0e/0x2e50 [ 557.110838][T13146] ? __pfx_scsi_ioctl+0x10/0x10 [ 557.115748][T13146] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 557.120843][T13146] ? tomoyo_path_number_perm+0x208/0x880 [ 557.126530][T13146] ? __pfx_lock_release+0x10/0x10 [ 557.131611][T13146] ? __pfx___might_resched+0x10/0x10 [ 557.136955][T13146] ? kfree+0x149/0x360 [ 557.141076][T13146] ? scsi_block_when_processing_errors+0x295/0x360 [ 557.147642][T13146] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 557.154566][T13146] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 557.160629][T13146] sg_ioctl+0x1c82/0x2e80 [ 557.165109][T13146] ? __pfx_sg_ioctl+0x10/0x10 [ 557.169840][T13146] ? __fget_files+0x29/0x470 [ 557.174495][T13146] ? __fget_files+0x3f6/0x470 [ 557.179236][T13146] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 557.184839][T13146] ? security_file_ioctl_compat+0x87/0xb0 [ 557.190606][T13146] __se_compat_sys_ioctl+0x51c/0xca0 [ 557.195952][T13146] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 557.201818][T13146] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 557.207849][T13146] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 557.214233][T13146] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 557.220871][T13146] ? lockdep_hardirqs_on+0x99/0x150 [ 557.226112][T13146] __do_fast_syscall_32+0xb4/0x110 [ 557.231271][T13146] ? exc_page_fault+0x590/0x8c0 [ 557.236157][T13146] do_fast_syscall_32+0x34/0x80 [ 557.241024][T13146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.247361][T13146] RIP: 0023:0xf7fa2579 [ 557.251448][T13146] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 557.271098][T13146] RSP: 002b:00000000f575657c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 557.279569][T13146] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000005385 [ 557.287587][T13146] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.295618][T13146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 557.303639][T13146] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 557.311656][T13146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.319689][T13146] [ 557.519863][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1863'. [ 557.529216][ T29] audit: type=1326 audit(1722955373.009:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.3.1864" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x0 [ 557.626112][T13155] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.635822][T13155] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.644677][T13155] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.654036][T13155] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.703887][T13155] vxlan0: entered promiscuous mode [ 558.373687][ T5237] Bluetooth: hci3: unexpected cc 0x042f length: 181 > 7 [ 558.657497][T11129] usb 3-1: USB disconnect, device number 90 [ 559.049918][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1873'. [ 559.079639][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1873'. [ 559.267935][ T1179] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 559.358064][ T5279] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 559.457917][ T1179] usb 2-1: Using ep0 maxpacket: 32 [ 559.469398][ T1179] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 559.498791][ T1179] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 559.533641][ T1179] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 559.555379][ T1179] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 559.566330][ T5279] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 559.582646][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.591006][ T1179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.591211][T11129] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 559.628570][ T1179] usb 2-1: config 0 descriptor?? [ 559.634904][T13180] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 559.639283][ T5279] usb 3-1: config 0 descriptor?? [ 559.661857][ T1179] hub 2-1:0.0: USB hub found [ 559.828640][T11129] usb 4-1: Using ep0 maxpacket: 32 [ 559.840637][T11129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 559.860238][T13205] team_slave_0: entered promiscuous mode [ 559.866949][T13205] team_slave_1: entered promiscuous mode [ 559.871156][T11129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 559.897935][T13180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.908621][ T5279] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 559.929781][T11129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 559.939508][T13205] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 559.949710][ T5279] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 559.958255][T13180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.969124][ T5279] [drm:udl_init] *ERROR* Selecting channel failed [ 559.996283][T11129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 560.019653][T13180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.031761][ T5279] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 560.047288][T11129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 560.058092][ T5279] [drm] Initialized udl on minor 2 [ 560.078584][ T5279] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 560.090933][T11129] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=cd.e5 [ 560.098489][T13180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.109859][ T5279] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 560.120107][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 560.137134][T11129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.152637][T11129] usb 4-1: Product: syz [ 560.157065][T11129] usb 4-1: Manufacturer: syz [ 560.163085][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 560.172511][T11129] usb 4-1: SerialNumber: syz [ 560.185713][ T5279] usb 3-1: USB disconnect, device number 91 [ 560.202707][ T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 560.228095][T11129] usb 4-1: config 0 descriptor?? [ 560.272663][T11129] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.366190][T13220] fuse: Bad value for 'fd' [ 560.396979][ T1179] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 560.565249][T11129] usb 4-1: USB disconnect, device number 91 [ 560.849916][ T5384] udevd[5384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 561.537366][T13231] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1887'. [ 561.868162][ T8] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 562.047176][ T1179] usbhid 2-1:0.0: can't add hid device: -71 [ 562.067867][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 562.071368][ T1179] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 562.094083][ T8] usb 4-1: config 0 has an invalid interface number: 250 but max is 2 [ 562.129083][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.149980][ T1179] usb 2-1: USB disconnect, device number 86 [ 562.179353][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 562.199296][ T8] usb 4-1: config 0 has no interface number 0 [ 562.221810][ T8] usb 4-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 562.231607][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.245347][ T8] usb 4-1: Product: syz [ 562.248055][ T29] audit: type=1326 audit(1722955377.729:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13240 comm="syz.4.1891" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x0 [ 562.249707][ T8] usb 4-1: Manufacturer: syz [ 562.294945][ T8] usb 4-1: SerialNumber: syz [ 562.319035][ T8] usb 4-1: config 0 descriptor?? [ 562.549690][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1887'. [ 562.560415][T13231] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1887'. [ 562.584047][T13231] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1887'. [ 562.615301][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'. [ 562.648020][ T1179] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 562.850379][ T1179] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.862452][ T1179] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.889731][ T1179] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 562.928097][ T1179] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 562.943962][ T1179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.960514][ T1179] usb 2-1: config 0 descriptor?? [ 563.108930][T11129] usb 4-1: USB disconnect, device number 92 [ 563.181351][T13257] FAULT_INJECTION: forcing a failure. [ 563.181351][T13257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.199047][T13257] CPU: 1 UID: 0 PID: 13257 Comm: syz.4.1896 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 563.209892][T13257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 563.219994][T13257] Call Trace: [ 563.223320][T13257] [ 563.226290][T13257] dump_stack_lvl+0x241/0x360 [ 563.231044][T13257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.236286][T13257] ? __pfx__printk+0x10/0x10 [ 563.240932][T13257] ? shmem_get_folio_gfp+0x19c7/0x2370 [ 563.246531][T13257] should_fail_ex+0x3b0/0x4e0 [ 563.251253][T13257] copy_page_from_iter_atomic+0x24f/0x1aa0 [ 563.257120][T13257] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 563.262815][T13257] ? fault_in_readable+0x1d3/0x2b0 [ 563.267991][T13257] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 563.274277][T13257] ? shmem_write_begin+0x23f/0x4d0 [ 563.279444][T13257] ? __pfx_shmem_write_begin+0x10/0x10 [ 563.285054][T13257] generic_perform_write+0x4a1/0x840 [ 563.290502][T13257] ? __pfx_generic_perform_write+0x10/0x10 [ 563.296365][T13257] ? __pfx_generic_write_checks+0x10/0x10 [ 563.302135][T13257] ? rcu_read_lock_any_held+0xb7/0x160 [ 563.307663][T13257] ? file_update_time+0x2a6/0x430 [ 563.312755][T13257] shmem_file_write_iter+0xfc/0x120 [ 563.318022][T13257] vfs_write+0xa72/0xc90 [ 563.322344][T13257] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 563.328206][T13257] ? __pfx_vfs_write+0x10/0x10 [ 563.333053][T13257] ksys_write+0x1a0/0x2c0 [ 563.337440][T13257] ? __pfx_ksys_write+0x10/0x10 [ 563.342341][T13257] ? __secure_computing+0x125/0x370 [ 563.347596][T13257] __do_fast_syscall_32+0xb4/0x110 [ 563.352769][T13257] ? exc_page_fault+0x590/0x8c0 [ 563.357684][T13257] do_fast_syscall_32+0x34/0x80 [ 563.362603][T13257] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 563.368994][T13257] RIP: 0023:0xf7fe6579 [ 563.373110][T13257] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 563.392761][T13257] RSP: 002b:00000000f579657c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 563.401248][T13257] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000200001c0 [ 563.409365][T13257] RDX: 0000000000000118 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.417385][T13257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 563.425572][T13257] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 563.433585][T13257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 563.441622][T13257] [ 563.451210][T13259] FAULT_INJECTION: forcing a failure. [ 563.451210][T13259] name failslab, interval 1, probability 0, space 0, times 0 [ 563.497367][T13259] CPU: 0 UID: 0 PID: 13259 Comm: syz.3.1897 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 563.508196][T13259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 563.518284][T13259] Call Trace: [ 563.521584][T13259] [ 563.524543][T13259] dump_stack_lvl+0x241/0x360 [ 563.529261][T13259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.534492][T13259] ? __pfx__printk+0x10/0x10 [ 563.539139][T13259] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 563.545164][T13259] ? __pfx___might_resched+0x10/0x10 [ 563.550486][T13259] should_fail_ex+0x3b0/0x4e0 [ 563.555191][T13259] should_failslab+0xac/0x100 [ 563.559930][T13259] ? __alloc_skb+0x1c3/0x440 [ 563.564538][T13259] kmem_cache_alloc_node_noprof+0x71/0x320 [ 563.570384][T13259] __alloc_skb+0x1c3/0x440 [ 563.574838][T13259] ? __pfx___alloc_skb+0x10/0x10 [ 563.579789][T13259] ? __local_bh_enable_ip+0x168/0x200 [ 563.585212][T13259] ? dev_graft_qdisc+0x121/0x140 [ 563.590219][T13259] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 563.595992][T13259] qdisc_notify+0x11b/0x4b0 [ 563.600574][T13259] qdisc_graft+0x1221/0x1580 [ 563.605223][T13259] ? qdisc_graft+0x241/0x1580 [ 563.610069][T13259] ? __pfx_qdisc_graft+0x10/0x10 [ 563.615066][T13259] ? __pfx_qdisc_create+0x10/0x10 [ 563.620153][T13259] tc_modify_qdisc+0xf47/0x1e40 [ 563.625065][T13259] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 563.630434][T13259] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 563.635756][T13259] rtnetlink_rcv_msg+0x73f/0xcf0 [ 563.640730][T13259] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 563.646058][T13259] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 563.651587][T13259] ? ref_tracker_free+0x643/0x7e0 [ 563.656638][T13259] netlink_rcv_skb+0x1e3/0x430 [ 563.661446][T13259] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 563.666932][T13259] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.672268][T13259] ? netlink_deliver_tap+0x2e/0x1b0 [ 563.677491][T13259] netlink_unicast+0x7f0/0x990 [ 563.682308][T13259] ? __pfx_netlink_unicast+0x10/0x10 [ 563.687660][T13259] ? __virt_addr_valid+0x183/0x530 [ 563.692815][T13259] ? __check_object_size+0x49c/0x900 [ 563.698140][T13259] ? bpf_lsm_netlink_send+0x9/0x10 [ 563.703283][T13259] netlink_sendmsg+0x8e4/0xcb0 [ 563.708107][T13259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.713535][T13259] ? aa_sock_msg_perm+0x91/0x160 [ 563.718538][T13259] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 563.723862][T13259] ? security_socket_sendmsg+0x87/0xb0 [ 563.729439][T13259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.734760][T13259] __sock_sendmsg+0x221/0x270 [ 563.739475][T13259] ____sys_sendmsg+0x525/0x7d0 [ 563.744282][T13259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.749608][T13259] __sys_sendmsg+0x2b0/0x3a0 [ 563.754242][T13259] ? __pfx___sys_sendmsg+0x10/0x10 [ 563.759383][T13259] ? vfs_write+0x7c4/0xc90 [ 563.763894][T13259] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 563.770603][T13259] ? lockdep_hardirqs_on+0x99/0x150 [ 563.775929][T13259] __do_fast_syscall_32+0xb4/0x110 [ 563.781088][T13259] ? exc_page_fault+0x590/0x8c0 [ 563.785965][T13259] do_fast_syscall_32+0x34/0x80 [ 563.790842][T13259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 563.797293][T13259] RIP: 0023:0xf7fa2579 [ 563.801409][T13259] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 563.821056][T13259] RSP: 002b:00000000f575657c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 563.829499][T13259] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 563.837492][T13259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.845482][T13259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 563.853611][T13259] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 563.861627][T13259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 563.869917][T13259] [ 564.135584][T13267] team0: Device bridge0 is up. Set it down before adding it as a team port [ 564.691558][T13272] vlan2: entered promiscuous mode [ 564.732477][T13272] team_slave_0: entered promiscuous mode [ 564.737985][ T1179] usbhid 2-1:0.0: can't add hid device: -71 [ 564.740008][T13272] team_slave_1: entered promiscuous mode [ 564.750497][T13272] bridge0: entered promiscuous mode [ 564.765408][ T1179] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 564.811106][ T1179] usb 2-1: USB disconnect, device number 87 [ 564.838110][T13272] team0: entered promiscuous mode [ 564.902891][T13272] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 565.131253][ T29] audit: type=1326 audit(1722955380.619:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13282 comm="syz.0.1906" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x0 [ 565.218257][ T47] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 565.308185][ T25] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 565.434246][ T47] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 565.461554][ T47] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 565.472847][ T47] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 565.483713][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.497040][T13277] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 565.522871][ T47] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 565.541153][ T25] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 565.560136][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.589533][ T25] usb 4-1: Product: syz [ 565.593883][ T25] usb 4-1: Manufacturer: syz [ 565.612701][ T25] usb 4-1: SerialNumber: syz [ 565.634858][ T25] usb 4-1: config 0 descriptor?? [ 565.801150][ T47] usb 5-1: USB disconnect, device number 79 [ 565.847680][T13279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.868955][T13279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.895094][T13303] team_slave_0: entered promiscuous mode [ 565.901060][T13303] team_slave_1: entered promiscuous mode [ 565.923868][T13303] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 565.929040][ T25] usb 4-1: Firmware version (0.0) predates our first public release. [ 565.949819][ T25] usb 4-1: Please update to version 0.2 or newer [ 566.088255][ T25] usb 4-1: USB disconnect, device number 93 [ 566.161452][T13307] netlink: 'syz.0.1912': attribute type 29 has an invalid length. [ 566.179027][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1912'. [ 566.452434][T13318] netlink: 'syz.1.1914': attribute type 11 has an invalid length. [ 566.638422][T13322] netlink: 'syz.3.1916': attribute type 21 has an invalid length. [ 566.661525][T13322] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1916'. [ 567.385665][ T29] audit: type=1326 audit(1722955382.869:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7fc00000 [ 567.426907][ T29] audit: type=1326 audit(1722955382.909:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d579 code=0x7fc00000 [ 567.468170][T13346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 568.078227][ T8] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 568.163999][ T29] audit: type=1326 audit(1722955383.649:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7fc00000 [ 568.202867][ T29] audit: type=1326 audit(1722955383.649:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf740d579 code=0x7fc00000 [ 568.259574][ T8] usb 4-1: no configurations [ 568.271714][ T8] usb 4-1: can't read configurations, error -22 [ 568.273921][ T29] audit: type=1326 audit(1722955383.649:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7fc00000 [ 568.301890][ T29] audit: type=1326 audit(1722955383.649:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7fc00000 [ 568.351292][ T29] audit: type=1326 audit(1722955383.649:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7fc00000 [ 568.409912][ T29] audit: type=1326 audit(1722955383.649:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7fc00000 [ 568.456959][ T29] audit: type=1326 audit(1722955383.649:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7fc00000 [ 568.468031][ T8] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 568.541001][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.548465][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.669228][ T8] usb 4-1: no configurations [ 568.684840][ T8] usb 4-1: can't read configurations, error -22 [ 568.694143][ T8] usb usb4-port1: attempt power cycle [ 568.850504][T13372] netlink: 'syz.1.1934': attribute type 29 has an invalid length. [ 568.868148][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 568.952978][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 569.120345][ T8] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 569.160736][ T8] usb 4-1: no configurations [ 569.165430][ T8] usb 4-1: can't read configurations, error -22 [ 569.188034][ T5283] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 569.317978][ T8] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 569.355458][ T8] usb 4-1: no configurations [ 569.360179][ T8] usb 4-1: can't read configurations, error -22 [ 569.368199][ T5283] usb 5-1: Using ep0 maxpacket: 16 [ 569.380374][ T8] usb usb4-port1: unable to enumerate USB device [ 569.393880][ T5283] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 569.402141][ T5283] usb 5-1: config 0 has no interface number 0 [ 569.414561][ T5283] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 569.427963][ T25] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 569.438738][ T5283] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 569.454428][ T5283] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 569.463882][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 569.472632][ T5283] usb 5-1: Product: syz [ 569.476845][ T5283] usb 5-1: SerialNumber: syz [ 569.484976][ T5283] usb 5-1: config 0 descriptor?? [ 569.494208][ T5283] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 569.503632][ T5283] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input25 [ 569.627925][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 569.635240][ T25] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 569.644044][ T25] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 569.679523][ T25] usb 3-1: config 0 has no interface number 0 [ 569.685803][ T25] usb 3-1: too many endpoints for config 0 interface 101 altsetting 61: 48, using maximum allowed: 30 [ 569.707710][ T25] usb 3-1: config 0 interface 101 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 569.722868][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 569.728805][ T5278] usb 5-1: USB disconnect, device number 80 [ 569.731210][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 569.738190][ T25] usb 3-1: config 0 interface 101 has no altsetting 0 [ 569.763750][ T5278] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 569.779327][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 569.789522][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.824968][ T25] usb 3-1: config 0 descriptor?? [ 570.223277][ T25] usb 3-1: string descriptor 0 read error: -71 [ 570.239568][ T25] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 570.246945][ T25] gspca_vc032x: reg_r err -71 [ 570.255997][ T25] vc032x 3-1:0.101: probe with driver vc032x failed with error -71 [ 570.276312][ T25] usb 3-1: USB disconnect, device number 92 [ 570.693762][T13402] FAULT_INJECTION: forcing a failure. [ 570.693762][T13402] name failslab, interval 1, probability 0, space 0, times 0 [ 570.707230][T13402] CPU: 1 UID: 0 PID: 13402 Comm: syz.0.1941 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 570.718063][T13402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 570.728164][T13402] Call Trace: [ 570.731510][T13402] [ 570.734453][T13402] dump_stack_lvl+0x241/0x360 [ 570.739176][T13402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.744453][T13402] ? __pfx__printk+0x10/0x10 [ 570.749115][T13402] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 570.755688][T13402] ? __pfx___might_resched+0x10/0x10 [ 570.761034][T13402] should_fail_ex+0x3b0/0x4e0 [ 570.765862][T13402] should_failslab+0xac/0x100 [ 570.770604][T13402] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 570.776998][T13402] ? kasprintf+0xd5/0x120 [ 570.781412][T13402] kvasprintf+0xdf/0x190 [ 570.785723][T13402] ? __kmalloc_noprof+0x1fc/0x400 [ 570.790792][T13402] ? nla_strdup+0x9c/0x140 [ 570.795229][T13402] ? nf_tables_newset+0x1785/0x2ea0 [ 570.800470][T13402] ? __pfx_kvasprintf+0x10/0x10 [ 570.805409][T13402] ? ____sys_sendmsg+0x525/0x7d0 [ 570.810416][T13402] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 570.817026][T13402] kasprintf+0xd5/0x120 [ 570.821232][T13402] ? __pfx_kasprintf+0x10/0x10 [ 570.826068][T13402] nf_tables_set_alloc_name+0x111/0x730 [ 570.831663][T13402] ? nla_strdup+0x9c/0x140 [ 570.836105][T13402] ? rcu_is_watching+0x15/0xb0 [ 570.840923][T13402] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 570.847072][T13402] ? __asan_memcpy+0x40/0x70 [ 570.851727][T13402] ? nla_strdup+0xb7/0x140 [ 570.856213][T13402] nf_tables_newset+0x17a6/0x2ea0 [ 570.861338][T13402] ? __pfx_nf_tables_newset+0x10/0x10 [ 570.866788][T13402] ? __nla_parse+0x40/0x60 [ 570.871256][T13402] nfnetlink_rcv+0x1427/0x2a90 [ 570.876221][T13402] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 570.881471][T13402] ? netlink_deliver_tap+0x2e/0x1b0 [ 570.886734][T13402] ? skb_clone+0x240/0x390 [ 570.891195][T13402] ? __pfx_lock_release+0x10/0x10 [ 570.896255][T13402] ? netlink_deliver_tap+0x2e/0x1b0 [ 570.901503][T13402] netlink_unicast+0x7f0/0x990 [ 570.906333][T13402] ? __pfx_netlink_unicast+0x10/0x10 [ 570.911653][T13402] ? __virt_addr_valid+0x183/0x530 [ 570.916852][T13402] ? __check_object_size+0x49c/0x900 [ 570.922182][T13402] ? bpf_lsm_netlink_send+0x9/0x10 [ 570.927451][T13402] netlink_sendmsg+0x8e4/0xcb0 [ 570.932308][T13402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.937680][T13402] ? aa_sock_msg_perm+0x91/0x160 [ 570.942659][T13402] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 570.948013][T13402] ? security_socket_sendmsg+0x87/0xb0 [ 570.953574][T13402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.958909][T13402] __sock_sendmsg+0x221/0x270 [ 570.963652][T13402] ____sys_sendmsg+0x525/0x7d0 [ 570.968505][T13402] ? __pfx_____sys_sendmsg+0x10/0x10 [ 570.973956][T13402] __sys_sendmsg+0x2b0/0x3a0 [ 570.978617][T13402] ? __pfx___sys_sendmsg+0x10/0x10 [ 570.983791][T13402] ? vfs_write+0x7c4/0xc90 [ 570.988326][T13402] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 570.994983][T13402] ? lockdep_hardirqs_on+0x99/0x150 [ 571.000251][T13402] __do_fast_syscall_32+0xb4/0x110 [ 571.005441][T13402] ? exc_page_fault+0x590/0x8c0 [ 571.010383][T13402] do_fast_syscall_32+0x34/0x80 [ 571.015395][T13402] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 571.021789][T13402] RIP: 0023:0xf7fd3579 [ 571.025900][T13402] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 571.045531][T13402] RSP: 002b:00000000f578657c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 571.053993][T13402] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 571.062034][T13402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 571.070058][T13402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.078081][T13402] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 571.086106][T13402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.094151][T13402] [ 571.315673][T13407] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 571.608282][ T5283] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 571.656602][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.808045][ T5283] usb 2-1: Using ep0 maxpacket: 16 [ 571.850909][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 571.863256][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 571.890123][ T5283] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 571.938305][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.958382][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.991291][ T5283] usb 2-1: config 0 descriptor?? [ 572.073575][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.224028][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.416592][T13407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.448983][T13407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.629003][ T48] bridge_slave_1: left allmulticast mode [ 572.650364][ T48] bridge_slave_1: left promiscuous mode [ 572.656265][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.688063][ T25] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 572.720450][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 572.735053][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 572.747659][ T48] bridge_slave_0: left allmulticast mode [ 572.754225][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 572.780644][ T48] bridge_slave_0: left promiscuous mode [ 572.787340][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.798755][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 572.813869][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 572.834429][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 572.929452][ T25] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 572.971011][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.018653][ T25] usb 4-1: config 0 has no interface number 0 [ 573.027469][ T25] usb 4-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 573.039805][ T25] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 573.049854][ T25] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 573.073416][ T25] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 573.099558][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.135326][ T25] usb 4-1: config 0 descriptor?? [ 573.168968][ T25] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 573.222698][ T5283] usbhid 2-1:0.0: can't add hid device: -71 [ 573.233789][ T5283] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 573.261087][ T5283] usb 2-1: USB disconnect, device number 88 [ 574.209484][ T999] usb 4-1: Failed to submit usb control message: -110 [ 574.224030][ T999] usb 4-1: unable to send the bmi data to the device: -110 [ 574.259342][ T999] usb 4-1: unable to get target info from device [ 574.279649][ T999] usb 4-1: could not get target info (-110) [ 574.299403][ T999] usb 4-1: could not probe fw (-110) [ 574.398051][ T5278] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 574.520837][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.534287][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.551038][ T48] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 574.566663][ T48] team_slave_0: left promiscuous mode [ 574.572794][ T48] team_slave_1: left promiscuous mode [ 574.582135][ T48] bond0 (unregistering): Released all slaves [ 574.610136][ T5278] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 574.618497][ T5278] usb 5-1: config 0 has no interface number 0 [ 574.628069][ T5278] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 574.641464][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.651842][ T5278] usb 5-1: Product: syz [ 574.678821][ T5278] usb 5-1: Manufacturer: syz [ 574.700945][ T5278] usb 5-1: SerialNumber: syz [ 574.710499][ T5278] usb 5-1: config 0 descriptor?? [ 574.735614][ T5278] usb_set_interface error [ 574.768890][ T5278] snd-usb-us122l 5-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 574.928329][ T5237] Bluetooth: hci2: command tx timeout [ 575.050684][T13465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.061275][T13465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.072573][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1955'. [ 575.158225][ T5278] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 575.172161][ T48] hsr_slave_0: left promiscuous mode [ 575.188874][ T48] hsr_slave_1: left promiscuous mode [ 575.195787][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.210308][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.232111][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.269808][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.349474][ T48] veth1_macvtap: left promiscuous mode [ 575.358735][ T48] veth0_macvtap: left promiscuous mode [ 575.367913][ T5278] usb 2-1: Using ep0 maxpacket: 8 [ 575.377663][ T48] veth1_vlan: left promiscuous mode [ 575.397553][ T5278] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 575.413643][ T48] veth0_vlan: left promiscuous mode [ 575.421228][ T5278] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 575.442876][ T5278] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 575.454399][ T5278] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.468607][ T5278] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 575.498698][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.539923][ T5288] usb 4-1: USB disconnect, device number 98 [ 575.739381][ T5278] usb 2-1: GET_CAPABILITIES returned 0 [ 575.773490][ T5278] usbtmc 2-1:16.0: can't read capabilities [ 576.865665][ T48] team0 (unregistering): Port device team_slave_1 removed [ 576.943362][ T48] team0 (unregistering): Port device team_slave_0 removed [ 577.017171][ T5237] Bluetooth: hci2: command tx timeout [ 577.159578][ T5283] usb 5-1: USB disconnect, device number 81 [ 577.978919][T13491] syzkaller1: entered promiscuous mode [ 577.984532][T13491] syzkaller1: entered allmulticast mode [ 578.030831][ T8] usb 2-1: USB disconnect, device number 89 [ 578.394040][T13433] chnl_net:caif_netlink_parms(): no params data found [ 579.039037][T13433] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.056562][T13433] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.082100][T13433] bridge_slave_0: entered allmulticast mode [ 579.089774][ T55] Bluetooth: hci2: command tx timeout [ 579.133511][T13433] bridge_slave_0: entered promiscuous mode [ 579.144544][T13433] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.152246][T13433] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.159840][T13433] bridge_slave_1: entered allmulticast mode [ 579.167722][T13433] bridge_slave_1: entered promiscuous mode [ 579.390978][T13433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.462918][T13433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.726997][T13524] batman_adv: batadv0: Adding interface: wlan1 [ 579.739263][T13524] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.822424][T13524] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 580.002182][T13433] team0: Port device team_slave_0 added [ 580.032037][T13433] team0: Port device team_slave_1 added [ 580.118305][T13553] FAULT_INJECTION: forcing a failure. [ 580.118305][T13553] name failslab, interval 1, probability 0, space 0, times 0 [ 580.140588][T13553] CPU: 0 UID: 0 PID: 13553 Comm: syz.4.1970 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 580.151445][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 580.161567][T13553] Call Trace: [ 580.164899][T13553] [ 580.167889][T13553] dump_stack_lvl+0x241/0x360 [ 580.172643][T13553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.177925][T13553] ? __pfx__printk+0x10/0x10 [ 580.182598][T13553] ? fs_reclaim_acquire+0x93/0x140 [ 580.187779][T13553] ? __pfx___might_resched+0x10/0x10 [ 580.193130][T13553] should_fail_ex+0x3b0/0x4e0 [ 580.197864][T13553] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 580.203646][T13553] should_failslab+0xac/0x100 [ 580.208390][T13553] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 580.214169][T13553] __kmalloc_noprof+0xd8/0x400 [ 580.218992][T13553] ? kfree+0x4e/0x360 [ 580.223035][T13553] tomoyo_realpath_from_path+0xcf/0x5e0 [ 580.228657][T13553] tomoyo_path_number_perm+0x23a/0x880 [ 580.234172][T13553] ? __lock_acquire+0x137a/0x2040 [ 580.239286][T13553] ? tomoyo_path_number_perm+0x208/0x880 [ 580.244977][T13553] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 580.251067][T13553] ? __fget_files+0x29/0x470 [ 580.255731][T13553] ? __fget_files+0x3f6/0x470 [ 580.260530][T13553] security_file_ioctl_compat+0x75/0xb0 [ 580.266135][T13553] __se_compat_sys_ioctl+0xd6/0xca0 [ 580.271394][T13553] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 580.277299][T13553] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 580.283347][T13553] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 580.289742][T13553] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 580.296389][T13553] ? lockdep_hardirqs_on+0x99/0x150 [ 580.301652][T13553] __do_fast_syscall_32+0xb4/0x110 [ 580.306838][T13553] ? exc_page_fault+0x590/0x8c0 [ 580.311741][T13553] do_fast_syscall_32+0x34/0x80 [ 580.316628][T13553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 580.322982][T13553] RIP: 0023:0xf7fe6579 [ 580.327067][T13553] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 580.346961][T13553] RSP: 002b:00000000f57944a4 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 580.355407][T13553] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000041015500 [ 580.363486][T13553] RDX: 00000000f5795530 RSI: 00000000f746cff4 RDI: 00000000f5794508 [ 580.371561][T13553] RBP: 00000000f746cff4 R08: 0000000000000000 R09: 0000000000000000 [ 580.379547][T13553] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 580.387535][T13553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.395539][T13553] [ 580.398599][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.445695][T13553] ERROR: Out of memory at tomoyo_realpath_from_path. [ 580.477343][T13433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.496841][T13433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.575943][T13433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.610164][T13433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.617183][T13433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.680801][ T55] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 580.718392][ T8] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 580.755407][T13433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.803754][T13566] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 580.815613][ T55] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 580.823567][ T55] Bluetooth: Wrong link type (-22) [ 580.831835][ T55] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 580.838750][ T55] Bluetooth: Wrong link type (-22) [ 580.844052][ T55] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 580.851005][ T55] Bluetooth: Wrong link type (-22) [ 580.856260][ T55] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 580.863179][ T55] Bluetooth: Wrong link type (-22) [ 580.868642][ T55] ================================================================== [ 580.876749][ T55] BUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x67b/0x8d0 [ 580.884445][ T55] Read of size 4 at addr ffff88802ba90010 by task kworker/u9:0/55 [ 580.892384][ T55] [ 580.894733][ T55] CPU: 1 UID: 0 PID: 55 Comm: kworker/u9:0 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 580.905433][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 580.915517][ T55] Workqueue: hci3 hci_rx_work [ 580.920232][ T55] Call Trace: [ 580.923523][ T55] [ 580.926469][ T55] dump_stack_lvl+0x241/0x360 [ 580.931182][ T55] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.936440][ T55] ? __pfx__printk+0x10/0x10 [ 580.941067][ T55] ? _printk+0xd5/0x120 [ 580.945245][ T55] ? __virt_addr_valid+0x183/0x530 [ 580.950397][ T55] ? __virt_addr_valid+0x183/0x530 [ 580.955525][ T55] print_report+0x169/0x550 [ 580.960051][ T55] ? __virt_addr_valid+0x183/0x530 [ 580.965199][ T55] ? __virt_addr_valid+0x183/0x530 [ 580.970325][ T55] ? __virt_addr_valid+0x45f/0x530 [ 580.975449][ T55] ? __phys_addr+0xba/0x170 [ 580.979964][ T55] ? l2cap_send_cmd+0x67b/0x8d0 [ 580.984831][ T55] kasan_report+0x143/0x180 [ 580.989397][ T55] ? l2cap_send_cmd+0x67b/0x8d0 [ 580.994269][ T55] l2cap_send_cmd+0x67b/0x8d0 [ 580.998963][ T55] ? skb_pull+0xc1/0x1e0 [ 581.003227][ T55] l2cap_recv_frame+0x22f1/0x10840 [ 581.008363][ T55] ? validate_chain+0x11e/0x5900 [ 581.013336][ T55] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 581.018732][ T55] ? validate_chain+0x11e/0x5900 [ 581.023686][ T55] ? __pfx_validate_chain+0x10/0x10 [ 581.028900][ T55] ? __pfx_validate_chain+0x10/0x10 [ 581.034117][ T55] ? __pfx_validate_chain+0x10/0x10 [ 581.039332][ T55] ? __pfx_validate_chain+0x10/0x10 [ 581.044582][ T55] ? kasan_save_track+0x51/0x80 [ 581.049465][ T55] ? mark_lock+0x9a/0x350 [ 581.053815][ T55] ? worker_thread+0x86d/0xd40 [ 581.058598][ T55] ? __lock_acquire+0x137a/0x2040 [ 581.063660][ T55] ? mark_lock+0x9a/0x350 [ 581.068020][ T55] ? hci_rx_work+0x4e7/0xca0 [ 581.072650][ T55] ? __pfx_lock_release+0x10/0x10 [ 581.077702][ T55] ? __mutex_unlock_slowpath+0x21d/0x750 [ 581.083358][ T55] ? __pfx_lock_release+0x10/0x10 [ 581.088410][ T55] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 581.094416][ T55] ? hci_conn_enter_active_mode+0x260/0x370 [ 581.100359][ T55] ? l2cap_recv_acldata+0x490/0x1560 [ 581.105666][ T55] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 581.111614][ T55] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 581.117626][ T55] hci_rx_work+0x50f/0xca0 [ 581.122072][ T55] ? process_scheduled_works+0x945/0x1830 [ 581.127815][ T55] process_scheduled_works+0xa2c/0x1830 [ 581.133399][ T55] ? __pfx_process_scheduled_works+0x10/0x10 [ 581.139416][ T55] ? assign_work+0x364/0x3d0 [ 581.144031][ T55] worker_thread+0x86d/0xd40 [ 581.148652][ T55] ? __kthread_parkme+0x169/0x1d0 [ 581.153734][ T55] ? __pfx_worker_thread+0x10/0x10 [ 581.158866][ T55] kthread+0x2f0/0x390 [ 581.162964][ T55] ? __pfx_worker_thread+0x10/0x10 [ 581.168094][ T55] ? __pfx_kthread+0x10/0x10 [ 581.172713][ T55] ret_from_fork+0x4b/0x80 [ 581.177154][ T55] ? __pfx_kthread+0x10/0x10 [ 581.181769][ T55] ret_from_fork_asm+0x1a/0x30 [ 581.186588][ T55] [ 581.189624][ T55] [ 581.191955][ T55] Allocated by task 55: [ 581.196113][ T55] kasan_save_track+0x3f/0x80 [ 581.200815][ T55] __kasan_kmalloc+0x98/0xb0 [ 581.205423][ T55] __kmalloc_cache_noprof+0x19c/0x2c0 [ 581.210805][ T55] l2cap_conn_add+0xa9/0x8e0 [ 581.215406][ T55] l2cap_connect_cfm+0x136/0x1220 [ 581.220488][ T55] hci_remote_features_evt+0x536/0xaf0 [ 581.225961][ T55] hci_event_packet+0xac2/0x1540 [ 581.230913][ T55] hci_rx_work+0x3e8/0xca0 [ 581.235362][ T55] process_scheduled_works+0xa2c/0x1830 [ 581.240937][ T55] worker_thread+0x86d/0xd40 [ 581.245546][ T55] kthread+0x2f0/0x390 [ 581.249638][ T55] ret_from_fork+0x4b/0x80 [ 581.254070][ T55] ret_from_fork_asm+0x1a/0x30 [ 581.258850][ T55] [ 581.261176][ T55] Freed by task 5237: [ 581.265160][ T55] kasan_save_track+0x3f/0x80 [ 581.269908][ T55] kasan_save_free_info+0x40/0x50 [ 581.275071][ T55] poison_slab_object+0xe0/0x150 [ 581.280040][ T55] __kasan_slab_free+0x37/0x60 [ 581.284847][ T55] kfree+0x149/0x360 [ 581.288751][ T55] l2cap_connect_cfm+0x11f/0x1220 [ 581.293817][ T55] hci_conn_failed+0x1f6/0x340 [ 581.298599][ T55] hci_abort_conn_sync+0x583/0xde0 [ 581.303740][ T55] hci_cmd_sync_work+0x22b/0x400 [ 581.308803][ T55] process_scheduled_works+0xa2c/0x1830 [ 581.314378][ T55] worker_thread+0x86d/0xd40 [ 581.319004][ T55] kthread+0x2f0/0x390 [ 581.323117][ T55] ret_from_fork+0x4b/0x80 [ 581.327559][ T55] ret_from_fork_asm+0x1a/0x30 [ 581.332451][ T55] [ 581.334793][ T55] Last potentially related work creation: [ 581.340514][ T55] kasan_save_stack+0x3f/0x60 [ 581.345219][ T55] __kasan_record_aux_stack+0xac/0xc0 [ 581.350734][ T55] insert_work+0x3e/0x330 [ 581.355100][ T55] __queue_work+0xc8b/0xf50 [ 581.359904][ T55] call_timer_fn+0x18e/0x650 [ 581.364803][ T55] __run_timer_base+0x695/0x8e0 [ 581.369791][ T55] run_timer_softirq+0xb7/0x170 [ 581.374686][ T55] handle_softirqs+0x2c4/0x970 [ 581.379568][ T55] do_softirq+0x11b/0x1e0 [ 581.384005][ T55] __local_bh_enable_ip+0x1bb/0x200 [ 581.389236][ T55] __fib6_clean_all+0x327/0x4b0 [ 581.394100][ T55] rt6_disable_ip+0x164/0x7e0 [ 581.398790][ T55] addrconf_ifdown+0x15d/0x1bc0 [ 581.403666][ T55] addrconf_notify+0x3cb/0x1020 [ 581.408625][ T55] notifier_call_chain+0x19f/0x3e0 [ 581.413760][ T55] dev_close_many+0x33c/0x4c0 [ 581.418548][ T55] unregister_netdevice_many_notify+0x50b/0x1c40 [ 581.424897][ T55] default_device_exit_batch+0xa0f/0xa90 [ 581.430584][ T55] cleanup_net+0x89d/0xcc0 [ 581.435039][ T55] process_scheduled_works+0xa2c/0x1830 [ 581.440606][ T55] worker_thread+0x86d/0xd40 [ 581.445210][ T55] kthread+0x2f0/0x390 [ 581.449303][ T55] ret_from_fork+0x4b/0x80 [ 581.453758][ T55] ret_from_fork_asm+0x1a/0x30 [ 581.458546][ T55] [ 581.460883][ T55] Second to last potentially related work creation: [ 581.467472][ T55] kasan_save_stack+0x3f/0x60 [ 581.472167][ T55] __kasan_record_aux_stack+0xac/0xc0 [ 581.477554][ T55] insert_work+0x3e/0x330 [ 581.481907][ T55] __queue_work+0xb66/0xf50 [ 581.486426][ T55] queue_work_on+0x1c2/0x380 [ 581.491031][ T55] l2cap_connect_cfm+0xec2/0x1220 [ 581.496157][ T55] hci_remote_features_evt+0x536/0xaf0 [ 581.501628][ T55] hci_event_packet+0xac2/0x1540 [ 581.506576][ T55] hci_rx_work+0x3e8/0xca0 [ 581.511006][ T55] process_scheduled_works+0xa2c/0x1830 [ 581.516564][ T55] worker_thread+0x86d/0xd40 [ 581.521192][ T55] kthread+0x2f0/0x390 [ 581.525283][ T55] ret_from_fork+0x4b/0x80 [ 581.529727][ T55] ret_from_fork_asm+0x1a/0x30 [ 581.534521][ T55] [ 581.536858][ T55] The buggy address belongs to the object at ffff88802ba90000 [ 581.536858][ T55] which belongs to the cache kmalloc-1k of size 1024 [ 581.550926][ T55] The buggy address is located 16 bytes inside of [ 581.550926][ T55] freed 1024-byte region [ffff88802ba90000, ffff88802ba90400) [ 581.564757][ T55] [ 581.567089][ T55] The buggy address belongs to the physical page: [ 581.573539][ T55] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ba90 [ 581.582322][ T55] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 581.591009][ T55] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 581.599029][ T55] page_type: 0xfdffffff(slab) [ 581.603738][ T55] raw: 00fff00000000040 ffff888015841dc0 0000000000000000 dead000000000001 [ 581.612444][ T55] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 581.621038][ T55] head: 00fff00000000040 ffff888015841dc0 0000000000000000 dead000000000001 [ 581.629821][ T55] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 581.638535][ T55] head: 00fff00000000003 ffffea0000aea401 ffffffffffffffff 0000000000000000 [ 581.647220][ T55] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 581.655899][ T55] page dumped because: kasan: bad access detected [ 581.662328][ T55] page_owner tracks the page as allocated [ 581.668086][ T55] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 31915846269, free_ts 0 [ 581.687902][ T55] post_alloc_hook+0x1f3/0x230 [ 581.692696][ T55] get_page_from_freelist+0x2e4c/0x2f10 [ 581.698264][ T55] __alloc_pages_noprof+0x256/0x6c0 [ 581.703488][ T55] alloc_slab_page+0x5f/0x120 [ 581.708186][ T55] allocate_slab+0x5a/0x2f0 [ 581.712706][ T55] ___slab_alloc+0xcd1/0x14b0 [ 581.717398][ T55] __slab_alloc+0x58/0xa0 [ 581.721747][ T55] __kmalloc_noprof+0x25a/0x400 [ 581.726613][ T55] ops_init+0x207/0x610 [ 581.730796][ T55] register_pernet_operations+0x2cb/0x660 [ 581.736563][ T55] register_pernet_subsys+0x28/0x40 [ 581.741785][ T55] dccp_v6_init+0x4a/0xc0 [ 581.746137][ T55] do_one_initcall+0x248/0x880 [ 581.750926][ T55] do_initcall_level+0x157/0x210 [ 581.755889][ T55] do_initcalls+0x3f/0x80 [ 581.760243][ T55] kernel_init_freeable+0x435/0x5d0 [ 581.765460][ T55] page_owner free stack trace missing [ 581.770841][ T55] [ 581.773172][ T55] Memory state around the buggy address: [ 581.778826][ T55] ffff88802ba8ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 581.786906][ T55] ffff88802ba8ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 581.794981][ T55] >ffff88802ba90000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 581.803067][ T55] ^ [ 581.807665][ T55] ffff88802ba90080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 581.815738][ T55] ffff88802ba90100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 581.823815][ T55] ================================================================== [ 581.872307][T10362] Bluetooth: hci2: command tx timeout [ 581.878296][ T55] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 581.885536][ T55] CPU: 1 UID: 0 PID: 55 Comm: kworker/u9:0 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 581.896242][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 581.906312][ T55] Workqueue: hci3 hci_rx_work [ 581.911024][ T55] Call Trace: [ 581.914714][ T55] [ 581.917670][ T55] dump_stack_lvl+0x241/0x360 [ 581.922447][ T55] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.927704][ T55] ? __pfx__printk+0x10/0x10 [ 581.932373][ T55] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 581.938455][ T55] ? vscnprintf+0x5d/0x90 [ 581.942832][ T55] panic+0x349/0x860 [ 581.946776][ T55] ? check_panic_on_warn+0x21/0xb0 [ 581.951948][ T55] ? __pfx_panic+0x10/0x10 [ 581.956402][ T55] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 581.962530][ T55] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 581.968915][ T55] check_panic_on_warn+0x86/0xb0 [ 581.973891][ T55] ? l2cap_send_cmd+0x67b/0x8d0 [ 581.978778][ T55] end_report+0x77/0x160 [ 581.983051][ T55] kasan_report+0x154/0x180 [ 581.987596][ T55] ? l2cap_send_cmd+0x67b/0x8d0 [ 581.992482][ T55] l2cap_send_cmd+0x67b/0x8d0 [ 581.997192][ T55] ? skb_pull+0xc1/0x1e0 [ 582.001474][ T55] l2cap_recv_frame+0x22f1/0x10840 [ 582.006628][ T55] ? validate_chain+0x11e/0x5900 [ 582.011601][ T55] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 582.017009][ T55] ? validate_chain+0x11e/0x5900 [ 582.021968][ T55] ? __pfx_validate_chain+0x10/0x10 [ 582.027192][ T55] ? __pfx_validate_chain+0x10/0x10 [ 582.032418][ T55] ? __pfx_validate_chain+0x10/0x10 [ 582.037636][ T55] ? __pfx_validate_chain+0x10/0x10 [ 582.042872][ T55] ? kasan_save_track+0x51/0x80 [ 582.047761][ T55] ? mark_lock+0x9a/0x350 [ 582.052128][ T55] ? worker_thread+0x86d/0xd40 [ 582.056907][ T55] ? __lock_acquire+0x137a/0x2040 [ 582.061966][ T55] ? mark_lock+0x9a/0x350 [ 582.066343][ T55] ? hci_rx_work+0x4e7/0xca0 [ 582.070954][ T55] ? __pfx_lock_release+0x10/0x10 [ 582.076014][ T55] ? __mutex_unlock_slowpath+0x21d/0x750 [ 582.081668][ T55] ? __pfx_lock_release+0x10/0x10 [ 582.086719][ T55] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 582.092739][ T55] ? hci_conn_enter_active_mode+0x260/0x370 [ 582.098674][ T55] ? l2cap_recv_acldata+0x490/0x1560 [ 582.103987][ T55] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 582.109908][ T55] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 582.115917][ T55] hci_rx_work+0x50f/0xca0 [ 582.120369][ T55] ? process_scheduled_works+0x945/0x1830 [ 582.126120][ T55] process_scheduled_works+0xa2c/0x1830 [ 582.131710][ T55] ? __pfx_process_scheduled_works+0x10/0x10 [ 582.137720][ T55] ? assign_work+0x364/0x3d0 [ 582.142382][ T55] worker_thread+0x86d/0xd40 [ 582.147008][ T55] ? __kthread_parkme+0x169/0x1d0 [ 582.152087][ T55] ? __pfx_worker_thread+0x10/0x10 [ 582.157223][ T55] kthread+0x2f0/0x390 [ 582.161326][ T55] ? __pfx_worker_thread+0x10/0x10 [ 582.166464][ T55] ? __pfx_kthread+0x10/0x10 [ 582.171099][ T55] ret_from_fork+0x4b/0x80 [ 582.175547][ T55] ? __pfx_kthread+0x10/0x10 [ 582.180172][ T55] ret_from_fork_asm+0x1a/0x30 [ 582.184978][ T55] [ 582.188295][ T55] Kernel Offset: disabled [ 582.192636][ T55] Rebooting in 86400 seconds..