Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. 2024/03/28 23:04:32 fuzzer started 2024/03/28 23:04:32 dialing manager at 10.128.0.169:30005 [ 70.432565][ T5086] cgroup: Unknown subsys name 'net' [ 70.571978][ T5086] cgroup: Unknown subsys name 'rlimit' [ 71.662905][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.669594][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 2024/03/28 23:04:34 syscalls: 3855 2024/03/28 23:04:34 code coverage: enabled 2024/03/28 23:04:34 comparison tracing: enabled 2024/03/28 23:04:34 extra coverage: enabled 2024/03/28 23:04:34 delay kcov mmap: enabled 2024/03/28 23:04:34 setuid sandbox: enabled 2024/03/28 23:04:34 namespace sandbox: enabled 2024/03/28 23:04:34 Android sandbox: /sys/fs/selinux/policy does not exist 2024/03/28 23:04:34 fault injection: enabled 2024/03/28 23:04:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/03/28 23:04:34 net packet injection: enabled 2024/03/28 23:04:34 net device setup: enabled 2024/03/28 23:04:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/03/28 23:04:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/03/28 23:04:34 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/03/28 23:04:34 USB emulation: enabled 2024/03/28 23:04:34 hci packet injection: enabled 2024/03/28 23:04:34 wifi device emulation: enabled 2024/03/28 23:04:34 802.15.4 emulation: enabled 2024/03/28 23:04:34 swap file: enabled [ 72.409529][ T5086] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/03/28 23:04:35 starting 5 executor processes [ 73.775664][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.786310][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.795003][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.803405][ T5103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.807736][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.819297][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.819494][ T5103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.827598][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.841833][ T5103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.842086][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.856502][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.856779][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.905291][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.915738][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.923950][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.932963][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.941101][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.948723][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.019447][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.029867][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.038871][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.049974][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.058973][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.067659][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.071507][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.082452][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.090508][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.110576][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.119271][ T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.129327][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.564029][ T5101] chnl_net:caif_netlink_parms(): no params data found [ 74.614542][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 74.796643][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 74.813436][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 74.926549][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.934366][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.943282][ T5106] bridge_slave_0: entered allmulticast mode [ 74.951218][ T5106] bridge_slave_0: entered promiscuous mode [ 74.960207][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.967350][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.974928][ T5101] bridge_slave_0: entered allmulticast mode [ 74.983238][ T5101] bridge_slave_0: entered promiscuous mode [ 74.998332][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.005797][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.013543][ T5101] bridge_slave_1: entered allmulticast mode [ 75.021632][ T5101] bridge_slave_1: entered promiscuous mode [ 75.047127][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.054604][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.062262][ T5106] bridge_slave_1: entered allmulticast mode [ 75.069699][ T5106] bridge_slave_1: entered promiscuous mode [ 75.166863][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.194074][ T5101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.220626][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.236520][ T5101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.256611][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 75.361745][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.369452][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.376648][ T5109] bridge_slave_0: entered allmulticast mode [ 75.384882][ T5109] bridge_slave_0: entered promiscuous mode [ 75.397984][ T5101] team0: Port device team_slave_0 added [ 75.417480][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.424799][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.433045][ T5098] bridge_slave_0: entered allmulticast mode [ 75.440794][ T5098] bridge_slave_0: entered promiscuous mode [ 75.457378][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.464989][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.472400][ T5098] bridge_slave_1: entered allmulticast mode [ 75.480018][ T5098] bridge_slave_1: entered promiscuous mode [ 75.489658][ T5106] team0: Port device team_slave_0 added [ 75.496305][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.505349][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.515022][ T5109] bridge_slave_1: entered allmulticast mode [ 75.522487][ T5109] bridge_slave_1: entered promiscuous mode [ 75.555875][ T5101] team0: Port device team_slave_1 added [ 75.593124][ T5106] team0: Port device team_slave_1 added [ 75.616751][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.695323][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.718014][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.725139][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.751536][ T5101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.767095][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.774734][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.801567][ T5101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.827641][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.842975][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.852760][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.860391][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.886517][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.899641][ T4479] Bluetooth: hci0: command tx timeout [ 75.958282][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.966092][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.992174][ T4479] Bluetooth: hci1: command tx timeout [ 75.992848][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.999158][ T4479] Bluetooth: hci2: command tx timeout [ 76.013302][ T5109] team0: Port device team_slave_0 added [ 76.023688][ T5109] team0: Port device team_slave_1 added [ 76.044735][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.052020][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.059695][ T5113] bridge_slave_0: entered allmulticast mode [ 76.066699][ T5113] bridge_slave_0: entered promiscuous mode [ 76.091399][ T5101] hsr_slave_0: entered promiscuous mode [ 76.097963][ T5101] hsr_slave_1: entered promiscuous mode [ 76.128417][ T5098] team0: Port device team_slave_0 added [ 76.138783][ T4479] Bluetooth: hci3: command tx timeout [ 76.157887][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.165269][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.172868][ T5113] bridge_slave_1: entered allmulticast mode [ 76.180467][ T5113] bridge_slave_1: entered promiscuous mode [ 76.205016][ T5098] team0: Port device team_slave_1 added [ 76.218811][ T4479] Bluetooth: hci4: command tx timeout [ 76.242582][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.249676][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.276315][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.339898][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.346888][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.373977][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.386839][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.394023][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.419986][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.457213][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.470578][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.480647][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.487613][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.513783][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.563356][ T5106] hsr_slave_0: entered promiscuous mode [ 76.570518][ T5106] hsr_slave_1: entered promiscuous mode [ 76.577475][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.585443][ T5106] Cannot create hsr debugfs directory [ 76.651025][ T5109] hsr_slave_0: entered promiscuous mode [ 76.657665][ T5109] hsr_slave_1: entered promiscuous mode [ 76.664267][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.672764][ T5109] Cannot create hsr debugfs directory [ 76.711690][ T5113] team0: Port device team_slave_0 added [ 76.741939][ T5098] hsr_slave_0: entered promiscuous mode [ 76.748373][ T5098] hsr_slave_1: entered promiscuous mode [ 76.755436][ T5098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.763713][ T5098] Cannot create hsr debugfs directory [ 76.798196][ T5113] team0: Port device team_slave_1 added [ 76.938282][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.946930][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.973740][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.026710][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.034089][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.060827][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.179969][ T5113] hsr_slave_0: entered promiscuous mode [ 77.186553][ T5113] hsr_slave_1: entered promiscuous mode [ 77.193074][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.201038][ T5113] Cannot create hsr debugfs directory [ 77.395677][ T5101] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.426288][ T5101] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.438502][ T5101] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.457755][ T5101] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.591144][ T5109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.602382][ T5109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.612532][ T5109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.629408][ T5109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.749873][ T5106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.762514][ T5106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.779568][ T5106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.790605][ T5106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.947731][ T5098] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.957734][ T5098] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.979269][ T4479] Bluetooth: hci0: command tx timeout [ 77.980231][ T5098] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.012190][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.043209][ T5098] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.059370][ T4479] Bluetooth: hci2: command tx timeout [ 78.064933][ T4479] Bluetooth: hci1: command tx timeout [ 78.074385][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.107292][ T5101] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.191836][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.199255][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.213706][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.220892][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.228382][ T4479] Bluetooth: hci3: command tx timeout [ 78.231331][ T5113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.256337][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.290975][ T5113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.299172][ T4479] Bluetooth: hci4: command tx timeout [ 78.311202][ T5113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.331229][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.343024][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.350296][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.370074][ T5113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.390502][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.397648][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.478412][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.521308][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.528548][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.607685][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.615343][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.725902][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.837083][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.877178][ T5106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.941388][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.948660][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.966698][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.974041][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.095277][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.138459][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.204330][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.234786][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.317223][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.324467][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.350881][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.358126][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.495045][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.621824][ T5109] veth0_vlan: entered promiscuous mode [ 79.722052][ T5106] veth0_vlan: entered promiscuous mode [ 79.734870][ T5109] veth1_vlan: entered promiscuous mode [ 79.766401][ T5106] veth1_vlan: entered promiscuous mode [ 79.788144][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.877540][ T5101] veth0_vlan: entered promiscuous mode [ 79.943314][ T5109] veth0_macvtap: entered promiscuous mode [ 79.987602][ T5109] veth1_macvtap: entered promiscuous mode [ 79.997593][ T5106] veth0_macvtap: entered promiscuous mode [ 80.013791][ T5101] veth1_vlan: entered promiscuous mode [ 80.069551][ T4479] Bluetooth: hci0: command tx timeout [ 80.077866][ T5106] veth1_macvtap: entered promiscuous mode [ 80.127377][ T5098] veth0_vlan: entered promiscuous mode [ 80.139268][ T4479] Bluetooth: hci2: command tx timeout [ 80.139712][ T5101] veth0_macvtap: entered promiscuous mode [ 80.144717][ T4479] Bluetooth: hci1: command tx timeout [ 80.164043][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.190372][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.202125][ T5101] veth1_macvtap: entered promiscuous mode [ 80.224887][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.238250][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.251070][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.262751][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.295468][ T5109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.305779][ T5109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.310247][ T4479] Bluetooth: hci3: command tx timeout [ 80.316050][ T5109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.331018][ T5109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.351230][ T5098] veth1_vlan: entered promiscuous mode [ 80.362096][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.373280][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.383815][ T4479] Bluetooth: hci4: command tx timeout [ 80.394499][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.409292][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.423014][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.433150][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.444354][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.457438][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.474265][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.485607][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.496024][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.511321][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.523141][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.538489][ T5106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.549709][ T5106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.558565][ T5106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.569041][ T5106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.598293][ T5101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.607587][ T5101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.620679][ T5101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.629605][ T5101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.694778][ T5098] veth0_macvtap: entered promiscuous mode [ 80.789840][ T5098] veth1_macvtap: entered promiscuous mode [ 80.852880][ T5113] veth0_vlan: entered promiscuous mode [ 80.932958][ T5146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.937949][ T5113] veth1_vlan: entered promiscuous mode [ 80.960146][ T5146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.968765][ T5102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.976636][ T5102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.021387][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.038388][ T5147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.047029][ T5147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.048872][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.064843][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.075445][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.085334][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.095864][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.109651][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.156742][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.174647][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.185109][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.195938][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.206554][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.217394][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.231565][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.256420][ T2475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.279905][ T2475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.301175][ T5098] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.316486][ T5098] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.325793][ T5098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.339081][ T5098] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.369813][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.377706][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:04:43 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2037) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x5}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 81.484992][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.501098][ T5113] veth0_macvtap: entered promiscuous mode [ 81.516685][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:04:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f000001f300)=ANY=[], 0x78) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) [ 81.546496][ T5113] veth1_macvtap: entered promiscuous mode 23:04:43 executing program 4: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) userfaultfd(0x801) [ 81.709375][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.727158][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 23:04:44 executing program 4: r0 = creat(0x0, 0x0) r1 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02751066f74e"], 0x0) ftruncate(r0, 0x251) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x1, 0x9, 0x60, 0xffffffffffffffff}) [ 81.753473][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.754102][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.787405][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.798208][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.814977][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.826489][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.843627][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 23:04:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@setlink={0x30, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_GSO_MAX_SEGS={0x8}, @IFLA_GSO_MAX_SIZE={0x8}]}, 0x30}}, 0x0) [ 81.888670][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.931158][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.988946][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.037093][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.062020][ T5192] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.073867][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.073895][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.073911][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.073928][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.073939][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.073953][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.075786][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.149909][ T4479] Bluetooth: hci0: command tx timeout [ 82.219047][ T4479] Bluetooth: hci2: command tx timeout [ 82.231061][ T4479] Bluetooth: hci1: command tx timeout 23:04:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) close_range(r2, 0xffffffffffffffff, 0x0) 23:04:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) [ 82.350482][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.381177][ T4479] Bluetooth: hci3: command tx timeout [ 82.386099][ T5113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 23:04:44 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)={0xb0, 0x0, 0x0, [{{}, {0x0, 0x0, 0x1, 0x0, '/'}}]}, 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000980)='./file0/file0\x00', 0x0, 0x0) [ 82.441460][ T5113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.459039][ T4479] Bluetooth: hci4: command tx timeout [ 82.498781][ T5113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.507553][ T5113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.617015][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 82.631359][ T5150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 23:04:44 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="410800ac0dcab26d055e00000000955e598f0659043610a3fd00f74d7beb768400edc188b675817c144582da4901e23f83097342585acd6eda525e608ea54f36edc34c5b1b05c63700403bd9f71400000000000000fa5a5608badfe65ae93bb92d1632f72f8fcb1795b550ef8d8001a778ad9f908b7a4353cc60ee4729e3662e4f53fb74bd2393b30700000066d8e86ff107ac2bff92040e86bd11e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x28, &(0x7f0000000600)=[{&(0x7f0000000080)="5113e66f71e12e335cd42db1b212760cfc1524ee673683133b0f", 0x1a}], 0x1}}], 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x3000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 82.664329][ T5150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.748842][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 82.758226][ T8] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 23:04:45 executing program 2: syz_usb_connect(0x2, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904"], 0x0) [ 82.859387][ T8] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 23:04:45 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) setfsuid(0x0) [ 82.909444][ T8] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 4213, setting to 1024 [ 82.973657][ T8] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 83.023916][ T8] usb 5-1: config 1 interface 0 has no altsetting 0 [ 83.030918][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.063915][ T8] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 23:04:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000780)=ANY=[], 0x78) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="62227741906455615261ded2919819fbf9ea660b34cb44c0cee62e", 0x1b}, {&(0x7f0000000240)="2bbe409cd304373c5b7073415237ca629adb697fd6dc1addc48943fe2e98758c711d51000c0f6ce3058a06bf99a65443e6cb29eb9e7364dd66761e7183830385e1101d13629ce10ab99a00c0e023901420674ad0740fef11238777d0b8df72a781c3c5f6d68662f24e11e160d8a30619e081f547d7ac0914a109ab830f2ec67216d4ea715dfefed7f5", 0x89}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="a336c5e4f465269fea35431ec45574f78f01d3148d6b8c3eec3422f60af3f1cf4cba2325bf2c6087b504b4f022a9c000319cc5d6cf93f05b878bd0ad3320f3c7dc4579609d1ebade8f31c0a6da2ff2eb21c9dff72a053d6a276c5c31aaba1a71c687f868bdf0d1775cf3cb6bd9c35b72795598e384fa50c22bae0a5eaa49a568f3db420d027edfb045073725bd119d1b002acad0fb7a321a8dcd6a70f47c21fcf0d14f67357c1d8b186db3da7ac8bd22", 0xb0}, {&(0x7f0000000400)="e4a2606bdb481d", 0x7}, {&(0x7f0000000740)}, {&(0x7f0000000800)="c9bb9d56662156c23dde865f32956e2697bd79fd369c909e7011", 0x1a}], 0x4}}], 0x2, 0x0) [ 83.076857][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.095854][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:04:45 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001400012300002300000000000a"], 0x48}}, 0x0) [ 83.190256][ T44] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 83.267826][ T8] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 83.275393][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.292595][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:04:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x4b4c, &(0x7f0000000000)) [ 83.459247][ T8] scsi host1: usb-storage 5-1:1.0 23:04:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0xfffffffffffffffc}) 23:04:45 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xa1\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1YV\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\xb8\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\xbe`\'\xcb\xb6\xaf\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11A\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfc\x00\xe3\xde\x00\x00\xa8\xcbo\x90\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x16\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3U\xe6\xa9B\n\xc9%\x82\xed#?\xab\x1c\x11\x00\xc5\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\x00\x00\x00D~\xc9=\x95\xd4\x18\x97J\x1d\xb7\x11\xcbcE\x0eAU\xe6\x19*\x98}!\xde\xf1\xd3\xf7\x84\x9c\xb4\xf1\x17\xf9-\xc6\xba\xe3\xa8oz\b\xfe\xbc\x1b\xff$\xac=\xf2V**\x8f\x84Oq\xe3\xa16\x1d{f\x91\xbbBORJ\xbcm\xfb\xb0Q\x1c\xd9\x1bg\xf5\xc9p\xc5lo\x90\xb0\xd5\x90\x86\x19\xafC\xee7\x91O)\xf1\xf0\x00\x00\x00\x00\x00\x00\x00\x05t\v\x12\x03\xf5hRQ\b\x97\xc3d-\xfb\x12\x1e\xb2\xce\x9br*M\x10\xd5g\fwx\xb8\xa9\t\xc5\xf9W\x9b\x06\xcc\xa0\x1a\x03\v\x14n7\x92{\x8bH\x9d\x95\xe31\xf4hy\xf6%\xcdC\x9cT\xec57\xbd\xd5\x81\xd9\x13\xee\xdf\xef\xf3\x17H\xd2\xe3k\xe0\xe3^y\xe3\xbb(fEt\x15\xeb/\x90\xca\xde\x189\xdfN 7}|\xa8 2\xd9;\xfa\xeayZS\x10.\x8b,\xd0\x02J\xf8>\xe9\xf0\r\xc2A\xc8q\x89\"+\xa6\xa9^E94\x01\xb5\xba]\xa8\xe9\x86\xea\xe5\xbaH\x11\x8fLLJ(\xfb\x96\x15\xbb\a\xcbj\x1b\xfdL\x88\xbf\xd7\x00\x00\x00\x00\x00t\xdd\xe7z\x87N\x9a\xd1\xe8\xe6\xe5\xa5\rz\\ljD\x19|\x84\x90\xaa\x91\x93\xc7\xdf\xd2\xe9h', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x9}) [ 83.590313][ T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.634442][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 83.671393][ T44] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 23:04:45 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000011", 0x14, 0x2c, 0x0, @dev, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 83.684906][ T5224] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.751960][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:04:46 executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB='#! ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'], 0x10015) add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="2e989cc9f5", 0x5, 0x0) 23:04:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000200)="b8050000000f01c10f46a78900000066ba2100b067ee66ba20000fc79a18af473a1f6d2f800000c00f3266bac0000f3066b80800660f7e9c660f38806f0091c0", 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000240)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000017000/0x1000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 83.855198][ T44] ums-sddr09 3-1:1.0: USB Mass Storage device detected 23:04:46 executing program 1: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000003cc0)='./bus\x00', &(0x7f0000003d00), &(0x7f0000000000)=@ng={0x4, 0xc}, 0x2, 0x0) write$P9_RSTATu(r0, &(0x7f0000000040)={0x63, 0x7d, 0x0, {{0x0, 0x41, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xd, 'security.ima\x00', 0x0, '', 0x1, ','}, 0xd, 'security.ima\x00'}}, 0x63) dup3(r1, r0, 0x0) finit_module(r0, 0x0, 0x0) 23:04:46 executing program 3: syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4ee6fa", 0x20, 0x0, 0x0, @dev, @mcast2, {[@hopopts={0x6}, @hopopts={0x0, 0x1, '\x00', [@ra, @pad1, @padn]}]}}}}}, 0x0) [ 84.094107][ T28] audit: type=1804 audit(1711667086.285:2): pid=5237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir536297607/syzkaller.h4bUZa/4/bus" dev="sda1" ino=1956 res=1 errno=0 [ 84.104101][ T5237] Invalid ELF header magic: != ELF 23:04:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2f7c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f00000076c0), 0x0, 0x45833af96e4a39dd, 0x0) [ 84.182391][ T24] usb 3-1: USB disconnect, device number 2 23:04:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x60, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x7c}}, 0x0) [ 84.297599][ T5239] kvm: requested 4190 ns i8254 timer period limited to 200000 ns 23:04:46 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c03, 0x0) 23:04:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="410800ac0dcab26d055e00000000955e598f0659043610a3fd00f74d7beb768400edc188b675817c144582da4901e23f83097342585acd6eda525e608ea54f36edc34c5b1b05c63700403bd9f71400000000000000fa5a5608badfe65ae93bb92d1632f72f8fcb1795b550ef8d8001a778ad9f908b7a4353cc60ee4729e3662e4f53fb74bd2393b30700000066d8e86ff107ac2bff92040e86bd11e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x28, &(0x7f0000000600)=[{&(0x7f0000000080)="5113e66f71e12e335cd42db1b212760cfc1524ee673683133b0f", 0x1a}], 0x1}}], 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x3000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 84.543766][ T60] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 23:04:46 executing program 3: syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x4800) [ 84.634365][ T60] sd 1:0:0:0: Attached scsi generic sg1 type 0 23:04:46 executing program 2: r0 = socket(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800110024000bedff0100000002000000001200", @ANYRES32, @ANYBLOB="00000000ffffffff000000000b00010074617072696f000088000200560001000200000000000000000000000000000000000800040000000000000000000000000000000000000000000000000000000000000008000000000000000000000002000000000000000000000000000000000000000800050000000000100002800c0001800800040000000004"], 0xb8}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b04000000700080000000001200", @ANYRES32=r1, @ANYBLOB="00000000ffffffff380000000b00010074617072696f000074"], 0xa4}}, 0x0) 23:04:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000780)=ANY=[], 0x78) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="62227741906455615261ded2919819fbf9ea660b34cb44c0cee62e", 0x1b}, {&(0x7f0000000240)="2bbe409cd304373c5b7073415237ca629adb697fd6dc1addc48943fe2e98758c711d51000c0f6ce3058a06bf99a65443e6cb29eb9e7364dd66761e7183830385e1101d13629ce10ab99a00c0e023901420674ad0740fef11238777d0b8df72a781c3c5f6d68662f24e11e160d8a30619e081f547d7ac0914a109ab830f2ec67216d4ea715dfefed7f5", 0x89}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="a336c5e4f465269fea35431ec45574f78f01d3148d6b8c3eec3422f60af3f1cf4cba2325bf2c6087b504b4f022a9c000319cc5d6cf93f05b878bd0ad3320f3c7dc4579609d1ebade8f31c0a6da2ff2eb21c9dff72a053d6a276c5c31aaba1a71c687f868bdf0d1775cf3cb6bd9c35b72795598e384fa50c22bae0a5eaa49a568f3db420d027edfb045073725bd119d1b002acad0fb7a321a8dcd6a70f47c21fcf0d14f67357c1d8b186db3da7ac8bd22", 0xb0}, {&(0x7f0000000400)="e4a2606bdb481d", 0x7}, {&(0x7f0000000740)="f723399ed33800b56eb5d726fcf939a0d1e63e82727fe31246859d88627352c9c962760f09de48fffe6715b5dadf229535e7ab26f055161f8b11cf5fe74f8720bd0fc14d8f769d836e5bb2d254a17e4179ae", 0x52}, {&(0x7f0000000800)="c9bb9d56662156c23dde865f32956e2697bd79fd369c909e7011", 0x1a}], 0x4}}], 0x2, 0x0) [ 84.895559][ T5147] usb 5-1: USB disconnect, device number 2 [ 84.913658][ T5219] sddr09: could not read card info [ 84.932909][ T34] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 84.973485][ T34] sd 1:0:0:0: [sdb] 0-byte physical blocks 23:04:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x81800a, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1, 0x294, &(0x7f0000000500)="$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") 23:04:47 executing program 0: r0 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_normal', 0x42, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x12) [ 85.017958][ T34] sd 1:0:0:0: [sdb] Write Protect is off [ 85.059945][ T34] sd 1:0:0:0: [sdb] Asking for cache data failed [ 85.075509][ T34] sd 1:0:0:0: [sdb] Assuming drive cache: write through 23:04:47 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB='#! ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'], 0x10015) add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="2e989cc9f5", 0x5, 0x0) [ 85.174066][ T34] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 85.247593][ T5263] loop2: detected capacity change from 0 to 256 23:04:47 executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001140), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r1}, 0xc) 23:04:47 executing program 4: syz_usb_connect(0x2, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904"], 0x0) 23:04:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000740)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000080)="c0", 0x1}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1000000084"], 0x10}, 0x0) 23:04:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000001c0)={r2, 0x1, 0x0, 0x3, &(0x7f0000000180)=[{}, {}, {}]}) 23:04:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f000001f300)=ANY=[], 0x78) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd14b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) 23:04:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001800), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0x40045304, &(0x7f0000001840)) [ 85.600256][ T5112] udevd[5112]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory 23:04:47 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 23:04:47 executing program 3: r0 = epoll_create(0x3) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x4, r1, &(0x7f00000001c0)) 23:04:48 executing program 1: syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d469e70009058a"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x4800) 23:04:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2f7c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af96e4a39dd, 0x0) 23:04:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000780)=ANY=[], 0x78) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="62227741906455615261ded2919819fbf9ea660b34cb44c0cee62e", 0x1b}, {&(0x7f0000000240)="2bbe409cd304373c5b7073415237ca629adb697fd6dc1addc48943fe2e98758c711d51000c0f6ce3058a06bf99a65443e6cb29eb9e7364dd66761e7183830385e1101d13629ce10ab99a00c0e023901420674ad0740fef11238777d0b8df72a781c3c5f6d68662f24e11e160d8a30619e081f547d7ac0914a109ab830f2ec67216d4ea715dfefed7f5", 0x89}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="a336c5e4f465269fea35431ec45574f78f01d3148d6b8c3eec3422f60af3f1cf4cba2325bf2c6087b504b4f022a9c000319cc5d6cf93f05b878bd0ad3320f3c7dc4579609d1ebade8f31c0a6da2ff2eb21c9dff72a053d6a276c5c31aaba1a71c687f868bdf0d1775cf3cb6bd9c35b72795598e384fa50c22bae0a5eaa49a568f3db420d027edfb045073725bd119d1b002acad0fb7a321a8dcd6a70f47c21fcf0d14f67357c1d8b186db3da7ac8bd22", 0xb0}, {&(0x7f0000000400)="e4a2606bdb481d", 0x7}, {&(0x7f0000000740)="f723399ed33800b56eb5d726fcf939a0d1e63e82727fe31246859d88627352c9c962760f09de48fffe6715b5dadf229535e7ab26f055161f8b11cf5fe74f8720bd0fc14d8f769d836e5bb2d254a17e4179aee73b7ab6bf82da8d232139535b7717fda1a966ac452d1c391b80edd66cd211efc344273c3c09c54f82", 0x7b}, {&(0x7f0000000800)="c9bb9d56662156c23dde865f32956e2697bd79fd369c909e7011", 0x1a}], 0x4}}], 0x2, 0x0) [ 86.005806][ T5110] udevd[5110]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 86.039109][ T5147] usb 5-1: new full-speed USB device number 3 using dummy_hcd 23:04:48 executing program 3: r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='syzkaller\x00', &(0x7f00000001c0)='\x00', 0x0) 23:04:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500540208005400000060ec970001983a0000800000000000000000000000990000ff020000000000000000000000000001"], 0xfdef) [ 86.219509][ T5146] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.268533][ T5295] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 23:04:48 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000001c0)={0x20, 0x0, 0x0}) [ 86.408928][ T5147] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.444942][ T5147] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 23:04:48 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB='#! ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'], 0x10015) add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="2e989cc9f5", 0x5, 0x0) [ 86.464543][ T5147] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 86.489250][ T5147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.499910][ T5146] usb 2-1: Using ep0 maxpacket: 8 23:04:48 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0x13, 0x0, 0xffffffffffffffff, @link_id, r0}, 0x20) 23:04:48 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/217, 0xd9, 0x5ca38d00) [ 86.563618][ T5147] ums-sddr09 5-1:1.0: USB Mass Storage device detected 23:04:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x79d, 0x0, 0xf0}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) mmap(&(0x7f00001fb000/0x1000)=nil, 0x1000, 0x0, 0x4000011, r0, 0x0) [ 86.668932][ T5146] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 86.708901][ T5146] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.741899][ T5146] usb 2-1: config 0 has no interface number 0 [ 86.760763][ T5146] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 23:04:49 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f00000001c0), 0x1) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f00000005c0)=ANY=[], 0xaf) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, 0x0, 0x0) 23:04:49 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f00000000090410000108000000090585", @ANYRES32], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 86.781853][ T5146] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.831630][ T5146] usb 2-1: config 0 interface 52 has no altsetting 0 [ 86.858912][ T5146] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 86.861640][ T4826] usb 5-1: USB disconnect, device number 3 [ 86.887972][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.939446][ T5146] usb 2-1: config 0 descriptor?? 23:04:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x80) [ 87.039895][ T7] cfg80211: failed to load regulatory.db 23:04:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, 0xffffffffffffffff, 0x0) dup(r1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:04:49 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="410800ac0dcab26d055e00000000955e598f0659043610a3fd00f74d7beb768400edc188b675817c144582da4901e23f83097342585acd6eda525e608ea54f36edc34c5b1b05c63700403bd9f71400000000000000fa5a5608badfe65ae93bb92d1632f72f8fcb1795b550ef8d8001a778ad9f908b7a4353cc60ee4729e3662e4f53fb74bd2393b30700000066d8e86ff107ac2bff92040e86bd11e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x28, &(0x7f0000000600)=[{&(0x7f0000000080)="5113e66f71e12e335cd42db1b212760cfc1524ee673683133b0f", 0x1a}], 0x1}}], 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x3000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 87.299145][ T5181] usb 1-1: new high-speed USB device number 2 using dummy_hcd 23:04:49 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000740)=[{0x5}]}, 0x90) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 23:04:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x3, 0x7, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004e8100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f00000002c0)='./file0\x00', 0x0) [ 87.432999][ T44] usb 2-1: USB disconnect, device number 2 23:04:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000003580)=[{&(0x7f00000002c0)='?', 0x1}], 0x1}, 0x0) sendto$unix(r0, &(0x7f0000000000)='\t', 0x1, 0x0, 0x0, 0x0) [ 87.548865][ T5181] usb 1-1: Using ep0 maxpacket: 8 23:04:49 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r0, &(0x7f00000033c0)=[{&(0x7f0000002140)=""/79, 0x4f}], 0x300, 0x0, 0x0, 0x10) 23:04:49 executing program 4: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB='#! ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'], 0x10015) add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="2e989cc9f5", 0x5, 0x0) [ 87.670822][ T5181] usb 1-1: config 0 has an invalid interface number: 16 but max is 14 [ 87.689362][ T5181] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 87.707566][ T5181] usb 1-1: config 0 has no interface number 0 23:04:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x100002) [ 87.725709][ T5181] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 87.774851][ T5181] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 23:04:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2f7c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af96e4a39dd, 0x0) 23:04:50 executing program 2: mlock(&(0x7f0000498000/0x4000)=nil, 0x4000) [ 87.958976][ T5181] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 87.984461][ T5181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 23:04:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f000001f300)=ANY=[], 0x78) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) [ 88.029995][ T5181] usb 1-1: Product: syz [ 88.042742][ T5181] usb 1-1: Manufacturer: syz 23:04:50 executing program 2: select(0x40, &(0x7f0000000000)={0x3}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3db}) [ 88.088778][ T5181] usb 1-1: SerialNumber: syz [ 88.107359][ T5181] usb 1-1: config 0 descriptor?? [ 88.140092][ T5313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 23:04:50 executing program 3: setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7fffffff) utime(&(0x7f00000003c0)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x1b, 0x1}, 0x7) write$P9_RLOPEN(r0, 0x0, 0x0) close(r0) rt_sigreturn() mknodat$loop(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000500)='./bus\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) utimes(&(0x7f0000000140)='./bus\x00', 0x0) unlink(&(0x7f00000002c0)='./bus\x00') socket(0x11, 0x2, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000001100), 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) rename(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='./bus\x00') timer_settime(r1, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) 23:04:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="410800ac0dcab26d055e00000000955e598f0659043610a3fd00f74d7beb768400edc188b675817c144582da4901e23f83097342585acd6eda525e608ea54f36edc34c5b1b05c63700403bd9f71400000000000000fa5a5608badfe65ae93bb92d1632f72f8fcb1795b550ef8d8001a778ad9f908b7a4353cc60ee4729e3662e4f53fb74bd2393b30700000066d8e86ff107ac2bff92040e86bd11e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x28, &(0x7f0000000600)=[{&(0x7f0000000080)="5113e66f71e12e335cd42db1b212760cfc1524ee673683133b0f", 0x1a}], 0x1}}], 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x3000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 88.410785][ T5181] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 88.446667][ T5181] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.16/input/input5 [ 88.488729][ C1] powermate: config urb returned -71 [ 88.505053][ T5181] usb 1-1: USB disconnect, device number 2 [ 88.511099][ C1] powermate 1-1:0.16: powermate_irq - usb_submit_urb failed with result: -19 [ 88.511179][ C1] powermate: config urb returned -71 23:04:50 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x33, 0x0, 0x0, @link_id, r0}, 0x20) 23:04:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = mq_open(&(0x7f0000000100)='\\%\x008e]\"\xed\x9a\x12J\xdf\x94mD\xb6\xc0s,X!\xb0\xa1\xfa\xd3(\xd99L\x96\x85\xf1\x99/=\x89\x97\xaf\xc9\xf1BF\xee\xbf\x02\xb8\x01\xfe\xdf\xf3\xb9\xbd>9\xb2\xe4]\xbd\x14+V\xb5\x1d=-C+\xe7\r\xab\xec0\x80dB\xba\xb3\xfb\xba\x90LQ\xa9\x9f\xdb$Bn\x96\xb6\xa0=~1\xe9\x04\xab\xbe\xeb\x8c\xf3\xca\xcdP\xb7s5\x9a\x94g\xb8\x85\xbeF\xb1G\xebz\xf7\x87|\xa2\xedf\xbbk%\xeb\x9d\x02\xde\xce\xc7m\xab\x0636\x8c\xf8\xf7\xa9\x93\xf3bI4\x93\xce\xd7\xb4\x16<\t\xc6n^\xfe\x89\xb5\x91\xf4T\xf5#>Z\x81\n\x90\xabj\x9fJ.\x03\xbc\xcf9\xa4\xda\xe8}{\xc1\xb6\x11', 0x40, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xfe, 0x97, 0x1f}) r2 = dup3(r0, r1, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000001340)={0xfff, 0x0, 0x0, 0xffc00}, 0x10) 23:04:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x6, 0x8, 0x39e4}, 0x48) 23:04:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000780)=ANY=[], 0x78) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="62227741906455615261ded2919819fbf9ea660b34cb44c0cee62e", 0x1b}, {&(0x7f0000000240)="2bbe409cd304373c5b7073415237ca629adb697fd6dc1addc48943fe2e98758c711d51000c0f6ce3058a06bf99a65443e6cb29eb9e7364dd66761e7183830385e1101d13629ce10ab99a00c0e023901420674ad0740fef11238777d0b8df72a781c3c5f6d68662f24e11e160d8a30619e081f547d7ac0914a109ab830f2ec67216d4ea715dfefed7f5", 0x89}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="a336c5e4f465269fea35431ec45574f78f01d3148d6b8c3eec3422f60af3f1cf4cba2325bf2c6087b504b4f022a9c000319cc5d6cf93f05b878bd0ad3320f3c7dc4579609d1ebade8f31c0a6da2ff2eb21c9dff72a053d6a276c5c31aaba1a71c687f868bdf0d1775cf3cb6bd9c35b72795598e384fa50c22bae0a5eaa49a568f3db420d027edfb045073725bd119d1b002acad0fb7a321a8dcd6a70f47c21fcf0d14f67357c1d8b186db3da7ac8bd22", 0xb0}, {&(0x7f0000000400)="e4a2606bdb481d", 0x7}, {&(0x7f0000000740)="f723399ed33800b56eb5d726fcf939a0d1e63e82727fe31246859d88627352c9c962760f09de48fffe6715b5dadf229535e7ab26f055161f8b11cf5fe74f8720bd0fc14d8f769d836e5bb2d254a17e4179aee73b7ab6bf82da8d232139535b7717fda1a966ac452d1c391b80edd66cd211efc344273c3c09c54f821a4f3d2b815dc376707c076c8de63a1d6a8aaf4f64becd72456d73f85c78f430f9f25338", 0x9f}, {&(0x7f0000000800)="c9bb9d56662156c23dde865f32956e2697bd79fd369c909e7011", 0x1a}], 0x4}}], 0x2, 0x0) 23:04:51 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, @link_id, r0}, 0x20) 23:04:51 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'hsr0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000000c0)) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 23:04:51 executing program 2: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001880)=ANY=[@ANYBLOB="1c0000005e00073fc278b8e6982b53f524ff762b5dc825f737"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 23:04:51 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB='#! ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'], 0x10015) add_key(0x0, &(0x7f0000001000), &(0x7f0000001000)="2e989cc9f5", 0x5, 0x0) 23:04:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) close(r0) 23:04:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f000001f300)=ANY=[], 0x78) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 23:04:51 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a80)=@generic={&(0x7f0000001a40)='./file0\x00'}, 0x18) 23:04:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="410800ac0dcab26d055e00000000955e598f0659043610a3fd00f74d7beb768400edc188b675817c144582da4901e23f83097342585acd6eda525e608ea54f36edc34c5b1b05c63700403bd9f71400000000000000fa5a5608badfe65ae93bb92d1632f72f8fcb1795b550ef8d8001a778ad9f908b7a4353cc60ee4729e3662e4f53fb74bd2393b30700000066d8e86ff107ac2bff92040e86bd11e7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x28, &(0x7f0000000600)=[{&(0x7f0000000080)="5113e66f71e12e335cd42db1b212760cfc1524ee673683133b0f", 0x1a}], 0x1}}], 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x3000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:04:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r0) 23:04:51 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f0000000f40)=ANY=[@ANYBLOB="18330000004c000000000000000000001800000000000000000000000800000095000000f0ffffff9c6bc891d2611f23c84846c138b488db0f2c4d5e42d74d5283577e46ea1110d2e8d3c2c2b28462419552067de478feb0bc96a39ae728fb4fb72ae8867f6244a3f07f08cc565357e89c253222721b10e3738cba0403a866f4ffc22ed6275b9af10e43e9226cad8f59e9acc9c3aa0996a3482acd666d8048bf311a9b26c05c1d8d63f847fa94aa757cab42a73be7c178c44655018802ed235441d46b58764a5a51b7be074441b1428e3913a2d97776f3df1204d5144c58685ab8cdacd7fa879defd2ebd6d1e3de7bfeddd9df241095d9c702c668b55e2e0e844875b6b9000d0bda0cc008516e6cc3e652c7a67dfb2b39e57463cade6d229ba97a4611a18d0a8e24c6a890e353aff80d601d89e5d8676cd36616a74ece4823e1c2fcfb7cbdefbafd8565ba5b6d469c400011fb28598e002390ed"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) 23:04:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000780)=ANY=[], 0x78) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="62227741906455615261ded2919819fbf9ea660b34cb44c0cee62e", 0x1b}, {&(0x7f0000000240)="2bbe409cd304373c5b7073415237ca629adb697fd6dc1addc48943fe2e98758c711d51000c0f6ce3058a06bf99a65443e6cb29eb9e7364dd66761e7183830385e1101d13629ce10ab99a00c0e023901420674ad0740fef11238777d0b8df72a781c3c5f6d68662f24e11e160d8a30619e081f547d7ac0914a109ab830f2ec67216d4ea715dfefed7f5", 0x89}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="a336c5e4f465269fea35431ec45574f78f01d3148d6b8c3eec3422f60af3f1cf4cba2325bf2c6087b504b4f022a9c000319cc5d6cf93f05b878bd0ad3320f3c7dc4579609d1ebade8f31c0a6da2ff2eb21c9dff72a053d6a276c5c31aaba1a71c687f868bdf0d1775cf3cb6bd9c35b72795598e384fa50c22bae0a5eaa49a568f3db420d027edfb045073725bd119d1b002acad0fb7a321a8dcd6a70f47c21fcf0d14f67357c1d8b186db3da7ac8bd22", 0xb0}, {&(0x7f0000000400)="e4a2606bdb481d", 0x7}, {&(0x7f0000000740)="f723399ed33800b56eb5d726fcf939a0d1e63e82727fe31246859d88627352c9c962760f09de48fffe6715b5dadf229535e7ab26f055161f8b11cf5fe74f8720bd0fc14d8f769d836e5bb2d254a17e4179aee73b7ab6bf82da8d232139535b7717fda1a966ac452d1c391b80edd66cd211efc344273c3c09c54f821a4f3d2b815dc376707c076c8de63a1d6a8aaf4f64becd72456d73f85c78f430f9f25338", 0x9f}, {&(0x7f0000000800)="c9bb9d56662156c23dde865f32956e2697bd79fd369c909e7011", 0x1a}], 0x4}}], 0x2, 0x0) [ 88.511194][ C1] powermate: usb_submit_urb(config) failed [ 89.591599][ T5381] kvm: emulating exchange as write 23:04:51 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000180)={@broadcast, @broadcast, @val, {@generic={0x8848}}}, 0x0) 23:04:52 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071101f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) 23:04:52 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd4, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x32, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0x22, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x81, 0x0, 0x2, 0xa800, 0xd9b}, @tail_call, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}, @ldst={0x3, 0x0, 0x6, 0x0, 0x9, 0x2, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000a40)='syzkaller\x00', 0x101, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x90) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@generic={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x8}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x80ee, 0x0, 0x1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x7f, &(0x7f0000000480)=""/127, 0x41000, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x5, 0x400, 0x9b}, 0x10, 0x16635, r2, 0x2, &(0x7f0000000ec0)=[r3, r4, r5, r6], &(0x7f0000000f00)=[{0x7, 0x1, 0x2, 0x6}, {0x2, 0x4, 0xa, 0x9}], 0x10, 0xffffff4f}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000400)='task_newtask\x00'}, 0x10) syz_clone(0x42020000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:04:52 executing program 0: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x5, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 23:04:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x6, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 23:04:52 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x7d) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f040100010f0000000000f2150609000040"}) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) syz_open_pts(r1, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) [ 90.166910][ T5394] [ 90.169303][ T5394] ===================================================== [ 90.173116][ T3] ------------[ cut here ]------------ [ 90.176233][ T5394] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 90.176248][ T5394] 6.9.0-rc1-next-20240328-syzkaller #0 Not tainted [ 90.176260][ T5394] ----------------------------------------------------- [ 90.176269][ T5394] syz-executor.3/5394 [HC0[0]:SC0[2]:HE0:SE0] is trying to acquire: [ 90.210612][ T5394] ffff88802878a8f8 (&htab->buckets[i].lock){+...}-{2:2}, at: sock_hash_delete_elem+0xb0/0x300 [ 90.220915][ T5394] [ 90.220915][ T5394] and this task is already holding: [ 90.228357][ T5394] ffff8880b943e698 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 90.238162][ T5394] which would create a new lock dependency: [ 90.244179][ T5394] (&rq->__lock){-.-.}-{2:2} -> (&htab->buckets[i].lock){+...}-{2:2} [ 90.252312][ T5394] [ 90.252312][ T5394] but this new dependency connects a HARDIRQ-irq-safe lock: [ 90.261970][ T5394] (&rq->__lock){-.-.}-{2:2} [ 90.261999][ T5394] [ 90.261999][ T5394] ... which became HARDIRQ-irq-safe at: [ 90.274373][ T5394] lock_acquire+0x1ed/0x550 [ 90.278967][ T5394] _raw_spin_lock_nested+0x31/0x40 [ 90.284271][ T5394] raw_spin_rq_lock_nested+0x2a/0x140 [ 90.289763][ T5394] sched_tick+0xa1/0x6e0 [ 90.294184][ T5394] update_process_times+0x202/0x230 [ 90.299643][ T5394] tick_periodic+0x190/0x220 [ 90.304331][ T5394] tick_handle_periodic+0x4a/0x160 [ 90.309971][ T5394] timer_interrupt+0x5c/0x70 [ 90.314662][ T5394] __handle_irq_event_percpu+0x29c/0xa80 [ 90.320387][ T5394] handle_irq_event+0x89/0x1f0 [ 90.325244][ T5394] handle_level_irq+0x3c5/0x6e0 [ 90.330182][ T5394] __common_interrupt+0x13a/0x230 [ 90.335472][ T5394] common_interrupt+0xa5/0xd0 [ 90.340237][ T5394] asm_common_interrupt+0x26/0x40 [ 90.345371][ T5394] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 90.351176][ T5394] __setup_irq+0x1335/0x1e20 [ 90.355856][ T5394] request_threaded_irq+0x2ab/0x380 [ 90.361146][ T5394] setup_default_timer_irq+0x25/0x60 [ 90.366530][ T5394] x86_late_time_init+0x66/0xc0 [ 90.371471][ T5394] start_kernel+0x3f3/0x500 [ 90.376061][ T5394] x86_64_start_reservations+0x2a/0x30 [ 90.381610][ T5394] x86_64_start_kernel+0x99/0xa0 [ 90.386647][ T5394] common_startup_64+0x13e/0x147 [ 90.391759][ T5394] [ 90.391759][ T5394] to a HARDIRQ-irq-unsafe lock: [ 90.398775][ T5394] (&htab->buckets[i].lock){+...}-{2:2} [ 90.398803][ T5394] [ 90.398803][ T5394] ... which became HARDIRQ-irq-unsafe at: [ 90.412217][ T5394] ... [ 90.412224][ T5394] lock_acquire+0x1ed/0x550 [ 90.419568][ T5394] _raw_spin_lock_bh+0x35/0x50 [ 90.424426][ T5394] sock_hash_free+0x164/0x820 [ 90.429184][ T5394] bpf_map_free_deferred+0xe6/0x110 [ 90.434469][ T5394] process_scheduled_works+0xa2c/0x1830 [ 90.440110][ T5394] worker_thread+0x86d/0xd70 [ 90.444783][ T5394] kthread+0x2f0/0x390 [ 90.448941][ T5394] ret_from_fork+0x4b/0x80 [ 90.453488][ T5394] ret_from_fork_asm+0x1a/0x30 [ 90.458341][ T5394] [ 90.458341][ T5394] other info that might help us debug this: [ 90.458341][ T5394] [ 90.468562][ T5394] Possible interrupt unsafe locking scenario: [ 90.468562][ T5394] [ 90.476872][ T5394] CPU0 CPU1 [ 90.482241][ T5394] ---- ---- [ 90.487606][ T5394] lock(&htab->buckets[i].lock); [ 90.492641][ T5394] local_irq_disable(); [ 90.499475][ T5394] lock(&rq->__lock); [ 90.506060][ T5394] lock(&htab->buckets[i].lock); [ 90.513610][ T5394] [ 90.517082][ T5394] lock(&rq->__lock); [ 90.521321][ T5394] [ 90.521321][ T5394] *** DEADLOCK *** [ 90.521321][ T5394] [ 90.529468][ T5394] 2 locks held by syz-executor.3/5394: [ 90.534919][ T5394] #0: ffff8880b943e698 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 90.544854][ T5394] #1: ffffffff8e334d60 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x580 [ 90.554259][ T5394] [ 90.554259][ T5394] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 90.564658][ T5394] -> (&rq->__lock){-.-.}-{2:2} { [ 90.569610][ T5394] IN-HARDIRQ-W at: [ 90.573587][ T5394] lock_acquire+0x1ed/0x550 [ 90.579738][ T5394] _raw_spin_lock_nested+0x31/0x40 [ 90.586594][ T5394] raw_spin_rq_lock_nested+0x2a/0x140 [ 90.593621][ T5394] sched_tick+0xa1/0x6e0 [ 90.599515][ T5394] update_process_times+0x202/0x230 [ 90.606360][ T5394] tick_periodic+0x190/0x220 [ 90.612632][ T5394] tick_handle_periodic+0x4a/0x160 [ 90.619407][ T5394] timer_interrupt+0x5c/0x70 [ 90.625660][ T5394] __handle_irq_event_percpu+0x29c/0xa80 [ 90.633032][ T5394] handle_irq_event+0x89/0x1f0 [ 90.639460][ T5394] handle_level_irq+0x3c5/0x6e0 [ 90.646058][ T5394] __common_interrupt+0x13a/0x230 [ 90.652736][ T5394] common_interrupt+0xa5/0xd0 [ 90.659147][ T5394] asm_common_interrupt+0x26/0x40 [ 90.665858][ T5394] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 90.673333][ T5394] __setup_irq+0x1335/0x1e20 [ 90.679631][ T5394] request_threaded_irq+0x2ab/0x380 [ 90.686500][ T5394] setup_default_timer_irq+0x25/0x60 [ 90.693459][ T5394] x86_late_time_init+0x66/0xc0 [ 90.699963][ T5394] start_kernel+0x3f3/0x500 [ 90.706113][ T5394] x86_64_start_reservations+0x2a/0x30 [ 90.713223][ T5394] x86_64_start_kernel+0x99/0xa0 [ 90.719913][ T5394] common_startup_64+0x13e/0x147 [ 90.726521][ T5394] IN-SOFTIRQ-W at: [ 90.730607][ T5394] lock_acquire+0x1ed/0x550 [ 90.736771][ T5394] _raw_spin_lock_nested+0x31/0x40 [ 90.743546][ T5394] raw_spin_rq_lock_nested+0x2a/0x140 [ 90.750583][ T5394] try_to_wake_up+0x7d3/0x1470 [ 90.757014][ T5394] call_timer_fn+0x18e/0x650 [ 90.763264][ T5394] __run_timer_base+0x66a/0x8e0 [ 90.769848][ T5394] run_timer_softirq+0xb7/0x170 [ 90.776345][ T5394] __do_softirq+0x2c6/0x980 [ 90.782496][ T5394] __irq_exit_rcu+0xf2/0x1c0 [ 90.788751][ T5394] irq_exit_rcu+0x9/0x30 [ 90.794638][ T5394] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 90.801926][ T5394] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.809687][ T5394] default_idle+0x13/0x20 [ 90.815662][ T5394] default_idle_call+0x74/0xb0 [ 90.822073][ T5394] do_idle+0x22f/0x5d0 [ 90.827799][ T5394] cpu_startup_entry+0x42/0x60 [ 90.834208][ T5394] rest_init+0x2dc/0x300 [ 90.840100][ T5394] start_kernel+0x47a/0x500 [ 90.846259][ T5394] x86_64_start_reservations+0x2a/0x30 [ 90.853604][ T5394] x86_64_start_kernel+0x99/0xa0 [ 90.860199][ T5394] common_startup_64+0x13e/0x147 [ 90.866792][ T5394] INITIAL USE at: [ 90.870682][ T5394] lock_acquire+0x1ed/0x550 [ 90.876761][ T5394] _raw_spin_lock_nested+0x31/0x40 [ 90.883431][ T5394] raw_spin_rq_lock_nested+0x2a/0x140 [ 90.890368][ T5394] rq_attach_root+0xee/0x540 [ 90.896520][ T5394] sched_init+0x64e/0xc30 [ 90.902410][ T5394] start_kernel+0x1ab/0x500 [ 90.908557][ T5394] x86_64_start_reservations+0x2a/0x30 [ 90.915581][ T5394] x86_64_start_kernel+0x99/0xa0 [ 90.922082][ T5394] common_startup_64+0x13e/0x147 [ 90.928596][ T5394] } [ 90.931092][ T5394] ... key at: [] sched_init.__key+0x0/0x20 [ 90.938997][ T5394] [ 90.938997][ T5394] the dependencies between the lock to be acquired [ 90.939005][ T5394] and HARDIRQ-irq-unsafe lock: [ 90.952813][ T5394] -> (&htab->buckets[i].lock){+...}-{2:2} { [ 90.958722][ T5394] HARDIRQ-ON-W at: [ 90.962699][ T5394] lock_acquire+0x1ed/0x550 [ 90.968852][ T5394] _raw_spin_lock_bh+0x35/0x50 [ 90.975280][ T5394] sock_hash_free+0x164/0x820 [ 90.981600][ T5394] bpf_map_free_deferred+0xe6/0x110 [ 90.988453][ T5394] process_scheduled_works+0xa2c/0x1830 [ 90.995646][ T5394] worker_thread+0x86d/0xd70 [ 91.001983][ T5394] kthread+0x2f0/0x390 [ 91.007788][ T5394] ret_from_fork+0x4b/0x80 [ 91.013860][ T5394] ret_from_fork_asm+0x1a/0x30 [ 91.020276][ T5394] INITIAL USE at: [ 91.024166][ T5394] lock_acquire+0x1ed/0x550 [ 91.030231][ T5394] _raw_spin_lock_bh+0x35/0x50 [ 91.036570][ T5394] sock_hash_free+0x164/0x820 [ 91.042993][ T5394] bpf_map_free_deferred+0xe6/0x110 [ 91.049790][ T5394] process_scheduled_works+0xa2c/0x1830 [ 91.056999][ T5394] worker_thread+0x86d/0xd70 [ 91.063269][ T5394] kthread+0x2f0/0x390 [ 91.068916][ T5394] ret_from_fork+0x4b/0x80 [ 91.075024][ T5394] ret_from_fork_asm+0x1a/0x30 [ 91.081455][ T5394] } [ 91.083951][ T5394] ... key at: [] sock_hash_alloc.__key+0x0/0x20 [ 91.092284][ T5394] ... acquired at: [ 91.096081][ T5394] lock_acquire+0x1ed/0x550 [ 91.100765][ T5394] _raw_spin_lock_bh+0x35/0x50 [ 91.105697][ T5394] sock_hash_delete_elem+0xb0/0x300 [ 91.111067][ T5394] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 91.116698][ T5394] bpf_trace_run4+0x334/0x580 [ 91.121549][ T5394] __schedule+0x2587/0x4a50 [ 91.126250][ T5394] schedule+0x14b/0x320 [ 91.130576][ T5394] futex_wait_queue+0x14e/0x1d0 [ 91.135597][ T5394] __futex_wait+0x17f/0x320 [ 91.140297][ T5394] futex_wait+0x101/0x360 [ 91.144796][ T5394] do_futex+0x33b/0x560 [ 91.149132][ T5394] __se_sys_futex+0x3f9/0x480 [ 91.154062][ T5394] do_syscall_64+0xfb/0x240 [ 91.158733][ T5394] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 91.164801][ T5394] [ 91.167130][ T5394] [ 91.167130][ T5394] stack backtrace: [ 91.173045][ T5394] CPU: 0 PID: 5394 Comm: syz-executor.3 Not tainted 6.9.0-rc1-next-20240328-syzkaller #0 [ 91.182842][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 91.192979][ T5394] Call Trace: [ 91.196257][ T5394] [ 91.199192][ T5394] dump_stack_lvl+0x241/0x360 [ 91.203882][ T5394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.209077][ T5394] ? __pfx__printk+0x10/0x10 [ 91.213676][ T5394] ? print_shortest_lock_dependencies+0xf2/0x160 [ 91.219999][ T5394] validate_chain+0x4dc7/0x58e0 [ 91.224872][ T5394] ? __pfx_validate_chain+0x10/0x10 [ 91.230079][ T5394] ? __pfx_validate_chain+0x10/0x10 [ 91.235294][ T5394] ? __pfx_validate_chain+0x10/0x10 [ 91.240931][ T5394] ? register_lock_class+0x102/0x980 [ 91.246226][ T5394] ? __pfx_register_lock_class+0x10/0x10 [ 91.251855][ T5394] ? validate_chain+0x11b/0x58e0 [ 91.256883][ T5394] ? mark_lock+0x9a/0x350 [ 91.261218][ T5394] __lock_acquire+0x1346/0x1fd0 [ 91.266109][ T5394] lock_acquire+0x1ed/0x550 [ 91.270783][ T5394] ? sock_hash_delete_elem+0xb0/0x300 [ 91.276155][ T5394] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 91.281964][ T5394] ? __pfx_lock_acquire+0x10/0x10 [ 91.287341][ T5394] ? sock_hash_delete_elem+0xb0/0x300 [ 91.292716][ T5394] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 91.298541][ T5394] ? __pfx_lock_acquire+0x10/0x10 [ 91.303583][ T5394] ? __pfx_lock_release+0x10/0x10 [ 91.308627][ T5394] ? sock_hash_delete_elem+0xb0/0x300 [ 91.314017][ T5394] _raw_spin_lock_bh+0x35/0x50 [ 91.318815][ T5394] ? sock_hash_delete_elem+0xb0/0x300 [ 91.324198][ T5394] sock_hash_delete_elem+0xb0/0x300 [ 91.329577][ T5394] ? bpf_trace_run4+0x244/0x580 [ 91.334529][ T5394] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 91.340255][ T5394] bpf_trace_run4+0x334/0x580 [ 91.345116][ T5394] ? __pfx_bpf_trace_run4+0x10/0x10 [ 91.350339][ T5394] ? psi_task_switch+0x441/0x770 [ 91.355313][ T5394] __schedule+0x2587/0x4a50 [ 91.359837][ T5394] ? __pfx___schedule+0x10/0x10 [ 91.364692][ T5394] ? __pfx_lock_release+0x10/0x10 [ 91.369725][ T5394] ? plist_check_list+0x2cb/0x300 [ 91.374753][ T5394] ? futex_wait_queue+0x27/0x1d0 [ 91.379702][ T5394] ? schedule+0x90/0x320 [ 91.384010][ T5394] schedule+0x14b/0x320 [ 91.388228][ T5394] ? futex_wait_queue+0x27/0x1d0 [ 91.393176][ T5394] futex_wait_queue+0x14e/0x1d0 [ 91.398046][ T5394] __futex_wait+0x17f/0x320 [ 91.402669][ T5394] ? __pfx___futex_wait+0x10/0x10 [ 91.407880][ T5394] ? __pfx_futex_wake_mark+0x10/0x10 [ 91.413217][ T5394] ? do_raw_spin_unlock+0x13c/0x8b0 [ 91.418439][ T5394] ? wake_up_q+0xdc/0x120 [ 91.422792][ T5394] futex_wait+0x101/0x360 [ 91.427477][ T5394] ? __pfx_futex_wait+0x10/0x10 [ 91.432345][ T5394] do_futex+0x33b/0x560 [ 91.436519][ T5394] ? bpf_raw_tracepoint_open+0x1d6/0x240 [ 91.442163][ T5394] ? __pfx_do_futex+0x10/0x10 [ 91.446931][ T5394] ? __pfx___sys_bpf+0x10/0x10 [ 91.451699][ T5394] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 91.457816][ T5394] __se_sys_futex+0x3f9/0x480 [ 91.462493][ T5394] ? __pfx___se_sys_futex+0x10/0x10 [ 91.467697][ T5394] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 91.474022][ T5394] ? do_syscall_64+0x10a/0x240 [ 91.479044][ T5394] ? __x64_sys_futex+0x21/0xf0 [ 91.483816][ T5394] do_syscall_64+0xfb/0x240 [ 91.488406][ T5394] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 91.494301][ T5394] RIP: 0033:0x7fa776a7dda9 [ 91.498713][ T5394] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 91.518316][ T5394] RSP: 002b:00007fa77777e178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.526819][ T5394] RAX: ffffffffffffffda RBX: 00007fa776babf88 RCX: 00007fa776a7dda9 [ 91.534895][ T5394] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa776babf88 [ 91.542949][ T5394] RBP: 00007fa776babf80 R08: 00007fa77777e6c0 R09: 00007fa77777e6c0 [ 91.550921][ T5394] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa776babf8c [ 91.558888][ T5394] R13: 000000000000000b R14: 00007ffc39c9ded0 R15: 00007ffc39c9dfb8 [ 91.566975][ T5394]