last executing test programs: 15.756130455s ago: executing program 0 (id=1593): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000410101c0"]) 15.636179159s ago: executing program 0 (id=1594): pipe(&(0x7f0000000500)) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xff2c}], 0x20, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000000c"], 0x2c}], 0x1, 0x890) (fail_nth: 9) 15.40820488s ago: executing program 0 (id=1598): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/file0\x00', 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_X86_SETUP_MCE(r3, 0x4140aecd, &(0x7f00000000c0)) 15.127155288s ago: executing program 0 (id=1599): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x7, @loopback, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) close(r1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98/\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x7}}]}, 0x38}}, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r6, 0x0, 0xa0028000}, 0x38) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000240), 0x0, 0x400c015) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000004900010000000000000000000a000700", @ANYRES32=0x0, @ANYBLOB="0000000008000200"], 0x38}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000080)=0x4) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r8, 0x80049367, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000040)) 13.420983418s ago: executing program 2 (id=1619): r0 = socket(0x15, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x7}}]}, 0x38}}, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r6, 0x0, 0xa0028000}, 0x38) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000240), 0x0, 0x400c015) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000004900010000000000000000000a000700", @ANYRES32=0x0, @ANYBLOB="0000000008000200"], 0x38}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000080)=0x4) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r8, 0x80049367, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000040)) 13.252618031s ago: executing program 2 (id=1620): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="9c", 0x1}], 0x1, 0xffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xf6}]}) r2 = syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0xfffffffffffffffd, 0x0, 0x0, 0xb}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r5 = getpid() r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0xb, &(0x7f00000000c0)={0x32, 0x4000000, 0x4}) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r7, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1) signalfd4(r7, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) 12.504815122s ago: executing program 1 (id=1629): r0 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) (fail_nth: 2) 12.104917805s ago: executing program 2 (id=1631): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) io_setup(0x803, &(0x7f00000000c0)=0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) io_submit(r1, 0x20000000000003a7, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) r4 = openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x2400, 0x10) openat(r4, &(0x7f0000000140)='./file0\x00', 0x404000, 0x100) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = userfaultfd(0x1) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000000800)={0x2, 0x4e20, @multicast1}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0xffffffffffffff60) sendmmsg$inet(r6, &(0x7f0000000100)=[{{&(0x7f0000000840)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x20040006) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r8 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, 0x0, 0x0) r10 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x0, 0x0, "f759e10000001000000000fc6300", '\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6978e21b197e832c040", "000000ff0000000000000020", "0000000000000000000100"]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) read(r3, 0x0, 0x2006) close_range(r0, 0xffffffffffffffff, 0x0) 12.073481682s ago: executing program 1 (id=1632): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) io_setup(0x803, &(0x7f00000000c0)=0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) io_submit(r1, 0x20000000000003a7, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) r4 = openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x2400, 0x10) openat(r4, &(0x7f0000000140)='./file0\x00', 0x404000, 0x100) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = userfaultfd(0x1) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000000800)={0x2, 0x4e20, @multicast1}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0xffffffffffffff60) sendmmsg$inet(r6, &(0x7f0000000100)=[{{&(0x7f0000000840)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x20040006) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r8 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, 0x0, 0x0) r10 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x0, 0x0, "f759e10000001000000000fc6300", '\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6978e21b197e832c040", "000000ff0000000000000020", "0000000000000000000100"]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) read(r3, 0x0, 0x2006) close_range(r0, 0xffffffffffffffff, 0x0) 12.044382717s ago: executing program 4 (id=1633): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000c00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e001000000030000e0"], 0x80}}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x2, 0x3, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x80, 0x0, @in={0x2, 0x0, @local}}]}, 0x28}, 0x1, 0x7}, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000100), 0x7f5b, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000200)={0x0, 0x0, {0x0, 0x0, 0x3014}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x5, 0xe9, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0x4, 0x30, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x5, 0x81, 0x61f9, 0xb, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xe5, 0x2, 0x7, 0xd5, "0d05", "2efdb1"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xe6, 0x890c, 0x0, "c2a22663ef68"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x4, 0x9, 0x9, "59a2c45f54ceb21f8c"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0x40, 0x4, "bf"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x4, 0x6, 0x3, "c83db1", '>9'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x120, 0x80}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x5f, 0xac, {0x7, 0x25, 0x1, 0x1, 0xc, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3, 0x10, 0x4, "d7"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x9, 0x5}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x39, 0x0, 0x3, "7f9976bf51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x1, 0x7, {0x7, 0x25, 0x1, 0x80, 0x2, 0xe}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0xe, 0x5, 0x3, 0x40, 0x9}, 0x10, &(0x7f0000000300)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x1, 0x40, 0xffff, 0x6}]}, 0xa, [{0xe, &(0x7f0000000380)=@string={0xe, 0x3, "4250ff99b3419d79314fe737"}}, {0x39, &(0x7f0000000500)=@string={0x39, 0x3, "53f56db1173c8161720a883e84847956351f2685f5ffd83ef97667ace1cb940428c15237dfaaa0f68e1b008a9d98f8c362904dc02e5ba5"}}, {0xa0, &(0x7f0000000540)=@string={0xa0, 0x3, "9545a8ae8394ef4dd711c825e3fc0000d501e53ba81ebe77b451eceb79c215f30f273da75714c23636c1abe4d0f1e06c5fefd7af9cde67f76ace2d426c461411c67bd86159846a67b353a59ba35f23919dfc7e4ba322f023390c45ecf5cf8d2ea3e40dda597bdfce25c587c4aac3daffae8f95b95b437764e44d61829091176d5b0aebe055d4471be2c9b3e896e24940b322beb19d51292285ca6a3a44d0"}}, {0xc4, &(0x7f00000006c0)=@string={0xc4, 0x3, "8399504980a455890fc3ba35b98ddb1cd3df88642bc9192ebc6e85ea3f320c50f18bc98dbb505975b0baf1dcbb2669eaf99fb24a3c6437c80063b0cf7e73dd478e81593c01fc438a49e6e5505f7c2984efe95752117da0d6f1d134dfd4fcc2f323cde0b93de68d1a75be52ed02dc9063c3ecbc7310f9f99aea80e1cbbff69d1c53e85f97cd5cc52c4834ddb79570749a2219e8f847723b66aa958a868d4a058bcfb870ba9e8db5eb8bc16f1d290eeac4e4ab6a17d35450bce69f6444e6f17cbed0f9"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xe4e2}}, {0x5c, &(0x7f00000007c0)=@string={0x5c, 0x3, "31189a94520b2c31f2cfd4189ab2f9e1cdbad238b56cbfda707072353344ef22ca1833464a63e0cf17cff0a9bbfb89bbf8ce619f1696789ccb9ac39ff9c208c006e73169e851484d2415db439c29c2eaf2243ff1207f9bd19fc9"}}, {0x91, &(0x7f0000000840)=@string={0x91, 0x3, "dc7af8d3b06bd38a9607943a62cbb70ee030093cbf972cd5fb8aa2e2795d504e161d89b08854ec19a5955faef58d262cd4397740996ec60443226793fbdb5fbe6a5cf5317a93326bb6b85a6e8a4c7b5a0cf4091f4f436ff351730ee58dcd340325bf9c8a98610478c2e36b20d8f21332f5c59515232643c8ed5f0631e8f93281d7af869ab26fb79847789ab8eee51c"}}, {0x4f, &(0x7f0000000900)=@string={0x4f, 0x3, "19e7d6b766eeb893dfa0356eb15bad2075f76894a77ed212a59ed3a95f201184fa842abbc8105ac63fe6c7f56527e1cb98b48dce195fdbd72588d8e09282eeaad143c9af83f107f32ab501e87e"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x41a}}]}) splice(r10, 0x0, r11, 0x0, 0x800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r10, 0x80044d03, &(0x7f0000000280)) write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) 11.883370677s ago: executing program 0 (id=1635): openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f00000001c0)=0x9, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000200)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={r8}) 10.745922167s ago: executing program 0 (id=1637): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) capset(&(0x7f0000000100), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfd}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x8880) r6 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000140)=@canfd={{0x4, 0x1, 0x1}, 0x21, 0x0, 0x0, 0x0, "09516e7544e4da8e3d44e4cebc867ea7a917c68c1c108065b5e3e3a9cd3fa0973b1bec3e879f4587884effdb18789363c010942a978f00"}, 0x48}, 0x1, 0x0, 0x0, 0x28048085}, 0x4000800) 10.447328567s ago: executing program 2 (id=1638): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4048aec9, &(0x7f00000002c0)={0x4010004, 0x25e, 0x0, 0x0, 0x0, 0x42}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000c0000001800058008000100657468000c0002800800040000000000"], 0x2c}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x400, 0x0) r6 = dup3(r5, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) userfaultfd(0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) stat(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r6, &(0x7f0000002ec0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000004f00)={{{@in6=@mcast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000005000)=0xe4) stat(&(0x7f0000005040)='./file0\x00', &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r13, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r13, &(0x7f000000abc0)="3b3e82a038eadd54f6926f37b72abd8dfe5e1fbe95a0a41b6b32ac69bf3880e2b957c3f3a32614c9487f979b1ec6b49d9c2b02833cd3d15f393b46b6b37eab45224ffc4d884497e115c08ad24c09f120b2f01a776bb5df5e5ff661440434b04e60673067985dc5e3007224850727424a330b823646aacf59bf50971ab0f267d6c37746479ef36a29feb9190b080849ee7251c5eaff003ed3f4a6e2d80f69580b38afdac284014c5c96e8a213cc9e0220aa3fb51e53246a831a2d521716373c2878c1627cc32ba07587e4e4809553c6d22ebbbc082a97538b2ca9e884e8c0960132cd1e6226f269fb8e020652e5fbbe224e2b058342b82d94f571efa0ca92c9d052fb32ad40dc3f0587d5586ad8c788713ff74047e9050d31755b4ded0637882c76fad37468b6a6de465fdcf9ca5ac791cdafc3241429f8f709eb71f4132f9fd8da8a28cf58e6b85af028bb30007803a7c5ea9d5f27e6f25ac55f7e078d3ddcabae73b2e30bb5bbf9e2db697921df7d94e45a42f33cb76fdc481cdd1125e3be3c2af5feacb8903ede6d7f8c64712b472143e9ddb2c44130ab0c13e77e5fce0f1d434ea1776e17a04c1bad0bfca3533ca0faaeeb41f005fe9e073c691aa7a36962c62b8d416ec550351da3b729027478ff49db2d637b3b6bc78fa6062e1a9369999dd57338bc0af2074961ec59278bd6c66b39839e571b6c7cc9d7706ec0b98b30a80246b01ca1817e2a2b0857da40d590c48e8ef2b9789b77185c7e92e0289d495725c81b53cfc5d77376b7becba9f104f8868fbb04be11f746c872dd33cdd24d2a9e946a4d6dbc58dc69bf2a10e7238b9e7a6bf9b5716e18f47e3625c262393fe6488ad64a053ae8ed359636324acbdb0acd324783b0d0262c8f4429b2a2c236eba84de61a5180b85bdfb8fcd7d9815b682d783a808af07719b33640e21d716a70403765f75b22466c96e6338850eec10d5ec50d2d4e76ff437df2103053a19d082a16849eb6e9ff112cc27142eaed9d6e4862d3eb3e1f0f86b4bd681b694b3b768f22cb57e6646980a9b10f376382dcea63bf7339fadde6ae2c3afbc280960e7646fc07a0a47702646bea3d0dc3da366f5d209ad586259bac7d431f8e16684d51270a521d59ee225cfcdc13e5a6facc04132ef2b2a65bf1805cfb9f7f61aa24d217e9b6ae6db9a0fa4c1b58d8f2f020783022d6237b02b2cacc0a8abcd9b87686d128acd5f476f5ed4ce80eec4bd47936268f74db5837b0433b229c6dba7642d6dd429afd298e168609880e83793390e6afcc611013488aa3cdd3cc2b77b15be590fcd12139e4e19fd5e337b9e6c436550ea05f4be9b6e7a5ea9e737164fc9d34bf41d1c2e84758dbadf713efade886f74b1e523b0e93311cee3de754002718936df51b64291c8c8f13182f93638b8f255342e70c8892717d682711dd4780c62a8cdb2e8ad947f994ba28dd4fff2091bd6287ed0d9e437f3fce8692e07626a061fc9f8f6025bc433e64a645930616b1287e8a868d89217ec9632bf7a74f3f98a1784ceafda5aea5536cb5222a5627165e55b640d21aea82776abbdb1264229823bfe13e78a4f92dded223e4ca92697c0415c3e125716c8e516cdfc8378a942b9eff41e244a02faa27fbf9ed465fbf6fc9659846590f21d5dff8e6bcdc55c65e2e7b1919cfcd6b25f363f7e4b44f0250d6518ab1438f51d960d6faa699f225ab7fdfe4ea6486d2a31c3b21d0be3d40066a6707c581930f73e81fd6a9b5b2e4d42e443239a3bcc6ee11d5ea15c1d55c8f450ca875a555a13640c554fb4c04cdfbcf5db939422ecefe07639caf61cc088e24ef9a087c01d98b7786ca5831f09c29bcd3e626a4f69e54ab023fc97dce1494e9c4d08acd7f3443f7fcccc2afde428c414b49e26df2f3a1277a72635a292b2afb61eb85e5db8b5cd18d6778a2c1659e5c5a5c56e5491c4eee62a7c89eec9a92f64459b7c49e40a6aa21f2b2fb32e0bba40f67e13b1394c98b2e7fc56f3156993ecdf2f4899f92af07229a794ef1839186b21b46b413af1b22fa51bfaecc753f8e50513d94d17f35f2feedb4bd6cc68821fefd60a6ba853f2648e4e7f16d6b5cd10e54bf429b3616de3fd88e8a358016e4ad0105ef10aa957c702e5922e842ca84faa6424cec4669bce4a1168d7231422042ddc9af8937410c24fc0de1113b230a6fbc0522f91673e9a6d70e145d693d4e66c15df1c45ab4386f99ba051a769374da2621343727ba42e9ea94c9a4e6a702dfdf35b4ea0cc356102b60263a6d68e08332566a0063700a4f8c4faadbf055b6d690765e2cd51f16f96ab777c3522200e3486af528c95c1d75f5883fc48dfc8f95d3b9dd81e17f0a516785b811e4093a2f96f56a5c915d2cb7262714afcaf8118bb7f0993744e51cbd45c4cf7607e1e63cf3ed609e952786ddd66323d16498fe708ecae28efe5d0816e2b84727e9ca9ee5e022d11349d7ab05111b7186980a5b13f1986071465d11d82d1eee4aa44a7b7cf35b1411e6898e622d0aaee94670459d13760fb8123acdb3c856668fc20794abf321580062971707ca96ff07bcba02ee59208bf59c32af0a76954c5564d4a4552c43f0003742d40e184f6ceaeea4d8a614cadefa26388f2dffab6a26342cb3aa55848b55214c89aa0c7765f4363dc59abd758538fe6bd4a6ffed1cb369144550df0d7737b74da6e0519ca713ed0ff6e70aec60937c755e5d3e7256535977c05f20a03911c4d87cd6131664fb9e2654841103e85efdb8d89e1b80503fd9c65afd109ccb249416728435e8863415633c4393d8377ded848a2ea67550be635bdc572853682235a97ffac8ddeb27e38eda05c61b3665dcd4062bca814dc820d7d74d077a38f2214d80ab517b1071dc2bfc97c3a76ec32c0884df21dcd62428d5c197daa8488eee0538bb6886c32c18e406910b9adbdd3f88e0fceebc036b638ec957ae9cbcc20b7a71879901cbcc6b4881a65a1b539a95b3b303683b38aeb4729f7ee960b62464e21d31448c1e9c68556e9173040dc2962d7086b8ee88a11740ad81a0e06e9bace712abb5134b85f1b77b07add0d1d1ecf0bc409b57b61ea762ea1c093e23884dbf5f48f108173dfb5b56a095d48a45d51ae9a8373a51d2637fa987da7b034cce080764eec55c41958f9cea746fc9a144aa0fdd3badacd956154785ad880001da0afa7fb6e53addbbf2f0b01105d44aa23ffae68081eecf311dbd70fb3177c7c2088c2c52df3017c031638e3da0b17cd73e0bc57021f21753c267f085244604ebb3e65b4345ad3bbd26465061bc3747ecf61b1a73afaeadf7b6c9e7b4ddae24b5eb8ef2185f439c75bea1baf00e0e03201c539fa6874b6f17e7c574016f2c39232316e00d17257e1ffa10b3f5f819c95e3196e688ab1ce1a3fc0062b2cc05705aae343b1cb7f5455c1a2e06a22cd50acd5bf288410168b05a960da84a9ed00814c0ffd58f0741a4c37f08fee6e7394ac0dded5ef45c2f4b69ae06ac24202aab925fc5f5209c2e870f291967fc5fb402b7a3ae07510a79c556dbe07cf7eca780eeeb8b6179e3c199e84dfc51710e1c7d76386839f10c3993557c5210504a1798231f160efde57c8cf585a1cf74e38f75809ba7a7aca31f09de1b2f742b09c5459349c240aef655077b9006fbc8bda2348975e18cd0930311969a7e6ea4cadf6cf06bf1e4f85ed7913bd1bc9002ea438af9bb165973652863744c0ca93528002f51a1c8a51bb6f9279a147f891c70335941a80337bce43b4d54e191eb5b3d8707ce96edfe6c4bd734c5aa8e0cfd8daa45f83aaa22f8202358d32571dda35feee1853fe38c8a0cced4f8db3c68c39d3866bcc7c46711c8b6f61762fef15f9d0b9d2cde0f31eb12f897a1d83f79b032e2c1d903e57ee4a83e45c8bdaab9476afa60eac94e631a9d906a7dd1e28e4cc8be9370aa2b26b92f0168fbd269059095966a3dd5815942094a34efab1ce7e5db8fedb30cc74d484eb8e00c9f0d7b4b782f5e7d88ff956d08e4b5997a05a4e3f4aa0af0a226feee5acfac1dc315b483c9be7c3f83f497720a71bf04874a8f74781482abea527265e62e08aef942b7c17ab2069385e76938a37de995d7db4a4ae6a5d76e5c6738c60dcd4dea020404ad63741e0d2803467c6a20f9749b31f3a8938473feeab160ae1bf8cfeb8f9143e9abb15f30872cc2823bbd981774e061ebb1620ffed9de8913d67ce5bbbe503ed7f0d75c8ad2a7d17e3646d5f02815f3ea786669cfc3c497dc08f39c94a13af245b5a23d6f0d3f0236d9ee9a60f7c44de51c75c8bcdc529065834dea008b7a2c2c1dd1d2546f80bb2dfad4c5e704d050ecc9df57472a3475b67154b4e2f55740070f87224c7902e7ea77d6c809250609dbff7ae7012c8f51a0e6ce3a907af7fd908b7498f57c049fe1aff4b8f91a1587c39f4734b5a7bce6a4ab9ec63b56989bd98b1137a2c2f94f57e273248e50c8b69b51f032a13b2d930d57ad5b04c44c0753102c3821309d152f1b1549ddf1fdcdc15097fd93eeb4d3d9807bb793f209d5be88ff75dff0cea9bf85ac34a0a820942e2c35aa1a47e0a028aa9e31e5231e158aebe1b3b0c67ef93f0dfe16f93a476dae0a4a19048d0964b6ba839bb78214713171803500bcc131e3b43db94622ad3780f0fa9b78193037225931c1bfd2d467add4fdfb079f68dc9c335846c63df33eca65838d9918d79183e4f0ec28e6f630edf8670c35575c2088ae08f58c226f0873ead0602531f7e69028bd9f85b4df4e74d66064b15090aaee31514c0c720843c64e1fe54321a2bdcfe318ef8a6320a51c5909840a3701ffefeee08e71573e7d766978c544690f429e0fc27fc49bcc132ecbaf6ebaa0d09a9cf10c46d6096830fbfe1a1dda472f8b70fec8320cf3a681977fccd680888526de4a3f7f3ede817d4ed20bab6031623390ed8d5b2de35fe10fe032c93001b01843a6943409c16d68fc2fc34f1017ff44070d5ae919fd3ff5d02228574108d386ced6b3f836e875bc04b5e57f1fb11d6f4cdc832848d86697e3324f2b22a5dcb373e0f14836a033bf180fe4fbd4e6287cb218181404167cca2ea1c10e5f40ea56c7cab9e1143dd9e0a9546237cffaee39287b4a9d97c715b5be1628406e64332dbf7ec31d964902c56ae99e1c4103e0f62e3c1b52d7869f346197207455c4ddd0b8a3a800f45bb30c6ffcb051ae3eacb77044a2c383c998468dfe8bc43e4751fab975d8cca5cba4a713a9b2b09a4af271816b2c9dc1ce07f9bb70971099dfe7103b64b6c14d217a6921deb4827d3d6e2ad27c107bd5d7795b09600aad6d5981ba1503121babf599fb33ff13d3045d95bd70f10298f855c8c1782967e480ad2d2e601c5638da17cb00456820bb46f5dbad07498d47ea40be3345042bc470ed5adcf4f81024d0686d94c318dd69720245045e1212d76c54b5beabfac394c252e0688ab12f124f4c842bd479bac69b69a4a0114b66706328af0a52298962f4912bd1ed653491bf45ff95a5b9b1a0599e9c5686f14083ef6ab0af9a68e4a6bbaae07d298683e18fcac46999e524b98d2c5560b4a98fd1e6ea8ba105d609e6a80a5e3465783a2ee6f3d20b315d5eb1f6352de12376145d808519197d730e64002bf4e1a2d3b73910c911cd47da55db323c9db6f3535341256dc797c32b63beb97f3c5e18b20a82d21455f0c481254f167d9b1fcad883d6b67709c8c6e26dce74d5f832af7d38d9a26185c3bf9346422caf389d2d284f632c81996280123ea043cc1cbaf847c8cc256cbe0d0650b08bf6d321ebca82543d07304a7d75f6e20d6b231b89aaf2461b98d9bcb2ed6f4ad3acc197e775e49a49108e41544efcd1fbce6ff07277c5439c59d8e5b4c037a9a914110178ad718d7d6a25dce2c7f4e4d44536510f36783a7623232ac9bf7e64b88ce4279395429a88f80c95f30a5bf384fa77831d2b6e8aa30fc0ca34f5670dd8e0974486b0b015d1f6fba89121599dcc162a63ed60e693aba6834a84021c8f4f68e121221dbe258fc0affe7364684eab9f0f0d555a9c54479cd87a3693747d11fc6636aca2ba758e4c6b5ae2ee5046649668775495a2a429a15b1f1c717993081866477a9edc1af9a7a95a413456a4e02114c07401e4ea9c85a6ebba413494bcdeb2f6ee3709c29ea49ec7c76e11fe1de5778e36eedc9dff33a12b7e7c88cae76b01e18b7aad8a3f71619a35db5453ca81d9eff704cc1d7560db8f87bc6eb817f1aa1df8bc050c2edd180c2bb8ebfb19966feef671be965ee6d8baa0fba45e57d78a3aaf21494fa6cad9e1d6c38313260b6d4cb144c554e9d47c37696dc4218fed9f18946891dfeeccbeca1c5e7fc9026a0c6931ece542d516f5914d4ad3f9f76bb381e9dfa06a83155732e5ede7c24bfa495e4ba8a1a0b45a851898588921dbd8f470c2ffe96d3a3228797f0c9d5a261c5b9b9c25dce95b821f768c404c023c9ac4499bcbaa0025aebb749d8f7fdd94340c48e94d55152ac2b976a21c8931d61dbecbb3c855250f094c3daee6a4f24d3b1b100ea1428b95b2f98e8c499361159b8097580e72b354773d69f261ea563ebc64349109b2862da0f72559c82296807aba771c1f532f49f6f93d0f99fb0ffce30d64153f84d1319a9b26137c6977f1edb85ab978c5fc9d8f31552f96ddb2ca7bf313e5a26764e880878bce450e57c0e8a255c196df0e647716d185663fc0f0ffde129059ac2e39c7b2728b540828de136b8417a37963adfbf3d758422fa83e2dbdc3b8621a168da64020f26351a04f2f22dcf48d432998c0ef7822f34c0d1c535b119b31898d7cfafc5c6fe61a763bbe60e24b4c3baedf562ab098e5de191867fdb2aa825f55a6a8f93f77b91fcf4576562e66a872e5d6dac02cdb0a6b35d0e52a1425501c9dc2e88383d12363b5efb372c8b2c916d0d8000ddc7ddc8ff7f77d13d52cfbb39b55af9759da6bf5f36ea503ded26d24ac2dd6fb3859b06c02b7943a2e78000af0b4f0e2b47e432db8edaed9fc9b1f022375d0626394257a875c687bee489616c5303ebab0d2b860c41dcb5c7e8e922ca6d64a1abc672399d8d89ad799598db3546f40069d8ef31f56b19a1cd6ce9565db0b52d3dd2b764f21bf4d0261f5d639d84985b693d2fda0877fc9686de401b2c0e1678816e4757778abbc7bd321b9e22cfe15f858e6e715dbfbbb6cef7a2d10775a3bc519bbeeb01ce0472792ce308f11c5d5e877fa6cded685cce8e7924aece26bfddbde2c5e7c6aca8ed4a1d70748273f5bf25885652c470dc556ec130ebe56cfea6203906f7d8ad24a4e0eee8fb37252f777991ccadecc92bcc6aea1d6fcd849102434e95a4889287beeed2c28834f6ee64d9d55e3e1431f765feef6cd2619fa012d919b23367bf409bfe89dddab97d56f5feeac28868f22dd00d4fdbb496a3d6da8ad11bc0e9f8182ffee8841195947cd6f748589b919539211f4b9adbdfd4a687d163789021b3abffe321553669776a778e75994ee410f77a7bbd9bbd2d7677bdae52ab0af6a0273dd4e0f4c669b4068f3575bf2cd37614e113d6a00c847a414e77dbe25a705dbdacdfc49275b4a3e0cae506dc3178e304bcc3f3648943c0db8ac40b92a141d04438fa049ac617a89ab1ece427effcb9aec6bc82f1a30e1e82ed4154cd173489a68d7f11e9d9b3b51cc46d1e9aae5b848332c9a5b2a3d92c97da70f7efbe4f7338f6f7131002ba28142509bee08298eff7ea954959e0d5a292f1229a8c018b2294a8a853f126ae8017d84ffb4ffd9252f66d172b2b4ae8397e34bdcca3c207e0c35b32cd0b1569f1ad4c7831806b07d458560d15caced46304306c824f18c71ae8dc189f5c39d72ed2d1dfc5a6541f0ca14bc9a511876dc68d80b0c0cd41b4aaa8a66f051f0800216222bac9d8b75cd365ff16be13cf33ce55b255a7af5cba5d139e86bcb1d553787abb27571de7c599ff7b09c91ae02679c12ead9c7bde5d7dc32adc1157020ddc2c34c7f3e5ab194e76cb074a1fc6d43e112c10243b9f7ab8815c08d8212472ef6e087bafd61ad6e040758521f2f15f67617e602c09ac7c50070c6facbea3b0368b1f5a27c5dd169c31c7601bb1de396a05c217dfa6a73f41dd420815bdec64cb51c88988ed40725787f379d93fd6939d26380146e3189ab6f7e74c0016526017b0f7c67a6a909b23ad3e45402cc899fb03e09b0dd6190d8f833738df9dffb5c2c7ee05bac0635ace70e7cb7571bdd97731bbeb81f90e135fa89fd5a77fdaf4c4bc7c7b73592633e28aa5e64ab9b5abd70becf3c69ac2af64f364d7aadfa963b0a55cfaae4330e1e38e22da118881ba0a004c1eafe74f9b6189e2ac6eff846790f15f9446eb5fff44f83ee877ce74788599ca87630eec5b407c5bbc0c00797adabd4691df511f158f999532a8d4a59eb43de5e46dfa5678849d103a1797a795402246753c5d829f711ccaffc425f2749bc14f1afcd917bd5ac53bcc0ad1d976d41be2a63fcf9350de0889c509b8cbfaf7b8931d469011ca28e4f71553a2f38bb0619356abf54ead1df9b19d0ea3ff8ef7e221ffb628aa13c41a94415542e6e0ae200d9f8b907ef9057a287082b073a248b3fa8891bc4b95ef67293bbcac104de15f81b72b7f8b5109bcbfcaf0e2680472f96a491f455107073dbd72e15013a74923741e7431929707cb007a9269a40c67e101ef49c70a5bdacf96c2365b6fa08cdbe011b4f4065c4cbd4387cde66d4ae511a2205188a00a97eb5743f77fdea5eaa85494602a5bbfc13f9319cfcb4447d09d02ee312c1b6c392e1041e48e382e097f653d0245cfe0680f96e94507ce21666edfe2e11aaaf052abf8ec56c633de90c089430097e2663425dc75ebc1b60797f03c16e1df4a5be23a0151e62e2bab68f02442f36177020a9e7a190845025afd2ec1bf6048619eb42a596e4ba264260a073c59b5934f46558b8ab003238c50e67037dd3622cfb0d647824e2e6f253ef4013d7365d23ea31dd2e1027b834fbd642960d89a441a4248f108bfd143527fc56acfe4a3bfd074a44582fdafa9fa1eab29ce71f49d3f222a3ef3d018922f66d455f6ccafbd11d8ccc29b1c33e424e6e238b7621ac30755f4ec82eb0798db2207618d257987cc82854dc1a20dbd2ba5a1c7ac2b3f22c9c0b326074de9692f04ed2d97b131721e0efa6bf831da6638323e559e051441d1217a5abbf5d8c97f5f12c60316ce4109ffe8918460bacb4eb9686b57fc41ecf322e28fd1e886654c90c4ee821b67f0f4d9e5776cba369bccefe94ee4824d49da0b9f2ac891b0bfea428d43a40e1ce2d7e2bb7f1a2d844e26fff759223922dd409a1b81579591ecaa507cd92677acd983adc9500c8bf6fa6a1cf7972e841387ac579804e834b56f1ef02f07800ccde8f1283c0a8e0763d0c25a61e75a761d5dc3a48f4896d840869aa83ea8c94a126396349c52bf86908c34682adede8888fb42f14ff5fe47b85432064673ffe2e1a6141112b4a773dd6fad5e2b61aaac6aca8ed3c032b0b302215464d915e6105cd1c9c19bc3a0a9a79d7596f5ff1cd1783bcdf8ce812e2e8d4a16c50e1e7752f92a9e2deecdd279ec46146470b4e664af6e4ba1db4fd58be089712961bcffc816adacb462859991a3daad1d2dd7dcb347736d2df805c941386eb9c66f4e7be6c80d3a421b36041da97ed140a15d268518c7d33a9eb46b60e3c81cb7b0709c32c1153374bff7f7336747f44240b8e01846e72565d7dab1f2ba2295c31d1bda11e59a89b6f6022de089b7ca1c2ee0c6e0553f87a5429578c9b9c806dc61ae4110195c9419301a08aa0bccd7811876860f7ce2246c8c1e90edf5c5cb28796842446ac79e50d420f879daf811963fa74c8a36fbf86d022b7478c73fdf62b8eb564e6c4b3f33194320505cfc3fff9e9797eabd8bf3f4008fa3b93bc6f459fceccbcc8e8a049abb599d5212a221090dc58082160080930a61b8da12c7681bc60dea6fec7bf0c0ffacf1d3390c3f12f10dd83eeae07e6fda69c3730ad2df8a4ab5890e3565725789e037a3b76090e81bfd439038a93ea49cc73bece718ddf416b473f4d622b7cbcc2315163c32718513187cee1fc448160491d08da8a3d8c920d2c458194bb11aed4484f89e77128f01f19e176bcf9628d1bea3de9063fa575fc2eed3c33d2233246cb30d07e0b7fe2583d773ed69f6afaa97af9a86b61d445a4eee32d9008fedbc88aa97d85fd2b2bfa7ec65cc071f2665bc55bdd8f9e830adbfb41a73282434778032d859998a415a136163ac2fffce7bb01b60e6f7947ea857d1aa4e43c09056b0164445603f2f28cb7544b7d18b4480b9a145b644b8678cfdb862383a11a347a1e59639c015838d60ba453a6b4fb0f3a06ff3f49d710838d71e3500b4b20a237b137b008079c58967970139f35e40e8a81eb4edde35af0693504cbad6c71d727f4118230b7d5eb90d19236311d4931b91af05afad5bd34212d0939bcc78aa9b9e33745845c10690fd961bcb7669a910b695bd67484d81cd8de856149601a15ee5dc4d5d71b4abb48658079ba667b0e79fdda6c52498787ec1c6a88910eea69791cb06d28af86dfd3a57351a0e7667b87e8b64ca7e22ffde99c9d20055be053883acef65a306171164901959fadd76c9e059fc905065ebefab237ac030493fd8745a272dbe78bce53e675e9c72a04caee79e0c0a1098b8877b0fd00c46225f7589237c4dc7eae81ec987ef6e209713cebc2abcc61922de7ed3bf1690799e68f42400cce0349d0fafc0b1cbc0f4b8b299d7344f3204da66b24524259b4e8e09aa860a31571ee733648715764d4b69c18f2b4953df9b17435c936cf59f53d2c4300d74e801dec04cd12a51cb740a2c53145f013e5737d01bcc29fbcb714dddf399485a4d2e0830698f111e110f433a9e788ad2c3563b65cb50288b2e3a436233d40ca619d946a9bb80ebafd66cc136e338782f63aabb441930c1826070cb1953bc4d6719dbecfd24f16ca12591967e9fc3dc524d436ffa65da004853467c2e01e38ced61dd484e8b7fc71f00e4b6efe3c7781ee0dd4b02c2fbd371405f2c606cd5598f666becd3586073d0cbd72b7c881bcb370c76360898a7c2e3fb1792551ea401947446406a8cf1e0476b3680381a191f84e7b484a34567717b001f91850f62a01b89bf7123f3222799dbf716931ec34bdbc0761f7664211cf95da05eeeb16374b18313f52ea4b406e8a760df04d674aff1797572e6f923ff5f528036145fce27ca11cec0fd5973532b35bedf8ec69ba80d482b63a736fcdf5dd8f7c660ad0db9a305ced38a2ed8694bfe400ed67dd5830255c73519fbde517f3ba2e57bc2716bec77b97bb1d516c6ed5de6ea743a1a420ade62196ecaa2d9c2b5bba347cd75a019bfcef80baefc2217d3f9be3d1591b123b28675b0bd4d367f9821c36d8785928ef16bc5a9000d53188b4ec59428db60be49d48edcb1e22a55d1219530b51bc8aaacaf7c4d29fd47ec3de5e5092efefdfe24c4ac3c5a28155b079b8fb0109e6336b2a62d319883cec00782bfde33f700bc15aa4839bb6e32079", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r13, &(0x7f0000000040)={0x50, 0x0, r14, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r13, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0xffffffffffffffda, 0x6}, 0x0, &(0x7f0000000840)={0x90, 0xffffffffffffffda, 0x8, {0x3, 0x3, 0x8, 0x9, 0x401, 0x5, {0x1, 0x0, 0x8, 0x54f, 0x7, 0x4, 0x6, 0x0, 0xd, 0xc000, 0x8, r15, r16, 0x9, 0xb13f}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000056c0)={&(0x7f0000000180)={0x50, 0x0, 0x3, {0x7, 0x28, 0x7, 0x2000, 0x7, 0x6, 0x7, 0xa}}, &(0x7f0000000200)={0x18, 0x0, 0xe40c, {0xfffffffffffffff8}}, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x80000001}}, &(0x7f0000000400)={0x18, 0x0, 0x200000000000, {0x1ff}}, &(0x7f00000004c0)={0x18, 0x0, 0x8, {0x7}}, &(0x7f0000000500)={0x28, 0x0, 0xa, {{0x2, 0xfffffffffffffff8, 0x2}}}, &(0x7f0000000540)={0x60, 0x0, 0x9, {{0x1000, 0xc, 0x5, 0x3b2, 0x8, 0x8, 0x9, 0x3}}}, &(0x7f00000005c0)={0x18, 0x0, 0x100, {0x9}}, &(0x7f0000000600)={0x11, 0x0, 0xa, {'\x00'}}, &(0x7f0000000640)={0x20, 0xffffffffffffffda, 0x4, {0x0, 0x1}}, &(0x7f00000027c0)={0x78, 0x0, 0x20a2, {0x0, 0xff, 0x0, {0x6, 0x2, 0x1, 0x81, 0x7, 0x3, 0x2, 0x7, 0x10, 0x1000, 0x200000, 0x0, 0x0, 0x4, 0xe}}}, &(0x7f0000002840)={0x90, 0xfffffffffffffff5, 0x8, {0x1, 0x3, 0x9, 0x3, 0x8, 0x5, {0x1, 0x6, 0x9, 0x5, 0x1, 0x2, 0xfffffffd, 0x9, 0x5, 0x2000, 0x1ff, 0xffffffffffffffff, 0x0, 0x6670, 0xfffffffb}}}, &(0x7f0000002900)={0xc0, 0xffffffffffffffda, 0x9, [{0x4, 0x5, 0x1, 0x8000, '#'}, {0x4, 0x3, 0x1, 0xd5c5, '-'}, {0x4, 0xffffffffffffffff, 0x4, 0x7, ']\xe7/&'}, {0x2, 0xfffffffffffffff8, 0x5, 0x7, '&[\x8a*-'}, {0x5, 0x6, 0x14, 0x1, './binderfs2/custom1\x00'}]}, &(0x7f0000005100)={0x4a0, 0x0, 0x5, [{{0x6, 0x3, 0x9, 0x7fffffffffffffff, 0x400, 0x7f, {0x3, 0xca, 0x2, 0x5, 0x1, 0x4, 0xfae, 0xdbc, 0xfff80000, 0xa000, 0x2c, 0x0, 0x0, 0x10, 0xfffffc01}}, {0x5, 0x8, 0x4, 0x8, '&\\@.'}}, {{0x6, 0x1, 0x0, 0x4, 0xc, 0x2, {0x1, 0x4000000, 0x4, 0x0, 0xff, 0x5, 0x0, 0xa, 0xe8a3, 0x6000, 0x8, 0x0, 0x0, 0x6, 0xd}}, {0x5, 0x7e4c0000000000, 0x14, 0x7f, './binderfs2/custom1\x00'}}, {{0x6, 0x1, 0x2, 0x0, 0x80, 0x2, {0x5, 0x3, 0x5, 0x7, 0x7ff, 0x9, 0x80000001, 0x5, 0xda, 0x4000, 0xff, 0x0, 0x0, 0x1, 0x3}}, {0x4, 0x213, 0x14, 0x80000000, './binderfs2/custom1\x00'}}, {{0x6, 0x1, 0x8, 0x2, 0x2, 0x4, {0x2, 0x8, 0x74c, 0x1, 0x7fffffffffffffff, 0x74, 0x80, 0x5, 0x5, 0xc000, 0x9, 0x0, 0x0, 0x8, 0x6}}, {0x2, 0x6, 0x7, 0x6, 'TIPCv2\x00'}}, {{0x3, 0x3, 0x9, 0x6a4a, 0x3, 0x401, {0x3, 0x80000000, 0x9, 0x0, 0x7, 0x3, 0x2, 0xffffff20, 0x8, 0x8000, 0x6, 0x0, r8, 0x3, 0x5}}, {0x4, 0x8, 0x13, 0x1, './binderfs/binder0\x00'}}, {{0x0, 0x3, 0xb, 0x0, 0x3, 0x1, {0x2, 0x80000001, 0x8, 0x70a, 0x4, 0xffffffff00000001, 0x6, 0x80000000, 0x800000, 0x2000, 0x9, r9, r10, 0x9, 0x2}}, {0x2, 0x4, 0x1, 0x2, '-'}}, {{0x6, 0x0, 0xbca0000, 0x9, 0xffffffff, 0xba, {0x6, 0x8, 0x8, 0xfffffffffffffff7, 0x9, 0x2, 0x9, 0x4, 0x3, 0xc000, 0x1, r11, r12, 0x8, 0x6}}, {0x1, 0x0, 0x5, 0x8000, '})\xfa[O'}}]}, &(0x7f00000055c0)={0xa0, 0xffffffffffffffda, 0x7943, {{0x2, 0x2, 0xeb, 0x800, 0x0, 0x200, {0x1, 0x8, 0x7, 0x2, 0x80000000, 0x4, 0x9, 0x80000000, 0x6, 0x1000, 0x1, 0xffffffffffffffff, r16, 0x5, 0xb}}, {0x0, 0x2}}}, &(0x7f0000005680)={0x20, 0x0, 0x8, {0x3, 0x4, 0x1, 0xd}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_handle, @flat=@handle={0x73682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 10.432541926s ago: executing program 1 (id=1639): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000280)="b8be3ed480f25b868dbfb1c224d3fa3ef4e9b66843cf41ada1d1226470b0edda2951fb284fc29f436fb4381d1b444c0cf8c6f389132292dbaa2cca5aa7af4d1bfd641662547c93745f7903a48f1722db5500a17893f08a8b0a50e682a9539a4e659143f775682c44f3f883773a857f1b6dc73571a6b4b6d750e71815b45fe0201a97f851f427dbcb7fe1d0a5dbfef07ea0b37d70cdef6e8e4ad8d3277c3fd31a", 0xa0, 0xfffffffffffffffe) write$UHID_CREATE2(r2, &(0x7f0000000200)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) 9.924757883s ago: executing program 1 (id=1640): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000410101c0"]) 9.468086714s ago: executing program 1 (id=1641): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x16, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @lsrr={0x83, 0x3}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/158], 0x1dc}}, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 9.024560698s ago: executing program 2 (id=1642): syz_open_dev$vim2m(&(0x7f0000000440), 0xfffffffd, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001300)=ANY=[@ANYBLOB="44000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="15440100018000001c0012800b0001006d616373656300000c000280050006000100000008000500", @ANYRES32=r1, @ANYBLOB="a1c8a9d8b52a824b1062b968da3bfa8e17f34caceb28c2414c0d373c8d0aa289503ec3df024c16385ca76628130c45083f59ce808094db15d7bdd7fc3798c7c9b71881dc21cae4ed"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r5, 0xc) setsockopt$inet6_int(r4, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x20}, 0x1c) 8.451908773s ago: executing program 1 (id=1643): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050003001ac8902cb01a9eb4cbd0a62392b223b9937ac1e9c1e6ecf5b268e76e0f4d8b701e6641", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x14, 0x0, 0x5, 0x70bd28, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) gettid() mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) unshare(0x20000400) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r1, 0x50c, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6a, 0x27}}}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @random="c5be7068031f", {0x4, 0xb91}}, 0x2f, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)=@deltclass={0x4f0, 0x29, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x5, 0xc}, {0x5, 0xfff3}, {0xb, 0x9}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x3}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0x440, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xf, 0xf}, 0x0, 0xfff}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2, 0x2, 0x20, 0xfc, 0xf06, 0x87, 0x9, 0x9}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x227, 0x6, 0x80, 0x3, 0x3, 0x1ff, 0x80, 0xe062, 0x3, 0x2, 0x93f, 0x5, 0x401, 0x8000, 0x5c7aaac3, 0xd, 0xc, 0x8, 0x6, 0xfffffffb, 0x1, 0x8, 0x3, 0x400008, 0xfffffffc, 0x100, 0x7fff, 0x1, 0x8, 0xfffff001, 0x29, 0x7f, 0x40, 0x4, 0x0, 0xd, 0x4, 0xdce, 0x4, 0x400, 0x40000000, 0x0, 0xdcc, 0x0, 0xeb, 0xa, 0x2, 0xc, 0x0, 0x8, 0x800, 0xffffffff, 0x1ad, 0x6, 0x164, 0x8, 0xa, 0x462, 0x7ee, 0x4, 0xfffffffa, 0xf, 0xffffff2d, 0x9, 0x100, 0x5bd5794d, 0x8, 0x40, 0x1000, 0x2, 0x1, 0x8, 0x9a, 0x1, 0x7fffffff, 0x3, 0x6, 0x0, 0x7f02, 0x3, 0xfffffffd, 0xc, 0x7fffffff, 0x9, 0x1000, 0x3, 0x5, 0x2, 0x659, 0x8, 0x2, 0x6, 0xd, 0xefd5, 0xffff0001, 0x9, 0x1, 0xbf0ad5c, 0x8672, 0x80000001, 0x9, 0x1000, 0x7ff, 0x80, 0x3, 0x3, 0x0, 0x1, 0x1000, 0x0, 0x80, 0x7fffffff, 0x2, 0x5, 0xe7c, 0x5e93, 0x7168958, 0x13, 0xffffffff, 0x24, 0x6, 0x9, 0x9, 0x6, 0x0, 0x400, 0x0, 0xfffffffd, 0x6, 0x800, 0x6, 0xfffffff8, 0xb, 0x6, 0x4, 0x7, 0xd, 0x1, 0x7, 0x6, 0x400, 0x3, 0xd93, 0x9, 0x5, 0x9, 0xffffff82, 0x2, 0x200, 0x7, 0x7, 0x9, 0x4, 0x2, 0x6, 0x1, 0x97, 0x8, 0x7, 0x0, 0x5, 0x4000000, 0x4, 0x5, 0x3, 0x101, 0x1, 0x3, 0x200, 0x71, 0x9, 0x9, 0x2, 0x2, 0x9, 0x1, 0x2, 0x7, 0x80, 0x5, 0x50, 0xffff, 0x0, 0x2, 0x4, 0x8, 0x4, 0x5, 0xdbdc, 0xfffffff8, 0x1ff, 0xa, 0x80000001, 0x8001, 0x3, 0x0, 0x7f, 0xc, 0xb6, 0x0, 0x80000001, 0xfffffffa, 0x6, 0xc, 0x4, 0x4000000, 0x0, 0xf, 0xffffffff, 0x8, 0x2, 0x9000, 0x9, 0x4ad, 0x7ff, 0x2, 0x5890, 0x1, 0xda8, 0x8, 0x9, 0x9, 0x10, 0x6, 0xd2, 0x2, 0x37f9713d, 0x1, 0x80, 0x9, 0x4b, 0x5, 0x5, 0x7, 0x9, 0x6, 0x300000, 0x10001, 0x3, 0xa59, 0x7f, 0x9, 0x7, 0x7fffffff, 0x9, 0x3, 0x7, 0x1, 0x4, 0x7fff, 0x7, 0x8, 0x2, 0x2, 0x0, 0x1]}, @TCA_CBQ_RATE={0x10, 0x5, {0x81, 0x1, 0x6, 0x6, 0x9, 0x7886}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5}}}, @c_atm={{0x8}, {0x34, 0x2, [@TCA_ATM_HDR={0x2d, 0x3, "eac8e68fc9ac9317087385db0d4b75be48fa1e9fb2b4b958dacf43661d0b943bf92c1502657f4d87b1"}]}}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x10004}, 0x24000080) ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 8.169696217s ago: executing program 3 (id=1644): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f0000000200)={"9bfb174f73e5bdba534cb5fdc8600c87", 0x0, 0x0, {0x0, 0x3}, {0x0, 0xb87}, 0x4, [0x2, 0xd93, 0x3, 0xa6, 0x99c4, 0xfcc, 0x6, 0x2, 0x6, 0x4, 0xc1, 0x4, 0x1ff, 0x8000000000000000, 0x3, 0x6]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r0}, r1, 0xa, @unused=[0x5, 0x8, 0x8000000000000001, 0x4], @name="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"}) syz_emit_ethernet(0xd2, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd"], 0x0) 7.716135814s ago: executing program 3 (id=1645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e47a8a404705272797b6000000010902120001010000006622a7e10561832c78b8e2560904a60000a9ab230026990bba62527568204a807790da265010ef3572b1e133e8a90600000021f3baa84f49fadcb18bd8bc80cf053957982488e49475bd8bd2972804c771d94d3722dce3b6e81c2194"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x18}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x938}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004801}, 0x14) 7.344014087s ago: executing program 4 (id=1646): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000000203010100dc0000000000000000000808000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xc4}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="4558345cb6cf7f900ce0a7c7aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc010000001000000000000000000000fe8000000000000000000000000000aa00000000"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000002"], 0x1c}}, 0x0) r3 = io_uring_setup(0x725, &(0x7f0000000200)={0x0, 0x51dc, 0x1, 0x3, 0x3d0}) r4 = syz_io_uring_setup(0x6909, &(0x7f0000000340)={0x0, 0x4, 0x800, 0xfffffffe, 0xfffffffe, 0x0, r3}, &(0x7f0000000140), &(0x7f00000000c0)) r5 = io_uring_setup(0x7058, &(0x7f0000000040)={0x0, 0x200, 0x902, 0xfffffffd, 0x4}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x18, 0x20000002, r6) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x7}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000300)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_NH_ID={0x8}]}, 0x24}}, 0x0) fsetxattr(r8, &(0x7f0000000140)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) socket$tipc(0x1e, 0x5, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 7.026834271s ago: executing program 4 (id=1647): openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f00000001c0)=0x9, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000200)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={r8}) 6.784330572s ago: executing program 4 (id=1648): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) io_setup(0x803, &(0x7f00000000c0)=0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) io_submit(r1, 0x20000000000003a7, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) r4 = openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x2400, 0x10) openat(r4, &(0x7f0000000140)='./file0\x00', 0x404000, 0x100) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = userfaultfd(0x1) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000000800)={0x2, 0x4e20, @multicast1}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0xffffffffffffff60) sendmmsg$inet(r6, &(0x7f0000000100)=[{{&(0x7f0000000840)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x20040006) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r8 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, 0x0, 0x0) r10 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x0, 0x0, "f759e10000001000000000fc6300", '\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6978e21b197e832c040", "000000ff0000000000000020", "0000000000000000000100"]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) read(r3, 0x0, 0x2006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.663964538s ago: executing program 4 (id=1649): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x38, r6, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4e9, 0x23}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x7b5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x820}, 0x1) r7 = dup3(r2, r1, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) timer_create(0xb, &(0x7f0000000380)={0x0, 0x0, 0x1}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x1000}], 0x50, 0x0, &(0x7f0000000440)="e5c0ca304a2a7b53a10a2beba492b547df36c0926c71357304fb53ff71c4381e3c952221a37fd23596966b13d4b104fa4b53ec30653382d39d2a7688b4b0b6a647f7b5234ae93f414418636de2e52987"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="479324851a5b147139d977006cb774d9270b9043ee06e8cdeb630e538994f97cb920f0d3ec9cceaab43b884ef89e5fa21f0198070cf52c9367a236760533169459aa265b5b28cc75d2815f90298fdab1"}) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 5.516295209s ago: executing program 4 (id=1650): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000280)="b8be3ed480f25b868dbfb1c224d3fa3ef4e9b66843cf41ada1d1226470b0edda2951fb284fc29f436fb4381d1b444c0cf8c6f389132292dbaa2cca5aa7af4d1bfd641662547c93745f7903a48f1722db5500a17893f08a8b0a50e682a9539a4e659143f775682c44f3f883773a857f1b6dc73571a6b4b6d750e71815b45fe0201a97f851f427dbcb7fe1d0a5dbfef07e", 0x90, 0xfffffffffffffffe) write$UHID_CREATE2(r2, &(0x7f0000000200)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) 4.455530211s ago: executing program 3 (id=1651): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000410101c0"]) 4.288043965s ago: executing program 3 (id=1652): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_setup(0x803, &(0x7f00000000c0)=0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) io_submit(r2, 0x20000000000003a7, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) r5 = openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x2400, 0x10) openat(r5, &(0x7f0000000140)='./file0\x00', 0x404000, 0x100) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = userfaultfd(0x1) r7 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r7, &(0x7f0000000800)={0x2, 0x4e20, @multicast1}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0xffffffffffffff60) sendmmsg$inet(r7, &(0x7f0000000100)=[{{&(0x7f0000000840)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x20040006) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) r9 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, 0x0, 0x0) r11 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r11, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x0, 0x0, "f759e10000001000000000fc6300", '\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6978e21b197e832c040", "000000ff0000000000000020", "0000000000000000000100"]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) read(r4, 0x0, 0x2006) close_range(r0, 0xffffffffffffffff, 0x0) 3.719848604s ago: executing program 3 (id=1653): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="00010100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x18, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYBLOB="91ecd4074ad580eed6359bc436964230db6fae22d667fa1f7e1030542729154b66bf6ba557451d0095b7ea1bebe39ec23d3adb4722bef9e70e29c3a683c205eade", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, 0x0, 0xfdef) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@getrule={0x14, 0x22, 0x43e, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}}, 0x44000) pipe(&(0x7f0000000180)) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000880)="1d98f390f22f0af44c51e367cd9c5d4d6d9f2421f5bc07b74327939fe9bbe2f43afee833925ebd4d79318b5854d3ef6a56c344cb5f1308b98cde7fe7d683417e8295ebb5b5a43e0eae9064580e2d0c5ae42a0892efa2646a0f9f8e1b1eaf86b8012fdf979a3b26b6734115693b0e8603dba9a88c568f5881cdf91e525cbd6b267662be1a9a296dedeee8f81fa74ae926d6de85a3f7b39642142ad77fa6fce9859c3c6050d8d7f9a59ba1e6b88695d91c1de780aebf3cb8bb304d6dc70e0ecaa3da44dde4ee944229506ff1039fca1d8adc9ac1a311a7517e29385005da0b86b3c9280c2eebf9aa59c09c1119b8fc60b975f860302cfd44959ec9d881a924c87c7e89c8662f6d9b8422c3d20eb4844841eb9aa1446baceb7f7b56239abcb5da2ad1d1ae9c0324f3fb5fa836a041834727b9f4a888924db3a56eb3c704f800e551eef07c6163169acfcd5a3c8b2cea9c48d2cc099f187d86c7323c51ae2ae1851922237cbe606cefd1bb5f9cd66b6c3d0016b775fd10ad3d8ea9194486de3857ea5b2436be0087f0beaa31ef578691b457b9f69b5cf7549ab9ab51c24c8bf15b43e60dc500a96780c18298035dbd8f92cafeb82769fc18499817a38b1cf445f837808e288972902c3dc9373ac113f9cef11d43cd52143783613aebc7cd279ae4f64c382cb8e364fcd4fee51868bd6725b81eaa3630247a17cbdea3650d18423c907be4786d1a71dd08a735505a4e925c2983bc731588a9ffb880779c6a613adb63e5d305e738ca21888995d86474177b5c262738bbd155b6d941a32a397cdfe88e1686bb2f6199f2c750ec150fe95c1464f5dd9f6469e1cb26ad0418d7af8e7bbae1c55cfbcf2272d31816a31e4b872ef2b84744717b672332f84efe85924d6178ffffeb085ccdfab6c035719959cda2adad9ff095d109407d9d2918c5dbc71036eda5ac50003663484910a9d17a974c406eef9fb4a30dd18f6010b4210c434794fadd50c2a522cfbdda2c0cc72b7b49d3e1291a7f18ca12f936e78a967e7f1f4554dc5d677c8125714a330a6f1811c0bbd4d2dc236c7aa711ffd564be64a7ecc2f47ffa0e081d1fb36dc45beca2f15e5978fb9237aad32d0d5614fd5f681936366e60a162aacbd34f27727b3c357ec4b7fea777178f8a494bc0da9ab26ffbcb4484325623b47baf777553bce335dd985d8677b7e82ca52e9190296ebe34b2d893eebe43cfd10565ede97f13cd5cf8cf66548309c7a8baa2ed293cb15fd426b100c367e347956f6283db2fef4008d9751a6ca8887d560f736869873969993e1f919d2a0153ac6bd90ed8d9b545af7710e203f745c4cd86fd95859bbfd4b2ffb16e63eaaeff2193df8ceefde6208d4a445e4c70db606fe2b079d61eb2eaff8265a4f817e71b060989bc2b253f102833d7d93bef3855bc173ad0c30d8096607354a7c89ad2858aec3b29a90232224df772ea7a1ce8f72752b63656f8e050329b29dfe8a18505c8d710f74490d51058370b54793cb3b6992d2c0e3bef40a2d61a7511f02a5f5b7b8c5f4730d943581a95b3e9efba637a9ecb478d1adb60d425726d1342ffe5d15a09aed5c7e183bc5190dc5b5062d3cc78d1bde66486ea7407375bb53a5a6b4192ca432c8202a025775082d828fc22b49d4c48a42606686c1ff0678ba028d7e91648d7c4557f9723c6aea3146e3d8e6a3577928613f1b065d32b31f1a75ff314e73f5916ac28ba0a5be0f16ab5a75c296744c5d8dbed83786eeec2435d3779372e6a9970ae48b70cb8a2301243e9adb825478726e644eb1ad8386ac57ee840398b1f6084e16ddefa2dacb3c296684e76935c7b9c3a5e243f65958c6cc8cbdf8e19f70f906262bf0ccb7b6e0a0802209dd0dbd047dfcf275490787c5f30d7a33038bf9f7741465e59b397d54ae3cc4eccd5239d5e1c9497a7000658a868eac96c98bd7eb45175c703c584cce50fd5368fa4881704eac441ecd688c74bbcf2c47e974b21e558dfc31ff3ccef5a5db171fbccdb1504071db410204294070a7e20d6304cc3bdf8e3e99e49b74eee035811038e45da67edc33dcbd59e4192d2b10c60709a647c0626be0c5da3918675b0279bcf8a2d83525d888e300de1b5d198eff198cac8a108cb2d8c52e3092febe5b5cf47a1d203f8e7b2514bd733cd3c443c5924fe555fff9b899b91e81a6dbcc3ad0ec089b5e51fa04190fadf1b17ad44686f0972e96a99207eb289aaf3d8dca42b4f70ca70e6af154dbf8e311f6721ef1e26a75998fb6d1fdf4f876851b84f692c6047728f6284c1dcbecc083e9ee4b652d9b8114d47614eb7e59f72f1d3c551e1f0be4ef4d5ad32c6f99eee63b48794daff66b5805b95c0d49923e1dc418770a85eabc4595cd49982993969dde084bd0ced872b2245dd4a75cea6d32c84c26ef8bea277d9de9859b70e10b6cb91ede8296b0d3d1ba14971808f5cb2f992f4a57d84312d81c903f09ac644b959cce0e0f2b96612b6b086f382ffdeb3e509b2f44d8c3ee06eeea871374d7db96fa957c2cecb171e6528828f0a7800eeeba10bcbaf71d1b6856850b0005dc6c3dac2cdafd8954e1a9f620dd9aa9c71ec49d0bf096dcfb4cf4bc5581d99eca14cee501055dc5ab90a3b1f2e67210561be436350cea7436d2e7f7e405939b888f12dd0a08fa2b880a7f770cf62bc0a6a80cbd506332ce63634ad87a5868e1d7a2bdeba9ea4dffbe7cddf57386d3e91750df86bb7a732aada37fd5f2abd1465119f410c182ba0e01d4b3b9ba332f235310fb3c0acd289e210248a3eda74f176d5fe7c946e8bda917c212c2a53605c7d93dc9cdb662478cef4244105658a5d561723fdb684b92414d05313daa8c60f8e923413b67e51dbbe947b17bdcd3b04a34273bbef87d2cb7dd9029e67d1910f8004cba8720268c65d11f28653ebc05be0164281bd52172b1f0c36338b8e0fbc5e0158494f72f44ba71f7b9df2bf9568dba952a11b69aefb069a7d71539086a9ebd0aa7bda36c52424fc8c0d3407e1b86ddd948c80a78d28cb41c38e7f1ac9f4cba1a25fe9944e9d6241368c171110f3b7e9859878196fa335591f9f47a8243817c76d04bb5fcaf350c658b48e6c862cccc294751a5bd5ceda0372336b7f0a0c9ccd63589076458be853adadc05d7ff1bf3e6fad9876ffac42f35d6ceb8d915a90e8c7d141e6507c98df70f6d95c195afa6cf69123704023de847480d7c63a248037f36484262c18cfd92ab0e7732b6049f7701498738b3e62eab7c1f407430aaa776ef77d5e80916df4b2e037c089a01f37d05d965a2bd4d49a2c94d0c46b4fb79310d47663d09b5c4d8e00367c29d501185a24292f65aeb1bad52c23e54295468e8e5b540fb73b3ae6086b19c4c8d326a53f54d39c05913c4261b490c31259b95cc835974b57fffa82c72bdf2f1b26ba8f7b642c996ce3ec7ce1989af0bbad64a332565781873f5805a4e5f8644111d964b6be14103b24ad5a0177e2f58e8c8e8b06f8c5e803193c0883f173c4b8c2958efa33f82018fd0c8f4a1e7d231a895b400a44b4cca3e5e276a1e512711bafd4bcc7816fe5c54b6466bec72f479aabcf08656248cba2ebfe1682d4ab94dba0362078007db0c70d361a14c6531a66619158ab31c16bfd6d4f8774f69b69f9b9dfa8f303660938110e8e21dc34971c0633fcd4abc3bad2fac8f9dc32fa5a22c167db90c7583087e56caf6068a9fc8cb767352c11a37b0b24432cd192f95feae5d7b9497ee327da34143c846f3daad348d8f24db2563b6363a22fc9b59f511ff370fbdd8688ae76770c30b552baeeec7a2812d8cbd721e41402671ad35830589657b6454dc0067d8dd9d576f7757e0d2de183e090f5da355f203968357fc4aefb69231887a05311cf5bff97030b3db8846437ede4c747be7b3f431c612f8e16d172e1d8825e246fd93e0216e88e36aa337742c082e03ad91511bc1b4d34b574676e647d7fbd1e997cee704aed53b6a1776d99780977c23caf60e3c8d523d20b259f010643a7c0173f61adf460832dc38aa2a67a34e9b686d1f17e85fa394ef117732a8df81c04deb17f3c7ab4f8347ea3f85b3f15ee854857be976048dcd45dd5afd749c4852eb96e0efaedc69a3d69945c46b1c7dc63b84829c71dbb30c74bf380a94fe40c821038fecfc3997a0aa1d68681cf53ea594ad3c49a31ebcee3c3ed92823702fb3dcf96cfd7933eb99bc59f25e612995d7741b773e24190bc3e5233d221d8b32dfa6b72a282edf9f9911e67573159b0d3f7520b51222b763326647213e09c1a7e342aaaf720dbb652eb3b7b75a5382f04e563c7dee3e70e4dcf4883972d01d5931c5e86701334fd42c34102f3745c4368c137d5857261bdb10b79360668cc712a8fbf483fab0245f83e5c6766a946bb0f4ba6f9b6029206d29fdc98466928ea1aae02ea38af46b441d4f9c11fd88cd6c3bfefdcc801102548d3d4b5c4715cbcc5b5927e72d35db3634235ee2e5a090a30829c09f583f0893093f7483d504918d01575c6d64aa451534cce7ef05455129fdf7cd831da01bdf49ccc08b116492883713eb7832502dae85a9b2b23be94da7d076112c2a16a8d9da3819d596e65f5c037ac56f3f8527f3a90862a2520d32eef905e0ea16c378d4a18848f6235b7e15e496e5f3c0775e5651fa08c85ecab743b63482d1212f334e6ab819331bbf3f83581723c9c55da5d8c5afd290778bdf6afc87c7fc0d849b3c2f1bfaa250bfbfc96799092d51d766dfb6990dd6ef44d94b8e80bfe8b5b0d31d40f0fcf493e2ca4df7f24e5fbcceb203c7cd254da06eb0924f4c414a653fc7a69b53b67269d574af45c3bde4d12ee63dce94b424e3c7bd37e0165f3623aa880866e68d4f0349eb0cb47c1fdb6eae374b6f41d99efb78532cf56e666455c45dd9f456441a87e4d71167d91fc15ac8efaf27340c564f12c37adccc9fd4ee36edeae45304a036c8319083775700db06705cb0638dee30a364259797fd51d11b48246868307d47505e0b0ffc85cdd6506b298ebef0a103289a23ba91d33f96df244c8290d330ebceea7b10af91804a651adcfac4ba779445550707739e61fdee5979bdf8ed04bdf2beaf11b3b1f02aed14245e05817db7ebbcef4e985e1b50093a9935fdca3bd0b0ecbc8e393031e6712601c0f8a8574816e308a424702c8e3db38f084006a81dbdb7f26837b3428db513f3eaab82fdc82e0c00b2c32c151aed0a06f552052ab1baea5633e49a49e6480a1bee2d6ce7e37efaefc7241780049f0b613938c630318a19fe1d1411f168c1087b29906831935541030065a5afd26d2d7cdc7280537c0aef1ed404b3bd0ab97d121e3345ea50c77b39ba4406bf3fe399899c24f752e2d230657ce405620c16307ce1404745b2988a4c02dd8fa37df23fa4f64f4a1215a5b0d137a61a159fc47db9f645530f2a2976cae121dbbb96f33ee505149a416df3a15871cce2cde715d2027220ab4f11e0e1a7b4f2adc8b3a3b1b5bca6fbb4c93601a186348c2e82ae5f8c834eb6290697f492e1110a515129cf90b9ea3bc40677aa3b2fd7fe458a3406793eeae07e23ed28b48a2023c0c718f1330fd54de3ad87f763a9cbf07dec71bcb09ff328e46f8b0678e6e3dd500ab9554b0ceb11f0caadbce2d20573d44eb6a2d32e6e7666aee21c594a5e6e8731307793dee002d207180496d6ce4a76cec89aec1190a7641b2942df35333ad76792c1d3f89b8259343bd43fb5da2f755d773f08cb65c3e2cb360f25d3e3486b2659f034d3256adf2a89a9e21"}], 0x20000000000000ed) 0s ago: executing program 3 (id=1655): r0 = socket(0x15, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x7}}]}, 0x38}}, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r6, 0x0, 0xa0028000}, 0x38) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000240), 0x0, 0x400c015) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000004900010000000000000000000a000700", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000"], 0x38}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000080)=0x4) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r8, 0x80049367, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): [ 469.356425][ T52] veth0_vlan: left promiscuous mode [ 470.029892][ T52] team0 (unregistering): Port device team_slave_1 removed [ 470.096182][ T52] team0 (unregistering): Port device team_slave_0 removed [ 470.230738][ T5249] Bluetooth: hci4: command tx timeout [ 470.790845][ T5249] Bluetooth: hci1: command tx timeout [ 471.335147][ T5286] usb 4-1: USB disconnect, device number 52 [ 471.888253][T11852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.902973][T11998] chnl_net:caif_netlink_parms(): no params data found [ 472.132656][T11852] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.323587][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.330811][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.342411][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.349567][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.429769][T11998] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.437875][T11998] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.446080][T11998] bridge_slave_0: entered allmulticast mode [ 472.469686][T11998] bridge_slave_0: entered promiscuous mode [ 472.528574][T11998] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.537209][T11998] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.562277][T11998] bridge_slave_1: entered allmulticast mode [ 472.590304][T11998] bridge_slave_1: entered promiscuous mode [ 472.743111][T11998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.787260][T11998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.883264][ T5249] Bluetooth: hci1: command tx timeout [ 472.973375][T11998] team0: Port device team_slave_0 added [ 473.084841][T11998] team0: Port device team_slave_1 added [ 473.176156][T11852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.252144][T11998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.259360][T11998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.307599][T11998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.371611][T11998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.378613][T11998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.414069][T11998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.477646][T11899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 473.515697][T11899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 473.658935][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.716595][T11899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 473.744184][T11899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 473.778513][T11998] hsr_slave_0: entered promiscuous mode [ 473.792077][T11998] hsr_slave_1: entered promiscuous mode [ 473.815892][T11998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.830690][T11998] Cannot create hsr debugfs directory [ 473.909984][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.145588][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.322294][T12071] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 474.349123][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.382315][T11852] veth0_vlan: entered promiscuous mode [ 474.388613][T11908] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 474.407639][T11908] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 474.427071][T11908] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 474.485622][T11908] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 474.529128][T11852] veth1_vlan: entered promiscuous mode [ 474.772120][ T5243] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 474.866835][ T52] bridge_slave_1: left allmulticast mode [ 474.875170][ T52] bridge_slave_1: left promiscuous mode [ 474.884064][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.899303][ T52] bridge_slave_0: left allmulticast mode [ 474.905578][ T52] bridge_slave_0: left promiscuous mode [ 474.917787][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.951324][ T5249] Bluetooth: hci1: command tx timeout [ 474.951391][ T5243] usb 4-1: Using ep0 maxpacket: 8 [ 474.968926][ T5243] usb 4-1: config index 0 descriptor too short (expected 30768, got 45) [ 474.980575][ T5243] usb 4-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 475.010879][ T5243] usb 4-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 475.036754][ T5243] usb 4-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 475.056473][ T5243] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 475.074749][ T5243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.326135][ T5243] usb 4-1: string descriptor 0 read error: -71 [ 475.353432][ T5243] usb 4-1: USB disconnect, device number 53 [ 475.623984][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.646327][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.658603][ T52] bond0 (unregistering): Released all slaves [ 475.711604][T11852] veth0_macvtap: entered promiscuous mode [ 475.733466][T11852] veth1_macvtap: entered promiscuous mode [ 476.005774][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.016984][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.031161][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.042051][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.055809][T11852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.115981][T11899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.174720][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.186615][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.205213][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.232679][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.262121][T11852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.311344][ T52] hsr_slave_0: left promiscuous mode [ 476.318061][ T52] hsr_slave_1: left promiscuous mode [ 476.331374][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.338862][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.355486][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.367605][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.414734][ T52] team_slave_0: left promiscuous mode [ 476.420266][ T52] team_slave_1: left promiscuous mode [ 476.434017][ T52] veth1_macvtap: left promiscuous mode [ 476.439829][ T52] veth0_macvtap: left promiscuous mode [ 476.453621][ T52] veth1_vlan: left promiscuous mode [ 476.468226][ T52] veth0_vlan: left promiscuous mode [ 477.258281][ T52] team0 (unregistering): Port device team_slave_1 removed [ 477.315193][ T52] team0 (unregistering): Port device team_slave_0 removed [ 477.858216][T11908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.909497][T11852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.918794][T11852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.928090][T11852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.938355][T11852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.969058][T11899] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.045959][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.053176][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.083896][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.091108][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.114835][T11908] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.127632][T12140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1358'. [ 478.175724][T11998] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 478.239463][T11998] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 478.263474][T11998] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 478.314064][T11998] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 478.384009][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.391217][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.400542][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.407706][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.439893][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.464182][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.589883][T11908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.606665][T11899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.607246][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.640530][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.704226][T11908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.740870][T11998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.758217][T11998] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.800349][T11998] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 478.810898][T11998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.842995][T11998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.878785][T11998] veth0_vlan: entered promiscuous mode [ 478.893304][T11998] veth1_vlan: entered promiscuous mode [ 478.919178][T11998] veth0_macvtap: entered promiscuous mode [ 478.929647][T11998] veth1_macvtap: entered promiscuous mode [ 478.945597][T11998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.956384][T11998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.966628][T11998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.977382][T11998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.992692][T11998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.019032][T11899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.041278][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.048510][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.072873][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.080160][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.090885][ T5286] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 479.238116][T11908] veth0_vlan: entered promiscuous mode [ 479.255624][T11998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.267980][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.290656][T11998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.301018][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.329983][T11998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.341330][ T5286] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 479.350533][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.358834][T11998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.375885][ T5286] usb 5-1: config 0 descriptor?? [ 479.378035][T11998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.436153][T11998] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.451392][T11998] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.460631][T11998] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.469398][T11998] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.491195][T11908] veth1_vlan: entered promiscuous mode [ 479.525668][T11899] veth0_vlan: entered promiscuous mode [ 479.650218][T11899] veth1_vlan: entered promiscuous mode [ 479.691228][ T5286] usbhid 5-1:0.0: can't add hid device: -71 [ 479.721597][ T5286] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 479.761910][ T5286] usb 5-1: USB disconnect, device number 45 [ 479.762291][T11908] veth0_macvtap: entered promiscuous mode [ 479.797153][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.807353][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.838724][T11908] veth1_macvtap: entered promiscuous mode [ 479.879286][T11899] veth0_macvtap: entered promiscuous mode [ 479.936884][T11899] veth1_macvtap: entered promiscuous mode [ 479.966289][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.967251][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.986461][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.990650][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.003626][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.018416][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.029155][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.041367][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.054281][T11908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.129525][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.151172][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.170612][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.190699][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.210661][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.230636][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.264179][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.290669][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.334280][T11899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.375994][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.401815][T12165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1364'. [ 480.410633][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.444242][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.467318][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 480.467340][ T29] audit: type=1326 audit(1728140060.047:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 480.500599][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.519034][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.526521][ T29] audit: type=1326 audit(1728140060.047:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 480.537938][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.586041][T11908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.588045][ T29] audit: type=1326 audit(1728140060.047:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 480.642845][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.654093][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.666373][ T29] audit: type=1326 audit(1728140060.047:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 480.694509][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.706808][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.717170][ T29] audit: type=1326 audit(1728140060.047:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 480.739966][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.758410][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.769986][ T29] audit: type=1326 audit(1728140060.047:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 480.796136][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.809246][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.821706][T11899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.829105][ T29] audit: type=1326 audit(1728140060.047:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 480.857011][T11899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.869102][T11899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.890641][ T29] audit: type=1326 audit(1728140060.057:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 480.900746][T11899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.922753][T11899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.932090][ T5283] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 480.938276][ T29] audit: type=1326 audit(1728140060.057:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 480.962301][T12163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1347'. [ 480.972497][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 480.994057][ T29] audit: type=1326 audit(1728140060.057:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 481.101638][ T5283] usb 5-1: Using ep0 maxpacket: 16 [ 481.108904][ T5283] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 481.122565][ T5283] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 481.128146][T11908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.147279][ T5283] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 481.158317][ T5283] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 481.168252][T11908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.178012][T11908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.187155][T11908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.198231][ T5283] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 481.221429][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.229521][ T5283] usb 5-1: Product: syz [ 481.238522][T12174] netlink: 'syz.3.1366': attribute type 6 has an invalid length. [ 481.256299][ T5283] usb 5-1: Manufacturer: syz [ 481.280150][ T5283] usb 5-1: SerialNumber: syz [ 481.488622][T12177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1367'. [ 481.511054][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.519030][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.530131][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.564758][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1365'. [ 481.572241][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.711334][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.742964][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.760087][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.792736][ T5283] usb 5-1: USB disconnect, device number 46 [ 481.821162][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.943563][T11966] udevd[11966]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.134338][T12190] team_slave_0: entered promiscuous mode [ 482.140142][T12190] team_slave_1: entered promiscuous mode [ 483.269209][T12214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1378'. [ 483.332147][T12199] input: syz0 as /devices/virtual/input/input34 [ 483.379686][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 483.381299][T12217] FAULT_INJECTION: forcing a failure. [ 483.381299][T12217] name failslab, interval 1, probability 0, space 0, times 0 [ 483.458194][T12217] CPU: 1 UID: 0 PID: 12217 Comm: syz.2.1379 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 483.469055][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 483.479159][T12217] Call Trace: [ 483.482477][T12217] [ 483.485445][T12217] dump_stack_lvl+0x241/0x360 [ 483.490174][T12217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.495427][T12217] ? __pfx__printk+0x10/0x10 [ 483.500079][T12217] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 483.505600][T12217] ? __pfx___might_resched+0x10/0x10 [ 483.510945][T12217] should_fail_ex+0x3b0/0x4e0 [ 483.515675][T12217] should_failslab+0xac/0x100 [ 483.520377][T12217] ? alloc_pipe_info+0xeb/0x4d0 [ 483.525246][T12217] __kmalloc_cache_noprof+0x6c/0x2c0 [ 483.530568][T12217] alloc_pipe_info+0xeb/0x4d0 [ 483.535279][T12217] splice_direct_to_actor+0xa9e/0xc80 [ 483.540707][T12217] ? aa_file_perm+0x3ef/0xf50 [ 483.545414][T12217] ? __pfx_aa_file_perm+0x10/0x10 [ 483.550454][T12217] ? __pfx_direct_splice_actor+0x10/0x10 [ 483.556146][T12217] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 483.562066][T12217] ? __fget_files+0x29/0x470 [ 483.566680][T12217] ? __pfx_lock_release+0x10/0x10 [ 483.571760][T12217] do_splice_direct+0x289/0x3e0 [ 483.576640][T12217] ? __pfx_do_splice_direct+0x10/0x10 [ 483.582035][T12217] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 483.588034][T12217] ? bpf_lsm_file_permission+0x9/0x10 [ 483.593421][T12217] ? security_file_permission+0x74/0x280 [ 483.599081][T12217] ? rw_verify_area+0x1c3/0x6f0 [ 483.603961][T12217] do_sendfile+0x561/0xe10 [ 483.608404][T12217] ? __pfx_vfs_write+0x10/0x10 [ 483.613191][T12217] ? __pfx_do_sendfile+0x10/0x10 [ 483.618165][T12217] __se_compat_sys_sendfile+0x194/0x1f0 [ 483.623735][T12217] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 483.630091][T12217] ? __pfx___se_compat_sys_sendfile+0x10/0x10 [ 483.636185][T12217] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 483.642811][T12217] ? lockdep_hardirqs_on+0x99/0x150 [ 483.648063][T12217] __do_fast_syscall_32+0xb4/0x110 [ 483.653220][T12217] ? exc_page_fault+0x590/0x8c0 [ 483.658098][T12217] do_fast_syscall_32+0x34/0x80 [ 483.662971][T12217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 483.669322][T12217] RIP: 0023:0xf7fa6579 [ 483.673410][T12217] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 483.693036][T12217] RSP: 002b:00000000f572656c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 483.701478][T12217] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000006 [ 483.709463][T12217] RDX: 0000000000000000 RSI: 00000000fffffffe RDI: 0000000000000000 [ 483.717475][T12217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 483.725468][T12217] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 483.733459][T12217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 483.741578][T12217] [ 483.744643][ C1] vkms_vblank_simulate: vblank timer overrun [ 484.210024][T12230] team_slave_0: entered promiscuous mode [ 484.215873][T12230] team_slave_1: entered promiscuous mode [ 484.240452][T12234] program syz.2.1384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.744311][T12244] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1387'. [ 485.030631][ T5286] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 485.082226][T12255] nlmon0: entered promiscuous mode [ 485.087487][T12255] vlan2: entered promiscuous mode [ 485.113848][T12255] vlan2: entered allmulticast mode [ 485.130700][T12255] nlmon0: entered allmulticast mode [ 485.141919][T12255] nlmon0: left allmulticast mode [ 485.158860][T12255] nlmon0: left promiscuous mode [ 485.182645][ T5286] usb 4-1: Using ep0 maxpacket: 8 [ 485.199258][ T5286] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 485.209079][ T5286] usb 4-1: config 150 has no interface number 0 [ 485.222225][ T5286] usb 4-1: config 150 interface 204 has no altsetting 0 [ 485.239621][ T5286] usb 4-1: config 150 interface 1 has no altsetting 0 [ 485.257521][ T5286] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 485.289581][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.308241][ T5286] usb 4-1: Product: syz [ 485.313191][ T5286] usb 4-1: Manufacturer: syz [ 485.317848][ T5286] usb 4-1: SerialNumber: syz [ 485.563162][ T5286] xr_serial 4-1:150.204: xr_serial converter detected [ 485.586497][ T5286] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 485.593225][ T5286] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 485.627782][ T5286] usb 4-1: USB disconnect, device number 54 [ 485.662055][ T5286] xr_serial 4-1:150.204: device disconnected [ 485.852125][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 485.852145][ T29] audit: type=1326 audit(1728140065.447:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 485.900760][ T29] audit: type=1326 audit(1728140065.457:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 485.953953][ T29] audit: type=1326 audit(1728140065.477:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 485.999463][ T29] audit: type=1326 audit(1728140065.477:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 486.022760][ T29] audit: type=1326 audit(1728140065.477:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 486.048816][ T29] audit: type=1326 audit(1728140065.507:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 486.081415][ T29] audit: type=1326 audit(1728140065.507:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 486.105750][ T29] audit: type=1326 audit(1728140065.527:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 486.139185][ T29] audit: type=1326 audit(1728140065.527:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 486.177700][ T29] audit: type=1326 audit(1728140065.527:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.2.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 486.452998][ T5286] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 486.483213][T12281] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 486.489792][T12281] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 486.501870][T12281] vhci_hcd vhci_hcd.0: Device attached [ 486.612935][ T5286] usb 4-1: config 0 has an invalid interface number: 27 but max is 0 [ 486.640565][ T5286] usb 4-1: config 0 has no interface number 0 [ 486.667259][ T5286] usb 4-1: config 0 interface 27 altsetting 0 endpoint 0x2 has invalid maxpacket 128, setting to 64 [ 486.722520][ T5286] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=71.8f [ 486.731984][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.740032][ T5286] usb 4-1: Product: syz [ 486.744403][ T1848] usb 17-1: new low-speed USB device number 3 using vhci_hcd [ 486.752238][ T5286] usb 4-1: Manufacturer: syz [ 486.756894][ T5286] usb 4-1: SerialNumber: syz [ 486.771584][ T5286] usb 4-1: config 0 descriptor?? [ 486.899982][T12282] vhci_hcd: connection reset by peer [ 486.911018][ T2968] vhci_hcd: stop threads [ 486.919614][ T2968] vhci_hcd: release socket [ 486.926965][ T2968] vhci_hcd: disconnect device [ 486.978927][T12290] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1402'. [ 486.985630][T12291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.012011][T12291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.042152][ T5286] ath6kl: Failed to submit usb control message: -71 [ 487.064418][ T5286] ath6kl: unable to send the bmi data to the device: -71 [ 487.080568][ T5286] ath6kl: Unable to send get target info: -71 [ 487.097548][ T5286] ath6kl: Failed to init ath6kl core: -71 [ 487.140698][ T5286] ath6kl_usb 4-1:0.27: probe with driver ath6kl_usb failed with error -71 [ 487.153639][T12295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1404'. [ 487.161608][ T5286] usb 4-1: USB disconnect, device number 55 [ 487.666208][T12308] FAULT_INJECTION: forcing a failure. [ 487.666208][T12308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.710757][T12308] CPU: 1 UID: 0 PID: 12308 Comm: syz.1.1409 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 487.721620][T12308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 487.731728][T12308] Call Trace: [ 487.735046][T12308] [ 487.738008][T12308] dump_stack_lvl+0x241/0x360 [ 487.742778][T12308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.748080][T12308] ? __pfx__printk+0x10/0x10 [ 487.752733][T12308] ? __pfx_lock_release+0x10/0x10 [ 487.757836][T12308] should_fail_ex+0x3b0/0x4e0 [ 487.762588][T12308] _copy_from_user+0x2f/0xe0 [ 487.767247][T12308] get_compat_msghdr+0xae/0x730 [ 487.772154][T12308] ? __fget_files+0x29/0x470 [ 487.776796][T12308] ? __pfx_get_compat_msghdr+0x10/0x10 [ 487.782309][T12308] ? __fget_files+0x3f3/0x470 [ 487.787067][T12308] __sys_sendmsg+0x25d/0x380 [ 487.791718][T12308] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.796910][T12308] ? __pfx_vfs_write+0x10/0x10 [ 487.801804][T12308] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 487.808472][T12308] ? lockdep_hardirqs_on+0x99/0x150 [ 487.813742][T12308] __do_fast_syscall_32+0xb4/0x110 [ 487.818994][T12308] ? exc_page_fault+0x590/0x8c0 [ 487.823918][T12308] do_fast_syscall_32+0x34/0x80 [ 487.828862][T12308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 487.835247][T12308] RIP: 0023:0xf7fb7579 [ 487.839363][T12308] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 487.859027][T12308] RSP: 002b:00000000f573656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 487.867498][T12308] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 487.875500][T12308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 487.883515][T12308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 487.891508][T12308] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 487.899594][T12308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 487.907767][T12308] [ 487.910935][ C1] vkms_vblank_simulate: vblank timer overrun [ 487.931299][T12306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1407'. [ 487.964126][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 488.050711][ T1175] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 488.231685][ T1175] usb 4-1: Using ep0 maxpacket: 8 [ 488.261564][ T1175] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 488.296926][ T1175] usb 4-1: config 0 has no interface number 0 [ 488.311271][ T1175] usb 4-1: New USB device found, idVendor=1bc7, idProduct=10a0, bcdDevice=ae.ba [ 488.330196][ T1175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.344404][ T1175] usb 4-1: Product: syz [ 488.348653][ T1175] usb 4-1: Manufacturer: syz [ 488.370847][ T1175] usb 4-1: SerialNumber: syz [ 488.384386][ T1175] usb 4-1: config 0 descriptor?? [ 488.434483][ T1175] option 4-1:0.164: GSM modem (1-port) converter detected [ 488.800756][ T5286] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 488.960619][ T5286] usb 5-1: Using ep0 maxpacket: 32 [ 488.967474][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.979234][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.989783][ T5286] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 488.999360][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.010731][T12339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.021645][ T5286] usb 5-1: config 0 descriptor?? [ 489.027520][T12339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.462819][ T5286] kye 0003:0458:4018.000F: unknown main item tag 0x0 [ 489.480905][ T5286] kye 0003:0458:4018.000F: hidraw0: USB HID v0.00 Device [HID 0458:4018] on usb-dummy_hcd.4-1/input0 [ 489.666528][T12332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.688071][T12332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.710300][ T5287] usb 5-1: USB disconnect, device number 47 [ 490.388588][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1428'. [ 490.751635][ T5284] usb 4-1: USB disconnect, device number 56 [ 490.760293][ T5284] option 4-1:0.164: device disconnected [ 491.291243][T12400] netlink: 'syz.4.1440': attribute type 10 has an invalid length. [ 491.317078][T12400] team_slave_0: left promiscuous mode [ 491.335062][T12400] team_slave_1: left promiscuous mode [ 491.880871][ T5284] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 491.905881][ T1848] vhci_hcd: vhci_device speed not set [ 492.061006][ T5284] usb 5-1: Using ep0 maxpacket: 8 [ 492.072893][ T5284] usb 5-1: unable to get BOS descriptor or descriptor too short [ 492.087926][ T5284] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 492.097725][ T5284] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.108618][ T5284] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 492.117933][ T5284] usb 5-1: config 1 has no interface number 1 [ 492.124360][ T5284] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 492.138921][ T5284] usb 5-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1E, changing to 0xE [ 492.158613][ T5284] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 492.176421][ T5284] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.187851][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.196460][ T5286] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 492.208986][ T5284] usb 5-1: Product: syz [ 492.214062][ T5284] usb 5-1: Manufacturer: syz [ 492.218744][ T5284] usb 5-1: SerialNumber: syz [ 492.360617][ T5286] usb 2-1: Using ep0 maxpacket: 8 [ 492.376140][ T5286] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 492.386298][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.394706][ T5286] usb 2-1: Product: syz [ 492.399697][ T5286] usb 2-1: Manufacturer: syz [ 492.404956][ T5286] usb 2-1: SerialNumber: syz [ 492.422632][ T5286] r8152-cfgselector 2-1: Unknown version 0x0000 [ 492.437232][ T5286] r8152-cfgselector 2-1: config 0 descriptor?? [ 492.506055][ T5284] usb 5-1: USB disconnect, device number 48 [ 492.691267][ T5286] r8152-cfgselector 2-1: Unknown version 0x0000 [ 492.698022][ T5286] r8152-cfgselector 2-1: bad CDC descriptors [ 492.729347][ T5286] r8152-cfgselector 2-1: USB disconnect, device number 41 [ 493.402435][T12443] FAULT_INJECTION: forcing a failure. [ 493.402435][T12443] name failslab, interval 1, probability 0, space 0, times 0 [ 493.415567][T12443] CPU: 0 UID: 0 PID: 12443 Comm: syz.4.1454 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 493.426568][T12443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 493.436675][T12443] Call Trace: [ 493.439991][T12443] [ 493.442955][T12443] dump_stack_lvl+0x241/0x360 [ 493.447773][T12443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.453023][T12443] ? __pfx__printk+0x10/0x10 [ 493.457780][T12443] should_fail_ex+0x3b0/0x4e0 [ 493.462521][T12443] ? skb_clone+0x20c/0x390 [ 493.466988][T12443] should_failslab+0xac/0x100 [ 493.471701][T12443] ? skb_clone+0x20c/0x390 [ 493.476223][T12443] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 493.481658][T12443] skb_clone+0x20c/0x390 [ 493.485916][T12443] ? dev_queue_xmit_nit+0x220/0xc10 [ 493.491141][T12443] dev_queue_xmit_nit+0x419/0xc10 [ 493.496205][T12443] ? dev_queue_xmit_nit+0x2b/0xc10 [ 493.501342][T12443] ? validate_xmit_skb+0x9f9/0x1120 [ 493.506557][T12443] dev_hard_start_xmit+0x15f/0x7e0 [ 493.511694][T12443] ? __pfx_validate_xmit_skb+0x10/0x10 [ 493.517180][T12443] __dev_queue_xmit+0x1b11/0x3ed0 [ 493.522223][T12443] ? kasan_save_track+0x51/0x80 [ 493.527093][T12443] ? __do_fast_syscall_32+0xb4/0x110 [ 493.532395][T12443] ? __dev_queue_xmit+0x2da/0x3ed0 [ 493.537530][T12443] ? __pfx___dev_queue_xmit+0x10/0x10 [ 493.542930][T12443] ? __copy_skb_header+0x437/0x5b0 [ 493.548091][T12443] ? __asan_memcpy+0x40/0x70 [ 493.552703][T12443] ? __copy_skb_header+0x437/0x5b0 [ 493.557834][T12443] ? __skb_clone+0x454/0x6c0 [ 493.562446][T12443] ? skb_clone+0x240/0x390 [ 493.566883][T12443] __netlink_deliver_tap+0x54d/0x7c0 [ 493.572205][T12443] ? netlink_deliver_tap+0x2e/0x1b0 [ 493.577461][T12443] netlink_deliver_tap+0x19d/0x1b0 [ 493.582641][T12443] netlink_unicast+0x7c4/0x990 [ 493.587467][T12443] ? __pfx_netlink_unicast+0x10/0x10 [ 493.592799][T12443] ? __virt_addr_valid+0x183/0x530 [ 493.597934][T12443] ? __check_object_size+0x48e/0x900 [ 493.603243][T12443] netlink_sendmsg+0x8e4/0xcb0 [ 493.608043][T12443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.613350][T12443] ? __pfx_lock_release+0x10/0x10 [ 493.618396][T12443] ? aa_sock_msg_perm+0x91/0x160 [ 493.623879][T12443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.629178][T12443] __sock_sendmsg+0x221/0x270 [ 493.633887][T12443] ____sys_sendmsg+0x52a/0x7e0 [ 493.638766][T12443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.644086][T12443] __sys_sendmsg+0x292/0x380 [ 493.648701][T12443] ? __pfx___sys_sendmsg+0x10/0x10 [ 493.653846][T12443] ? __pfx_vfs_write+0x10/0x10 [ 493.658649][T12443] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 493.665447][T12443] ? lockdep_hardirqs_on+0x99/0x150 [ 493.670685][T12443] __do_fast_syscall_32+0xb4/0x110 [ 493.675846][T12443] ? exc_page_fault+0x590/0x8c0 [ 493.680812][T12443] do_fast_syscall_32+0x34/0x80 [ 493.685680][T12443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.692027][T12443] RIP: 0023:0xf7ff0579 [ 493.696115][T12443] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 493.715738][T12443] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 493.724261][T12443] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 493.732255][T12443] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 493.740250][T12443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 493.748729][T12443] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 493.756733][T12443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.764912][T12443] [ 493.776127][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 493.787603][T12446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.844672][T12446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.876315][T12446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.917060][T12446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.089263][ T1175] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 494.240734][ T1175] usb 2-1: Using ep0 maxpacket: 16 [ 494.247955][ T1175] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 494.259650][ T1175] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.287231][ T1175] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 494.307910][ T1175] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 494.327093][ T1175] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 494.358252][ T1175] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 494.376336][ T1175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 494.396002][ T1175] usb 2-1: SerialNumber: syz [ 494.416760][T12448] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 494.426608][T12448] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 494.451221][ T1175] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 494.569891][ T70] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.741918][ T70] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.800851][ T1175] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 494.811163][T12461] bridge0: port 3(syz_tun) entered blocking state [ 494.834856][ T1175] usb 2-1: USB disconnect, device number 42 [ 494.869421][T12461] bridge0: port 3(syz_tun) entered disabled state [ 494.911258][T12461] syz_tun: entered allmulticast mode [ 494.928790][T12461] syz_tun: entered promiscuous mode [ 494.950969][T12461] bridge0: port 3(syz_tun) entered blocking state [ 494.958012][T12461] bridge0: port 3(syz_tun) entered forwarding state [ 495.048236][ T70] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.074467][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 495.091457][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 495.106440][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 495.121113][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 495.130669][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 495.138259][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 495.221515][ T70] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.241534][T12469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1464'. [ 495.473723][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 495.473743][ T29] audit: type=1326 audit(1728140075.067:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12473 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 495.512377][ T29] audit: type=1326 audit(1728140075.067:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12473 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 495.561232][ T29] audit: type=1326 audit(1728140075.137:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12473 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 495.609659][T12475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.659894][ T29] audit: type=1326 audit(1728140075.137:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12473 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 495.729315][ T29] audit: type=1326 audit(1728140075.137:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12473 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 495.752583][ T29] audit: type=1326 audit(1728140075.147:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12473 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 495.774685][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.781738][ T29] audit: type=1326 audit(1728140075.147:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12473 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 495.803895][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.828196][ T29] audit: type=1326 audit(1728140075.147:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12473 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 495.860258][ T29] audit: type=1326 audit(1728140075.147:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12473 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 495.911395][ T29] audit: type=1326 audit(1728140075.147:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12473 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 496.520894][ T70] bond0 (unregistering): Released all slaves [ 496.551709][T12474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1466'. [ 496.566609][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 496.736155][T12492] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 496.857921][T12467] chnl_net:caif_netlink_parms(): no params data found [ 497.055324][T12467] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.070765][T12467] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.087797][T12467] bridge_slave_0: entered allmulticast mode [ 497.115773][T12467] bridge_slave_0: entered promiscuous mode [ 497.130441][T12467] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.150566][T12467] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.159802][T12467] bridge_slave_1: entered allmulticast mode [ 497.167468][T12467] bridge_slave_1: entered promiscuous mode [ 497.185193][ T5237] Bluetooth: hci2: command tx timeout [ 497.304714][ T70] hsr_slave_0: left promiscuous mode [ 497.323065][ T70] hsr_slave_1: left promiscuous mode [ 497.360025][ T70] veth1_macvtap: left promiscuous mode [ 497.384099][ T70] veth0_macvtap: left promiscuous mode [ 497.408350][ T70] veth1_vlan: left promiscuous mode [ 497.414133][ T70] veth0_vlan: left promiscuous mode [ 497.501500][ T5243] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 497.707943][ T5243] usb 5-1: Using ep0 maxpacket: 16 [ 497.722119][ T5243] usb 5-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 497.733075][ T5243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.747912][ T5249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 497.757959][ T5243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10 [ 497.771389][ T5249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 497.781213][ T5249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 497.795251][ T5249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 497.806468][ T5249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 497.814044][ T5243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024 [ 497.838508][ T5243] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.838872][ T5249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 497.893005][ T5243] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 497.924917][ T5243] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 497.936699][ T5243] usb 5-1: Manufacturer: syz [ 497.966298][ T5243] usb 5-1: config 0 descriptor?? [ 497.975948][T12503] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 498.050920][ T5286] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 498.213479][ T5286] usb 2-1: Using ep0 maxpacket: 8 [ 498.221675][T12503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.228722][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 498.249129][ T5286] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 498.258725][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.261205][T12503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.286871][ T5286] usb 2-1: config 0 descriptor?? [ 498.307116][ T5243] mceusb 5-1:0.0: mceusb_dev_probe: device setup failed! [ 498.324451][ T5243] mceusb 5-1:0.0: probe with driver mceusb failed with error -12 [ 498.351716][ T5243] usb 5-1: USB disconnect, device number 49 [ 498.504721][ T5286] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 498.935912][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 499.225755][ T1848] usb 2-1: USB disconnect, device number 43 [ 499.253955][ T1848] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 499.265939][ T5249] Bluetooth: hci2: command tx timeout [ 499.471265][T12467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.512965][T12467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.587943][T12530] netlink: 'syz.1.1477': attribute type 1 has an invalid length. [ 499.624384][T12530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 499.696862][T12467] team0: Port device team_slave_0 added [ 499.714557][T12467] team0: Port device team_slave_1 added [ 499.833497][T12467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.840892][T12467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.874505][T12467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.900843][ T5249] Bluetooth: hci4: command tx timeout [ 499.942223][T12467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.949229][T12467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.975255][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.991059][T12467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.170263][T12467] hsr_slave_0: entered promiscuous mode [ 500.182740][T12467] hsr_slave_1: entered promiscuous mode [ 500.345917][ T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.424185][T12521] chnl_net:caif_netlink_parms(): no params data found [ 500.588946][ T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.722255][ T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.758285][T12560] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1483'. [ 500.868210][ T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.992829][T12521] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.000065][T12521] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.009499][T12573] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1487'. [ 501.017743][T12521] bridge_slave_0: entered allmulticast mode [ 501.026289][T12573] netlink: del zone limit has 8 unknown bytes [ 501.036783][T12521] bridge_slave_0: entered promiscuous mode [ 501.122249][T12521] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.131262][T12521] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.146266][T12521] bridge_slave_1: entered allmulticast mode [ 501.162035][T12521] bridge_slave_1: entered promiscuous mode [ 501.176407][T12578] xt_TCPMSS: Only works on TCP SYN packets [ 501.341429][T12521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.351066][ T5249] Bluetooth: hci2: command tx timeout [ 501.392156][T12521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.708173][T12521] team0: Port device team_slave_0 added [ 501.730129][ T70] bridge_slave_1: left allmulticast mode [ 501.751681][ T70] bridge_slave_1: left promiscuous mode [ 501.758779][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.779375][ T70] bridge_slave_0: left allmulticast mode [ 501.797223][ T70] bridge_slave_0: left promiscuous mode [ 501.808365][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.916167][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.922767][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.990861][ T5249] Bluetooth: hci4: command tx timeout [ 502.369251][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.384138][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.396161][ T70] bond0 (unregistering): Released all slaves [ 502.414119][T12521] team0: Port device team_slave_1 added [ 502.725525][T12521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.752035][T12521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.778078][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.795568][T12521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.812694][T12521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.819948][T12521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.849925][T12521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.860857][ T5284] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 502.925997][T12619] FAULT_INJECTION: forcing a failure. [ 502.925997][T12619] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 502.939698][T12619] CPU: 0 UID: 0 PID: 12619 Comm: syz.1.1496 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 502.950559][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 502.960656][T12619] Call Trace: [ 502.964047][T12619] [ 502.967006][T12619] dump_stack_lvl+0x241/0x360 [ 502.971711][T12619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.976948][T12619] ? __pfx__printk+0x10/0x10 [ 502.981574][T12619] ? __lock_acquire+0x1384/0x2050 [ 502.986640][T12619] should_fail_ex+0x3b0/0x4e0 [ 502.991386][T12619] prepare_alloc_pages+0x1da/0x5d0 [ 502.996537][T12619] __alloc_pages_noprof+0x166/0x6c0 [ 503.001764][T12619] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 503.007523][T12619] alloc_pages_mpol_noprof+0x3e8/0x680 [ 503.013019][T12619] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 503.019027][T12619] vma_alloc_folio_noprof+0x12e/0x230 [ 503.024426][T12619] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 503.030341][T12619] ? do_raw_spin_unlock+0x13c/0x8b0 [ 503.035601][T12619] folio_prealloc+0x31/0x170 [ 503.040211][T12619] do_wp_page+0x11c4/0x52d0 [ 503.044751][T12619] ? __pfx_do_wp_page+0x10/0x10 [ 503.049632][T12619] ? __pfx_lock_acquire+0x10/0x10 [ 503.054696][T12619] ? do_raw_spin_lock+0x14f/0x370 [ 503.059755][T12619] ? is_bpf_text_address+0x26/0x2a0 [ 503.064977][T12619] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 503.071246][T12619] handle_pte_fault+0x10e3/0x6800 [ 503.076380][T12619] ? mark_lock+0x9a/0x360 [ 503.080744][T12619] ? __lock_acquire+0x1384/0x2050 [ 503.085796][T12619] ? mark_lock+0x9a/0x360 [ 503.090142][T12619] ? __pfx_handle_pte_fault+0x10/0x10 [ 503.095540][T12619] ? __lock_acquire+0x1384/0x2050 [ 503.100621][T12619] ? mt_find+0x2a9/0x920 [ 503.104898][T12619] ? __pfx_lock_release+0x10/0x10 [ 503.109986][T12619] handle_mm_fault+0x1106/0x1bb0 [ 503.114956][T12619] ? mt_find+0x2a9/0x920 [ 503.119246][T12619] ? __pfx_handle_mm_fault+0x10/0x10 [ 503.124591][T12619] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 503.130950][T12619] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 503.136263][T12619] exc_page_fault+0x2b9/0x8c0 [ 503.141122][T12619] asm_exc_page_fault+0x26/0x30 [ 503.146028][T12619] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 503.151855][T12619] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 503.171479][T12619] RSP: 0018:ffffc90004827718 EFLAGS: 00050206 [ 503.177568][T12619] RAX: ffffffff84b94f01 RBX: 0000000020004540 RCX: 000000000000008e [ 503.185567][T12619] RDX: 0000000000000000 RSI: ffff888058ba6702 RDI: 0000000020004540 [ 503.193584][T12619] RBP: ffffc90004827898 R08: ffff888058ba678f R09: 1ffff1100b174cf1 [ 503.201577][T12619] R10: dffffc0000000000 R11: ffffed100b174cf2 R12: 000000000000008e [ 503.209595][T12619] R13: ffff888058ba6702 R14: ffffc90004827bb8 R15: 1ffff92000904f77 [ 503.217592][T12619] ? _copy_to_iter+0x201/0x1d60 [ 503.222473][T12619] _copy_to_iter+0x257/0x1d60 [ 503.227167][T12619] ? __virt_addr_valid+0x183/0x530 [ 503.232294][T12619] ? __skb_try_recv_datagram+0x49a/0x6a0 [ 503.237989][T12619] ? __pfx_lock_release+0x10/0x10 [ 503.243051][T12619] ? __pfx__copy_to_iter+0x10/0x10 [ 503.248184][T12619] ? __virt_addr_valid+0x183/0x530 [ 503.253312][T12619] ? __virt_addr_valid+0x183/0x530 [ 503.258446][T12619] ? __virt_addr_valid+0x45f/0x530 [ 503.263581][T12619] ? __phys_addr_symbol+0x2f/0x70 [ 503.268623][T12619] ? __check_object_size+0x48e/0x900 [ 503.273932][T12619] __skb_datagram_iter+0x107/0x900 [ 503.279076][T12619] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 503.284757][T12619] skb_copy_datagram_iter+0xd1/0x250 [ 503.290069][T12619] packet_recvmsg+0x819/0x1ef0 [ 503.294892][T12619] ? aa_file_perm+0x3ef/0xf50 [ 503.299681][T12619] ? __pfx_packet_recvmsg+0x10/0x10 [ 503.304908][T12619] ? __pfx_aa_sk_perm+0x10/0x10 [ 503.309785][T12619] ? __pfx_lock_acquire+0x10/0x10 [ 503.314841][T12619] ? aa_sock_msg_perm+0x91/0x160 [ 503.319805][T12619] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 503.325116][T12619] ? __pfx_packet_recvmsg+0x10/0x10 [ 503.330344][T12619] sock_recvmsg+0x22f/0x280 [ 503.334876][T12619] sock_read_iter+0x2c4/0x3d0 [ 503.339580][T12619] ? __pfx_sock_read_iter+0x10/0x10 [ 503.344813][T12619] ? bpf_lsm_file_permission+0x9/0x10 [ 503.350206][T12619] ? security_file_permission+0x74/0x280 [ 503.355869][T12619] vfs_read+0x9bb/0xbc0 [ 503.360051][T12619] ? __pfx_lock_release+0x10/0x10 [ 503.365145][T12619] ? __pfx_vfs_read+0x10/0x10 [ 503.369863][T12619] ? fdget_pos+0x19a/0x320 [ 503.374303][T12619] ksys_read+0x183/0x2b0 [ 503.378585][T12619] ? __pfx_ksys_read+0x10/0x10 [ 503.383373][T12619] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 503.390008][T12619] ? lockdep_hardirqs_on+0x99/0x150 [ 503.395241][T12619] __do_fast_syscall_32+0xb4/0x110 [ 503.400372][T12619] ? exc_page_fault+0x590/0x8c0 [ 503.405249][T12619] do_fast_syscall_32+0x34/0x80 [ 503.410206][T12619] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 503.416559][T12619] RIP: 0023:0xf7fb7579 [ 503.420640][T12619] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 503.440356][T12619] RSP: 002b:00000000f573656c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 503.448875][T12619] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020004540 [ 503.456862][T12619] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.464849][T12619] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 503.472920][T12619] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 503.480903][T12619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 503.488923][T12619] [ 503.502585][ T5249] Bluetooth: hci2: command tx timeout [ 503.522491][ T5284] usb 5-1: Using ep0 maxpacket: 32 [ 503.536704][ T5284] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 503.546420][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.577231][ T5284] usb 5-1: config 0 descriptor?? [ 503.639187][ T5284] gspca_main: sq930x-2.14.0 probing 041e:403c [ 503.650048][ T70] hsr_slave_0: left promiscuous mode [ 503.658718][ T70] hsr_slave_1: left promiscuous mode [ 503.690763][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.698279][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.732934][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.749764][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.848993][ T70] team_slave_0: left promiscuous mode [ 503.854583][ T70] team_slave_1: left promiscuous mode [ 503.869961][ T70] veth1_macvtap: left promiscuous mode [ 503.881370][ T70] veth0_macvtap: left promiscuous mode [ 503.891308][ T70] veth1_vlan: left promiscuous mode [ 503.896689][ T70] veth0_vlan: left promiscuous mode [ 504.061693][ T5249] Bluetooth: hci4: command tx timeout [ 504.163468][ T5284] gspca_sq930x: reg_r 001f failed -110 [ 504.169149][ T5284] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 504.630686][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 504.630708][ T29] audit: type=1326 audit(1728140084.217:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12621 comm="syz.0.1497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 504.760315][ T29] audit: type=1326 audit(1728140084.227:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12621 comm="syz.0.1497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 504.786225][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.793360][ T29] audit: type=1326 audit(1728140084.227:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12621 comm="syz.0.1497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 504.826971][ T29] audit: type=1326 audit(1728140084.227:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12621 comm="syz.0.1497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 504.898603][ T29] audit: type=1326 audit(1728140084.227:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12621 comm="syz.0.1497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 504.920803][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.948334][ T29] audit: type=1326 audit(1728140084.227:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12621 comm="syz.0.1497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 504.970520][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.982947][ T29] audit: type=1326 audit(1728140084.227:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12621 comm="syz.0.1497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 505.005051][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.022659][ T29] audit: type=1326 audit(1728140084.227:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12621 comm="syz.0.1497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 505.052275][ T29] audit: type=1326 audit(1728140084.227:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12621 comm="syz.0.1497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 505.074440][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.087086][ T29] audit: type=1326 audit(1728140084.227:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12621 comm="syz.0.1497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 505.560195][ T70] team0 (unregistering): Port device team_slave_1 removed [ 505.637037][ T70] team0 (unregistering): Port device team_slave_0 removed [ 505.942873][ T1848] usb 5-1: USB disconnect, device number 50 [ 506.150152][ T5249] Bluetooth: hci4: command tx timeout [ 506.212221][T12652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1501'. [ 506.397481][T12634] team_slave_0: entered promiscuous mode [ 506.403375][T12634] team_slave_1: entered promiscuous mode [ 506.447816][T12648] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.455333][T12648] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.497318][T12648] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.504882][T12648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.514230][T12648] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.521457][T12648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.538953][T12648] team0: Port device bridge0 added [ 506.556938][T12467] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 506.596493][T12467] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 506.615271][T12467] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 506.615372][T12656] netlink: 'syz.1.1502': attribute type 9 has an invalid length. [ 506.656803][T12521] hsr_slave_0: entered promiscuous mode [ 506.666789][T12656] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1502'. [ 506.688158][T12521] hsr_slave_1: entered promiscuous mode [ 506.694811][T12521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.702670][T12521] Cannot create hsr debugfs directory [ 506.715370][T12467] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 506.832234][T12657] netlink: 'syz.1.1502': attribute type 9 has an invalid length. [ 506.870015][T12657] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1502'. [ 508.278728][T12467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.320237][T12467] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.344924][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1518'. [ 508.426318][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.433555][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.527039][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.534276][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.878928][T12521] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 508.897248][T12521] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 508.929076][T12521] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 508.962777][T12521] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 509.009994][T12467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.220897][T12467] veth0_vlan: entered promiscuous mode [ 509.313937][T12467] veth1_vlan: entered promiscuous mode [ 509.339412][T12715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1512'. [ 509.358857][T12521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.452780][T12521] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.500259][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.507499][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.541374][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.548661][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.590149][T12467] veth0_macvtap: entered promiscuous mode [ 509.639452][T12467] veth1_macvtap: entered promiscuous mode [ 509.748131][T12467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.789726][T12467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.813421][T12467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.841550][T12467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.866401][T12467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.886103][T12467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.907274][T12467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.930507][T12467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.962171][T12467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.064292][T12730] team_slave_0: entered promiscuous mode [ 510.070540][T12730] team_slave_1: entered promiscuous mode [ 510.076284][T12730] bridge0: entered promiscuous mode [ 510.121153][T12467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.146377][T12467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.159817][T12467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.176621][T12467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.186589][T12467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.200508][T12467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.210371][T12467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.229567][T12467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.250440][T12467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.299434][T12467] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.330967][T12467] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.339740][T12467] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.410543][T12467] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.600709][T12754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1524'. [ 510.735706][T12757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1523'. [ 510.839405][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.900645][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.950665][T12521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.988796][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.003907][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.124536][T12521] veth0_vlan: entered promiscuous mode [ 511.146300][T12521] veth1_vlan: entered promiscuous mode [ 511.228090][T12521] veth0_macvtap: entered promiscuous mode [ 511.245637][T12521] veth1_macvtap: entered promiscuous mode [ 511.289175][T12521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.313122][T12521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.338104][T12521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.360737][T12521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.404328][T12521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.435032][T12521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.456991][T12521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.477531][T12521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.508578][T12521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.532336][T12521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.563100][T12521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.583283][T12521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.616757][T12521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.650653][T12521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.680516][T12521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.717099][T12521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.738180][T12521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.760602][T12521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.784551][T12521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.810557][T12521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.833774][T12521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.867258][T12521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.985231][T12521] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.002913][T12521] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.012230][T12521] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.021768][T12521] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.191780][T12807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1533'. [ 512.207216][T11852] bridge0: port 3(syz_tun) entered disabled state [ 512.285160][T11852] syz_tun (unregistering): left allmulticast mode [ 512.295921][T11852] syz_tun (unregistering): left promiscuous mode [ 512.311986][T11852] bridge0: port 3(syz_tun) entered disabled state [ 512.745955][ T2946] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.036485][ T2946] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.288342][ T2946] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.357551][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1539'. [ 513.480813][ T5301] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 513.511635][T12846] FAULT_INJECTION: forcing a failure. [ 513.511635][T12846] name failslab, interval 1, probability 0, space 0, times 0 [ 513.516084][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.555198][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.573374][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 513.583512][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 513.595146][T12846] CPU: 0 UID: 0 PID: 12846 Comm: syz.0.1541 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 513.605996][T12846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 513.616098][T12846] Call Trace: [ 513.619506][T12846] [ 513.622477][T12846] dump_stack_lvl+0x241/0x360 [ 513.627205][T12846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.632449][T12846] ? __pfx__printk+0x10/0x10 [ 513.637101][T12846] ? ref_tracker_alloc+0x332/0x490 [ 513.642264][T12846] should_fail_ex+0x3b0/0x4e0 [ 513.646994][T12846] ? skb_clone+0x20c/0x390 [ 513.651447][T12846] should_failslab+0xac/0x100 [ 513.656171][T12846] ? skb_clone+0x20c/0x390 [ 513.660636][T12846] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 513.666067][T12846] skb_clone+0x20c/0x390 [ 513.670322][T12846] __netlink_deliver_tap+0x3cc/0x7c0 [ 513.675649][T12846] ? netlink_deliver_tap+0x2e/0x1b0 [ 513.680900][T12846] netlink_deliver_tap+0x19d/0x1b0 [ 513.686051][T12846] netlink_unicast+0x7c4/0x990 [ 513.690853][T12846] ? __pfx_netlink_unicast+0x10/0x10 [ 513.696173][T12846] ? __virt_addr_valid+0x183/0x530 [ 513.701340][T12846] ? __check_object_size+0x48e/0x900 [ 513.706685][T12846] netlink_sendmsg+0x8e4/0xcb0 [ 513.711488][T12846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.716816][T12846] ? __pfx_lock_release+0x10/0x10 [ 513.721875][T12846] ? aa_sock_msg_perm+0x91/0x160 [ 513.726866][T12846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.732198][T12846] __sock_sendmsg+0x221/0x270 [ 513.736921][T12846] ____sys_sendmsg+0x52a/0x7e0 [ 513.741709][T12846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.747129][T12846] __sys_sendmsg+0x292/0x380 [ 513.751760][T12846] ? __pfx___sys_sendmsg+0x10/0x10 [ 513.756913][T12846] ? __pfx_vfs_write+0x10/0x10 [ 513.761711][T12846] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 513.768324][T12846] ? lockdep_hardirqs_on+0x99/0x150 [ 513.773562][T12846] __do_fast_syscall_32+0xb4/0x110 [ 513.778720][T12846] ? exc_page_fault+0x590/0x8c0 [ 513.783637][T12846] do_fast_syscall_32+0x34/0x80 [ 513.788514][T12846] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 513.790908][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 513.794856][T12846] RIP: 0023:0xf73cd579 [ 513.794882][T12846] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 513.794904][T12846] RSP: 002b:00000000f56b656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 513.828276][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 513.833979][T12846] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001380 [ 513.834003][T12846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 513.834018][T12846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 513.834033][T12846] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 513.834048][T12846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 513.834080][T12846] [ 513.834242][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.847846][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 513.901846][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 513.909386][ T5301] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.924747][ T5301] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 513.995482][ T5301] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 514.027154][ T5301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 514.056253][ T2946] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.068539][ T5301] usb 4-1: SerialNumber: syz [ 514.133301][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.160219][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.387003][ T5301] usb 4-1: 0:2 : does not exist [ 514.393471][ T5301] usb 4-1: unit 5: unexpected type 0x0c [ 514.456421][ T5301] usb 4-1: USB disconnect, device number 57 [ 514.544169][T11966] udevd[11966]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 514.566623][ T2946] bridge_slave_1: left allmulticast mode [ 514.580956][ T2946] bridge_slave_1: left promiscuous mode [ 514.597727][ T2946] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.614604][ T2946] bridge_slave_0: left allmulticast mode [ 514.615407][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 514.615425][ T29] audit: type=1800 audit(1728140094.197:1346): pid=12873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1473" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 514.631083][ T2946] bridge_slave_0: left promiscuous mode [ 514.659919][T12873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.698008][T12873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.708730][ T2946] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.246169][T12888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1546'. [ 515.657761][ T2946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.669990][ T2946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.685815][ T2946] bond0 (unregistering): Released all slaves [ 515.939949][T12850] chnl_net:caif_netlink_parms(): no params data found [ 515.981134][ T5237] Bluetooth: hci5: command tx timeout [ 516.286951][T12873] syz.2.1473 (12873) used greatest stack depth: 18360 bytes left [ 516.501178][ T2946] hsr_slave_0: left promiscuous mode [ 516.534749][ T2946] hsr_slave_1: left promiscuous mode [ 516.580338][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.600698][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.631622][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.649369][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.656723][ T5284] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 516.737891][ T2946] veth1_macvtap: left promiscuous mode [ 516.756918][ T2946] veth0_macvtap: left promiscuous mode [ 516.777269][ T2946] veth1_vlan: left promiscuous mode [ 516.810611][ T2946] veth0_vlan: left promiscuous mode [ 516.815718][ T5284] usb 2-1: Using ep0 maxpacket: 16 [ 516.832160][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.844384][T12937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1558'. [ 516.854201][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.871892][ T5284] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 516.885436][ T5284] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 516.895817][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.917412][ T5284] usb 2-1: config 0 descriptor?? [ 517.000649][ T5286] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 517.190726][ T5286] usb 4-1: Using ep0 maxpacket: 32 [ 517.198124][ T5286] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 517.212101][ T5286] usb 4-1: config 0 has no interface number 0 [ 517.219317][ T5286] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 517.232889][ T5286] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 517.252691][ T5286] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 517.265468][ T5286] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 517.276657][ T5286] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 517.287208][ T5286] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 517.305254][ T5286] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 517.315005][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.323949][ T5286] usb 4-1: Product: syz [ 517.328358][ T5286] usb 4-1: Manufacturer: syz [ 517.333263][ T5286] usb 4-1: SerialNumber: syz [ 517.347434][ T5284] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 517.357717][ T5286] usb 4-1: config 0 descriptor?? [ 517.368817][T12934] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 517.376864][T12934] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 517.390098][ T5284] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 517.419908][ T5284] microsoft 0003:045E:07DA.0010: no inputs found [ 517.432180][ T5284] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 517.598967][ T5286] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 517.622440][T12951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.645896][T12951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.661217][T12920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.671319][T12920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.796459][ T5286] etas_es58x 4-1:0.219: could not parse product info: '놹' [ 517.928140][ T2946] team0 (unregistering): Port device team_slave_1 removed [ 517.987334][ T2946] team0 (unregistering): Port device team_slave_0 removed [ 517.999602][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'. [ 518.061549][ T5237] Bluetooth: hci5: command tx timeout [ 518.084907][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'. [ 518.624563][T12850] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.637496][T12850] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.647830][T12850] bridge_slave_0: entered allmulticast mode [ 518.669582][T12850] bridge_slave_0: entered promiscuous mode [ 518.685178][T12850] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.693630][T12850] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.701665][T12850] bridge_slave_1: entered allmulticast mode [ 518.709335][T12850] bridge_slave_1: entered promiscuous mode [ 518.801489][ T5283] usb 2-1: reset high-speed USB device number 44 using dummy_hcd [ 518.824514][ T5286] usb 4-1: USB disconnect, device number 58 [ 518.844186][ T5286] etas_es58x 4-1:0.219: Disconnecting syz syz [ 518.988694][T12955] team_slave_0: entered promiscuous mode [ 518.994467][T12955] team_slave_1: entered promiscuous mode [ 519.011707][T12850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.075590][T12850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.233437][T12850] team0: Port device team_slave_0 added [ 519.263346][T12850] team0: Port device team_slave_1 added [ 519.290946][T12962] netlink: 'syz.2.1563': attribute type 3 has an invalid length. [ 519.346284][T12850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.353752][T12850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.382519][T12850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.403982][T12850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.420680][T12850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.461380][T12850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.622706][T12850] hsr_slave_0: entered promiscuous mode [ 519.650893][T12850] hsr_slave_1: entered promiscuous mode [ 519.658066][T12850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.668732][T12850] Cannot create hsr debugfs directory [ 519.745116][ T5287] usb 2-1: USB disconnect, device number 44 [ 520.141195][ T5237] Bluetooth: hci5: command tx timeout [ 520.962175][T12998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1572'. [ 521.015876][ T5301] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 521.280538][ T5301] usb 4-1: device descriptor read/64, error -71 [ 521.330790][T12850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 521.353370][T12850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 521.388539][T12850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 521.420375][T12850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 521.530640][ T5301] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 521.609658][T12850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.648280][T13028] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.655868][T13028] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.663855][ T5301] usb 4-1: device descriptor read/64, error -71 [ 521.735988][T13028] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.743536][T13028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.752458][T13028] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.759645][T13028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.771637][ T5301] usb usb4-port1: attempt power cycle [ 521.814068][T13028] bridge0: entered promiscuous mode [ 521.820246][T13028] team0: Port device bridge0 added [ 521.855932][T12850] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.887420][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.894658][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.969296][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.976532][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.109593][T12850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.120646][ T5301] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 522.159164][ T5301] usb 4-1: device descriptor read/8, error -71 [ 522.221043][ T5237] Bluetooth: hci5: command tx timeout [ 522.234086][T12850] veth0_vlan: entered promiscuous mode [ 522.298512][T12850] veth1_vlan: entered promiscuous mode [ 522.447071][T12850] veth0_macvtap: entered promiscuous mode [ 522.470749][ T5301] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 522.477318][T12850] veth1_macvtap: entered promiscuous mode [ 522.491852][ T5301] usb 4-1: device descriptor read/8, error -71 [ 522.519433][T12850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.538120][T12850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.587555][T12850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.600882][ T5301] usb usb4-port1: unable to enumerate USB device [ 522.611537][T12850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.647636][T12850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.678046][T12850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.706677][T12850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.737288][T12850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.750987][T12850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.761803][T12850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.773446][T12850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.788595][T13065] IPv6: sit1: Disabled Multicast RS [ 522.870297][T12850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.943651][T12850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.995385][T12850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.058143][T12850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.104257][T12850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.144830][ T29] audit: type=1326 audit(1728140102.737:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 523.186556][T12850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.247868][T12850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.289536][ T29] audit: type=1326 audit(1728140102.737:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 523.344330][T12850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.386329][T12850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.438383][ T29] audit: type=1326 audit(1728140102.767:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 523.473556][T12850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.532039][T12850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.597505][ T29] audit: type=1326 audit(1728140102.767:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 523.753656][ T29] audit: type=1326 audit(1728140102.777:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 523.776797][ T29] audit: type=1326 audit(1728140102.777:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 523.799983][ T29] audit: type=1326 audit(1728140102.777:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 523.822654][ T29] audit: type=1326 audit(1728140102.777:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 523.845079][ T29] audit: type=1326 audit(1728140102.777:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 523.867330][ T29] audit: type=1326 audit(1728140102.777:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 523.951214][ T5237] Bluetooth: hci2: unexpected cc 0x2003 length: 1 < 9 [ 523.961780][T12850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.970622][T12850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.981105][T12850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.990304][T12850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.262812][T13108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1590'. [ 524.464692][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.472848][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.569383][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.586909][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.209511][T13133] FAULT_INJECTION: forcing a failure. [ 525.209511][T13133] name failslab, interval 1, probability 0, space 0, times 0 [ 525.240616][T13133] CPU: 1 UID: 0 PID: 13133 Comm: syz.1.1600 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 525.251475][T13133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 525.261577][T13133] Call Trace: [ 525.264901][T13133] [ 525.267878][T13133] dump_stack_lvl+0x241/0x360 [ 525.272626][T13133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.277876][T13133] ? __pfx__printk+0x10/0x10 [ 525.282536][T13133] ? fs_reclaim_acquire+0x93/0x140 [ 525.287704][T13133] ? __pfx___might_resched+0x10/0x10 [ 525.293055][T13133] should_fail_ex+0x3b0/0x4e0 [ 525.297796][T13133] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 525.303577][T13133] should_failslab+0xac/0x100 [ 525.308310][T13133] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 525.314137][T13133] __kmalloc_noprof+0xd8/0x400 [ 525.318966][T13133] tomoyo_realpath_from_path+0xcf/0x5e0 [ 525.324604][T13133] tomoyo_path_number_perm+0x23a/0x880 [ 525.330127][T13133] ? tomoyo_path_number_perm+0x208/0x880 [ 525.335810][T13133] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 525.341932][T13133] ? __pfx_lock_acquire+0x10/0x10 [ 525.347046][T13133] ? __fget_files+0x29/0x470 [ 525.351665][T13133] ? __fget_files+0x3f3/0x470 [ 525.356410][T13133] security_file_ioctl_compat+0xc6/0x2a0 [ 525.362073][T13133] __se_compat_sys_ioctl+0xd6/0xc90 [ 525.367314][T13133] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 525.373167][T13133] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 525.379178][T13133] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 525.385542][T13133] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 525.392160][T13133] ? lockdep_hardirqs_on+0x99/0x150 [ 525.397411][T13133] __do_fast_syscall_32+0xb4/0x110 [ 525.402542][T13133] ? exc_page_fault+0x590/0x8c0 [ 525.407418][T13133] do_fast_syscall_32+0x34/0x80 [ 525.412284][T13133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 525.418632][T13133] RIP: 0023:0xf7fb7579 [ 525.422718][T13133] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 525.442360][T13133] RSP: 002b:00000000f573656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 525.450806][T13133] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000004140aecd [ 525.458790][T13133] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 525.466773][T13133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 525.474753][T13133] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 525.482733][T13133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 525.490728][T13133] [ 525.498681][T13133] ERROR: Out of memory at tomoyo_realpath_from_path. [ 526.023814][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1606'. [ 526.166350][T13158] team_slave_0: entered promiscuous mode [ 526.172169][T13158] team_slave_1: entered promiscuous mode [ 526.288721][T13163] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1612'. [ 526.581506][T13176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1618'. [ 526.702332][ T5236] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 526.773342][T13178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1619'. [ 526.871097][ T5236] usb 4-1: Using ep0 maxpacket: 16 [ 526.878446][ T5236] usb 4-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 526.890147][ T5236] usb 4-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 526.904041][ T5236] usb 4-1: config 0 interface 0 has no altsetting 0 [ 526.913790][ T5236] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 526.924919][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.941797][ T5236] usb 4-1: Product: syz [ 526.952879][ T5236] usb 4-1: Manufacturer: syz [ 526.963077][ T5236] usb 4-1: SerialNumber: syz [ 526.982994][ T5236] usb 4-1: config 0 descriptor?? [ 527.084215][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1622'. [ 527.227335][ T5236] usb 4-1: USB disconnect, device number 63 [ 527.233554][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1624'. [ 527.582167][T13207] FAULT_INJECTION: forcing a failure. [ 527.582167][T13207] name failslab, interval 1, probability 0, space 0, times 0 [ 527.595582][T13207] CPU: 1 UID: 0 PID: 13207 Comm: syz.1.1629 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 527.606405][T13207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 527.616511][T13207] Call Trace: [ 527.619837][T13207] [ 527.622810][T13207] dump_stack_lvl+0x241/0x360 [ 527.627537][T13207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.632784][T13207] ? __pfx__printk+0x10/0x10 [ 527.637494][T13207] should_fail_ex+0x3b0/0x4e0 [ 527.642263][T13207] ? dst_alloc+0x12b/0x190 [ 527.642742][T13209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1630'. [ 527.646698][T13207] should_failslab+0xac/0x100 [ 527.660359][T13207] ? dst_alloc+0x12b/0x190 [ 527.664865][T13207] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 527.670289][T13207] ? __pfx_rt6_find_cached_rt+0x10/0x10 [ 527.675964][T13207] ? __pfx_ip6_dst_gc+0x10/0x10 [ 527.680833][T13207] dst_alloc+0x12b/0x190 [ 527.685085][T13207] ip6_pol_route+0xb87/0x15d0 [ 527.689795][T13207] ? ip6_pol_route+0x198/0x15d0 [ 527.694694][T13207] ? __pfx_ip6_pol_route+0x10/0x10 [ 527.699874][T13207] fib6_rule_lookup+0x286/0x790 [ 527.704780][T13207] ? __pfx_validate_chain+0x10/0x10 [ 527.710020][T13207] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 527.715797][T13207] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 527.721237][T13207] ? dev_get_by_index_rcu+0xef/0x110 [ 527.726577][T13207] ? ip6_route_output_flags+0x30/0x610 [ 527.732091][T13207] ? l3mdev_link_scope_lookup+0x112/0x1c0 [ 527.737863][T13207] ? ip6_route_output_flags+0x30/0x610 [ 527.743382][T13207] ip6_route_output_flags+0x38e/0x610 [ 527.749083][T13207] ip6_dst_lookup_tail+0x1b3/0x14f0 [ 527.754356][T13207] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 527.760062][T13207] ? __pfx_lock_acquire+0x10/0x10 [ 527.765151][T13207] ip6_dst_lookup_flow+0xb9/0x180 [ 527.770249][T13207] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 527.775956][T13207] ip6_datagram_dst_update+0x7e5/0xe40 [ 527.781501][T13207] ? __pfx_ip6_datagram_dst_update+0x10/0x10 [ 527.787517][T13207] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 527.793538][T13207] ? __ip6_datagram_connect+0xb9c/0x1230 [ 527.799234][T13207] __ip6_datagram_connect+0xbfa/0x1230 [ 527.804851][T13207] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 527.810971][T13207] ? ip6_datagram_connect+0x20/0x50 [ 527.816189][T13207] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 527.821960][T13207] ? __pfx_inet_dgram_connect+0x10/0x10 [ 527.827536][T13207] ? __pfx_inet_dgram_connect+0x10/0x10 [ 527.833144][T13207] ip6_datagram_connect+0x2e/0x50 [ 527.838235][T13207] __sys_connect+0x2d1/0x300 [ 527.842978][T13207] ? __pfx___sys_connect+0x10/0x10 [ 527.848167][T13207] ? __secure_computing+0x125/0x370 [ 527.853427][T13207] __ia32_sys_connect+0x7a/0x90 [ 527.858339][T13207] __do_fast_syscall_32+0xb4/0x110 [ 527.863498][T13207] ? exc_page_fault+0x590/0x8c0 [ 527.868410][T13207] do_fast_syscall_32+0x34/0x80 [ 527.873306][T13207] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.879687][T13207] RIP: 0023:0xf7fb7579 [ 527.883802][T13207] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 527.903460][T13207] RSP: 002b:00000000f573656c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 527.911929][T13207] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 527.919980][T13207] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 527.928092][T13207] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.936115][T13207] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 527.944133][T13207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.952170][T13207] [ 528.244848][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1634'. [ 528.330675][ T5284] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 528.486379][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 528.546027][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 528.613307][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 528.657296][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 528.716402][ T5284] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 528.756733][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.834193][ T5284] usb 5-1: config 0 descriptor?? [ 529.319521][T13217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.443538][T13217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.056170][T13237] binder: BINDER_SET_CONTEXT_MGR already set [ 530.105958][T13237] binder: 13235:13237 ioctl 4018620d 20000040 returned -16 [ 530.173955][T13240] binder: 13235:13240 ioctl c0306201 200003c0 returned -22 [ 530.750751][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 530.750780][ T29] audit: type=1326 audit(1728140110.327:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.3.1636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 530.927074][ T29] audit: type=1326 audit(1728140110.377:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.3.1636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 530.949305][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.156359][ T29] audit: type=1326 audit(1728140110.377:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.3.1636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 531.335110][ T29] audit: type=1326 audit(1728140110.377:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.3.1636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 531.536220][ T29] audit: type=1326 audit(1728140110.377:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.3.1636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 531.743485][ T29] audit: type=1326 audit(1728140110.427:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.3.1636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 531.765757][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.955232][ T29] audit: type=1326 audit(1728140110.427:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.3.1636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 532.092562][ T29] audit: type=1326 audit(1728140110.437:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.3.1636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 532.211560][ T29] audit: type=1326 audit(1728140110.437:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.3.1636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 532.233737][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.349960][ T29] audit: type=1326 audit(1728140110.437:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.3.1636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 532.632163][ T5284] usbhid 5-1:0.0: can't add hid device: -71 [ 532.647353][ T5284] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 532.699865][ T5284] usb 5-1: USB disconnect, device number 51 [ 532.750659][ T5287] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 532.820013][T13263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1646'. [ 532.965833][ T5287] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 533.000140][ T5287] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 533.060045][ T5287] usb 4-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=b6.97 [ 533.088715][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.567157][ T5283] usb 4-1: USB disconnect, device number 64 [ 536.630683][ T5287] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 536.800604][ T5287] usb 4-1: Using ep0 maxpacket: 8 [ 536.817564][ T5287] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 536.829739][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.848507][ T5287] usb 4-1: Product: syz [ 536.855863][ T5287] usb 4-1: Manufacturer: syz [ 536.865788][ T5287] usb 4-1: SerialNumber: syz [ 536.881381][ T5287] usb 4-1: config 0 descriptor?? [ 536.901125][ T5287] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 538.463169][ T16] sched: DL replenish lagged too much [ 538.941906][ T5287] gspca_sonixj: reg_r err -32 [ 538.980694][ T5287] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 540.004591][ T5283] usb 4-1: USB disconnect, device number 65 [ 540.419175][T13289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1655'. [ 540.533833][ T5249] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 540.543889][ T5249] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 540.557413][ T5249] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 540.570955][ T5249] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 540.578875][ T5249] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 540.587652][ T5249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 542.620704][ T5237] Bluetooth: hci6: command tx timeout [ 542.878139][ T5249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 542.891361][ T5249] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 542.900877][ T5249] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 542.920955][ T5249] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 542.935109][ T5249] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 542.942878][ T5249] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 543.006442][ T5237] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 543.019893][ T5237] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 543.030781][ T5237] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 543.038873][ T5237] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 543.048043][ T5237] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 543.056743][ T5237] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 544.700627][ T5237] Bluetooth: hci6: command tx timeout [ 545.021107][ T5237] Bluetooth: hci7: command tx timeout [ 545.100657][ T5237] Bluetooth: hci8: command tx timeout [ 545.834791][ T5249] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 545.846164][ T5249] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 545.854521][ T5249] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 545.866606][ T5249] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 545.876426][ T5249] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 545.884250][ T5249] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 546.780704][ T5237] Bluetooth: hci6: command tx timeout [ 547.103222][ T5237] Bluetooth: hci7: command tx timeout [ 547.180723][ T5237] Bluetooth: hci8: command tx timeout [ 547.981357][ T5237] Bluetooth: hci9: command tx timeout [ 548.871019][ T5237] Bluetooth: hci6: command tx timeout [ 549.184294][ T5237] Bluetooth: hci7: command tx timeout [ 549.262819][ T5237] Bluetooth: hci8: command tx timeout [ 550.060728][ T5237] Bluetooth: hci9: command tx timeout [ 550.883677][ T5249] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 550.893984][ T5249] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 550.902809][ T5249] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 550.913717][ T5249] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 550.925775][ T5249] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 550.934944][ T5249] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 551.260825][ T5249] Bluetooth: hci7: command tx timeout [ 551.344102][ T5249] Bluetooth: hci8: command tx timeout [ 552.140713][ T5249] Bluetooth: hci9: command tx timeout [ 553.020678][ T5249] Bluetooth: hci10: command tx timeout [ 554.220912][ T5249] Bluetooth: hci9: command tx timeout [ 555.102094][ T5249] Bluetooth: hci10: command tx timeout [ 557.187957][ T5249] Bluetooth: hci10: command tx timeout [ 559.260801][ T5249] Bluetooth: hci10: command tx timeout [ 563.354460][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.360991][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.908254][ T5249] Bluetooth: hci0: command 0x0406 tx timeout [ 591.028036][ T5237] Bluetooth: hci1: command 0x0406 tx timeout [ 602.297752][ T5237] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 602.321034][ T5237] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 602.340827][ T5237] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 602.349232][ T5237] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 602.362421][ T5237] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 602.370177][ T5237] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 603.858736][ T5249] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 603.872188][ T5249] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 603.881651][ T5249] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 603.901995][ T5249] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 603.932528][T11907] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 603.943745][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 603.952572][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 603.963888][T11907] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 603.985625][T11907] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 603.994553][T11907] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 604.024590][ T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 604.033532][ T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 604.466362][ T54] Bluetooth: hci11: command tx timeout [ 606.060641][ T54] Bluetooth: hci12: command tx timeout [ 606.141002][ T54] Bluetooth: hci13: command tx timeout [ 606.549442][ T54] Bluetooth: hci11: command tx timeout [ 606.950145][ T5249] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 606.963729][ T5249] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 606.973267][ T5249] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 606.983799][ T5249] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 606.991993][ T5249] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 606.999515][ T5249] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 608.140743][ T54] Bluetooth: hci12: command tx timeout [ 608.220749][ T54] Bluetooth: hci13: command tx timeout [ 608.629435][ T54] Bluetooth: hci11: command tx timeout [ 609.100805][ T54] Bluetooth: hci14: command tx timeout [ 610.222116][ T54] Bluetooth: hci12: command tx timeout [ 610.311000][ T54] Bluetooth: hci13: command tx timeout [ 610.709431][ T54] Bluetooth: hci11: command tx timeout [ 610.979747][ T5249] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 610.990591][ T5249] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 611.000053][ T5249] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 611.008326][ T5249] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 611.019701][ T5249] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 611.027451][ T5249] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 611.180897][ T5249] Bluetooth: hci14: command tx timeout [ 612.300764][ T5249] Bluetooth: hci12: command tx timeout [ 612.380935][ T5249] Bluetooth: hci13: command tx timeout [ 613.100610][ T5249] Bluetooth: hci15: command tx timeout [ 613.261273][ T54] Bluetooth: hci14: command tx timeout [ 615.180793][ T54] Bluetooth: hci15: command tx timeout [ 615.340896][ T5249] Bluetooth: hci14: command tx timeout [ 617.260859][ T5249] Bluetooth: hci15: command tx timeout [ 619.340734][ T5249] Bluetooth: hci15: command tx timeout [ 621.754418][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 621.760561][ T5249] Bluetooth: hci4: command 0x0406 tx timeout [ 624.786900][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.800483][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 637.100745][T11907] Bluetooth: hci5: command 0x0406 tx timeout [ 662.709225][T11907] Bluetooth: hci6: command 0x0406 tx timeout [ 664.394743][T11907] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 664.412547][T11907] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 664.421856][T11907] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 664.435270][T11907] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 664.443266][T11907] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 664.451233][T11907] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 665.064591][ T5237] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 665.076551][ T5237] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 665.091475][ T5237] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 665.108747][ T54] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 665.118120][ T54] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 665.127393][ T54] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 665.164057][ T54] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 665.180800][ T54] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 665.191232][ T54] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 665.210948][ T54] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 665.219123][ T54] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 665.227153][ T54] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 666.540795][ T54] Bluetooth: hci16: command tx timeout [ 667.180612][ T54] Bluetooth: hci17: command tx timeout [ 667.260788][ T54] Bluetooth: hci18: command tx timeout [ 667.825915][ T54] Bluetooth: hci8: command 0x0406 tx timeout [ 667.833589][ T54] Bluetooth: hci7: command 0x0406 tx timeout [ 667.965254][T11907] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 667.978116][T11907] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 667.988923][T11907] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 667.997570][T11907] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 668.005874][T11907] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 668.015024][T11907] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 668.620710][T11907] Bluetooth: hci16: command tx timeout [ 669.260782][T11907] Bluetooth: hci17: command tx timeout [ 669.340568][T11907] Bluetooth: hci18: command tx timeout [ 670.060624][T11907] Bluetooth: hci19: command tx timeout [ 670.707856][T11907] Bluetooth: hci16: command tx timeout [ 671.341249][T11907] Bluetooth: hci17: command tx timeout [ 671.420644][T11907] Bluetooth: hci18: command tx timeout [ 671.862053][ T5249] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 671.878064][ T5249] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 671.887068][ T5249] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 671.897164][ T5249] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 671.906025][ T5249] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 671.914010][ T5249] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 672.140615][ T5249] Bluetooth: hci19: command tx timeout [ 672.780633][ T5249] Bluetooth: hci16: command tx timeout [ 672.947801][T11907] Bluetooth: hci9: command 0x0406 tx timeout [ 673.424552][T11907] Bluetooth: hci17: command tx timeout [ 673.500734][ T5237] Bluetooth: hci18: command tx timeout [ 673.980647][ T5237] Bluetooth: hci20: command tx timeout [ 674.220634][ T5237] Bluetooth: hci19: command tx timeout [ 676.061228][ T5237] Bluetooth: hci20: command tx timeout [ 676.300759][ T5237] Bluetooth: hci19: command tx timeout [ 678.065092][ T5237] Bluetooth: hci10: command 0x0406 tx timeout [ 678.140733][T11907] Bluetooth: hci20: command tx timeout [ 680.220645][T11907] Bluetooth: hci20: command tx timeout [ 681.740705][ T30] INFO: task syz.0.1637:13233 blocked for more than 143 seconds. [ 681.748734][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 681.795415][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 681.854428][ T30] task:syz.0.1637 state:D stack:23776 pid:13233 tgid:13233 ppid:11899 flags:0x20000004 [ 681.890615][ T30] Call Trace: [ 681.893990][ T30] [ 681.896969][ T30] __schedule+0x1895/0x4b30 [ 681.995424][ T30] ? __pfx___schedule+0x10/0x10 [ 682.050631][ T30] ? __pfx_lock_release+0x10/0x10 [ 682.055774][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 682.098695][ T30] ? schedule+0x90/0x320 [ 682.120621][ T30] schedule+0x14b/0x320 [ 682.124906][ T30] schedule_preempt_disabled+0x13/0x30 [ 682.140369][ T30] __mutex_lock+0x6a7/0xd70 [ 682.145394][ T30] ? __mutex_lock+0x52a/0xd70 [ 682.150133][ T30] ? raw_release+0x1b8/0x8b0 [ 682.160500][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 682.165634][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 682.178093][ T30] raw_release+0x1b8/0x8b0 [ 682.183679][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 682.199463][ T30] sock_close+0xbc/0x240 [ 682.205609][ T30] ? __pfx_sock_close+0x10/0x10 [ 682.218430][ T30] __fput+0x23f/0x880 [ 682.224247][ T30] task_work_run+0x24f/0x310 [ 682.228933][ T30] ? __pfx_task_work_run+0x10/0x10 [ 682.242951][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 682.248959][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 682.260544][ T30] __do_fast_syscall_32+0xc4/0x110 [ 682.265760][ T30] ? exc_page_fault+0x590/0x8c0 [ 682.278865][ T30] do_fast_syscall_32+0x34/0x80 [ 682.284282][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 682.299765][ T30] RIP: 0023:0xf73cd579 [ 682.306366][ T30] RSP: 002b:00000000f751fb1c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 682.324065][ T30] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 682.337216][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 682.348074][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 682.360535][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 682.368595][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 682.396117][ T30] [ 682.399429][ T30] INFO: task syz.2.1642:13251 blocked for more than 144 seconds. [ 682.416894][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 682.426801][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 682.440501][ T30] task:syz.2.1642 state:D stack:23664 pid:13251 tgid:13250 ppid:12521 flags:0x20004004 [ 682.458086][ T30] Call Trace: [ 682.470177][ T30] [ 682.480452][ T30] __schedule+0x1895/0x4b30 [ 682.485092][ T30] ? __pfx___schedule+0x10/0x10 [ 682.490097][ T30] ? __pfx_lock_release+0x10/0x10 [ 682.503894][ T30] ? schedule+0x90/0x320 [ 682.508251][ T30] schedule+0x14b/0x320 [ 682.517534][ T30] schedule_timeout+0xb0/0x310 [ 682.526741][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 682.536640][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 682.549512][ T30] ? wait_for_completion+0x2fe/0x620 [ 682.565402][ T30] ? wait_for_completion+0x2fe/0x620 [ 682.573983][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 682.579362][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 682.589904][ T30] ? wait_for_completion+0x2fe/0x620 [ 682.599586][ T30] wait_for_completion+0x355/0x620 [ 682.610466][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 682.616216][ T30] ? __flush_work+0xe7/0xc50 [ 682.629996][ T30] __flush_work+0xa37/0xc50 [ 682.634957][ T30] ? __flush_work+0xe7/0xc50 [ 682.639670][ T30] ? __pfx___flush_work+0x10/0x10 [ 682.650562][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 682.655967][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 682.669680][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 682.675282][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 682.687957][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 682.695884][ T30] ? notifier_call_chain+0x3bf/0x3e0 [ 682.710476][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 682.718225][ T30] ? __netdev_upper_dev_unlink+0x752/0x8e0 [ 682.732445][ T30] ? __pfx___netdev_upper_dev_unlink+0x10/0x10 [ 682.738722][ T30] unregister_netdevice_queue+0x303/0x370 [ 682.750988][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 682.757332][ T30] ? lockdep_rtnl_is_held+0x26/0x40 [ 682.769488][ T30] macsec_newlink+0xd5f/0x1100 [ 682.775921][ T30] ? __pfx_macsec_handle_frame+0x10/0x10 [ 682.789127][ T30] ? __pfx_macsec_newlink+0x10/0x10 [ 682.794930][ T30] ? read_word_at_a_time+0xe/0x20 [ 682.808972][ T30] ? sized_strscpy+0x8d/0x220 [ 682.814648][ T30] ? alloc_netdev_mqs+0xcda/0x1000 [ 682.828110][ T30] ? validate_linkmsg+0x71e/0x900 [ 682.833601][ T30] ? rtnl_create_link+0x91c/0xc20 [ 682.838700][ T30] ? __pfx_macsec_newlink+0x10/0x10 [ 682.850909][ T30] rtnl_newlink+0x1591/0x20a0 [ 682.855789][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 682.869612][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 682.876077][ T30] ? rcu_is_watching+0x15/0xb0 [ 682.888545][ T30] ? trace_contention_end+0x3c/0x120 [ 682.894850][ T30] ? __mutex_lock+0x2ef/0xd70 [ 682.899608][ T30] ? __pfx_lock_release+0x10/0x10 [ 682.910481][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 682.915607][ T30] rtnetlink_rcv_msg+0x73f/0xcf0 [ 682.929076][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 682.934702][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 682.940271][ T30] ? ref_tracker_free+0x643/0x7e0 [ 682.955413][ T30] netlink_rcv_skb+0x1e3/0x430 [ 682.960299][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 682.966350][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 682.979742][ T30] ? netlink_deliver_tap+0x5f/0x1b0 [ 682.986147][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 682.998854][ T30] netlink_unicast+0x7f6/0x990 [ 683.005751][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 683.019288][ T30] ? __virt_addr_valid+0x183/0x530 [ 683.028339][ T30] ? __check_object_size+0x48e/0x900 [ 683.040865][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 683.045731][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.057673][ T30] ? __pfx_lock_release+0x10/0x10 [ 683.064600][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 683.069621][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.080805][ T30] __sock_sendmsg+0x221/0x270 [ 683.085588][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 683.098507][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.108166][ T30] __sys_sendmsg+0x292/0x380 [ 683.120180][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 683.126755][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 683.140728][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 683.146026][ T30] __do_fast_syscall_32+0xb4/0x110 [ 683.158916][ T30] ? exc_page_fault+0x590/0x8c0 [ 683.164329][ T30] do_fast_syscall_32+0x34/0x80 [ 683.169250][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 683.180436][ T30] RIP: 0023:0xf7fd5579 [ 683.184585][ T30] RSP: 002b:00000000f575656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 683.202467][ T30] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000280 [ 683.219444][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 683.230059][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 683.245639][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 683.255346][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 683.272170][ T30] [ 683.275361][ T30] INFO: task syz.1.1643:13256 blocked for more than 144 seconds. [ 683.289961][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 683.298191][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 683.318121][ T30] task:syz.1.1643 state:D stack:24592 pid:13256 tgid:13254 ppid:11998 flags:0x20000004 [ 683.336790][ T30] Call Trace: [ 683.340157][ T30] [ 683.344602][ T30] __schedule+0x1895/0x4b30 [ 683.349215][ T30] ? __pfx___schedule+0x10/0x10 [ 683.362219][ T30] ? __pfx_lock_release+0x10/0x10 [ 683.367346][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 683.380143][ T30] ? schedule+0x90/0x320 [ 683.384881][ T30] schedule+0x14b/0x320 [ 683.389206][ T30] schedule_preempt_disabled+0x13/0x30 [ 683.400688][ T30] __mutex_lock+0x6a7/0xd70 [ 683.408852][ T30] ? __mutex_lock+0x52a/0xd70 [ 683.419876][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 683.437498][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 683.444296][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 683.449325][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 683.460449][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 683.466017][ T30] ? ref_tracker_free+0x643/0x7e0 [ 683.479121][ T30] netlink_rcv_skb+0x1e3/0x430 [ 683.484378][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 683.489912][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 683.502998][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 683.508394][ T30] netlink_unicast+0x7f6/0x990 [ 683.537152][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 683.546462][ T30] ? __virt_addr_valid+0x183/0x530 [ 683.556848][ T30] ? __check_object_size+0x48e/0x900 [ 683.566098][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 683.574945][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.580319][ T30] ? __pfx_lock_release+0x10/0x10 [ 683.589425][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 683.598592][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.609039][ T30] __sock_sendmsg+0x221/0x270 [ 683.617728][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 683.627986][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.639403][ T30] ? futex_wait+0x285/0x360 [ 683.648408][ T30] __sys_sendmsg+0x292/0x380 [ 683.657002][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 683.668700][ T30] ? arch_syscall_is_vdso_sigreturn+0x16a/0x1a0 [ 683.680296][ T30] ? syscall_user_dispatch+0x4e/0x90 [ 683.689823][ T30] __do_fast_syscall_32+0xb4/0x110 [ 683.698986][ T30] ? exc_page_fault+0x590/0x8c0 [ 683.707985][ T30] do_fast_syscall_32+0x34/0x80 [ 683.717500][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 683.730586][ T30] RIP: 0023:0xf7fb7579 [ 683.739379][ T30] RSP: 002b:00000000f573656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 683.760484][ T30] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000280 [ 683.768730][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 683.784880][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 683.796954][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 683.810616][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 683.818703][ T30] [ 683.830250][ T30] INFO: task syz.4.1650:13275 blocked for more than 145 seconds. [ 683.849820][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 683.859196][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 683.875922][ T30] task:syz.4.1650 state:D stack:26816 pid:13275 tgid:13274 ppid:12850 flags:0x20000004 [ 683.889032][ T30] Call Trace: [ 683.898600][ T30] [ 683.903164][ T30] __schedule+0x1895/0x4b30 [ 683.907769][ T30] ? __pfx___schedule+0x10/0x10 [ 683.919083][ T30] ? __pfx_lock_release+0x10/0x10 [ 683.927232][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 683.940612][ T30] ? schedule+0x90/0x320 [ 683.945051][ T30] schedule+0x14b/0x320 [ 683.949296][ T30] schedule_preempt_disabled+0x13/0x30 [ 683.968073][ T30] __mutex_lock+0x6a7/0xd70 [ 683.978474][ T30] ? __mutex_lock+0x52a/0xd70 [ 683.989273][ T30] ? raw_bind+0x99/0x770 [ 683.997637][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 684.006729][ T30] ? aa_sk_perm+0x96d/0xab0 [ 684.016552][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 684.025528][ T30] ? __might_fault+0xaa/0x120 [ 684.035801][ T30] raw_bind+0x99/0x770 [ 684.039971][ T30] __sys_bind+0x22d/0x2d0 [ 684.049234][ T30] ? __pfx___sys_bind+0x10/0x10 [ 684.059424][ T30] __ia32_sys_bind+0x7a/0x90 [ 684.068994][ T30] __do_fast_syscall_32+0xb4/0x110 [ 684.078107][ T30] ? exc_page_fault+0x590/0x8c0 [ 684.087478][ T30] do_fast_syscall_32+0x34/0x80 [ 684.097626][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 684.108024][ T30] RIP: 0023:0xf7fb3579 [ 684.116120][ T30] RSP: 002b:00000000f573656c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 684.128585][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 684.149018][ T30] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 684.157516][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 684.173127][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 684.186398][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 684.198945][ T30] [ 684.206028][ T30] [ 684.206028][ T30] Showing all locks held in the system: [ 684.219052][ T30] 3 locks held by kworker/u8:0/11: [ 684.230299][ T30] #0: ffff88802dd67148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 684.252245][ T30] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 684.275085][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 684.289112][ T30] 1 lock held by khungtaskd/30: [ 684.299271][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 684.314658][ T30] 4 locks held by kworker/u8:10/2994: [ 684.326936][ T30] #0: ffff888143e9d148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 684.343490][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 684.363987][ T30] #2: ffff88802754c388 (&wb->work_lock){..-.}-{2:2}, at: wb_workfn+0xfa7/0x1090 [ 684.377210][ T30] #3: ffff8880b872a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 684.390581][ T30] 2 locks held by getty/4998: [ 684.395335][ T30] #0: ffff88814c3770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 684.413271][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 684.434297][ T30] 3 locks held by kworker/0:3/5236: [ 684.441517][ T30] 3 locks held by kworker/1:4/5284: [ 684.446779][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 684.469078][ T30] #1: ffffc90004417d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 684.491245][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 684.507333][ T30] 2 locks held by syz.0.1637/13233: [ 684.515500][ T30] #0: ffff888025aba608 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 684.530516][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 684.539536][ T30] 2 locks held by syz.2.1642/13251: [ 684.565234][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 684.578673][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 684.595453][ T30] 1 lock held by syz.1.1643/13256: [ 684.604654][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 684.618145][ T30] 1 lock held by syz.4.1650/13275: [ 684.627526][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: raw_bind+0x99/0x770 [ 684.640612][ T30] 1 lock held by syz.3.1655/13288: [ 684.654592][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 684.668340][ T30] 2 locks held by syz-executor/13291: [ 684.680095][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 684.692582][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 684.710031][ T30] 2 locks held by syz-executor/13296: [ 684.719435][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 684.734149][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 684.749189][ T30] 2 locks held by syz-executor/13297: [ 684.761311][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 684.779964][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 684.800295][ T30] 2 locks held by syz-executor/13300: [ 684.806130][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 684.820433][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 684.837486][ T30] 2 locks held by syz-executor/13305: [ 684.844664][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 684.860532][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 684.878762][ T30] 2 locks held by syz-executor/13313: [ 684.886311][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 684.900748][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 684.917553][ T30] 2 locks held by syz-executor/13320: [ 684.924670][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 684.940924][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 684.961143][ T30] 2 locks held by syz-executor/13321: [ 684.967712][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 684.986484][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 684.997683][ T30] 2 locks held by syz-executor/13324: [ 685.011854][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 685.030803][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 685.048567][ T30] 2 locks held by syz-executor/13329: [ 685.056167][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 685.070742][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 685.088541][ T30] 2 locks held by syz-executor/13344: [ 685.094445][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 685.110434][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 685.127169][ T30] 2 locks held by syz-executor/13348: [ 685.133456][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 685.150363][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 685.170284][ T30] 2 locks held by syz-executor/13349: [ 685.176666][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 685.194709][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 685.207742][ T30] 2 locks held by syz-executor/13352: [ 685.219252][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 685.231635][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 685.248441][ T30] 2 locks held by syz-executor/13357: [ 685.256426][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 685.276511][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 685.288358][ T30] [ 685.297484][ T30] ============================================= [ 685.297484][ T30] [ 685.307747][ T30] NMI backtrace for cpu 1 [ 685.312127][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 685.322708][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 685.332893][ T30] Call Trace: [ 685.336210][ T30] [ 685.339182][ T30] dump_stack_lvl+0x241/0x360 [ 685.343940][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 685.349205][ T30] ? __pfx__printk+0x10/0x10 [ 685.353878][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 685.358880][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 685.364396][ T30] ? _printk+0xd5/0x120 [ 685.368619][ T30] ? __pfx__printk+0x10/0x10 [ 685.373273][ T30] ? __wake_up_klogd+0xcc/0x110 [ 685.378200][ T30] ? __pfx__printk+0x10/0x10 [ 685.382875][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 685.387965][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 685.394009][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 685.400048][ T30] watchdog+0xff4/0x1040 [ 685.404346][ T30] ? watchdog+0x1ea/0x1040 [ 685.408821][ T30] ? __pfx_watchdog+0x10/0x10 [ 685.413558][ T30] kthread+0x2f0/0x390 [ 685.417674][ T30] ? __pfx_watchdog+0x10/0x10 [ 685.422402][ T30] ? __pfx_kthread+0x10/0x10 [ 685.427033][ T30] ret_from_fork+0x4b/0x80 [ 685.431509][ T30] ? __pfx_kthread+0x10/0x10 [ 685.436146][ T30] ret_from_fork_asm+0x1a/0x30 [ 685.440981][ T30] [ 685.444994][ T30] Sending NMI from CPU 1 to CPUs 0: [ 685.450273][ C0] NMI backtrace for cpu 0 [ 685.450290][ C0] CPU: 0 UID: 0 PID: 5236 Comm: kworker/0:3 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 685.450314][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 685.450327][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 685.450358][ C0] RIP: 0010:unwind_next_frame+0x17b5/0x22d0 [ 685.450387][ C0] Code: 01 c6 49 8d 55 40 4c 89 ef e8 37 0e 00 00 84 c0 0f 84 66 01 00 00 49 bc 00 00 00 00 00 fc ff df 48 8b 44 24 20 42 0f b6 04 20 <84> c0 0f 85 36 08 00 00 48 8b 6c 24 08 8b 84 24 84 00 00 00 39 45 [ 685.450404][ C0] RSP: 0018:ffffc90000006a30 EFLAGS: 00000202 [ 685.450422][ C0] RAX: 0000000000000000 RBX: ffffffff91296698 RCX: 0000000000000000 [ 685.450436][ C0] RDX: dffffc0000000000 RSI: ffffc90000000000 RDI: ffffc90000007390 [ 685.450452][ C0] RBP: dffffc0000000000 R08: ffffc90000007390 R09: 0000000000000000 [ 685.450466][ C0] R10: ffffc90000006b50 R11: fffff52000000d6c R12: dffffc0000000000 [ 685.450482][ C0] R13: ffffc90000006b00 R14: ffffffff89e87e2d R15: ffffc90000006b50 [ 685.450498][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 685.450516][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 685.450531][ C0] CR2: 0000000020001380 CR3: 000000000e734000 CR4: 00000000003526f0 [ 685.450548][ C0] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 685.450561][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 685.450576][ C0] Call Trace: [ 685.450584][ C0] [ 685.450594][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 685.450622][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 685.450657][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 685.450683][ C0] ? nmi_handle+0x2a/0x5a0 [ 685.450715][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 685.450744][ C0] ? nmi_handle+0x14f/0x5a0 [ 685.450767][ C0] ? nmi_handle+0x2a/0x5a0 [ 685.450790][ C0] ? unwind_next_frame+0x17b5/0x22d0 [ 685.450812][ C0] ? default_do_nmi+0x63/0x160 [ 685.450839][ C0] ? exc_nmi+0x123/0x1f0 [ 685.450863][ C0] ? end_repeat_nmi+0xf/0x53 [ 685.450884][ C0] ? nft_do_chain+0x4ad/0x1da0 [ 685.450920][ C0] ? unwind_next_frame+0x17b5/0x22d0 [ 685.450939][ C0] ? unwind_next_frame+0x17b5/0x22d0 [ 685.450965][ C0] ? unwind_next_frame+0x17b5/0x22d0 [ 685.450984][ C0] [ 685.450991][ C0] [ 685.451002][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 685.451032][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 685.451057][ C0] arch_stack_walk+0x11c/0x150 [ 685.451079][ C0] ? nft_do_chain+0x4ad/0x1da0 [ 685.451109][ C0] stack_trace_save+0x118/0x1d0 [ 685.451132][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 685.451153][ C0] ? stack_trace_save+0x118/0x1d0 [ 685.451176][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 685.451202][ C0] kasan_save_track+0x3f/0x80 [ 685.451221][ C0] ? kasan_save_track+0x3f/0x80 [ 685.451239][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 685.451258][ C0] ? __kmalloc_node_track_caller_noprof+0x225/0x440 [ 685.451284][ C0] ? kmalloc_reserve+0x111/0x2a0 [ 685.451302][ C0] ? __alloc_skb+0x1f3/0x440 [ 685.451317][ C0] ? synproxy_send_client_synack+0x1ba/0xf30 [ 685.451342][ C0] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 685.451368][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 685.451417][ C0] __kasan_kmalloc+0x98/0xb0 [ 685.451438][ C0] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 685.451464][ C0] ? __alloc_skb+0x1f3/0x440 [ 685.451483][ C0] ? __alloc_skb+0x1f3/0x440 [ 685.451499][ C0] kmalloc_reserve+0x111/0x2a0 [ 685.451519][ C0] __alloc_skb+0x1f3/0x440 [ 685.451538][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 685.451560][ C0] synproxy_send_client_synack+0x1ba/0xf30 [ 685.451588][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 685.451608][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 685.451636][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 685.451664][ C0] ? synproxy_pernet+0x45/0x270 [ 685.451692][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 685.451722][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 685.451751][ C0] ? nf_ip_checksum+0x13a/0x500 [ 685.451781][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 685.451811][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 685.451841][ C0] ? __pfx_validate_chain+0x10/0x10 [ 685.451867][ C0] nft_do_chain+0x4ad/0x1da0 [ 685.451902][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 685.451928][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 685.451972][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 685.451994][ C0] nft_do_chain_inet+0x418/0x6b0 [ 685.452022][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 685.452048][ C0] ? ipt_do_table+0x312/0x1860 [ 685.452083][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 685.452109][ C0] nf_hook_slow+0xc3/0x220 [ 685.452134][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 685.452155][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 685.452177][ C0] NF_HOOK+0x29e/0x450 [ 685.452198][ C0] ? NF_HOOK+0x9a/0x450 [ 685.452218][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 685.452239][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 685.452264][ C0] ? ip_rcv_finish+0x406/0x560 [ 685.452285][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 685.452306][ C0] NF_HOOK+0x3a4/0x450 [ 685.452325][ C0] ? __lock_acquire+0x1384/0x2050 [ 685.452354][ C0] ? NF_HOOK+0x9a/0x450 [ 685.452373][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 685.452392][ C0] ? ip_rcv_core+0x801/0xd10 [ 685.452413][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 685.452437][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 685.452457][ C0] __netif_receive_skb+0x2bf/0x650 [ 685.452482][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 685.452509][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 685.452531][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 685.452560][ C0] ? __pfx_lock_release+0x10/0x10 [ 685.452587][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 685.452619][ C0] process_backlog+0x662/0x15b0 [ 685.452645][ C0] ? process_backlog+0x33b/0x15b0 [ 685.452673][ C0] ? __pfx_process_backlog+0x10/0x10 [ 685.452696][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 685.452726][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 685.452756][ C0] __napi_poll+0xcb/0x490 [ 685.452779][ C0] net_rx_action+0x89b/0x1240 [ 685.452814][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 685.452840][ C0] ? sched_clock+0x4a/0x70 [ 685.452871][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 685.452905][ C0] handle_softirqs+0x2c5/0x980 [ 685.452932][ C0] ? do_softirq+0x11b/0x1e0 [ 685.452963][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 685.452993][ C0] do_softirq+0x11b/0x1e0 [ 685.453016][ C0] [ 685.453023][ C0] [ 685.453030][ C0] ? __pfx_do_softirq+0x10/0x10 [ 685.453055][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 685.453084][ C0] ? rcu_is_watching+0x15/0xb0 [ 685.453106][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 685.453132][ C0] ? neigh_periodic_work+0xb35/0xd50 [ 685.453155][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 685.453181][ C0] ? neigh_destroy+0x423/0x580 [ 685.453205][ C0] neigh_periodic_work+0xb35/0xd50 [ 685.453232][ C0] ? process_scheduled_works+0x976/0x1850 [ 685.453260][ C0] process_scheduled_works+0xa63/0x1850 [ 685.453299][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 685.453329][ C0] ? assign_work+0x364/0x3d0 [ 685.453356][ C0] worker_thread+0x870/0xd30 [ 685.453390][ C0] ? __kthread_parkme+0x169/0x1d0 [ 685.453419][ C0] ? __pfx_worker_thread+0x10/0x10 [ 685.453445][ C0] kthread+0x2f0/0x390 [ 685.453463][ C0] ? __pfx_worker_thread+0x10/0x10 [ 685.453489][ C0] ? __pfx_kthread+0x10/0x10 [ 685.453508][ C0] ret_from_fork+0x4b/0x80 [ 685.453534][ C0] ? __pfx_kthread+0x10/0x10 [ 685.453552][ C0] ret_from_fork_asm+0x1a/0x30 [ 685.453586][ C0] [ 686.244363][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 686.251299][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 686.261844][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 686.271943][ T30] Call Trace: [ 686.275256][ T30] [ 686.278217][ T30] dump_stack_lvl+0x241/0x360 [ 686.282943][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 686.288228][ T30] ? __pfx__printk+0x10/0x10 [ 686.292882][ T30] ? vscnprintf+0x5d/0x90 [ 686.297263][ T30] panic+0x349/0x880 [ 686.301213][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 686.307450][ T30] ? __pfx_panic+0x10/0x10 [ 686.311917][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 686.317332][ T30] ? __irq_work_queue_local+0x137/0x410 [ 686.322929][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 686.328350][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 686.334550][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 686.340758][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 686.346968][ T30] watchdog+0x1033/0x1040 [ 686.351349][ T30] ? watchdog+0x1ea/0x1040 [ 686.355815][ T30] ? __pfx_watchdog+0x10/0x10 [ 686.360542][ T30] kthread+0x2f0/0x390 [ 686.364656][ T30] ? __pfx_watchdog+0x10/0x10 [ 686.369389][ T30] ? __pfx_kthread+0x10/0x10 [ 686.374019][ T30] ret_from_fork+0x4b/0x80 [ 686.378494][ T30] ? __pfx_kthread+0x10/0x10 [ 686.383148][ T30] ret_from_fork_asm+0x1a/0x30 [ 686.388006][ T30] [ 686.391440][ T30] Kernel Offset: disabled [ 686.395818][ T30] Rebooting in 86400 seconds..